last executing test programs: 46.256417896s ago: executing program 0 (id=626): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000040)=""/49, 0x31) getdents(r0, 0xfffffffffffffffd, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(0x0, &(0x7f0000000240)) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x55) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 45.38166294s ago: executing program 2 (id=628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000080020c0001800800014004000000080006400000000c05000500020000010500010006000000e47b9b2f62e39da6b0efd63c02bd3010467cdc418f8f3a056264d170bc1c5a6dd0f5d9"], 0x70}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, 0x0) r3 = eventfd2(0x0, 0x800) read$eventfd(r3, &(0x7f0000003200), 0x8) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x3c}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2b}, {@in=@remote, 0x0, 0x32}, @in=@local, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x3abd}, 0x70bd22, 0xfffffffe, 0x2, 0x1, 0x3, 0x6f}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 44.555831629s ago: executing program 2 (id=631): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mlockall(0x1) mlockall(0x7) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = socket$inet(0x2, 0x1, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) memfd_create(&(0x7f0000000180)='\x00', 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="68eefb58efb4c97317339d4256c5b566bdbef4b1cb38c60e07c17c388d492e27a231463e35e18f211b6def67e9721d7ff5334d689b57cecfc592f1ee12f871dda66cd6d43243a1170e620418c9697e6a", 0x50}, {&(0x7f0000000240)="a2773f665a77e986e62daf553abd4e37c0a04e72716cf91308d909118e93e17944ce830dbb9c2ac4235ec3711a556af68afb9614e08ff61bfd3443af2afd96e3054f14ee8534c9f2aded2352346a8f9e2fa5ea17a4c1e9270d4d23fc0c2d65607150a9bedfb6c4ac12be733bdae7f4ddc46ed35e1c59de155c77a96df2d5d89b940d8fa4c377a586422527d581993d61aac6bbc62e4a9a330ce213e54b20b983d0238570cf1a6f5b04dce2f38b", 0xad}, {&(0x7f0000000040)="03c88bef47f218c5ff181b24b00a4c924fbe144de07aeca91c11754bcde4", 0x1e}, {&(0x7f00000000c0)="dbf1d8f7c6faa9c72e06668f4a9ddc09d52351e8ed9f8723d5237fbdf60ca119b2ecd7c330343c8231ba131d", 0x2c}], 0x4}, 0x40880) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="1ab7d5fbc954", 'veth0_to_team\x00'}}, 0x1e) 43.37599618s ago: executing program 0 (id=635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) epoll_create(0x207ffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x4, 0xfffff01c}, {0x6}]}, 0x10) 42.252367351s ago: executing program 0 (id=638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@private2, @in6=@empty, 0x4000, 0x6, 0x3, 0x3, 0x0, 0x180}, {@in6=@mcast2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x20000000) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x6, 0x5b, 0x1, 0x4d393631, 0x11, "45025c416e02783f8c95dd4aaaad46a066591c"}) 41.263772085s ago: executing program 0 (id=642): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x800}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) 41.141963903s ago: executing program 2 (id=645): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 40.340250863s ago: executing program 2 (id=646): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x3, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}, @ra]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) sendmmsg$sock(r3, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@bridge_getlink={0x20, 0x12, 0xdba2e9e4846a7f93, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x75800, 0x1}}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 40.261426856s ago: executing program 2 (id=647): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_exit\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) statx(0xffffffffffffffff, 0x0, 0x6000, 0x80, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) setsockopt$inet6_int(r1, 0x10d, 0xb, &(0x7f0000000080)=0xf, 0x4) write$char_usb(r0, &(0x7f0000000000)="632895db7000024ce6b3ea5a76eec21da4739415de639a75f27a5d74b3f4fa28648d64bf1eb31055b38579ec1437bcdd3efd4dda000000000000a841b2", 0x3d) 38.435887413s ago: executing program 1 (id=653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@private2, @in6=@empty, 0x4000, 0x6, 0x3, 0x3, 0x0, 0x180}, {@in6=@mcast2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x20000000) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x6, 0x5b, 0x1, 0x4d393631, 0x11, "45025c416e02783f8c95dd4aaaad46a066591c"}) 38.108551597s ago: executing program 0 (id=655): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x2ea, 0x0, r6}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000001900)=""/4099, 0x1003}], 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}}, 0x0) 37.247051369s ago: executing program 1 (id=657): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) read$msr(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x3, 0x91, 0x0, 0x0, 0xfd, 0x3}) r5 = socket$inet6(0xa, 0x80002, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2e, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) socket$inet6_sctp(0xa, 0x1, 0x84) 37.066256053s ago: executing program 2 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b0f, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x100, 0x100}}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0xfffffffffffffff9) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x81) io_uring_enter(r2, 0x4866, 0x0, 0xb, 0x0, 0x0) 36.520455917s ago: executing program 0 (id=659): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/12, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x240, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000580)=""/96) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xd7, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 34.691896184s ago: executing program 1 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x126b, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000018000000040040aca49055560131d4a9830fad960000020000000000000100"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000380), 0x3fb8, 0x1) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000100)) 33.798428755s ago: executing program 1 (id=663): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) r2 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r1, 0x0, 0x0, 0x7, 0x0, 0x1, {0x0, 0x0, r0}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 33.022122166s ago: executing program 1 (id=666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x8007c49, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2300, 0x0, 0x0, 0xffffffff, 0x1, 0x2, 0x0, 0x1ff}}) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 31.60031267s ago: executing program 1 (id=669): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4, 0x4}, [{0x3, 0xffffffc0, 0x8001, 0x7, 0x6, 0x101, 0x10000009, 0x8}]}, 0x58) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r6, 0x2}, 0x20) bind$tipc(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000002140)={0x3, 0x1, 0x3, "cad96945f5752bdb56d28b4046c8862c9a3d7268f7145394e0f9f8e7e70ef615", 0x47524247}) 21.763325506s ago: executing program 32 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b0f, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x100, 0x100}}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0xfffffffffffffff9) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x81) io_uring_enter(r2, 0x4866, 0x0, 0xb, 0x0, 0x0) 21.647089708s ago: executing program 3 (id=689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000008"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) r3 = syz_open_dev$loop(0x0, 0x8, 0x8080) ioctl$BLKREPORTZONE(r3, 0xc0101282, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) setuid(0xee00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) 21.445781612s ago: executing program 33 (id=659): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/12, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x240, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000580)=""/96) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xd7, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 20.859547041s ago: executing program 3 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x14) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000001800128008000100687372000c00028008000200", @ANYRES32=r3, @ANYBLOB="00000000000007ff7ae22d01449d0100010000000000957064"], 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x15) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xc}) 20.130575278s ago: executing program 3 (id=694): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(r2, 0x1) r6 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r6, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/121, 0x79}], 0x1, 0x80000000, 0x4) 19.176840662s ago: executing program 3 (id=696): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x2931890e, r1}, 0x33) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) time(0x0) r3 = socket(0x2b, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r10}}, 0x20) sendmsg$nl_route_sched(r3, 0x0, 0x400c084) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 18.434972837s ago: executing program 4 (id=697): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 18.412003744s ago: executing program 4 (id=698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'vxcan1\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x5000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.769751324s ago: executing program 3 (id=699): syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x79, 0x0, 0x0, 0x258}, @initr0, @exit]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) 17.088547213s ago: executing program 4 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/158, 0x9e}], 0x1}, 0x2}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 16.703787187s ago: executing program 3 (id=701): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000001) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000002ec0)={{0x12, 0x1, 0x300, 0xf, 0x9b, 0xe0, 0x20, 0x13b1, 0x41, 0xb069, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x8f, 0x4d, 0x1, 0xff, 0x42, 0x96, 0x0, [@hid_hid={0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x35b}}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0xc, 0x3}}]}}]}}]}}, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mlock2(&(0x7f0000076000/0x2000)=nil, 0x2000, 0x1) 16.52761685s ago: executing program 34 (id=669): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4, 0x4}, [{0x3, 0xffffffc0, 0x8001, 0x7, 0x6, 0x101, 0x10000009, 