last executing test programs: 28.682494171s ago: executing program 0 (id=845): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000280)={0x3, 0x0, r1}) 28.374851973s ago: executing program 0 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000440), &(0x7f00000004c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000a00000000080003003bb71ac9de885b5d1ff9ff6e9d5ffc723142bfd42221d62cd922c9f92c874ab832b14a0951b2c5cfdd17a3568f04be118eaf056a4d62bfcb3ffd9c65e9e87996b20cce32668e696d10a31455cb36e5bf045d7703f01edf3c127ef28b17b50fab104e7f0373d2ff277a6d8dab0aa8f3b9ad7ec0c145ec59dd97a6c85482394f6e232c22e00f4af8f3d79a5dcbe16524cdbd485661bfa68d7a84f5bc45a2c50991868b141b5891fdc99a40b97fc405ce0b14c57c", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x6c}}, 0x0) 27.733776205s ago: executing program 0 (id=849): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x22, 0x8000, 0x1}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x27f}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58010000100001000004000000000000fe80000000000000000000f0b30000bb0000002b4d000000000000000000000100"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170002"], 0x158}}, 0x0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$tmpfs(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x11884, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000000)="b5", 0x0}, 0x20) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r7, 0x4, 0x7c00) dup3(r8, r7, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) 26.353617536s ago: executing program 0 (id=851): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003}, 0x38) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffcf) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f00000005c0)=0xb, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x3, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000000)) 22.671222893s ago: executing program 0 (id=859): getrandom(0x0, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000000000000000000000000000000000007f00000100"/56, @ANYRES32=0x0], 0xec}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r4 = open_tree(r2, 0x0, 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xfffffecc) syz_io_uring_setup(0x60e6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000440)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1ffe, 0x0, 0x0, 0x0, 0x0) 22.376347654s ago: executing program 0 (id=860): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}], 0x1, 0x0, 0x5) socket$inet6(0xa, 0x3, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000070605000000000ec000000000000000050001000700541fe35cfef9a76a57"], 0x1c}}, 0x0) 21.620590568s ago: executing program 1 (id=861): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x0, 0x2, 0x2, 0xb}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 17.675543359s ago: executing program 1 (id=867): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd70a5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c707647fa8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa60e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b0a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000f841b35af2e300"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) ioctl$FIONCLEX(r0, 0x5450) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.832733234s ago: executing program 4 (id=868): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 16.559874084s ago: executing program 4 (id=870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = eventfd(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x2000, 0x0) chdir(0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x0, 0x2, r2}) 14.214678738s ago: executing program 3 (id=872): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) setrlimit(0x4, &(0x7f00000001c0)={0x5, 0xb56}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000340)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0x0, 0x2, 0x414d6714bf78e135}, 0x9c) socket(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x5) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf250400000008001700", @ANYRES32=r5, @ANYBLOB="f7000adfa5980000"], 0x24}, 0x1, 0x0, 0x0, 0x20004851}, 0x40800) 10.738005745s ago: executing program 2 (id=874): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003}, 0x38) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 10.655703692s ago: executing program 4 (id=875): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x101, &(0x7f0000000500)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109"], &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0xff, 0x3f, 0x40, 0x9}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0xfffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000004d040000000000002d000000000000005504030001ed0a0025000000170000001c040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379d00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a607c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a59234ed56bc83987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d06c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292cfbe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d700ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec52d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d105800f000000000000ef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f6845b6c3857fb8aaaa95024f8da775"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 10.532870989s ago: executing program 1 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 10.371585923s ago: executing program 3 (id=877): socket$key(0xf, 0x3, 0x2) socket$tipc(0x1e, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000056512f3e000000010000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a804800048014000700ff01000000000000000000000000000114000700fc01000000000000000000000000000014000700fe80000000000000000000000000000005000b"], 0x74}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)="a4", 0x1}], 0x1}}], 0x2, 0x26000844) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000100), 0x4) 8.13255829s ago: executing program 1 (id=878): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socket$packet(0x11, 0x0, 0x300) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_open_dev$vbi(&(0x7f0000003840), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000003880)) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c", 0x4e}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {}, 0x1}) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0xb) prlimit64(r1, 0xd, &(0x7f0000000000)={0x10001, 0x6}, &(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 7.839274709s ago: executing program 2 (id=879): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syslog(0x3, &(0x7f0000000040)=""/22, 0x16) syz_emit_ethernet(0x68, &(0x7f0000005a40)=ANY=[@ANYBLOB], 0x0) 6.396812115s ago: executing program 2 (id=880): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 5.819635494s ago: executing program 2 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) gettid() timer_create(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) r3 = msgget$private(0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) msgsnd(r3, &(0x7f00000001c0)=ANY=[], 0x1a8, 0x0) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(0x0, &(0x7f0000001280)={0x1, "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"}, 0x375, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x1c, 0x1, 0x0, "57dfbb475097aa828c3f9cbee8bc90462c0b84e1762577a16c9db6db943500", 0x242e2f47}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 5.380502212s ago: executing program 1 (id=882): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003}, 0x38) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffcf) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 4.292927492s ago: executing program 4 (id=883): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000440), &(0x7f00000004c0), 0x2, 0x0) 4.153014358s ago: executing program 2 (id=884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000001f8c0)='ipvlan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)) 3.991422756s ago: executing program 4 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.990771875s ago: executing program 3 (id=886): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) 3.698033925s ago: executing program 3 (id=887): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r3, 0x0, 0x0, 0x400001) ftruncate(r3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000240)={0x9, 0x1, 0x3, "8ce3c2ed8d03dc124f13a9a94e3f277d52b78f59b0884934466c51cf507250e7", 0x31363553}) 3.657266133s ago: executing program 2 (id=888): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x1003}, 0x38) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 3.336015697s ago: executing program 1 (id=889): write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000006c0)=ANY=[@ANYBLOB="3b00000000000000f4000040"]) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ftruncate(0xffffffffffffffff, 0x796c) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) setuid(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x7, 0x4, 0x23}, 0x48) ftruncate(0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0xe740, r6}, 0x38) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x5a08009404f4fdda}, 0x8, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="d6250f005b1636f105d98ebfeda181896495d321b22d3543e9a57f53f267fea3a0e811a7ed85232be6c0b8d9a9e660515ab30f956a79db19457727c0f0a5d53c4134e7a461d023430e6dff11dc157b24b5eb0bdb97de6cde61bbb08e0c0c3e01574ce613fd0b78ff0d79871791b532222b6363d675558c9587b978b28861b06d737a81c9159b1471405529382097bb6d4f7194e43b59705dc25d903ef82500b15b1e458602d1db7b0b95a4787a6cef39a9b2f4e149631e8bd37b4964ff2aaa1c2bce0830ccab83668b245f92ef59812586df02e57bcc47b8c49c5fc04b5081bad53e0dc1ad39db9935293c6d71022fb9f711078ec9582fd6b4", 0xf9}, {&(0x7f0000000200)="0103806763091e539cfbd85fcf42e418d6ac99e6e27f7a9046d569826ab4e4973170d985f6e99b487763ddbb8cdeb2962c16a5391b72fe50f303df6928276ad948b2199f60858a4421fcdc7d9c60b7a372c664e5c5ecd293c1e0b810fb238266a23da54f0ad724cbb9d108d6b54a36d16b2fbde4541016526a8edd98290847aa44face4af959cb1c05c31b89c9e24afa8ee5b78ead9e6a2a4ab9c64227067186437eddd455380c495d9d08b96cc6070c", 0xb0}, {&(0x7f00000002c0)="94f18023e12359bf787619e62e7dc44b441bb69d774de03271c98811743d16c41553110307f4f6a742f6ec60aefb5f01fcd74f3b362866c1559cb1f9e3818d1b5606128de00a09a6be0ed480dfb4ab979be96733cc6bd62282b71a503fca5e2df1b3662476e1b5f4db0d8d0f3961080d3dcc4863851870cb0d259187f6c3b07f94f0601868fe11a26da9", 0x8a}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x110}, 0x8800) 1.103886306s ago: executing program 3 (id=890): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="89d3c05e2f60dd8c06", 0x9}], 0x1}, 0x0) 880.773658ms ago: executing program 3 (id=891): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 0s ago: executing program 4 (id=892): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): _slave_0 (retrying later): interface not active [ 81.305312][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.316383][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.323389][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.349335][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.362651][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.369667][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.396061][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.422778][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.429973][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.456735][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.468995][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.476439][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.502520][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.518043][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.550049][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.557269][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.583962][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.644942][ T5224] team0: Port device team_slave_0 added [ 81.656013][ T5220] team0: Port device team_slave_0 added [ 81.666767][ T5220] team0: Port device team_slave_1 added [ 81.708008][ T5224] team0: Port device team_slave_1 added [ 81.778522][ T5223] hsr_slave_0: entered promiscuous mode [ 81.785867][ T5223] hsr_slave_1: entered promiscuous mode [ 81.831752][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.838975][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.866120][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.878957][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.886329][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.912327][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.925908][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.932995][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.958989][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.991131][ T5222] hsr_slave_0: entered promiscuous mode [ 81.997618][ T5222] hsr_slave_1: entered promiscuous mode [ 82.004427][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.012467][ T5222] Cannot create hsr debugfs directory [ 82.031111][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.038153][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.064191][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.097092][ T5221] hsr_slave_0: entered promiscuous mode [ 82.104407][ T5221] hsr_slave_1: entered promiscuous mode [ 82.110620][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.118534][ T5221] Cannot create hsr debugfs directory [ 82.421455][ T5220] hsr_slave_0: entered promiscuous mode [ 82.434258][ T5220] hsr_slave_1: entered promiscuous mode [ 82.441430][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.456374][ T5220] Cannot create hsr debugfs directory [ 82.538049][ T5224] hsr_slave_0: entered promiscuous mode [ 82.552157][ T5224] hsr_slave_1: entered promiscuous mode [ 82.558873][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.566852][ T5224] Cannot create hsr debugfs directory [ 83.149741][ T5222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.166909][ T5222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.178784][ T5222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.201747][ T5222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.209315][ T5233] Bluetooth: hci1: command tx timeout [ 83.209448][ T4612] Bluetooth: hci2: command tx timeout [ 83.284564][ T4612] Bluetooth: hci0: command tx timeout [ 83.285450][ T5233] Bluetooth: hci4: command tx timeout [ 83.289980][ T55] Bluetooth: hci3: command tx timeout [ 83.302607][ T5221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.314696][ T5221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.325674][ T5221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.352477][ T5221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.490248][ T5223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.502568][ T5223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.528716][ T5223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.539335][ T5223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.645962][ T5220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.669241][ T5220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.681498][ T5220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.714768][ T5220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.822379][ T5224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.836268][ T5224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.856761][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.876836][ T5224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.890191][ T5224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.010605][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.070128][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.077567][ T2475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.090452][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.097586][ T2475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.128847][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.192400][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.260137][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.267385][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.278737][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.285924][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.319044][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.431768][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.466406][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.498724][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.506035][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.542552][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.549780][ T2475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.574835][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.590682][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.628944][ T2487] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.636642][ T2487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.650600][ T29] audit: type=1400 audit(1724589400.773:113): avc: denied { sys_module } for pid=5222 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.727923][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.776744][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.783992][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.850969][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.858225][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.962337][ T2487] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.969587][ T2487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.148040][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.293061][ T4612] Bluetooth: hci1: command tx timeout [ 85.298518][ T4612] Bluetooth: hci2: command tx timeout [ 85.307947][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.363489][ T4612] Bluetooth: hci4: command tx timeout [ 85.368942][ T4612] Bluetooth: hci0: command tx timeout [ 85.378240][ T55] Bluetooth: hci3: command tx timeout [ 85.583395][ T5222] veth0_vlan: entered promiscuous mode [ 85.596739][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.668619][ T5222] veth1_vlan: entered promiscuous mode [ 85.802527][ T5221] veth0_vlan: entered promiscuous mode [ 85.891953][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.911469][ T5222] veth0_macvtap: entered promiscuous mode [ 85.925290][ T5221] veth1_vlan: entered promiscuous mode [ 85.959766][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.002511][ T5222] veth1_macvtap: entered promiscuous mode [ 86.140422][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.176237][ T5221] veth0_macvtap: entered promiscuous mode [ 86.194361][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.204728][ T5220] veth0_vlan: entered promiscuous mode [ 86.226692][ T5221] veth1_macvtap: entered promiscuous mode [ 86.251088][ T5222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.260950][ T5222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.270364][ T5222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.283924][ T5222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.317255][ T5220] veth1_vlan: entered promiscuous mode [ 86.332216][ T5224] veth0_vlan: entered promiscuous mode [ 86.340594][ T5223] veth0_vlan: entered promiscuous mode [ 86.383702][ T5223] veth1_vlan: entered promiscuous mode [ 86.400562][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.414040][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.425808][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.463671][ T5224] veth1_vlan: entered promiscuous mode [ 86.512004][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.523736][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.535559][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.583569][ T5221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.584726][ T2475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.592293][ T5221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.603644][ T2475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.618604][ T5221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.628681][ T5221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.720718][ T5223] veth0_macvtap: entered promiscuous mode [ 86.749589][ T2525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.785756][ T2525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.815793][ T5224] veth0_macvtap: entered promiscuous mode [ 86.833274][ T29] audit: type=1400 audit(1724589402.943:114): avc: denied { mounton } for pid=5222 comm="syz-executor" path="/root/syzkaller.gxWnye/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 86.847866][ T5223] veth1_macvtap: entered promiscuous mode [ 86.869961][ T29] audit: type=1400 audit(1724589402.943:115): avc: denied { mount } for pid=5222 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.909598][ T5220] veth0_macvtap: entered promiscuous mode [ 86.916613][ T29] audit: type=1400 audit(1724589402.943:116): avc: denied { mounton } for pid=5222 comm="syz-executor" path="/root/syzkaller.gxWnye/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.954242][ T29] audit: type=1400 audit(1724589402.943:117): avc: denied { mount } for pid=5222 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.982733][ T5220] veth1_macvtap: entered promiscuous mode [ 87.002258][ T29] audit: type=1400 audit(1724589402.963:118): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.006373][ T5224] veth1_macvtap: entered promiscuous mode [ 87.032580][ T29] audit: type=1400 audit(1724589402.993:119): avc: denied { mounton } for pid=5222 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 87.046516][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.061854][ T29] audit: type=1400 audit(1724589402.993:120): avc: denied { mount } for pid=5222 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 87.077400][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.101311][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.114292][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.126823][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.202459][ T29] audit: type=1400 audit(1724589403.303:121): avc: denied { read write } for pid=5222 comm="syz-executor" name="loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.233201][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.252808][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.264830][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.285224][ T29] audit: type=1400 audit(1724589403.303:122): avc: denied { open } for pid=5222 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.286605][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.322665][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.334846][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.347084][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.369120][ T47] cfg80211: failed to load regulatory.db [ 87.373836][ T4612] Bluetooth: hci2: command tx timeout [ 87.380203][ T4612] Bluetooth: hci1: command tx timeout [ 87.427437][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.443705][ T4612] Bluetooth: hci4: command tx timeout [ 87.445315][ T55] Bluetooth: hci0: command tx timeout [ 87.449266][ T4612] Bluetooth: hci3: command tx timeout [ 87.464219][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.479343][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.491064][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.505927][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.517734][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.532711][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.580675][ T5223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.585483][ T5313] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.590115][ T5223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.622250][ T5223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.631458][ T5223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.709407][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.731217][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.741520][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.758438][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.770184][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.790191][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.802750][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.834620][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.839642][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.842559][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.893157][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.909641][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.931193][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.941348][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.958596][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.968793][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.990023][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.002525][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.040415][ T5220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.051194][ T5220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.061975][ T5220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.076976][ T5220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.107845][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.118454][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.129188][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.140054][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.150149][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.160911][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.172234][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.183728][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.196169][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.236254][ T5224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.251928][ T5224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.261795][ T5224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.270976][ T5224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.518210][ T2475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.544777][ T2475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.805655][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.806622][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.827187][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.834949][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.973056][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.980908][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.107157][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.134601][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.297453][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.337741][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.734846][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 89.734865][ T29] audit: type=1400 audit(1724589405.863:142): avc: denied { audit_write } for pid=5332 comm="syz.0.1" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 89.910002][ T29] audit: type=1400 audit(1724589406.033:143): avc: denied { mount } for pid=5334 comm="syz.2.3" name="/" dev="ramfs" ino=7462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 90.096991][ T29] audit: type=1400 audit(1724589406.223:144): avc: denied { create } for pid=5338 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.159195][ T29] audit: type=1400 audit(1724589406.223:145): avc: denied { write } for pid=5338 comm="syz.0.15" path="socket:[7470]" dev="sockfs" ino=7470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.627587][ T29] audit: type=1400 audit(1724589406.743:146): avc: denied { read } for pid=5348 comm="syz.4.19" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.754985][ T29] audit: type=1400 audit(1724589406.743:147): avc: denied { open } for pid=5348 comm="syz.4.19" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.827804][ T29] audit: type=1400 audit(1724589406.753:148): avc: denied { create } for pid=5349 comm="syz.0.21" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.929504][ T29] audit: type=1400 audit(1724589406.783:149): avc: denied { ioctl } for pid=5348 comm="syz.4.19" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 91.035870][ T29] audit: type=1400 audit(1724589406.793:150): avc: denied { create } for pid=5349 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.132298][ T29] audit: type=1400 audit(1724589406.803:151): avc: denied { ioctl } for pid=5349 comm="syz.0.21" path="socket:[7500]" dev="sockfs" ino=7500 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.935467][ T5391] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1543 sclass=netlink_tcpdiag_socket pid=5391 comm=syz.0.38 [ 94.043109][ T5426] serio: Serial port pts0 [ 94.839903][ T5451] Zero length message leads to an empty skb [ 95.107346][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 95.107366][ T29] audit: type=1400 audit(1724589410.993:186): avc: denied { read write } for pid=5443 comm="syz.4.61" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.145423][ T5453] fuse: Unknown parameter 'grou00000000000000000000' [ 95.319609][ T29] audit: type=1400 audit(1724589410.993:187): avc: denied { open } for pid=5443 comm="syz.4.61" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.383102][ T29] audit: type=1400 audit(1724589411.033:188): avc: denied { mounton } for pid=5443 comm="syz.4.61" path="/15/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.518244][ T29] audit: type=1400 audit(1724589411.273:189): avc: denied { mounton } for pid=5443 comm="syz.4.61" path="/15/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 95.627197][ T29] audit: type=1400 audit(1724589411.543:190): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.668494][ T29] audit: type=1400 audit(1724589411.683:191): avc: denied { write } for pid=5456 comm="syz.3.64" name="raw" dev="proc" ino=4026533361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.889476][ T29] audit: type=1400 audit(1724589412.013:192): avc: denied { create } for pid=5467 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.962198][ T29] audit: type=1400 audit(1724589412.043:193): avc: denied { ioctl } for pid=5467 comm="syz.4.69" path="socket:[7660]" dev="sockfs" ino=7660 ioctlcmd=0x2103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.027582][ T29] audit: type=1400 audit(1724589412.043:194): avc: denied { create } for pid=5469 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.085910][ T29] audit: type=1400 audit(1724589412.053:195): avc: denied { ioctl } for pid=5469 comm="syz.0.70" path="socket:[7072]" dev="sockfs" ino=7072 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.167747][ T5510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5510 comm=syz.4.91 [ 97.354047][ T5517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=5517 comm=syz.1.93 [ 97.355911][ T5515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5515 comm=syz.0.92 [ 98.933284][ T5577] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.840875][ T5611] capability: warning: `syz.1.136' uses deprecated v2 capabilities in a way that may be insecure [ 100.389686][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 100.389705][ T29] audit: type=1400 audit(1724589416.513:212): avc: denied { connect } for pid=5620 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.995295][ T5591] syz.4.127: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 101.032965][ T5591] CPU: 1 UID: 0 PID: 5591 Comm: syz.4.127 Not tainted 6.11.0-rc4-syzkaller-00268-g48fb4b3d9b43 #0 [ 101.043618][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 101.053713][ T5591] Call Trace: [ 101.057015][ T5591] [ 101.059969][ T5591] dump_stack_lvl+0x16c/0x1f0 [ 101.064692][ T5591] warn_alloc+0x24d/0x3a0 [ 101.069061][ T5591] ? __pfx_warn_alloc+0x10/0x10 [ 101.073951][ T5591] ? __get_vm_area_node+0x190/0x2d0 [ 101.079185][ T5591] ? __get_vm_area_node+0x1bc/0x2d0 [ 101.084423][ T5591] __vmalloc_node_range_noprof+0xfe8/0x14e0 [ 101.090366][ T5591] ? xt_alloc_entry_offsets+0x3a/0x60 [ 101.095770][ T5591] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.102139][ T5591] ? trace_kmalloc+0x2d/0xe0 [ 101.106768][ T5591] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 101.112523][ T5591] ? xt_alloc_entry_offsets+0x3a/0x60 [ 101.117921][ T5591] __kvmalloc_node_noprof+0x14f/0x1a0 [ 101.123328][ T5591] ? xt_alloc_entry_offsets+0x3a/0x60 [ 101.128729][ T5591] xt_alloc_entry_offsets+0x3a/0x60 [ 101.133964][ T5591] translate_table+0x22e/0x1710 [ 101.138842][ T5591] ? __pfx_lock_release+0x10/0x10 [ 101.143898][ T5591] ? __pfx___might_resched+0x10/0x10 [ 101.149217][ T5591] ? __pfx_translate_table+0x10/0x10 [ 101.154533][ T5591] do_ipt_set_ctl+0x605/0xc30 [ 101.159238][ T5591] ? trace_contention_end+0xea/0x140 [ 101.164557][ T5591] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 101.169783][ T5591] ? __pfx___mutex_lock+0x10/0x10 [ 101.174841][ T5591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.180865][ T5591] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 101.186876][ T5591] nf_setsockopt+0x8a/0xf0 [ 101.191320][ T5591] ip_setsockopt+0xcb/0xf0 [ 101.195766][ T5591] tcp_setsockopt+0xa4/0x100 [ 101.200393][ T5591] smc_setsockopt+0x1b4/0xa00 [ 101.205105][ T5591] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 101.211030][ T5591] ? __pfx_smc_setsockopt+0x10/0x10 [ 101.216401][ T5591] ? selinux_socket_setsockopt+0x6a/0x80 [ 101.222070][ T5591] ? __pfx_smc_setsockopt+0x10/0x10 [ 101.227303][ T5591] do_sock_setsockopt+0x222/0x480 [ 101.232364][ T5591] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 101.237949][ T5591] ? __fget_light+0x173/0x210 [ 101.242661][ T5591] __sys_setsockopt+0x1a4/0x270 [ 101.247562][ T5591] ? __pfx___sys_setsockopt+0x10/0x10 [ 101.252967][ T5591] ? xfd_validate_state+0x5d/0x180 [ 101.258117][ T5591] __x64_sys_setsockopt+0xbd/0x160 [ 101.263343][ T5591] ? do_syscall_64+0x91/0x250 [ 101.268050][ T5591] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.273288][ T5591] do_syscall_64+0xcd/0x250 [ 101.277836][ T5591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.283778][ T5591] RIP: 0033:0x7f04d4179e79 [ 101.288217][ T5591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.307859][ T5591] RSP: 002b:00007f04d4f01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.316307][ T5591] RAX: ffffffffffffffda RBX: 00007f04d4315f80 RCX: 00007f04d4179e79 [ 101.324302][ T5591] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 101.332293][ T5591] RBP: 00007f04d41e793e R08: 0000000000000298 R09: 0000000000000000 [ 101.340292][ T5591] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000 [ 101.348287][ T5591] R13: 0000000000000000 R14: 00007f04d4315f80 R15: 00007ffd4546aee8 [ 101.356287][ T5591] [ 101.428955][ T5591] Mem-Info: [ 101.440300][ T5591] active_anon:4230 inactive_anon:0 isolated_anon:0 [ 101.440300][ T5591] active_file:652 inactive_file:38172 isolated_file:0 [ 101.440300][ T5591] unevictable:11601 dirty:617 writeback:0 [ 101.440300][ T5591] slab_reclaimable:9593 slab_unreclaimable:96281 [ 101.440300][ T5591] mapped:21507 shmem:1247 pagetables:811 [ 101.440300][ T5591] sec_pagetables:0 bounce:0 [ 101.440300][ T5591] kernel_misc_reclaimable:0 [ 101.440300][ T5591] free:1367734 free_pcp:255 free_cma:0 [ 101.485260][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.532920][ T29] audit: type=1400 audit(1724589417.643:213): avc: denied { write } for pid=5642 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.675024][ T5591] Node 0 active_anon:19732kB inactive_anon:0kB active_file:2608kB inactive_file:152560kB unevictable:51276kB isolated(anon):0kB isolated(file):0kB mapped:86084kB dirty:936kB writeback:584kB shmem:6156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10296kB pagetables:3384kB sec_pagetables:0kB all_unreclaimable? no [ 101.919303][ T5591] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 101.949612][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.027736][ T29] audit: type=1400 audit(1724589418.113:214): avc: denied { write } for pid=5648 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.214116][ T5591] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.241294][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.409269][ T5591] lowmem_reserve[]: 0 2561 2562 0 0 [ 102.458981][ T5591] Node 0 DMA32 free:1424624kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:46420kB inactive_anon:0kB active_file:27608kB inactive_file:151232kB unevictable:59576kB writepending:608kB present:3129332kB managed:2650116kB mlocked:58032kB bounce:0kB free_pcp:4608kB local_pcp:632kB free_cma:0kB [ 102.703285][ T5591] lowmem_reserve[]: 0 0 1 0 0 [ 102.739580][ T5591] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:8kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 102.767140][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.942340][ T5591] lowmem_reserve[]: 0 0 0 0 0 [ 103.012048][ T5591] Node 1 Normal free:3958000kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.040884][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.204004][ T5591] lowmem_reserve[]: 0 0 0 0 0 [ 103.208846][ T5591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.222018][ T5591] Node 0 DMA32: 2*4kB (UE) 6*8kB (ME) 7*16kB (UME) 28*32kB (UME) 23*64kB (UME) 7*128kB (UME) 1*256kB (M) 2*512kB (U) 1*1024kB (E) 0*2048kB 337*4096kB (M) = 1386088kB [ 103.239697][ T5591] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 103.252768][ T5591] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 11*16kB (UM) 12*32kB (UM) 2*64kB (U) 4*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 965*4096kB (M) = 3958000kB [ 103.270973][ T5591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.283935][ T5591] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.293312][ T5591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.306016][ T5591] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.315656][ T5591] 64200 total pagecache pages [ 103.320367][ T5591] 0 pages in swap cache [ 103.324605][ T5591] Free swap = 124996kB [ 103.328778][ T5591] Total swap = 124996kB [ 103.332997][ T5591] 2097051 pages RAM [ 103.336823][ T5591] 0 pages HighMem/MovableOnly [ 103.341520][ T5591] 403056 pages reserved [ 103.345769][ T5591] 0 pages cma reserved [ 104.014557][ T29] audit: type=1400 audit(1724589420.143:215): avc: denied { write } for pid=5670 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.115024][ T29] audit: type=1400 audit(1724589420.183:216): avc: denied { audit_write } for pid=5670 comm="syz.3.163" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.213858][ T5673] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5673 comm=syz.0.164 [ 104.790237][ T5680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5680 comm=syz.3.167 [ 104.927856][ T29] audit: type=1400 audit(1724589421.043:217): avc: denied { read } for pid=5681 comm="syz.0.168" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.013491][ T29] audit: type=1400 audit(1724589421.053:218): avc: denied { open } for pid=5681 comm="syz.0.168" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.152997][ T29] audit: type=1400 audit(1724589421.053:219): avc: denied { ioctl } for pid=5681 comm="syz.0.168" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.269963][ T29] audit: type=1400 audit(1724589421.113:220): avc: denied { create } for pid=5683 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.361371][ T29] audit: type=1400 audit(1724589421.113:221): avc: denied { write } for pid=5683 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.483031][ T29] audit: type=1400 audit(1724589421.543:222): avc: denied { setopt } for pid=5695 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.524598][ T29] audit: type=1400 audit(1724589421.573:223): avc: denied { ioctl } for pid=5692 comm="syz.3.172" path="socket:[8006]" dev="sockfs" ino=8006 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.616724][ T29] audit: type=1400 audit(1724589421.693:224): avc: denied { read } for pid=5700 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.719442][ T29] audit: type=1400 audit(1724589421.693:225): avc: denied { getopt } for pid=5700 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.778192][ T5707] input: syz0 as /devices/virtual/input/input5 [ 105.815458][ T29] audit: type=1400 audit(1724589421.833:226): avc: denied { read write } for pid=5706 comm="syz.2.177" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.882977][ T29] audit: type=1400 audit(1724589421.833:227): avc: denied { open } for pid=5706 comm="syz.2.177" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.970999][ T29] audit: type=1400 audit(1724589421.903:228): avc: denied { setattr } for pid=5706 comm="syz.2.177" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.047613][ T29] audit: type=1400 audit(1724589421.903:229): avc: denied { ioctl } for pid=5706 comm="syz.2.177" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.153030][ T29] audit: type=1400 audit(1724589421.943:230): avc: denied { read } for pid=4659 comm="acpid" name="event4" dev="devtmpfs" ino=2338 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.218740][ T29] audit: type=1400 audit(1724589421.943:231): avc: denied { open } for pid=4659 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2338 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.512621][ T5766] binder: 5765:5766 ioctl 81f8943c 20000640 returned -22 [ 110.232145][ T5782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5782 comm=syz.1.211 [ 110.776228][ T5788] serio: Serial port pts0 [ 111.992582][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 111.992600][ T29] audit: type=1400 audit(1724589428.113:241): avc: denied { ioctl } for pid=5795 comm="syz.3.215" path="/dev/input/mice" dev="devtmpfs" ino=833 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 112.426333][ T29] audit: type=1400 audit(1724589428.553:242): avc: denied { nlmsg_read } for pid=5801 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.728166][ T944] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.953343][ T944] usb 3-1: Using ep0 maxpacket: 8 [ 113.000936][ T944] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 113.033001][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 113.052744][ T944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 113.063370][ T944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.078842][ T944] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 113.092969][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.122178][ T944] usb 3-1: Product: syz [ 113.133729][ T944] usb 3-1: Manufacturer: syz [ 113.139663][ T944] usb 3-1: SerialNumber: syz [ 113.177018][ T944] usb 3-1: config 