0x8}]}, 0x58) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r6, 0x2}, 0x20) bind$tipc(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000002140)={0x3, 0x1, 0x3, "cad96945f5752bdb56d28b4046c8862c9a3d7268f7145394e0f9f8e7e70ef615", 0x47524247}) 16.213324993s ago: executing program 4 (id=703): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240000a1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) lseek(r0, 0x1000000, 0x0) 15.306271953s ago: executing program 4 (id=704): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x8b) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) syz_emit_vhci(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='personality\x00') readv(r4, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) 15.275463792s ago: executing program 4 (id=705): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x1, 0xa43, 0x5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x800000000000005) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.509765107s ago: executing program 35 (id=701): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x8000000001) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000002ec0)={{0x12, 0x1, 0x300, 0xf, 0x9b, 0xe0, 0x20, 0x13b1, 0x41, 0xb069, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x8f, 0x4d, 0x1, 0xff, 0x42, 0x96, 0x0, [@hid_hid={0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x35b}}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0xc, 0x3}}]}}]}}]}}, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mlock2(&(0x7f0000076000/0x2000)=nil, 0x2000, 0x1) 0s ago: executing program 36 (id=705): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x1, 0xa43, 0x5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x800000000000005) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) kernel console output (not intermixed with test programs): th: hci2: command tx timeout [ 62.618012][ T5834] Bluetooth: hci1: command tx timeout [ 62.626849][ T5828] Bluetooth: hci3: command tx timeout [ 62.639251][ T5820] veth1_vlan: entered promiscuous mode [ 62.654495][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.663210][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.672221][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.682443][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.699057][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.731860][ T5825] veth0_macvtap: entered promiscuous mode [ 62.742468][ T5832] veth0_vlan: entered promiscuous mode [ 62.758998][ T5825] veth1_macvtap: entered promiscuous mode [ 62.789198][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.800185][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.811217][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.829452][ T5832] veth1_vlan: entered promiscuous mode [ 62.841993][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.855054][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.865940][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.891002][ T5820] veth0_macvtap: entered promiscuous mode [ 62.899326][ T5829] veth0_vlan: entered promiscuous mode [ 62.908319][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.917110][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.926127][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.936278][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.953364][ T5820] veth1_macvtap: entered promiscuous mode [ 62.962710][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.970955][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.988021][ T5829] veth1_vlan: entered promiscuous mode [ 63.030024][ T5832] veth0_macvtap: entered promiscuous mode [ 63.051653][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.062374][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.072787][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.083307][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.095583][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.109446][ T5832] veth1_macvtap: entered promiscuous mode [ 63.119396][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.128072][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.136105][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.147072][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.157823][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.170060][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.181370][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.193539][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.204158][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.212945][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.224960][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.251104][ T30] audit: type=1400 audit(1745296027.552:112): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.bQAnpS/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.270261][ T791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.279615][ T30] audit: type=1400 audit(1745296027.552:113): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.297785][ T791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.315885][ T30] audit: type=1400 audit(1745296027.562:114): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.bQAnpS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.317901][ T5829] veth0_macvtap: entered promiscuous mode [ 63.351027][ T30] audit: type=1400 audit(1745296027.562:115): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.374057][ T30] audit: type=1400 audit(1745296027.562:116): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.bQAnpS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.407356][ T30] audit: type=1400 audit(1745296027.562:117): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.bQAnpS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.438159][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.441522][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.450520][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.473990][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.485694][ T30] audit: type=1400 audit(1745296027.572:118): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.488554][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.511237][ T30] audit: type=1400 audit(1745296027.602:119): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.516256][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.539073][ T30] audit: type=1400 audit(1745296027.602:120): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="gadgetfs" ino=6836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.551618][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.583037][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.621587][ T5829] veth1_macvtap: entered promiscuous mode [ 63.636290][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.649221][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.650540][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.667337][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.686054][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.705251][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.715527][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.733856][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.751293][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.772415][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.782949][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.795906][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.805827][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.878488][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.889217][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.899196][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.912135][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.922072][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.933063][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.945706][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.956943][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.999754][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.195235][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.242774][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.255185][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.273753][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.290895][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.301400][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.311302][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.321891][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.333421][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.352397][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.365053][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.372363][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.386662][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.396175][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.405071][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.460690][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.480617][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.634483][ T5828] Bluetooth: hci0: command tx timeout [ 64.657598][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.684401][ T5834] Bluetooth: hci2: command tx timeout [ 64.689841][ T5834] Bluetooth: hci4: command tx timeout [ 64.697524][ T5822] Bluetooth: hci1: command tx timeout [ 64.698568][ T5828] Bluetooth: hci3: command tx timeout [ 64.708920][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.242314][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.266183][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.683884][ T5828] Bluetooth: hci0: command tx timeout [ 66.724926][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.753806][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.764079][ T5828] Bluetooth: hci1: command tx timeout [ 66.769482][ T5828] Bluetooth: hci2: command tx timeout [ 66.773790][ T5822] Bluetooth: hci3: command tx timeout [ 66.775043][ T5834] Bluetooth: hci4: command tx timeout [ 66.815962][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 66.815974][ T30] audit: type=1400 audit(1745296031.132:137): avc: denied { write } for pid=5930 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 66.836866][ T5938] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 66.942848][ T30] audit: type=1400 audit(1745296031.132:138): avc: denied { read write } for pid=5934 