0 descriptor?? [ 113.189525][ T29] audit: type=1400 audit(1724589429.313:243): avc: denied { map } for pid=5814 comm="syz.0.223" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.253296][ T944] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 113.293729][ T29] audit: type=1400 audit(1724589429.353:244): avc: denied { read write } for pid=5814 comm="syz.0.223" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.513728][ T944] usb 3-1: USB disconnect, device number 2 [ 114.414201][ T29] audit: type=1400 audit(1724589430.543:245): avc: denied { setopt } for pid=5842 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.483598][ T29] audit: type=1400 audit(1724589430.543:246): avc: denied { ioctl } for pid=5842 comm="syz.4.235" path="socket:[9260]" dev="sockfs" ino=9260 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.569623][ T29] audit: type=1400 audit(1724589430.673:247): avc: denied { read } for pid=5846 comm="syz.2.237" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.610473][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.664133][ T29] audit: type=1400 audit(1724589430.683:248): avc: denied { open } for pid=5846 comm="syz.2.237" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.728770][ T29] audit: type=1400 audit(1724589430.733:249): avc: denied { ioctl } for pid=5846 comm="syz.2.237" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.996334][ T29] audit: type=1400 audit(1724589431.123:250): avc: denied { read } for pid=5862 comm="syz.3.242" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.390254][ T5943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5943 comm=syz.1.277 [ 117.417337][ T5945] fuse: Bad value for 'fd' [ 117.491293][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 117.491312][ T29] audit: type=1400 audit(1724589433.613:268): avc: denied { mounton } for pid=5940 comm="syz.4.275" path="/51/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 117.634610][ T5276] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.856144][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 117.887141][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 117.931797][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 117.955511][ T5276] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 117.966785][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.987140][ T5276] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 118.005294][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.035573][ T5276] usb 1-1: Product: syz [ 118.040974][ T5276] usb 1-1: Manufacturer: syz [ 118.050009][ T5276] usb 1-1: SerialNumber: syz [ 118.097798][ T5276] usb 1-1: config 0 descriptor?? [ 118.107641][ T29] audit: type=1400 audit(1724589434.233:269): avc: denied { append } for pid=5966 comm="syz.2.287" name="001" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.159130][ T5276] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 118.406584][ T5276] usb 1-1: USB disconnect, device number 2 [ 119.728782][ T29] audit: type=1400 audit(1724589435.853:270): avc: denied { connect } for pid=6013 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.809331][ T29] audit: type=1400 audit(1724589435.853:271): avc: denied { bind } for pid=6013 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.835110][ T29] audit: type=1400 audit(1724589435.893:272): avc: denied { write } for pid=6013 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.856815][ T29] audit: type=1400 audit(1724589435.973:273): avc: denied { append } for pid=6015 comm="syz.2.310" name="system" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.928161][ T29] audit: type=1400 audit(1724589436.023:274): avc: denied { read } for pid=6009 comm="syz.4.307" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.955594][ T29] audit: type=1400 audit(1724589436.023:275): avc: denied { open } for pid=6009 comm="syz.4.307" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.065570][ T29] audit: type=1400 audit(1724589436.023:276): avc: denied { ioctl } for pid=6009 comm="syz.4.307" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.038895][ T6038] serio: Serial port pts0 [ 121.627141][ T29] audit: type=1400 audit(1724589437.753:277): avc: denied { create } for pid=6051 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.148144][ T6065] serio: Serial port pts1 [ 122.410843][ T6075] serio: Serial port pts2 [ 122.958222][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 122.958241][ T29] audit: type=1400 audit(1724589439.083:283): avc: denied { nlmsg_write } for pid=6095 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 123.367201][ T29] audit: type=1400 audit(1724589439.493:284): avc: denied { mount } for pid=6110 comm="syz.3.347" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.237767][ T29] audit: type=1400 audit(1724589440.363:285): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.522183][ T6134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6134 comm=syz.3.358 [ 125.219883][ T6146] serio: Serial port pts0 [ 125.544529][ T29] audit: type=1400 audit(1724589441.673:286): avc: denied { write } for pid=6161 comm="syz.4.369" path="socket:[10364]" dev="sockfs" ino=10364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.803031][ T29] audit: type=1400 audit(1724589441.853:287): avc: denied { write } for pid=6165 comm="syz.1.371" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.825938][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.555080][ T6217] serio: Serial port pts0 [ 128.764534][ T6225] serio: Serial port pts1 [ 129.152993][ T29] audit: type=1400 audit(1724589445.273:288): avc: denied { read } for pid=6237 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.233252][ T29] audit: type=1400 audit(1724589445.343:289): avc: denied { read } for pid=6239 comm="syz.2.401" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 129.322989][ T29] audit: type=1400 audit(1724589445.343:290): avc: denied { open } for pid=6239 comm="syz.2.401" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 130.171678][ T29] audit: type=1400 audit(1724589446.293:291): avc: denied { write } for pid=6265 comm="syz.1.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.538889][ T6282] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5129 sclass=netlink_xfrm_socket pid=6282 comm=syz.2.420 [ 130.891294][ T6289] "syz.2.424" (6289) uses obsolete ecb(arc4) skcipher [ 132.612847][ C1] sched: RT throttling activated [ 133.452988][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.463007][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.532246][ T29] audit: type=1400 audit(1724589449.653:292): avc: denied { lock } for pid=6340 comm="syz.4.445" path="socket:[10599]" dev="sockfs" ino=10599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.843200][ T5272] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.037292][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 135.045181][ T5272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.045274][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 135.045311][ T5272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.048258][ T5272] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 135.048294][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.048322][ T5272] usb 5-1: Product: syz [ 135.048345][ T5272] usb 5-1: Manufacturer: syz [ 135.048366][ T5272] usb 5-1: SerialNumber: syz [ 135.052341][ T5272] usb 5-1: config 0 descriptor?? [ 135.065360][ T5272] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 135.298959][ T5272] usb 5-1: USB disconnect, device number 2 [ 137.100146][ T6408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6408 comm=syz.2.477 [ 137.991223][ T6431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6431 comm=syz.4.488 [ 138.260995][ T29] audit: type=1400 audit(1724589454.383:293): avc: denied { ioctl } for pid=6436 comm="syz.4.490" path="socket:[11446]" dev="sockfs" ino=11446 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.412955][ T29] audit: type=1400 audit(1724589454.503:294): avc: denied { search } for pid=4888 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.516962][ T29] audit: type=1400 audit(1724589454.513:295): avc: denied { read } for pid=4888 comm="dhcpcd" name="n68" dev="tmpfs" ino=2972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.609014][ T29] audit: type=1400 audit(1724589454.513:296): avc: denied { open } for pid=4888 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=2972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.697197][ T29] audit: type=1400 audit(1724589454.513:297): avc: denied { getattr } for pid=4888 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=2972 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.874736][ T29] audit: type=1400 audit(1724589454.993:298): avc: denied { read } for pid=6453 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.946655][ T29] audit: type=1400 audit(1724589454.993:299): avc: denied { open } for pid=6453 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.045727][ T29] audit: type=1400 audit(1724589454.993:300): avc: denied { getattr } for pid=6453 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.165463][ T29] audit: type=1400 audit(1724589455.053:301): avc: denied { read } for pid=6454 comm="syz.4.497" name="nvme-fabrics" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.261675][ T29] audit: type=1400 audit(1724589455.053:302): avc: denied { open } for pid=6454 comm="syz.4.497" path="/dev/nvme-fabrics" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.329574][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 140.213135][ T6483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6483 comm=syz.3.503 [ 140.436185][ T6487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6487 comm=syz.4.504 [ 141.039301][ T6507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=6507 comm=syz.3.513 [ 141.072626][ T6507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6507 comm=syz.3.513 [ 141.077189][ T6506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6506 comm=syz.1.514 [ 143.201176][ T6585] x_tables: ip_tables: osf match: only valid for protocol 6 [ 143.361764][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 143.361783][ T29] audit: type=1400 audit(1724589459.483:316): avc: denied { watch } for pid=6588 comm="syz.1.550" path="/108/control" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 143.664150][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 143.735035][ T29] audit: type=1400 audit(1724589459.783:317): avc: denied { name_bind } for pid=6598 comm="syz.1.554" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 144.091193][ T6605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.555'. [ 144.092046][ T6605] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.275445][ C0] hrtimer: interrupt took 882269 ns [ 144.640560][ T6619] netlink: 'syz.2.562': attribute type 10 has an invalid length. [ 144.660952][ T29] audit: type=1400 audit(1724589460.783:318): avc: denied { setopt } for pid=6620 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.825057][ T6619] team0: Port device netdevsim0 added [ 144.899128][ T29] audit: type=1400 audit(1724589461.023:319): avc: denied { mounton } for pid=6625 comm="syz.1.564" path="/112/file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 145.906870][ T29] audit: type=1400 audit(1724589462.033:320): avc: denied { ioctl } for pid=6636 comm="syz.4.567" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.931306][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.002574][ T6638] netlink: 'syz.1.568': attribute type 25 has an invalid length. [ 146.021645][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.568'. [ 146.164745][ T29] audit: type=1400 audit(1724589462.293:321): avc: denied { ioctl } for pid=6641 comm="syz.4.570" path="/dev/vmci" dev="devtmpfs" ino=683 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.266836][ T29] audit: type=1400 audit(1724589462.303:322): avc: denied { sqpoll } for pid=6641 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 146.355720][ T29] audit: type=1400 audit(1724589462.363:323): avc: denied { read } for pid=6641 comm="syz.4.570" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 146.392311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #44!!! [ 146.438296][ T29] audit: type=1400 audit(1724589462.363:324): avc: denied { open } for pid=6641 comm="syz.4.570" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 146.524398][ T6648] Illegal XDP return value 4294967274 on prog (id 37) dev N/A, expect packet loss! [ 146.661198][ T29] audit: type=1400 audit(1724589462.513:325): avc: denied { create } for pid=6646 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.754058][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 148.133538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 148.220222][ T6663] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.340412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 148.340715][ T6661] kvm: pic: level sensitive irq not supported [ 148.361155][ T6661] kvm: pic: non byte read [ 148.396720][ T6661] kvm: pic: level sensitive irq not supported [ 148.396844][ T6661] kvm: pic: non byte read [ 148.410875][ T4612] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 148.432426][ T4612] Bluetooth: hci3: Injecting HCI hardware error event [ 148.452976][ T5233] Bluetooth: hci3: hardware error 0x00 [ 148.492536][ T6661] kvm: pic: level sensitive irq not supported [ 148.492779][ T6661] kvm: pic: non byte read [ 148.585393][ T6661] kvm: pic: level sensitive irq not supported [ 148.585494][ T6661] kvm: pic: non byte read [ 148.585657][ T6661] kvm: pic: level sensitive irq not supported [ 148.585719][ T6661] kvm: pic: non byte read [ 148.585905][ T6661] kvm: pic: level sensitive irq not supported [ 148.585954][ T6661] kvm: pic: non byte read [ 149.876463][ T941] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.092137][ T941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.133005][ T941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.168991][ T941] usb 1-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 150.206694][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.222471][ T941] usb 1-1: SerialNumber: syz [ 150.629931][ T5233] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 150.690893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 