comm="syz.4.5" name="video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.974263][ T30] audit: type=1400 audit(1745296031.132:139): avc: denied { open } for pid=5934 comm="syz.4.5" path="/dev/video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.998513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.011951][ T30] audit: type=1400 audit(1745296031.132:140): avc: denied { ioctl } for pid=5934 comm="syz.4.5" path="/dev/video6" dev="devtmpfs" ino=938 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.041296][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.250667][ T5944] process 'syz.1.10' launched './file0' with NULL argv: empty string added [ 67.380182][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.395582][ T30] audit: type=1400 audit(1745296031.172:141): avc: denied { open } for pid=5930 comm="syz.0.8" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 67.419616][ T30] audit: type=1400 audit(1745296031.562:142): avc: denied { execute } for pid=5935 comm="syz.1.10" name="file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.442791][ T30] audit: type=1400 audit(1745296031.582:143): avc: denied { execute_no_trans } for pid=5935 comm="syz.1.10" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.595931][ T30] audit: type=1400 audit(1745296031.802:144): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.4SEnx4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.201525][ T30] audit: type=1400 audit(1745296032.072:145): avc: denied { create } for pid=5948 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.223442][ T30] audit: type=1400 audit(1745296032.502:146): avc: denied { create } for pid=5954 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.294077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.524564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.532766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 68.648095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.656912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.750497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.759295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.951897][ T5969] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 68.977490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.986729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.347438][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.434275][ T5985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5985 comm=syz.3.4 [ 69.576799][ T5870] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 69.630109][ T5870] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 69.670515][ T5870] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 69.717833][ T5870] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 69.742234][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.830651][ T5870] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.433940][ T5967] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 70.456239][ T5870] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 70.542372][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.766477][ T5967] batman_adv: batadv0: Adding interface: bridge1 [ 70.772848][ T5967] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.928789][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.936215][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.966737][ T5967] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 71.042573][ T971] usb 1-1: USB disconnect, device number 2 [ 71.513858][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.821058][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 71.858786][ T5873] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 71.873700][ T5873] usb 5-1: config 0 has no interface number 0 [ 71.886662][ T5873] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 72.937648][ T5873] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 72.950304][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.958949][ T5873] usb 5-1: Product: syz [ 72.968480][ T5873] usb 5-1: Manufacturer: syz [ 72.976211][ T5873] usb 5-1: SerialNumber: syz [ 72.992867][ T5873] usb 5-1: config 0 descriptor?? [ 73.137674][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 73.137689][ T30] audit: type=1400 audit(1745296037.442:172): avc: denied { create } for pid=6023 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.219873][ T30] audit: type=1400 audit(1745296037.442:173): avc: denied { setopt } for pid=6023 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.382393][ T30] audit: type=1400 audit(1745296037.442:174): avc: denied { write } for pid=6023 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.434525][ T30] audit: type=1400 audit(1745296037.562:175): avc: denied { read } for pid=6023 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.962205][ T30] audit: type=1400 audit(1745296037.732:176): avc: denied { write } for pid=6011 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.026172][ T30] audit: type=1400 audit(1745296038.342:177): avc: denied { setopt } for pid=6025 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.210591][ T5873] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.214/input/input5 [ 74.257645][ T30] audit: type=1400 audit(1745296038.542:178): avc: denied { read } for pid=6025 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.415114][ T5873] input: failed to attach handler mousedev to device input5, error: -5 [ 74.461212][ T30] audit: type=1400 audit(1745296038.562:179): avc: denied { read } for pid=5180 comm="acpid" name="mouse1" dev="devtmpfs" ino=2739 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.517198][ T5873] usb 5-1: USB disconnect, device number 2 [ 74.526705][ T30] audit: type=1400 audit(1745296038.572:180): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2739 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.620150][ T30] audit: type=1400 audit(1745296038.612:181): avc: denied { name_bind } for pid=6037 comm="syz.0.27" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 75.119193][ T6044] warning: `syz.3.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.345845][ T6065] mkiss: ax0: crc mode is auto. [ 76.547232][ T10] cfg80211: failed to load regulatory.db [ 79.561587][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 79.561615][ T30] audit: type=1800 audit(1745296043.862:200): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.38" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 80.962033][ T6105] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.084074][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 82.480377][ T30] audit: type=1400 audit(1745296046.252:201): avc: denied { getopt } for pid=6111 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.920411][ T971] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.293740][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 83.313265][ T30] audit: type=1326 audit(1745296047.622:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 83.338041][ T971] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 83.358508][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.366105][ T30] audit: type=1326 audit(1745296047.622:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 84.066790][ T30] audit: type=1326 audit(1745296047.622:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 84.383787][ T971] usb 1-1: config 0 has no interface number 0 [ 84.390013][ T971] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 84.400171][ T971] usb 1-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.434787][ T971] usb 1-1: string descriptor 0 read error: -71 [ 84.441110][ T971] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 84.441126][ T30] audit: type=1326 audit(1745296047.632:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 84.450922][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.473874][ T30] audit: type=1326 audit(1745296047.632:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 84.504896][ T30] audit: type=1326 audit(1745296047.632:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 84.585947][ T30] audit: type=1326 audit(1745296047.652:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7182b90087 code=0x7ffc0000 [ 84.609947][ T30] audit: type=1326 audit(1745296047.652:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7182b8fffc code=0x7ffc0000 [ 84.803395][ T971] usb 1-1: config 0 descriptor?? [ 84.836221][ T971] usb 1-1: can't set config #0, error -71 [ 84.995518][ T971] usb 1-1: USB disconnect, device number 3 [ 85.513751][ T30] audit: type=1326 audit(1745296047.652:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7182b8ff34 code=0x7ffc0000 [ 85.536999][ T30] audit: type=1326 audit(1745296047.652:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7182b8ff34 code=0x7ffc0000 [ 85.561223][ T30] audit: type=1326 audit(1745296047.652:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7182b8cdca code=0x7ffc0000 [ 85.607339][ T30] audit: type=1326 audit(1745296047.672:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 85.698471][ T30] audit: type=1326 audit(1745296047.672:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 86.178303][ T30] audit: type=1326 audit(1745296047.672:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 86.202271][ T30] audit: type=1326 audit(1745296047.672:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 86.335924][ T30] audit: type=1326 audit(1745296047.672:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6117 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7182b8e169 code=0x7ffc0000 [ 87.027345][ T6156] netlink: 'syz.4.57': attribute type 13 has an invalid length. [ 87.878878][ T6156] gretap0: refused to change device tx_queue_len [ 87.981356][ T6156] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 88.164481][ T6169] trusted_key: syz.2.60 sent an empty control message without MSG_MORE. [ 90.354072][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 90.354081][ T30] audit: type=1400 audit(1745296054.672:235): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 90.635757][ T30] audit: type=1400 audit(1745296054.932:236): avc: denied { block_suspend } for pid=6185 comm="syz.1.66" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.843501][ T30] audit: type=1326 audit(1745296055.152:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249d8e169 code=0x7ffc0000 [ 90.887260][ T30] audit: type=1326 audit(1745296055.162:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7249d8e169 code=0x7ffc0000 [ 90.893528][ T30] audit: type=1326 audit(1745296055.202:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249d8e169 code=0x7ffc0000 [ 90.894447][ T30] audit: type=1326 audit(1745296055.212:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249d8e169 code=0x7ffc0000 [ 90.898278][ T30] audit: type=1400 audit(1745296055.212:241): avc: denied { create } for pid=6192 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.899736][ T30] audit: type=1326 audit(1745296055.212:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f7249d8e169 code=0x7ffc0000 [ 91.249212][ T30] audit: type=1326 audit(1745296055.562:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249d8e169 code=0x7ffc0000 [ 91.249258][ T30] audit: type=1326 audit(1745296055.562:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6190 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7249d8e169 code=0x7ffc0000 [ 93.133840][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.306203][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 93.430186][ T57] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 93.674387][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.759319][ T57] pvrusb2: Hardware description: Terratec Grabster AV400 [ 93.775052][ T57] pvrusb2: ********** [ 93.779042][ T57] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 93.803778][ T57] pvrusb2: Important functionality might not be entirely working. [ 93.831946][ T57] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 93.867456][ T57] pvrusb2: ********** [ 94.711271][ T2335] pvrusb2: Invalid write control endpoint [ 95.699658][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 95.699671][ T30] audit: type=1400 audit(1745296060.012:257): avc: denied { execute } for pid=6235 comm="syz.3.80" path="/15/pids.events" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.739720][ T2335] pvrusb2: Invalid write control endpoint [ 95.871140][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 96.243789][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 96.261051][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 96.285590][ T30] audit: type=1400 audit(1745296060.112:258): avc: denied { create } for pid=6236 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.305712][ T2335] pvrusb2: Device being rendered inoperable [ 96.306277][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 96.335409][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 96.362982][ T2335] pvrusb2: Attached sub-driver cx25840 [ 96.503762][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.556955][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.652073][ T6250] xt_connbytes: Forcing CT accounting to be enabled [ 96.659048][ T6250] Cannot find add_set index 0 as target [ 96.995515][ T30] audit: type=1326 audit(1745296060.902:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf0b8e169 code=0x7ffc0000 [ 97.059793][ T30] audit: type=1326 audit(1745296060.902:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf0b8e169 code=0x7ffc0000 [ 97.087460][ T30] audit: type=1326 audit(1745296061.342:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7febf0b8e169 code=0x7ffc0000 [ 97.300718][ T30] audit: type=1326 audit(1745296061.352:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf0b8e169 code=0x7ffc0000 [ 97.341927][ T30] audit: type=1326 audit(1745296061.362:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf0b8e169 code=0x7ffc0000 [ 97.372614][ T30] audit: type=1326 audit(1745296061.362:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7febf0b8e169 code=0x7ffc0000 [ 97.999258][ T30] audit: type=1326 audit(1745296061.372:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febf0b8e169 code=0x7ffc0000 [ 98.022985][ T30] audit: type=1326 audit(1745296061.402:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febf0b90087 code=0x7ffc0000 [ 98.795245][ T6269] Bluetooth: MGMT ver 1.23 [ 99.828894][ T57] usb 5-1: USB disconnect, device number 3 [ 100.711476][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 100.711492][ T30] audit: type=1400 audit(1745296065.022:281): avc: denied { sqpoll } for pid=6284 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.880386][ T30] audit: type=1400 audit(1745296066.102:282): avc: denied { create } for pid=6300 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.913802][ T30] audit: type=1400 audit(1745296066.172:283): avc: denied { connect } for pid=6300 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.447454][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 102.492037][ T30] audit: type=1400 audit(1745296066.802:284): avc: denied { ioctl } for pid=6310 comm="syz.4.97" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 102.516504][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.528060][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 102.986481][ T30] audit: type=1400 audit(1745296067.262:285): avc: denied { read } for pid=6316 comm="syz.3.99" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.087188][ T6325] netlink: 'syz.3.99': attribute type 4 has an invalid length. [ 103.120126][ T30] audit: type=1400 audit(1745296067.262:286): avc: denied { open } for pid=6316 comm="syz.3.99" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.145061][ T30] audit: type=1400 audit(1745296067.262:287): avc: denied { ioctl } for pid=6316 comm="syz.3.99" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 103.170921][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.185546][ T30] audit: type=1400 audit(1745296067.332:288): avc: denied { ioctl } for pid=6316 comm="syz.3.99" path="socket:[7961]" dev="sockfs" ino=7961 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.204233][ T57] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.220008][ T30] audit: type=1326 audit(1745296067.402:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6319 comm="syz.2.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde5cd8e169 code=0x0 [ 103.250145][ T30] audit: type=1400 audit(1745296067.562:290): avc: denied { read write } for pid=6319 comm="syz.2.100" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 103.395455][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.410565][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.426678][ T57] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.446518][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.916260][ T57] usb 2-1: config 0 descriptor?? [ 105.831641][ T57] usb 2-1: string descriptor 0 read error: -22 [ 106.386118][ T57] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input7 [ 106.784696][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 106.784710][ T30] audit: type=1400 audit(1745296071.102:297): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2747 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.831064][ T57] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input8 [ 106.867379][ T6322] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.915432][ T57] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input9 [ 107.050859][ T57] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0001/input/input10 [ 107.070518][ T57] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 107.085926][ T57] usb 2-1: USB disconnect, device number 2 [ 109.306299][ T30] audit: type=1400 audit(1745296073.612:298): avc: denied { write } for pid=6368 comm="syz.3.113" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.448344][ T6369] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.234958][ T6369] kvm: pic: non byte read [ 110.241559][ T5835] udevd[5835]: failed to send result of seq 11148 to main daemon: Connection refused [ 110.804899][ T6369] kvm: pic: level sensitive irq not supported [ 110.804979][ T6369] kvm: pic: non byte read [ 110.819076][ T6369] kvm: pic: level sensitive irq not supported [ 110.819150][ T6369] kvm: pic: non byte read [ 110.999596][ T6382] fuse: Bad value for 'fd' [ 112.543740][ T30] audit: type=1800 audit(1745296076.852:299): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.110" name="bus" dev="ramfs" ino=8960 res=0 errno=0 [ 112.628931][ T6394] lo speed is unknown, defaulting to 1000 [ 112.635081][ T6394] lo speed is unknown, defaulting to 1000 [ 112.645171][ T6394] lo speed is unknown, defaulting to 1000 [ 112.665888][ T6394] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.705994][ T6394] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 112.789236][ T6394] lo speed is unknown, defaulting to 1000 [ 112.802399][ T6394] lo speed is unknown, defaulting to 1000 [ 112.815185][ T6394] lo speed is unknown, defaulting to 1000 [ 112.827868][ T6394] lo speed is unknown, defaulting to 1000 [ 112.840475][ T6394] lo speed is unknown, defaulting to 1000 [ 113.017089][ T30] audit: type=1400 audit(1745296076.932:300): avc: denied { create } for pid=6389 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.043711][ T30] audit: type=1400 audit(1745296076.942:301): avc: denied { write } for pid=6389 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.461684][ T30] audit: type=1400 audit(1745296077.772:302): avc: denied { getopt } for pid=6396 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.810995][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.004590][ T5873] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 114.143024][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.310313][ T5873] usb 3-1: Product: syz [ 114.335947][ T30] audit: type=1400 audit(1745296078.642:303): avc: denied { create } for pid=6409 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.885950][ T5873] usb 3-1: Manufacturer: syz [ 114.895053][ T5873] usb 3-1: SerialNumber: syz [ 114.913466][ T5873] usb 3-1: config 0 descriptor?? [ 115.542025][ T5873] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 115.579335][ T30] audit: type=1400 audit(1745296079.582:304): avc: denied { write } for pid=6409 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.639281][ T5873] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 115.653087][ T5873] usb-storage 3-1:0.0: USB Mass Storage device detected [ 115.990458][ T6421] xt_connbytes: Forcing CT accounting to be enabled [ 115.999454][ T6421] Cannot find add_set index 0 as target [ 116.253858][ T5873] usb-storage 3-1:0.0: device ignored [ 116.278935][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.125'. [ 116.288581][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 116.298446][ T6426] ======================================================= [ 116.298446][ T6426] WARNING: The mand mount option has been deprecated and [ 116.298446][ T6426] and is ignored by this kernel. Remove the mand [ 116.298446][ T6426] option from the mount to silence this warning. [ 116.298446][ T6426] ======================================================= [ 116.333798][ T6426] new mount options do not match the existing superblock, will be ignored [ 116.879147][ T30] audit: type=1400 audit(1745296080.702:305): avc: denied { mount } for pid=6397 comm="syz.2.121" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.211806][ T30] audit: type=1400 audit(1745296081.332:306): avc: denied { setopt } for pid=6422 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.423121][ T30] audit: type=1400 audit(1745296081.382:307): avc: denied { map } for pid=6422 comm="syz.3.126" path="socket:[9030]" dev="sockfs" ino=9030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.804445][ T30] audit: type=1400 audit(1745296081.422:308): avc: denied { read accept } for pid=6422 comm="syz.3.126" path="socket:[9030]" dev="sockfs" ino=9030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.828434][ T30] audit: type=1400 audit(1745296081.492:309): avc: denied { append } for pid=6422 comm="syz.3.126" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.851250][ T30] audit: type=1400 audit(1745296082.022:310): avc: denied { name_connect } for pid=6436 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 118.266454][ T9] usb 3-1: USB disconnect, device number 2 [ 118.690435][ T30] audit: type=1400 audit(1745296082.592:311): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 121.350663][ T30] audit: type=1400 audit(1745296085.662:312): avc: denied { ioctl } for pid=6478 comm="syz.0.138" path="socket:[9083]" dev="sockfs" ino=9083 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 121.478655][ T6486] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 121.534096][ T6490] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.543145][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 121.557646][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'. [ 121.887378][ T6497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.934539][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.140'. [ 121.958868][ T6494] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 122.066304][ T6494] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 122.076534][ T6494] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 122.085764][ T6494] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 122.593032][ T6494] bond1: (slave geneve2): making interface the new active one [ 122.627200][ T6494] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 122.638355][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.632189][ T30] audit: type=1400 audit(1745296087.942:313): avc: denied { create } for pid=6506 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.945549][ T6533] mkiss: ax0: crc mode is auto. [ 124.729876][ T30] audit: type=1400 audit(1745296089.042:314): avc: denied { mount } for pid=6534 comm="syz.4.149" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.793692][ T30] audit: type=1400 audit(1745296089.042:315): avc: denied { setattr } for pid=6534 comm="syz.4.149" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.887603][ T30] audit: type=1400 audit(1745296089.042:316): avc: denied { write } for pid=6534 comm="syz.4.149" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.938747][ T30] audit: type=1400 audit(1745296089.042:317): avc: denied { open } for pid=6534 comm="syz.4.149" path="/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.005771][ T30] audit: type=1400 audit(1745296089.042:318): avc: denied { unmount } for pid=6534 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.033722][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.209004][ T5907] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.245761][ T5907] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 125.627775][ T5907] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 125.638461][ T5907] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.650127][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.688224][ T30] audit: type=1400 audit(1745296090.002:319): avc: denied { sys_module } for pid=6542 comm="syz.3.152" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 125.738475][ T5907] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.933511][ T5907] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 126.047899][ T6537] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 126.636557][ T30] audit: type=1400 audit(1745296090.952:320): avc: denied { create } for pid=6542 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.136362][ T6537] bond3: entered promiscuous mode [ 127.852814][ T6537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.859728][ T30] audit: type=1400 audit(1745296090.982:321): avc: denied { connect } for pid=6542 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.127483][ T6555] bond3: (slave bridge2): making interface the new active one [ 128.136977][ T30] audit: type=1400 audit(1745296090.992:322): avc: denied { write } for pid=6542 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.796420][ T6555] bridge2: entered promiscuous mode [ 128.816752][ T6555] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 128.888421][ T5907] usb 1-1: USB disconnect, device number 4 [ 129.055269][ T30] audit: type=1400 audit(1745296093.322:323): avc: denied { mount } for pid=6561 comm="syz.1.156" name="/" dev="rpc_pipefs" ino=9190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 130.101103][ T30] audit: type=1400 audit(1745296093.742:324): avc: denied { create } for pid=6567 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.543254][ T30] audit: type=1400 audit(1745296093.762:325): avc: denied { bind } for pid=6567 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.563995][ T30] audit: type=1400 audit(1745296093.762:326): avc: denied { name_bind } for pid=6567 comm="syz.2.158" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 130.568022][ T6580] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 130.584642][ T30] audit: type=1400 audit(1745296093.762:327): avc: denied { node_bind } for pid=6567 comm="syz.2.158" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 130.584680][ T30] audit: type=1400 audit(1745296094.332:328): avc: denied { listen } for pid=6567 comm="syz.2.158" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.584714][ T30] audit: type=1400 audit(1745296094.362:329): avc: denied { setopt } for pid=6567 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.879600][ T6584] lo speed is unknown, defaulting to 1000 [ 130.904173][ T30] audit: type=1400 audit(1745296094.372:330): avc: denied { connect } for pid=6567 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.030553][ T30] audit: type=1400 audit(1745296094.372:331): avc: denied { name_connect } for pid=6567 comm="syz.2.158" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 131.051755][ T6580] netlink: 'syz.0.161': attribute type 4 has an invalid length. [ 131.175750][ T30] audit: type=1400 audit(1745296094.472:332): avc: denied { write } for pid=6567 comm="syz.2.158" laddr=172.20.20.10 lport=34528 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 132.066964][ T6600] ALSA: mixer_oss: invalid OSS volume 'P}V' [ 132.316315][ T971] kernel write not supported for file /cpu/0/msr (pid: 971 comm: kworker/0:2) [ 132.368071][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.374514][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.003796][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 136.003813][ T30] audit: type=1400 audit(1745296098.952:341): avc: denied { write } for pid=6620 comm="syz.0.180" path="socket:[10334]" dev="sockfs" ino=10334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.211760][ T6613] kvm: kvm [6612]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 138.163459][ T30] audit: type=1400 audit(1745296102.472:342): avc: denied { write } for pid=6626 comm="syz.2.174" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.773791][ T30] audit: type=1400 audit(1745296103.692:343): avc: denied { write } for pid=6641 comm="syz.4.176" path="socket:[10357]" dev="sockfs" ino=10357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.015812][ T30] audit: type=1400 audit(1745296105.112:344): avc: denied { read write } for pid=6652 comm="syz.0.179" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.202812][ T30] audit: type=1400 audit(1745296105.112:345): avc: denied { open } for pid=6652 comm="syz.0.179" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.533744][ T30] audit: type=1400 audit(1745296105.752:346): avc: denied { create } for pid=6663 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.232142][ T6648] syz.2.178 uses obsolete (PF_INET,SOCK_PACKET) [ 142.246216][ T30] audit: type=1400 audit(1745296106.562:347): avc: denied { ioctl } for pid=6645 comm="syz.2.178" path="socket:[10378]" dev="sockfs" ino=10378 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.329698][ T5834] Bluetooth: hci3: command tx timeout [ 143.968354][ T30] audit: type=1400 audit(1745296108.282:348): avc: denied { connect } for pid=6685 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.158655][ T30] audit: type=1400 audit(1745296108.282:349): avc: denied { write } for pid=6685 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.081582][ T30] audit: type=1400 audit(1745296108.572:350): avc: denied { read } for pid=6685 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.533015][ T30] audit: type=1400 audit(1745296109.822:351): avc: denied { bind } for pid=6702 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.631047][ T30] audit: type=1400 audit(1745296109.822:352): avc: denied { ioctl } for pid=6702 comm="syz.1.194" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.861188][ T6709] netlink: 132 bytes leftover after parsing attributes in process `syz.4.192'. [ 146.533769][ T30] audit: type=1400 audit(1745296110.782:353): avc: denied { getopt } for pid=6707 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.802020][ T6704] lo speed is unknown, defaulting to 1000 [ 147.222754][ T6722] netlink: 788 bytes leftover after parsing attributes in process `syz.0.197'. [ 148.137989][ T6731] FAT-fs (nullb0): bogus number of reserved sectors [ 148.144758][ T6731] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 148.553788][ T30] audit: type=1400 audit(1745296112.442:354): avc: denied { mounton } for pid=6724 comm="syz.2.198" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 149.826388][ T30] audit: type=1400 