150.759929][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 150.760073][ T29] audit: type=1400 audit(1724589466.883:330): avc: denied { wake_alarm } for pid=6689 comm="syz.2.582" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.844257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.853351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 150.998354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.203025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 151.549077][ T29] audit: type=1400 audit(1724589467.673:331): avc: denied { connect } for pid=6693 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.582428][ T941] usb 1-1: 0:75 : does not exist [ 151.723501][ T29] audit: type=1400 audit(1724589467.733:332): avc: denied { write } for pid=6693 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.889320][ T941] usb 1-1: USB disconnect, device number 3 [ 151.932633][ T29] audit: type=1400 audit(1724589468.053:333): avc: denied { module_load } for pid=6695 comm="syz.4.588" path="/sys/kernel/address_bits" dev="sysfs" ino=1365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 152.054159][ T29] audit: type=1400 audit(1724589468.083:334): avc: denied { search } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.067707][ T5437] udevd[5437]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.365946][ T29] audit: type=1400 audit(1724589470.493:335): avc: denied { create } for pid=6729 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.443347][ T29] audit: type=1326 audit(1724589473.563:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.0.607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bb9579e79 code=0x0 [ 157.829128][ T29] audit: type=1400 audit(1724589473.953:337): avc: denied { bind } for pid=6752 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.873340][ T5276] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.910206][ T29] audit: type=1400 audit(1724589473.983:338): avc: denied { listen } for pid=6752 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.073154][ T5276] usb 1-1: Using ep0 maxpacket: 32 [ 158.126618][ T5276] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 158.148614][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.172957][ T5276] usb 1-1: Product: syz [ 158.177174][ T5276] usb 1-1: Manufacturer: syz [ 158.181786][ T5276] usb 1-1: SerialNumber: syz [ 158.241143][ T5276] usb 1-1: config 0 descriptor?? [ 158.301670][ T5276] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 158.540830][ T5274] usb 1-1: USB disconnect, device number 4 [ 158.994316][ T29] audit: type=1400 audit(1724589475.123:339): avc: denied { bind } for pid=6766 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.180596][ T6769] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 159.303330][ T6769] syzkaller0: entered promiscuous mode [ 159.325820][ T6769] syzkaller0: entered allmulticast mode [ 161.910545][ T6795] process 'syz.0.624' launched './file1' with NULL argv: empty string added [ 161.915515][ T29] audit: type=1400 audit(1724589478.033:340): avc: denied { execute } for pid=6794 comm="syz.0.624" name="file1" dev="tmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.012728][ T29] audit: type=1400 audit(1724589478.053:341): avc: denied { execute_no_trans } for pid=6794 comm="syz.0.624" path="/129/file1" dev="tmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.499439][ T6804] 9pnet_fd: Insufficient options for proto=fd [ 162.847193][ T944] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 163.136479][ T944] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.166475][ T944] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.189150][ T944] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.208262][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.236758][ T6799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.281166][ T944] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.113186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 164.123328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 164.267672][ T944] usb 3-1: USB disconnect, device number 3 [ 165.164673][ T29] audit: type=1400 audit(1724589481.293:342): avc: denied { create } for pid=6817 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.308047][ T29] audit: type=1400 audit(1724589481.313:343): avc: denied { connect } for pid=6817 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.468185][ T29] audit: type=1400 audit(1724589481.333:344): avc: denied { create } for pid=6817 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.796400][ T6802] syz.1.619 (6802) used greatest stack depth: 20960 bytes left [ 167.923163][ T4612] Bluetooth: hci2: command 0x0405 tx timeout [ 167.978603][ T6855] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 168.029930][ T6855] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.050707][ T6855] gretap1: entered promiscuous mode [ 168.063348][ T5307] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.066494][ T6855] gretap1: entered allmulticast mode [ 168.253058][ T5307] usb 5-1: Using ep0 maxpacket: 8 [ 168.276368][ T5307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.305429][ T5307] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 168.318125][ T5307] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.337863][ T5307] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 168.347706][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.357687][ T5307] usb 5-1: Product: syz [ 168.362467][ T5307] usb 5-1: Manufacturer: syz [ 168.367931][ T5307] usb 5-1: SerialNumber: syz [ 168.379859][ T5307] usb 5-1: config 0 descriptor?? [ 168.398997][ T5307] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 168.603015][ T25] usb 5-1: USB disconnect, device number 3 [ 169.177887][ T29] audit: type=1400 audit(1724589485.303:345): avc: denied { read write } for pid=6866 comm="syz.0.644" name="video7" dev="devtmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.314341][ T29] audit: type=1400 audit(1724589485.333:346): avc: denied { open } for pid=6866 comm="syz.0.644" path="/dev/video7" dev="devtmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.434436][ T29] audit: type=1400 audit(1724589485.343:347): avc: denied { ioctl } for pid=6866 comm="syz.0.644" path="/dev/video7" dev="devtmpfs" ino=868 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 169.547276][ T6871] tipc: Started in network mode [ 169.572440][ T6871] tipc: Node identity 66caa51c7a3f, cluster identity 4711 [ 169.607350][ T6871] tipc: Enabled bearer , priority 0 [ 169.753793][ T6871] tipc: Resetting bearer [ 169.803793][ T6870] tipc: Disabling bearer [ 171.053440][ T29] audit: type=1326 audit(1724589487.153:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 171.516474][ T29] audit: type=1326 audit(1724589487.153:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 171.706405][ T29] audit: type=1326 audit(1724589487.153:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 171.768823][ T29] audit: type=1326 audit(1724589487.163:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 171.924556][ T29] audit: type=1326 audit(1724589487.163:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 171.985009][ T29] audit: type=1326 audit(1724589487.163:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 172.063185][ T29] audit: type=1326 audit(1724589487.163:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 172.151217][ T29] audit: type=1326 audit(1724589487.163:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 172.248447][ T29] audit: type=1326 audit(1724589487.163:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 172.355449][ T29] audit: type=1326 audit(1724589487.163:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d4179e79 code=0x7ff00000 [ 174.053083][ T5274] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.873114][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 175.973591][ T5274] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.031131][ T5274] usb 3-1: config 0 has no interface number 0 [ 176.089595][ T5274] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.141069][ T5274] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.265543][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 176.278016][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.030200][ T5274] usb 3-1: config 0 descriptor?? [ 177.085069][ T5274] usb 3-1: can't set config #0, error -71 [ 177.159506][ T6921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.193726][ T5274] usb 3-1: USB disconnect, device number 4 [ 178.146197][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 178.146236][ T29] audit: type=1400 audit(1724589494.273:406): avc: denied { ioctl } for pid=6930 comm="syz.3.663" path="cgroup:[4026533069]" dev="nsfs" ino=4026533069 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 178.186112][ T5274] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 178.652917][ T5274] usb 2-1: Using ep0 maxpacket: 16 [ 178.671028][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.697748][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.749504][ T29] audit: type=1400 audit(1724589494.843:407): avc: denied { accept } for pid=6922 comm="syz.0.660" lport=45358 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.782809][ T5274] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 178.817694][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.912400][ T5274] usb 2-1: config 0 descriptor?? [ 179.404075][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.544489][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.017628][ T6954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.135974][ T5274] usbhid 2-1:0.0: can't add hid device: -71 [ 181.160510][ T5274] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 181.194950][ T6957] [U]  [ 181.201393][ T5274] usb 2-1: USB disconnect, device number 2 [ 181.224864][ T29] audit: type=1400 audit(1724589497.353:408): avc: denied { mounton } for pid=6956 comm="syz.4.667" path="/proc/341/task" dev="proc" ino=12810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 181.273465][ T6958] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 181.793844][ T29] audit: type=1400 audit(1724589497.923:409): avc: denied { bind } for pid=6971 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.889792][ T29] audit: type=1400 audit(1724589497.923:410): avc: denied { node_bind } for pid=6971 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 182.091267][ T6977] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.675'. [ 182.413250][ T6988] netlink: 188 bytes leftover after parsing attributes in process `syz.3.680'. [ 182.713788][ T6993] [U]  [ 183.503428][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 183.583817][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 183.723147][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 183.729892][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 183.736534][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 183.743025][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 183.749623][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 183.756123][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 183.762715][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 183.769208][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 183.775723][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 183.775805][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 183.787255][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.795301][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.803180][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.811189][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.819092][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.827107][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.834991][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.843003][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.845642][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.850824][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.851002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.851031][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.851186][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.851213][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.851371][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.908489][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.916539][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.924423][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.932414][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.940391][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 183.948411][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 183.951996][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 183.956365][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 184.138027][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.192202][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 184.213112][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.222016][ T8] usb 1-1: Product: syz [ 184.252896][ T8] usb 1-1: Manufacturer: syz [ 184.263498][ T8] usb 1-1: SerialNumber: syz [ 184.338700][ T8] usb 1-1: config 0 descriptor?? [ 184.393731][ T8] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 184.647807][ T8] usb 1-1: USB disconnect, device number 5 [ 185.692390][ T7021] [U]  [ 186.805460][ T29] audit: type=1400 audit(1724589502.933:411): avc: denied { ioctl } for pid=7032 comm="syz.4.700" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12934 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 187.133465][ T7039] vivid-000: disconnect [ 187.533461][ T7032] vivid-000: reconnect [ 187.533582][ T5307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 187.753170][ T5307] usb 4-1: Using ep0 maxpacket: 8 [ 187.791094][ T5307] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 187.820804][ T5307] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 187.842507][ T5307] usb 4-1: config 8 has no interface number 0 [ 187.860668][ T5307] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 187.884710][ T5307] usb 4-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.917985][ T5307] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 187.951923][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.991468][ T5307] usb 4-1: Product: syz [ 188.001560][ T5307] usb 4-1: Manufacturer: syz [ 188.015834][ T5307] usb 4-1: SerialNumber: syz [ 188.402642][ T5307] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 188.487627][ T5307] usb 4-1: USB disconnect, device number 2 [ 189.185084][ T29] audit: type=1400 audit(1724589505.313:412): avc: denied { write } for pid=7075 comm="syz.2.708" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.693307][ T29] audit: type=1326 audit(1724589507.813:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7103 comm="syz.2.722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5870f79e79 code=0x0 [ 191.749644][ T7106] netlink: 188 bytes leftover after parsing attributes in process `syz.0.724'. [ 191.782992][ T7106] nbd: must specify a device to reconfigure [ 193.891783][ T7150] netlink: 188 bytes leftover after parsing attributes in process `syz.4.737'. [ 193.924897][ T7150] nbd: must specify a device to reconfigure [ 194.483516][ T944] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 194.713035][ T944] usb 5-1: Using ep0 maxpacket: 8 [ 194.727836][ T944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.749540][ T944] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 194.784524][ T944] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.829805][ T944] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 194.846416][ T944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.873064][ T944] usb 5-1: Product: syz [ 194.877728][ T944] usb 5-1: Manufacturer: syz [ 194.895347][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.895460][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.926361][ T944] usb 5-1: SerialNumber: syz [ 194.957470][ T944] usb 5-1: config 0 descriptor?? [ 194.978449][ T944] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 195.198707][ T944] usb 5-1: USB disconnect, device number 4 [ 198.067109][ T941] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 198.276089][ T941] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.299089][ T941] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.349762][ T941] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.390798][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.444560][ T7191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.525788][ T941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.976602][ T5274] usb 2-1: USB disconnect, device number 3 [ 199.663053][ T5276] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.863127][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 199.880901][ T5276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.903059][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 199.938060][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 199.974066][ T5276] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 199.989220][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.039655][ T5276] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 200.069090][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.082961][ T5276] usb 4-1: Product: syz [ 200.087588][ T5276] usb 4-1: Manufacturer: syz [ 200.097678][ T5276] usb 4-1: SerialNumber: syz [ 200.113230][ T5276] usb 4-1: config 0 descriptor?? [ 200.131384][ T5276] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 200.386489][ T47] usb 4-1: USB disconnect, device number 3 [ 202.087405][ T5240] Bluetooth: hci2: command 0x0405 tx timeout [ 202.093823][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 202.102403][ T5239] Bluetooth: hci0: command 0x0406 tx timeout [ 202.103143][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 204.956470][ T29] audit: type=1400 audit(1724589521.083:414): avc: denied { create } for pid=7261 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 204.988614][ T29] audit: type=1400 audit(1724589521.093:415): avc: denied { connect } for pid=7261 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 205.015226][ T29] audit: type=1400 audit(1724589521.093:416): avc: denied { name_connect } for pid=7261 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 205.040132][ T29] audit: type=1400 audit(1724589521.173:417): avc: denied { read } for pid=7261 comm="syz.3.771" laddr=fe80::12 lport=57842 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 205.091429][ T29] audit: type=1400 audit(1724589521.213:418): avc: denied { shutdown } for pid=7261 comm="syz.3.771" laddr=fe80::12 lport=57842 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 205.625034][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 205.637498][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 207.119182][ T29] audit: type=1400 audit(1724589523.243:419): avc: denied { mount } for pid=7278 comm="syz.0.780" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 207.253000][ T29] audit: type=1400 audit(1724589523.283:420): avc: denied { search } for pid=7278 comm="syz.0.780" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.367744][ T29] audit: type=1400 audit(1724589523.303:421): avc: denied { read } for pid=7278 comm="syz.0.780" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.462123][ T29] audit: type=1400 audit(1724589523.303:422): avc: denied { open } for pid=7278 comm="syz.0.780" path="/179/file0" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.562446][ T29] audit: type=1400 audit(1724589523.433:423): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 207.705547][ T4612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.718634][ T4612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.730914][ T4612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.743699][ T4612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.753398][ T4612] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.762509][ T4612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.757823][ T7295] smb3: Unknown parameter 'rdma' [ 209.001797][ T7300] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 209.337340][ T7300] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 209.357037][ T7300] gretap2: entered promiscuous mode [ 209.418492][ T7304] 9pnet_fd: Insufficient options for proto=fd [ 209.433782][ T7300] gretap2: entered allmulticast mode [ 209.581972][ T7284] chnl_net:caif_netlink_parms(): no params data found [ 209.813069][ T7312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.853439][ T55] Bluetooth: hci2: command tx timeout [ 210.043076][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.051073][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.079299][ T7284] bridge_slave_0: entered allmulticast mode [ 210.096673][ T7284] bridge_slave_0: entered promiscuous mode [ 210.118794][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.126852][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.136609][ T7284] bridge_slave_1: entered allmulticast mode [ 210.160851][ T7284] bridge_slave_1: entered promiscuous mode [ 210.330590][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.377411][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.566613][ T7284] team0: Port device team_slave_0 added [ 210.883031][ T5274] sound midiC3D0: rawmidi drain error (avail = 3989, buffer_size = 4096) [ 210.963199][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 210.963220][ T29] audit: type=1400 audit(1724589527.083:431): avc: denied { map } for pid=7317 comm="syz.4.792" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 212.043626][ T55] Bluetooth: hci2: command tx timeout [ 213.335342][ T7284] team0: Port device team_slave_1 added [ 214.056741][ T29] audit: type=1400 audit(1724589530.183:432): avc: denied { connect } for pid=7325 comm="syz.3.791" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 214.083124][ T55] Bluetooth: hci2: command tx timeout [ 214.147382][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.185298][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.284106][ T7284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.327399][ T29] audit: type=1400 audit(1724589530.453:433): avc: denied { getopt } for pid=7325 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.452203][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.579212][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.616653][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.761996][ T7284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.854847][ T4612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.866553][ T4612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.877605][ T4612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.889273][ T4612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.915146][ T4612] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.929448][ T4612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.061824][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.359805][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.609447][ T7284] hsr_slave_0: entered promiscuous mode [ 215.718845][ T7284] hsr_slave_1: entered promiscuous mode [ 216.343141][ T55] Bluetooth: hci2: command tx timeout [ 216.373287][ T7284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.399648][ T7284] Cannot create hsr debugfs directory [ 216.609525][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.008369][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 217.044652][ T55] Bluetooth: hci1: command tx timeout [ 217.857192][ T64] bridge_slave_1: left allmulticast mode [ 217.883135][ T64] bridge_slave_1: left promiscuous mode [ 217.891354][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.946118][ T64] bridge_slave_0: left allmulticast mode [ 217.952419][ T64] bridge_slave_0: left promiscuous mode [ 217.973314][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.123196][ T55] Bluetooth: hci1: command tx timeout [ 219.416432][ T29] audit: type=1400 audit(1724589535.543:434): avc: denied { write } for pid=7373 comm="syz.0.806" path="socket:[15130]" dev="sockfs" ino=15130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.416785][ T7374] Bluetooth: MGMT ver 1.23 [ 219.468581][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.511197][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.534186][ T64] bond0 (unregistering): Released all slaves [ 219.555138][ T7374] random: crng reseeded on system resumption [ 219.562236][ T29] audit: type=1400 audit(1724589535.683:435): avc: denied { append } for pid=7373 comm="syz.0.806" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 219.633398][ T29] audit: type=1400 audit(1724589535.683:436): avc: denied { ioctl } for pid=7373 comm="syz.0.806" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 220.019368][ T64] tipc: Left network mode [ 220.475472][ T7330] chnl_net:caif_netlink_parms(): no params data found [ 221.138866][ T64] hsr_slave_0: left promiscuous mode [ 221.201299][ T64] hsr_slave_1: left promiscuous mode [ 221.206937][ T55] Bluetooth: hci1: command tx timeout [ 221.278456][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.302506][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.331821][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.356028][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.454488][ T64] veth1_vlan: left promiscuous mode [ 221.461578][ T64] veth0_vlan: left promiscuous mode [ 222.850631][ T64] team0 (unregistering): Port device team_slave_1 removed [ 222.957265][ T64] team0 (unregistering): Port device team_slave_0 removed [ 222.963696][ T29] audit: type=1400 audit(1724589539.083:437): avc: denied { write } for pid=7410 comm="syz.0.811" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 223.106014][ T29] audit: type=1400 audit(1724589539.233:438): avc: denied { nlmsg_write } for pid=7412 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.130124][ T7413] netlink: 156 bytes leftover after parsing attributes in process `syz.0.812'. [ 223.283444][ T55] Bluetooth: hci1: command tx timeout [ 224.006637][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.028105][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.045824][ T7330] bridge_slave_0: entered allmulticast mode [ 224.073132][ T7330] bridge_slave_0: entered promiscuous mode [ 224.190058][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.231426][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.249519][ T7330] bridge_slave_1: entered allmulticast mode [ 224.301087][ T7330] bridge_slave_1: entered promiscuous mode [ 224.514248][ T7419] [U]  [ 224.589426][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.627093][ T7284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.698645][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.828769][ T7284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.892808][ T7284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.076826][ T7330] team0: Port device team_slave_0 added [ 225.398249][ T7284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.654954][ T7330] team0: Port device team_slave_1 added [ 225.917481][ T7425] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 225.982812][ T7425] netlink: 2 bytes leftover after parsing attributes in process `syz.0.814'. [ 226.087471][ T7425] bond0: entered promiscuous mode [ 226.138830][ T7425] bond_slave_0: entered promiscuous mode [ 226.150722][ T7425] bond_slave_1: entered promiscuous mode [ 226.158266][ T7425] bridge0: port 3(bond0) entered blocking state [ 226.170066][ T7425] bridge0: port 3(bond0) entered disabled state [ 226.181644][ T7425] bond0: entered allmulticast mode [ 226.187400][ T7425] bond_slave_0: entered allmulticast mode [ 226.232967][ T29] audit: type=1400 audit(1724589542.313:439): avc: denied { write } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.353914][ T7425] bond_slave_1: entered allmulticast mode [ 226.375165][ T7425] bridge0: port 3(bond0) entered blocking state [ 226.381915][ T7425] bridge0: port 3(bond0) entered forwarding state [ 226.409409][ T29] audit: type=1400 audit(1724589542.323:440): avc: denied { remove_name } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.501484][ T29] audit: type=1400 audit(1724589542.323:441): avc: denied { rename } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.562750][ T29] audit: type=1400 audit(1724589542.323:442): avc: denied { add_name } for pid=4656 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.703337][ T29] audit: type=1400 audit(1724589542.323:443): avc: denied { unlink } for pid=4656 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.737204][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.766639][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.852986][ T29] audit: type=1400 audit(1724589542.333:444): avc: denied { create } for pid=4656 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.936299][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.024732][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.053231][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.126071][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.480175][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.553108][ T7330] hsr_slave_0: entered promiscuous mode [ 227.600266][ T7330] hsr_slave_1: entered promiscuous mode [ 227.613370][ T7330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.621428][ T7330] Cannot create hsr debugfs directory [ 227.704174][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.711107][ T7454] netlink: 156 bytes leftover after parsing attributes in process `syz.4.821'. [ 227.951738][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.999997][ T29] audit: type=1400 audit(1724589544.123:445): avc: denied { ioctl } for pid=7459 comm="syz.4.823" path="socket:[15520]" dev="sockfs" ino=15520 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.024657][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.147118][ T64] team0: Port device netdevsim0 removed [ 228.161829][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.263801][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 228.414254][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.028001][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 229.037335][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.081316][ T25] usb 5-1: Product: syz [ 229.535220][ T25] usb 5-1: Manufacturer: syz [ 229.631235][ T25] usb 5-1: SerialNumber: syz [ 229.699958][ T25] usb 5-1: config 0 descriptor?? [ 229.925083][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.963427][ T64] bridge_slave_1: left allmulticast mode [ 229.969113][ T64] bridge_slave_1: left promiscuous mode [ 229.978290][ T25] hso 5-1:0.0: Failed to find BULK IN ep [ 229.992454][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.010228][ T25] usb-storage 5-1:0.0: USB Mass Storage device detected [ 230.034907][ T64] bridge_slave_0: left allmulticast mode [ 230.055737][ T64] bridge_slave_0: left promiscuous mode [ 230.061681][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.752352][ T25] usb 5-1: USB disconnect, device number 5 [ 230.929799][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.951045][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.970947][ T64] bond0 (unregistering): Released all slaves [ 231.165738][ T29] audit: type=1400 audit(1724589547.283:446): avc: denied { read } for pid=7483 comm="syz.4.830" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.222142][ T7284] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.268820][ T29] audit: type=1400 audit(1724589547.283:447): avc: denied { open } for pid=7483 comm="syz.4.830" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.292489][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.312503][ T29] audit: type=1400 audit(1724589547.343:448): avc: denied { ioctl } for pid=7483 comm="syz.4.830" path="/dev/usbmon0" dev="devtmpfs" ino=706 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.542903][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.550172][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.857447][ T2487] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.865433][ T2487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.979103][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 232.159876][ T64] hsr_slave_0: left promiscuous mode [ 232.185957][ T64] hsr_slave_1: left promiscuous mode [ 232.235396][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.273100][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.316204][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.346327][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.461069][ T64] veth1_macvtap: left promiscuous mode [ 232.499077][ T64] veth0_macvtap: left promiscuous mode [ 232.522650][ T64] veth1_vlan: left promiscuous mode [ 232.530327][ T64] veth0_vlan: left promiscuous mode [ 232.659153][ T944] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.692464][ T29] audit: type=1400 audit(1724589548.803:449): avc: denied { create } for pid=7511 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 232.770307][ T29] audit: type=1400 audit(1724589548.893:450): avc: denied { ioctl } for pid=7511 comm="syz.4.837" path="socket:[15829]" dev="sockfs" ino=15829 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 232.794825][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.877276][ T944] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.942742][ T944] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.023885][ T944] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.075504][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.151456][ T7505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.239002][ T944] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.507048][ T7511] delete_channel: no stack [ 233.679539][ T944] usb 1-1: USB disconnect, device number 6 [ 236.724820][ T7533] syz.4.842 uses obsolete (PF_INET,SOCK_PACKET) [ 237.395437][ T64] team0 (unregistering): Port device team_slave_1 removed [ 237.461569][ T64] team0 (unregistering): Port device team_slave_0 removed [ 237.469489][ T5274] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 237.648794][ T7544] ubi0: attaching mtd0 [ 237.665400][ T7544] ubi0: scanning is finished [ 237.670050][ T7544] ubi0: empty MTD device detected [ 237.685144][ T5274] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 237.700731][ T5274] usb 4-1: config 0 has no interface number 0 [ 237.723641][ T5274] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.759826][ T5274] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.778378][ T5274] usb 4-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.804074][ T5274] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 237.827879][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.855348][ T5274] usb 4-1: config 0 descriptor?? [ 237.970861][ T7544] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 237.980881][ T7544] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 237.991572][ T7544] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 237.999037][ T7544] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 238.024150][ T7544] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 238.041427][ T7544] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 238.050406][ T7544] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2396684580 [ 238.088323][ T7544] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 238.100426][ T7546] ubi0: background thread "ubi_bgt0d" started, PID 7546 [ 238.330728][ T5274] uclogic 0003:28BD:1903.0001: interface is invalid, ignoring [ 238.540964][ T941] usb 4-1: USB disconnect, device number 4 [ 238.820295][ T7284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.937683][ T7330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.966911][ T29] audit: type=1400 audit(1724589555.093:451): avc: denied { getopt } for pid=7547 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 239.029199][ T7330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.105480][ T7330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.196184][ T7330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.490786][ T29] audit: type=1400 audit(1724589555.613:452): avc: denied { listen } for pid=7556 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.567171][ T29] audit: type=1400 audit(1724589555.643:453): avc: denied { getopt } for pid=7556 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.613906][ T29] audit: type=1400 audit(1724589555.723:454): avc: denied { setattr } for pid=7556 comm="syz.0.846" name="L2CAP" dev="sockfs" ino=15927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.637087][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.638693][ T7284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.877046][ T5307] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.922218][ T7284] veth0_vlan: entered promiscuous mode [ 239.989428][ T7284] veth1_vlan: entered promiscuous mode [ 240.040880][ T7569] netlink: 104 bytes leftover after parsing attributes in process `syz.0.849'. [ 240.061178][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.076642][ T5307] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.123495][ T5307] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 240.150195][ T29] audit: type=1400 audit(1724589556.273:455): avc: denied { mount } for pid=7568 comm="syz.0.849" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 240.177907][ T5307] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.207671][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.243527][ T7560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 240.282056][ T5307] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.326871][ T29] audit: type=1400 audit(1724589556.453:456): avc: denied { setopt } for pid=7564 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.387883][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.395788][ T29] audit: type=1400 audit(1724589556.453:457): avc: denied { shutdown } for pid=7564 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.418850][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.614233][ T5307] usb 4-1: USB disconnect, device number 5 [ 240.681677][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.689261][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.196059][ T29] audit: type=1400 audit(1724589557.323:458): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 241.496761][ T7284] veth0_macvtap: entered promiscuous mode [ 241.977186][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.985987][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.205407][ T7284] veth1_macvtap: entered promiscuous mode [ 242.339362][ T7596] syz.3.852[7596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.339554][ T7596] syz.3.852[7596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.427231][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.484848][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.503003][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.529348][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.541245][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.589950][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.619574][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.718420][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.784217][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.815616][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.827395][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.055945][ T7284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.071417][ T7284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.085809][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.887699][ T7284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.959926][ T7284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.983536][ T7284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.013081][ T7284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.115316][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 244.596394][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.635443][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.818199][ T2487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.835450][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.847481][ T2487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.020556][ T7629] netlink: 156 bytes leftover after parsing attributes in process `syz.0.859'. [ 245.110702][ T7330] veth0_vlan: entered promiscuous mode [ 245.146704][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 245.160052][ T7330] veth1_vlan: entered promiscuous mode [ 245.330923][ T7330] veth0_macvtap: entered promiscuous mode [ 245.373399][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.484477][ T7330] veth1_macvtap: entered promiscuous mode [ 245.492339][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.547005][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.581259][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.614032][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.642746][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.669519][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.694651][ T7627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.718242][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.747016][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.753393][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.809483][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.857498][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.877744][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.946423][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.094498][ T8] usb 4-1: USB disconnect, device number 6 [ 246.112369][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.193018][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.239087][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.292641][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.359021][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.430466][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.472935][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.518416][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.575331][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.751316][ T5307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 247.099537][ T7330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.463104][ T7330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.493225][ T7330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.502667][ T7330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.676208][ T5307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.883158][ T5307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.695109][ T5307] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 248.715213][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.743530][ T5307] usb 2-1: SerialNumber: syz [ 248.958596][ T2548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.970990][ T5307] usb 2-1: 0:2 : does not exist [ 249.008041][ T2548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.020459][ T5307] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 249.054555][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.864'. [ 249.103843][ T5307] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 249.164313][ T2525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.193346][ T5307] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 249.216976][ T2525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.226522][ T7658] tipc: Started in network mode [ 249.248742][ T5307] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 249.259695][ T7658] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 249.291621][ T7658] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 249.375855][ T7658] tipc: Enabled bearer , priority 10 [ 249.414897][ T5307] usb 2-1: USB disconnect, device number 4 [ 249.833953][ T7584] udevd[7584]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.584144][ T29] audit: type=1400 audit(1724589566.073:459): avc: denied { create } for pid=7663 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 250.606184][ T5272] tipc: Node number set to 1 [ 253.513030][ T29] audit: type=1400 audit(1724589569.633:460): avc: denied { setopt } for pid=7687 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.581995][ T29] audit: type=1400 audit(1724589569.663:461): avc: denied { ioctl } for pid=7687 comm="syz.2.871" path="socket:[17719]" dev="sockfs" ino=17719 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 256.354308][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.361472][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.313132][ T944] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 259.146432][ T944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.206226][ T944] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.424772][ T944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.473163][ T944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.510043][ T944] usb 5-1: Product: syz [ 259.530351][ T944] usb 5-1: Manufacturer: syz [ 259.553425][ T944] usb 5-1: SerialNumber: syz [ 259.910736][ T7716] ALSA: seq fatal error: cannot create timer (-22) [ 261.247356][ T4612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.255249][ T944] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 261.264510][ T4612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.275233][ T4612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.291775][ T4612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.301779][ T944] cdc_ncm 5-1:1.0: bind() failure [ 261.308784][ T4612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 261.317069][ T4612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.333732][ T944] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 261.341315][ T944] cdc_ncm 5-1:1.1: bind() failure [ 261.494333][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.632605][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.945669][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.967668][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.186569][ T5272] usb 5-1: USB disconnect, device number 6 [ 263.363198][ T55] Bluetooth: hci4: command tx timeout [ 263.833067][ T11] bond0: left allmulticast mode [ 263.853107][ T11] bond_slave_0: left allmulticast mode [ 263.858618][ T11] bond_slave_1: left allmulticast mode [ 263.942281][ T11] bridge0: port 3(bond0) entered disabled state [ 264.194749][ T11] bridge_slave_1: left allmulticast mode [ 264.201102][ T11] bridge_slave_1: left promiscuous mode [ 266.102115][ T55] Bluetooth: hci4: command tx timeout [ 266.471382][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.539996][ T29] audit: type=1400 audit(1724589582.663:462): avc: denied { create } for pid=7751 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.584136][ T11] bridge_slave_0: left allmulticast mode [ 266.590360][ T11] bridge_slave_0: left promiscuous mode [ 266.625842][ T29] audit: type=1400 audit(1724589582.693:463): avc: denied { connect } for pid=7751 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.643360][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.740284][ T29] audit: type=1400 audit(1724589582.693:464): avc: denied { bind } for pid=7751 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.827235][ T29] audit: type=1400 audit(1724589582.693:465): avc: denied { write } for pid=7751 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 372.552834][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 372.559900][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11/1:b..l [ 372.568137][ C0] rcu: (detected by 0, t=10502 jiffies, g=29681, q=508 ncpus=2) [ 372.575866][ C0] task:kworker/u8:0 state:R running task stack:22944 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 372.588680][ C0] Workqueue: netns cleanup_net [ 372.593500][ C0] Call Trace: [ 372.596789][ C0] [ 372.599730][ C0] __schedule+0xe37/0x5490 [ 372.604173][ C0] ? try_to_wake_up+0x5d7/0x13e0 [ 372.609134][ C0] ? __pfx_mark_lock+0x10/0x10 [ 372.613929][ C0] ? __pfx___schedule+0x10/0x10 [ 372.618803][ C0] ? mark_lock+0xb5/0xc60 [ 372.623150][ C0] ? find_held_lock+0x2d/0x110 [ 372.627938][ C0] ? mark_held_locks+0x9f/0xe0 [ 372.632721][ C0] preempt_schedule_irq+0x51/0x90 [ 372.637769][ C0] irqentry_exit+0x36/0x90 [ 372.642208][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.648205][ C0] RIP: 0010:queue_work_on+0x98/0x140 [ 372.653524][ C0] Code: e8 ed 06 35 00 48 85 ed 75 44 e8 73 04 35 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 d1 06 35 00 48 85 db 0f 85 8d 00 00 00 53 04 35 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 [ 372.673234][ C0] RSP: 0018:ffffc900001075b0 EFLAGS: 00000293 [ 372.679319][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81557558 [ 372.687304][ C0] RDX: ffff888017a83c00 RSI: ffffffff81557562 RDI: 0000000000000007 [ 372.695290][ C0] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 372.703271][ C0] R10: 0000000000000000 R11: ffff8880b9228a40 R12: 0000000000000001 [ 372.711255][ C0] R13: 0000000000000008 R14: ffff888016f41000 R15: ffff88806392e618 [ 372.719238][ C0] ? queue_work_on+0xd8/0x140 [ 372.723944][ C0] ? queue_work_on+0xe2/0x140 [ 372.728645][ C0] addr_event.constprop.0+0x391/0x560 [ 372.734035][ C0] inet6addr_event+0x117/0x180 [ 372.738830][ C0] ? __pfx_inet6addr_event+0x10/0x10 [ 372.744129][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 372.749169][ C0] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 372.754652][ C0] notifier_call_chain+0xb9/0x410 [ 372.759704][ C0] ? __pfx_inet6addr_event+0x10/0x10 [ 372.765003][ C0] atomic_notifier_call_chain+0x71/0x1c0 [ 372.770652][ C0] addrconf_ifdown.isra.0+0xf06/0x1af0 [ 372.776310][ C0] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 372.782222][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 372.788269][ C0] ? tls_dev_event+0xfe/0x1100 [ 372.793054][ C0] addrconf_notify+0x223/0x19d0 [ 372.797937][ C0] ? ip6mr_device_event+0x1bc/0x230 [ 372.803164][ C0] notifier_call_chain+0xb9/0x410 [ 372.808213][ C0] ? __pfx_addrconf_notify+0x10/0x10 [ 372.813523][ C0] call_netdevice_notifiers_info+0xbe/0x140 [ 372.819440][ C0] dev_close_many+0x333/0x6a0 [ 372.824139][ C0] ? __pfx_dev_close_many+0x10/0x10 [ 372.829443][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 372.834662][ C0] unregister_netdevice_many_notify+0x477/0x1e40 [ 372.841008][ C0] ? find_held_lock+0x2d/0x110 [ 372.845796][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 372.852577][ C0] ? mutex_is_locked+0x12/0x50 [ 372.857360][ C0] ? unregister_netdevice_queue+0x22f/0x3f0 [ 372.863277][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 372.869533][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 372.875792][ C0] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 372.882142][ C0] ? mutex_is_locked+0x12/0x50 [ 372.886923][ C0] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 372.892939][ C0] cleanup_net+0x58c/0xbb0 [ 372.897374][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 372.902342][ C0] process_one_work+0x9c5/0x1b40 [ 372.907315][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 372.912358][ C0] ? __pfx_process_one_work+0x10/0x10 [ 372.917758][ C0] ? assign_work+0x1a0/0x250 [ 372.922365][ C0] worker_thread+0x6c8/0xed0 [ 372.926983][ C0] ? __pfx_worker_thread+0x10/0x10 [ 372.932113][ C0] kthread+0x2c1/0x3a0 [ 372.936196][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.941415][ C0] ? __pfx_kthread+0x10/0x10 [ 372.946021][ C0] ret_from_fork+0x45/0x80 [ 372.950464][ C0] ? __pfx_kthread+0x10/0x10 [ 372.955067][ C0] ret_from_fork_asm+0x1a/0x30 [ 372.959857][ C0] [ 372.962892][ C0] rcu: rcu_preempt kthread starved for 10540 jiffies! g29681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 372.974199][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 372.984181][ C0] rcu: RCU grace-period kthread stack dump: [ 372.990072][ C0] task:rcu_preempt state:R running task stack:27872 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 373.001840][ C0] Call Trace: [ 373.005129][ C0] [ 373.008066][ C0] __schedule+0xe37/0x5490 [ 373.012505][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 373.017724][ C0] ? __pfx___schedule+0x10/0x10 [ 373.022594][ C0] ? schedule+0x298/0x350 [ 373.026947][ C0] ? __pfx_lock_release+0x10/0x10 [ 373.032014][ C0] ? __pfx___mod_timer+0x10/0x10 [ 373.036986][ C0] ? lock_acquire+0x1b1/0x560 [ 373.041692][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 373.047195][ C0] schedule+0xe7/0x350 [ 373.051289][ C0] schedule_timeout+0x136/0x2a0 [ 373.056166][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 373.061559][ C0] ? __pfx_process_timeout+0x10/0x10 [ 373.066861][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 373.072697][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 373.078181][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 373.083061][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 373.088642][ C0] ? rcu_gp_init+0xc82/0x1630 [ 373.093343][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 373.098567][ C0] rcu_gp_kthread+0x271/0x380 [ 373.103264][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 373.108485][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 373.113708][ C0] ? __kthread_parkme+0x148/0x220 [ 373.118764][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 373.123989][ C0] kthread+0x2c1/0x3a0 [ 373.128071][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.133293][ C0] ? __pfx_kthread+0x10/0x10 [ 373.137893][ C0] ret_from_fork+0x45/0x80 [ 373.142336][ C0] ? __pfx_kthread+0x10/0x10 [ 373.146934][ C0] ret_from_fork_asm+0x1a/0x30 [ 373.151722][ C0] [ 373.154745][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 373.161092][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc4-syzkaller-00268-g48fb4b3d9b43 #0 [ 373.171441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 373.181597][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 373.186902][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 98 a3 f2 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 28 cb aa 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 373.206620][ C0] RSP: 0018:ffffffff8da07d70 EFLAGS: 00000246 [ 373.212792][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b111a89 [ 373.220777][ C0] RDX: 0000000000000001 RSI: ffff888019af5800 RDI: ffff888019af5864 [ 373.228762][ C0] RBP: ffff888019af5864 R08: 0000000000000001 R09: ffffed1017246fd9 [ 373.236744][ C0] R10: ffff8880b9237ecb R11: 0000000000000000 R12: ffff88801a755800 [ 373.244736][ C0] R13: ffffffff8e9527c0 R14: 0000000000000000 R15: 0000000000000000 [ 373.252743][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 373.261697][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.268304][ C0] CR2: 00007f9909000020 CR3: 000000007b386000 CR4: 00000000003526f0 [ 373.276298][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.284282][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.292269][ C0] Call Trace: [ 373.295559][ C0] [ 373.298411][ C0] ? show_regs+0x8c/0xa0 [ 373.302683][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 373.309029][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 373.314254][ C0] ? rcu_sched_clock_irq+0x24f4/0x33e0 [ 373.319739][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 373.325398][ C0] ? __asan_memcpy+0x3c/0x60 [ 373.330005][ C0] ? __asan_memcpy+0x3c/0x60 [ 373.334879][ C0] ? update_process_times+0x175/0x220 [ 373.340275][ C0] ? __pfx_update_process_times+0x10/0x10 [ 373.346016][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 373.351586][ C0] ? update_wall_time+0x1c/0x40 [ 373.356523][ C0] ? tick_nohz_handler+0x376/0x530 [ 373.361657][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 373.367142][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 373.372541][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 373.378298][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 373.384484][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 373.389624][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 373.395800][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 373.401631][ C0] [ 373.404570][ C0] [ 373.407508][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.413687][ C0] ? ct_kernel_exit+0x139/0x190 [ 373.418561][ C0] ? acpi_safe_halt+0x1a/0x20 [ 373.423252][ C0] acpi_idle_enter+0xc5/0x160 [ 373.427944][ C0] cpuidle_enter_state+0x85/0x500 [ 373.432994][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 373.438825][ C0] cpuidle_enter+0x4e/0xa0 [ 373.443264][ C0] do_idle+0x313/0x3f0 [ 373.447352][ C0] ? __pfx_do_idle+0x10/0x10 [ 373.451971][ C0] cpu_startup_entry+0x4f/0x60 [ 373.456752][ C0] rest_init+0x16b/0x2b0 [ 373.461006][ C0] ? acpi_subsystem_init+0x133/0x180 [ 373.466311][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 373.471877][ C0] start_kernel+0x3df/0x4c0 [ 373.476660][ C0] x86_64_start_reservations+0x18/0x30 [ 373.482138][ C0] x86_64_start_kernel+0xb2/0xc0 [ 373.487095][ C0] common_startup_64+0x13e/0x148 [ 373.492054][ C0]