audit(1745296113.212:355): avc: denied { bind } for pid=6728 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.902343][ T30] audit: type=1400 audit(1745296113.212:356): avc: denied { listen } for pid=6728 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.934784][ T30] audit: type=1400 audit(1745296113.212:357): avc: denied { connect } for pid=6728 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.222901][ T6747] netlink: 'syz.2.202': attribute type 23 has an invalid length. [ 152.877038][ T6776] hugetlbfs: syz.3.210 (6776): Using mlock ulimits for SHM_HUGETLB is obsolete [ 153.098148][ T6779] lo speed is unknown, defaulting to 1000 [ 155.583850][ T5871] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.713595][ T6791] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 155.841981][ T5871] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 155.861884][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.870116][ T5871] usb 1-1: Product: syz [ 155.876807][ T5871] usb 1-1: Manufacturer: syz [ 155.881519][ T5871] usb 1-1: SerialNumber: syz [ 155.901674][ T5871] r8152-cfgselector 1-1: Unknown version 0x0000 [ 155.941129][ T30] audit: type=1400 audit(1745296120.232:358): avc: denied { mount } for pid=6792 comm="syz.4.216" name="/" dev="autofs" ino=10614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 155.983707][ T5871] r8152-cfgselector 1-1: config 0 descriptor?? [ 156.186202][ T30] audit: type=1400 audit(1745296120.502:359): avc: denied { ioctl } for pid=6797 comm="syz.1.218" path="socket:[9790]" dev="sockfs" ino=9790 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 156.642292][ T30] audit: type=1400 audit(1745296120.502:360): avc: denied { connect } for pid=6797 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 157.571300][ T6811] Invalid ELF header magic: != ELF [ 157.600594][ T30] audit: type=1400 audit(1745296121.782:361): avc: denied { module_load } for pid=6803 comm="syz.1.220" path="/41/bus" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 157.936366][ T5871] r8152-cfgselector 1-1: Unknown version 0x0000 [ 157.945848][ T5871] r8152-cfgselector 1-1: bad CDC descriptors [ 157.981571][ T30] audit: type=1400 audit(1745296121.882:362): avc: denied { bind } for pid=6808 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.011708][ T5871] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 158.335963][ T30] audit: type=1400 audit(1745296122.472:363): avc: denied { create } for pid=6816 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 160.452513][ T6843] lo speed is unknown, defaulting to 1000 [ 161.414103][ T30] audit: type=1400 audit(1745296125.722:364): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.643779][ T30] audit: type=1400 audit(1745296126.032:365): avc: denied { write } for pid=6851 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.691557][ T30] audit: type=1400 audit(1745296128.002:366): avc: denied { create } for pid=6850 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 164.142555][ T6888] netlink: 788 bytes leftover after parsing attributes in process `syz.4.234'. [ 164.595836][ T30] audit: type=1400 audit(1745296128.042:367): avc: denied { sys_admin } for pid=6850 comm="syz.1.231" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 164.802463][ T30] audit: type=1400 audit(1745296129.072:368): avc: denied { sys_ptrace } for pid=6850 comm="syz.1.231" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 164.981156][ T30] audit: type=1400 audit(1745296129.272:369): avc: denied { setattr } for pid=6908 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 166.438658][ T30] audit: type=1400 audit(1745296130.742:370): avc: denied { execute_no_trans } for pid=6914 comm="syz.2.237" path="/45/file0" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.913356][ T30] audit: type=1400 audit(1745296131.222:371): avc: denied { unlink } for pid=6927 comm="syz.3.241" name="#1" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 166.937934][ T6931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.404316][ T30] audit: type=1400 audit(1745296131.262:372): avc: denied { mount } for pid=6927 comm="syz.3.241" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 170.403782][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.555013][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 170.608886][ T5873] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.628757][ T5873] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.667248][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.701539][ T5873] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 170.803127][ T6949] bridge_slave_0: left allmulticast mode [ 170.808997][ T6949] bridge_slave_0: left promiscuous mode [ 170.815687][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.827660][ T6949] bridge_slave_1: left allmulticast mode [ 170.833305][ T6949] bridge_slave_1: left promiscuous mode [ 170.847010][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.847149][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.890270][ T5873] usb 2-1: config 0 descriptor?? [ 170.929076][ T6953] netlink: 788 bytes leftover after parsing attributes in process `syz.3.247'. [ 171.296014][ T6949] bond0: (slave bond_slave_0): Releasing backup interface [ 171.327185][ T6949] bond0: (slave bond_slave_1): Releasing backup interface [ 171.367592][ T6949] team0: Port device team_slave_0 removed [ 171.377221][ T30] audit: type=1400 audit(1745296135.692:373): avc: denied { bind } for pid=6948 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.408430][ T6949] team0: Port device team_slave_1 removed [ 171.415498][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.422901][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.431956][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.449321][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.640276][ T6951] team0: Mode changed to "loadbalance" [ 172.038191][ T5873] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 172.054259][ T5873] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 172.065677][ T5873] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 172.080016][ T5873] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 172.172564][ T5873] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 172.181188][ T5873] mcp2200 0003:04D8:00DF.0002: unknown main item tag 0x0 [ 172.195764][ T5873] mcp2200 0003:04D8:00DF.0002: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 172.275433][ T5873] usb 2-1: USB disconnect, device number 3 [ 172.492916][ T30] audit: type=1400 audit(1745296136.672:374): avc: denied { kexec_image_load } for pid=6966 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 172.719836][ T30] audit: type=1400 audit(1745296137.022:375): avc: denied { ioctl } for pid=6971 comm="syz.4.254" path="socket:[10858]" dev="sockfs" ino=10858 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.720651][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 172.842038][ T30] audit: type=1400 audit(1745296137.022:376): avc: denied { setopt } for pid=6971 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.139364][ T6980] mmap: syz.2.256 (6980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.203968][ T6999] netlink: 'syz.4.260': attribute type 4 has an invalid length. [ 175.266238][ T7000] netlink: 788 bytes leftover after parsing attributes in process `syz.2.261'. [ 176.676403][ T7004] veth3: entered promiscuous mode [ 176.682390][ T7004] veth3: entered allmulticast mode [ 178.916193][ T57] IPVS: starting estimator thread 0... [ 178.942947][ T7013] kvm: kvm [7008]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 178.955563][ T7013] kvm: kvm [7008]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfa4d [ 179.291364][ T7013] kvm: kvm [7008]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xba4d [ 179.337641][ T7013] kvm: kvm [7008]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 179.347741][ T7013] kvm: kvm [7008]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x4000 [ 179.413875][ T7034] IPVS: using max 40 ests per chain, 96000 per kthread [ 179.507443][ T7042] lo speed is unknown, defaulting to 1000 [ 180.257918][ T30] audit: type=1400 audit(1745296144.572:377): avc: denied { name_bind } for pid=7044 comm="syz.3.274" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 180.526290][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 181.137041][ T30] audit: type=1400 audit(1745296145.402:378): avc: denied { accept } for pid=7063 comm="syz.3.278" lport=40215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 181.794100][ T7067] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 182.605109][ T30] audit: type=1400 audit(1745296146.792:379): avc: denied { write } for pid=7072 comm="syz.1.280" name="route" dev="proc" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 182.984958][ T7084] vlan2: entered promiscuous mode [ 182.990209][ T7084] vlan2: entered allmulticast mode [ 183.143720][ T7084] hsr_slave_1: entered allmulticast mode [ 183.226011][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 183.602491][ T30] audit: type=1400 audit(1745296147.532:380): avc: denied { create } for pid=7085 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.692518][ T30] audit: type=1400 audit(1745296147.532:381): avc: denied { write } for pid=7085 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.722719][ T7096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.285'. [ 183.731636][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 185.824243][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 185.833400][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 185.851199][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 185.862571][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 189.807737][ T30] audit: type=1400 audit(1745296154.122:382): avc: denied { create } for pid=7150 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 190.325788][ T30] audit: type=1400 audit(1745296154.642:383): avc: denied { watch } for pid=7158 comm="syz.3.300" path="/63" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 191.247644][ T5822] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 191.923873][ T30] audit: type=1400 audit(1745296156.232:384): avc: denied { write } for pid=7172 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 191.958517][ T30] audit: type=1400 audit(1745296156.232:385): avc: denied { nlmsg_write } for pid=7172 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.822263][ T30] audit: type=1400 audit(1745296157.132:386): avc: denied { read } for pid=7189 comm="syz.0.308" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.895598][ T30] audit: type=1400 audit(1745296157.132:387): avc: denied { open } for pid=7189 comm="syz.0.308" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.104691][ T7190] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 193.112498][ T7190] netlink: 224 bytes leftover after parsing attributes in process `syz.0.308'. [ 193.725700][ T30] audit: type=1400 audit(1745296158.042:388): avc: denied { create } for pid=7196 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 193.746857][ T30] audit: type=1400 audit(1745296158.042:389): avc: denied { ioctl } for pid=7196 comm="syz.3.309" path="socket:[11156]" dev="sockfs" ino=11156 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 193.772318][ T30] audit: type=1400 audit(1745296158.042:390): avc: denied { ioctl } for pid=7196 comm="syz.3.309" path="socket:[11166]" dev="sockfs" ino=11166 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.800786][ T7198] netlink: 'syz.3.309': attribute type 10 has an invalid length. [ 193.816482][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.827149][ T7198] hsr_slave_0: left promiscuous mode [ 193.834764][ T30] audit: type=1400 audit(1745296158.152:391): avc: denied { setattr } for pid=7196 comm="syz.3.309" path="/dev/qrtr-tun" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.858344][ T7198] hsr_slave_1: left promiscuous mode [ 195.346049][ T5822] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 195.357519][ T5822] Bluetooth: hci2: Injecting HCI hardware error event [ 195.443769][ T5822] Bluetooth: hci2: hardware error 0x00 [ 195.449455][ T30] audit: type=1400 audit(1745296159.662:392): avc: denied { setopt } for pid=7204 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 196.405098][ T30] audit: type=1400 audit(1745296160.662:393): avc: denied { create } for pid=7222 comm="syz.1.319" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 196.538372][ T30] audit: type=1400 audit(1745296160.662:394): avc: denied { read } for pid=7222 comm="syz.1.319" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 197.689765][ T30] audit: type=1400 audit(1745296160.662:395): avc: denied { open } for pid=7222 comm="syz.1.319" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 197.713884][ T30] audit: type=1400 audit(1745296160.662:396): avc: denied { ioctl } for pid=7222 comm="syz.1.319" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 197.754429][ T5822] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 197.790531][ T30] audit: type=1400 audit(1745296162.092:397): avc: denied { unlink } for pid=5825 comm="syz-executor" name="file0" dev="tmpfs" ino=326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 198.078333][ T30] audit: type=1400 audit(1745296162.382:398): avc: denied { write } for pid=7241 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 200.254919][ T971] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 200.305527][ T30] audit: type=1400 audit(1745296164.622:399): avc: denied { read } for pid=7266 comm="syz.0.330" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 200.362792][ T30] audit: type=1400 audit(1745296164.622:400): avc: denied { open } for pid=7266 comm="syz.0.330" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 200.433766][ T30] audit: type=1400 audit(1745296164.622:401): avc: denied { ioctl } for pid=7266 comm="syz.0.330" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 200.458679][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.808037][ T971] usb 2-1: Using ep0 maxpacket: 32 [ 200.815063][ T971] usb 2-1: config 0 has no interfaces? [ 200.820764][ T971] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 200.829956][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.840664][ T971] usb 2-1: config 0 descriptor?? [ 201.300497][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 201.318862][ T7277] Zero length message leads to an empty skb [ 201.352487][ T7259] dummy0: entered promiscuous mode [ 201.365970][ T7259] macvtap1: entered promiscuous mode [ 201.366078][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 201.371403][ T7259] macvtap1: entered allmulticast mode [ 201.486928][ T7259] dummy0: entered allmulticast mode [ 201.552552][ T7278] dummy0: left allmulticast mode [ 201.559968][ T7278] dummy0: left promiscuous mode [ 201.598691][ T24] usb 2-1: USB disconnect, device number 4 [ 204.623892][ T30] audit: type=1400 audit(1745296168.432:402): avc: denied { mount } for pid=7299 comm="syz.2.339" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 204.990312][ T30] audit: type=1400 audit(1745296169.072:403): avc: denied { listen } for pid=7304 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.571552][ T30] audit: type=1400 audit(1745296169.782:404): avc: denied { read } for pid=7316 comm="syz.1.344" lport=36008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.175841][ T30] audit: type=1400 audit(1745296174.482:405): avc: denied { setopt } for pid=7380 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.439462][ T30] audit: type=1326 audit(1745296174.752:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7386 comm="syz.3.354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febf0b8e169 code=0x0 [ 213.593169][ T7412] fuse: Unknown parameter './file0' [ 215.523754][ T30] audit: type=1400 audit(1745296179.802:407): avc: denied { ioctl } for pid=7431 comm="syz.3.364" path="socket:[11837]" dev="sockfs" ino=11837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.572994][ T30] audit: type=1400 audit(1745296179.822:408): avc: denied { getopt } for pid=7431 comm="syz.3.364" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.515069][ T30] audit: type=1326 audit(1745296181.802:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.2.372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde5cd8e169 code=0x0 [ 218.323043][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 218.501027][ T30] audit: type=1400 audit(1745296182.642:410): avc: denied { bind } for pid=7460 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.760823][ T30] audit: type=1400 audit(1745296183.072:411): avc: denied { create } for pid=7472 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.285898][ T7478] netlink: 'syz.1.379': attribute type 21 has an invalid length. [ 219.710710][ T7478] netlink: 132 bytes leftover after parsing attributes in process `syz.1.379'. [ 222.325472][ T30] audit: type=1400 audit(1745296186.632:412): avc: denied { shutdown } for pid=7489 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.581203][ T30] audit: type=1400 audit(1745296186.872:413): avc: denied { connect } for pid=7472 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.205796][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'. [ 225.998020][ T30] audit: type=1400 audit(1745296189.792:414): avc: denied { create } for pid=7544 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 226.357369][ T30] audit: type=1400 audit(1745296189.792:415): avc: denied { write } for pid=7544 comm="syz.0.396" path="socket:[12029]" dev="sockfs" ino=12029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 227.714311][ T30] audit: type=1400 audit(1745296192.022:416): avc: denied { setopt } for pid=7567 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.801211][ T30] audit: type=1400 audit(1745296192.112:417): avc: denied { bind } for pid=7567 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.423845][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 229.453713][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 233.852756][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 235.591542][ T7636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.108193][ T7636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.409233][ T30] audit: type=1400 audit(1745296202.652:418): avc: denied { nlmsg_write } for pid=7671 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 240.132960][ T7636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.291218][ T30] audit: type=1400 audit(1745296204.602:419): avc: denied { lock } for pid=7685 comm="syz.4.431" path="socket:[12275]" dev="sockfs" ino=12275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.989401][ T30] audit: type=1400 audit(1745296205.292:420): avc: denied { read write } for pid=7691 comm="syz.2.433" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 241.386910][ T30] audit: type=1400 audit(1745296205.292:421): avc: denied { open } for pid=7691 comm="syz.2.433" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 241.520813][ T7636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.075302][ T7636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.096990][ T7636] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.134059][ T30] audit: type=1400 audit(1745296206.432:422): avc: denied { write } for pid=7702 comm="syz.2.435" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.186774][ T7636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.201081][ T7636] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.209359][ T30] audit: type=1400 audit(1745296206.472:423): avc: denied { ioctl } for pid=7702 comm="syz.2.435" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.964945][ T30] audit: type=1326 audit(1745296207.172:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.4.437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7249d8e169 code=0x0 [ 243.266023][ T30] audit: type=1400 audit(1745296207.582:425): avc: denied { read } for pid=7717 comm="syz.1.439" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 243.429038][ T30] audit: type=1400 audit(1745296207.582:426): avc: denied { open } for pid=7717 comm="syz.1.439" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 244.927173][ T30] audit: type=1400 audit(1745296209.242:427): avc: denied { write } for pid=7715 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 247.935397][ T30] audit: type=1400 audit(1745296212.252:428): avc: denied { bind } for pid=7746 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 249.643891][ T30] audit: type=1400 audit(1745296213.562:429): avc: denied { create } for pid=7754 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 249.707475][ T30] audit: type=1400 audit(1745296213.572:430): avc: denied { write } for pid=7754 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 249.749758][ T30] audit: type=1326 audit(1745296214.062:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7765 comm="syz.2.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde5cd8e169 code=0x0 [ 249.948997][ T7771] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 1, id = 0 [ 252.569462][ T30] audit: type=1400 audit(1745296216.882:432): avc: denied { getopt } for pid=7784 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.589710][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.673980][ T7804] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 253.683529][ T30] audit: type=1400 audit(1745296217.992:433): avc: denied { relabelto } for pid=7803 comm="syz.4.461" name="94" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 253.708786][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.718884][ T30] audit: type=1400 audit(1745296217.992:434): avc: denied { associate } for pid=7803 comm="syz.4.461" name="94" dev="tmpfs" ino=498 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex" [ 253.745014][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.102168][ T7804] lo speed is unknown, defaulting to 1000 [ 255.264165][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.273671][ T30] audit: type=1400 audit(1745296218.752:435): avc: denied { watch } for pid=7807 comm="syz.1.462" path="/85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 256.430761][ T30] audit: type=1400 audit(1745296218.752:436): avc: denied { watch_sb watch_reads } for pid=7807 comm="syz.1.462" path="/85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 256.552454][ T30] audit: type=1400 audit(1745296220.852:437): avc: denied { write } for pid=5832 comm="syz-executor" name="94" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 256.582711][ T30] audit: type=1400 audit(1745296220.852:438): avc: denied { remove_name } for pid=5832 comm="syz-executor" name="binderfs" dev="tmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 256.812298][ T30] audit: type=1400 audit(1745296220.862:439): avc: denied { rmdir } for pid=5832 comm="syz-executor" name="94" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 257.149788][ T30] audit: type=1400 audit(1745296221.102:440): avc: denied { ioctl } for pid=7816 comm="syz.0.465" path="socket:[13159]" dev="sockfs" ino=13159 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 258.022997][ T7836] overlayfs: failed to clone upperpath [ 260.094404][ T30] audit: type=1400 audit(1745296223.682:441): avc: denied { setopt } for pid=7847 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.196304][ T30] audit: type=1400 audit(1745296224.462:442): avc: denied { create } for pid=7840 comm="syz.3.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 260.801769][ T30] audit: type=1400 audit(1745296224.562:443): avc: denied { getopt } for pid=7839 comm="syz.4.471" laddr=172.20.20.11 lport=34642 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 261.851625][ T30] audit: type=1400 audit(1745296226.162:444): avc: denied { read } for pid=7867 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 262.035419][ T30] audit: type=1400 audit(1745296226.352:445): avc: denied { watch_reads } for pid=7867 comm="syz.0.477" path="/88" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.636590][ T971] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 263.722004][ T30] audit: type=1400 audit(1745296228.032:446): avc: denied { setopt } for pid=7884 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.833656][ T971] usb 1-1: Using ep0 maxpacket: 16 [ 263.862031][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 263.873193][ T971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 263.893386][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.141601][ T971] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 264.153489][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.174141][ T971] usb 1-1: config 0 descriptor?? [ 264.179572][ T971] usb 1-1: can't set config #0, error -71 [ 264.185417][ T5874] psmouse serio2: Failed to reset mouse on : -5 [ 264.204594][ T971] usb 1-1: USB disconnect, device number 6 [ 267.934325][ T7933] overlayfs: failed to clone upperpath [ 269.256320][ T7942] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 269.265677][ T7945] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.496' sets config #0 [ 269.576090][ T30] audit: type=1326 audit(1745296233.892:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.4.499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7249d8e169 code=0x0 [ 270.099891][ T30] audit: type=1400 audit(1745296234.112:448): avc: denied { read write } for pid=7948 comm="syz.0.498" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 270.122950][ T30] audit: type=1400 audit(1745296234.112:449): avc: denied { open } for pid=7948 comm="syz.0.498" path="/91/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 270.283665][ T5874] misc userio: Buffer overflowed, userio client isn't keeping up [ 270.876479][ T7961] SELinux: ebitmap: truncated map [ 270.913276][ T7961] SELinux: failed to load policy [ 271.143774][ T30] audit: type=1400 audit(1745296235.162:450): avc: denied { load_policy } for pid=7956 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 273.660219][ T5874] input: PS/2 Generic Mouse as /devices/serio2/input/input12 [ 273.792201][ T8001] syz_tun: entered allmulticast mode [ 274.137052][ T5874] psmouse serio2: Failed to enable mouse on [ 274.382502][ T7991] syz_tun: left allmulticast mode [ 277.729505][ T8034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.818106][ T30] audit: type=1400 audit(1745296243.132:451): avc: denied { read } for pid=8039 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 278.900133][ T8041] fuse: Unknown parameter '0x0000000000000005' [ 280.159202][ T5872] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 280.965102][ T5872] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 280.973659][ T5872] usb 2-1: config 7 has no interface number 0 [ 280.980353][ T5872] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 281.085244][ T5872] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 281.263882][ T5872] usb 2-1: config 7 interface 252 has no altsetting 0 [ 282.480848][ T5872] usb 2-1: string descriptor 0 read error: -71 [ 282.490676][ T5872] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 282.538144][ T8070] netlink: 'syz.2.529': attribute type 21 has an invalid length. [ 282.593640][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.594238][ T8070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.529'. [ 282.743770][ T5872] usb 2-1: can't set config #7, error -71 [ 282.779300][ T5872] usb 2-1: USB disconnect, device number 5 [ 283.408808][ T30] audit: type=1400 audit(1745296247.722:452): avc: denied { ioctl } for pid=8085 comm="syz.1.534" path="socket:[13945]" dev="sockfs" ino=13945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 285.683662][ T30] audit: type=1400 audit(1745296249.992:453): avc: denied { bind } for pid=8110 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.646602][ T8119] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 287.558840][ T8130] bond0: entered promiscuous mode [ 287.563965][ T8130] bond_slave_0: entered promiscuous mode [ 287.569727][ T8130] bond_slave_1: entered promiscuous mode [ 288.708528][ T30] audit: type=1400 audit(1745296253.022:454): avc: denied { bind } for pid=8133 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 288.750753][ T30] audit: type=1400 audit(1745296253.052:455): avc: denied { name_bind } for pid=8133 comm="syz.3.546" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 288.774110][ T30] audit: type=1400 audit(1745296253.052:456): avc: denied { node_bind } for pid=8133 comm="syz.3.546" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 288.811019][ T8137] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDp(@O> [ 289.966934][ T8147] GUP no longer grows the stack in syz.1.549 (8147): 200000004000-20000000a000 (200000002000) [ 289.981804][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.1.549 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 289.981832][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.981842][ T8147] Call Trace: [ 289.981848][ T8147] [ 289.981856][ T8147] dump_stack_lvl+0x16c/0x1f0 [ 289.981886][ T8147] gup_vma_lookup+0x1d2/0x220 [ 289.981913][ T8147] __get_user_pages+0x234/0x36f0 [ 289.981948][ T8147] ? __pfx___get_user_pages+0x10/0x10 [ 289.981984][ T8147] get_user_pages_remote+0x258/0xb20 [ 289.982012][ T8147] ? __pfx_mtree_load+0x10/0x10 [ 289.982038][ T8147] ? __pfx_get_user_pages_remote+0x10/0x10 [ 289.982075][ T8147] __access_remote_vm+0x233/0x9d0 [ 289.982102][ T8147] ? __pfx___access_remote_vm+0x10/0x10 [ 289.982132][ T8147] proc_pid_cmdline_read+0x4de/0x900 [ 289.982170][ T8147] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 289.982202][ T8147] ? rw_verify_area+0xcf/0x680 [ 289.982227][ T8147] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 289.982257][ T8147] vfs_readv+0x6bc/0x8a0 [ 289.982290][ T8147] ? __pfx_vfs_readv+0x10/0x10 [ 289.982318][ T8147] ? kmem_cache_free+0x48a/0x4d0 [ 289.982353][ T8147] ? __fget_files+0x20e/0x3c0 [ 289.982377][ T8147] ? do_preadv+0x1af/0x270 [ 289.982399][ T8147] do_preadv+0x1af/0x270 [ 289.982425][ T8147] ? __pfx_do_preadv+0x10/0x10 [ 289.982448][ T8147] ? rcu_is_watching+0x12/0xc0 [ 289.982479][ T8147] do_syscall_64+0xcd/0x260 [ 289.982505][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.982523][ T8147] RIP: 0033:0x7f7182b8e169 [ 289.982539][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.982555][ T8147] RSP: 002b:00007f7183945038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 289.982573][ T8147] RAX: ffffffffffffffda RBX: 00007f7182db5fa0 RCX: 00007f7182b8e169 [ 289.982584][ T8147] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000006 [ 289.982594][ T8147] RBP: 00007f7182c10a68 R08: 00000000fffffff9 R09: 0000000000000000 [ 289.982604][ T8147] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 289.982614][ T8147] R13: 0000000000000000 R14: 00007f7182db5fa0 R15: 00007ffdd3c87708 [ 289.982637][ T8147] [ 290.269453][ T5874] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 290.395705][ T8147] fuse: Unknown parameter 'fd' [ 290.448429][ T5874] usb 1-1: config 0 has no interfaces? [ 291.100884][ T5874] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 291.105980][ T30] audit: type=1400 audit(1745296254.912:457): avc: denied { mount } for pid=8140 comm="syz.4.548" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 291.172535][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.220673][ T5874] usb 1-1: Product: syz [ 291.230242][ T5874] usb 1-1: Manufacturer: syz [ 291.236278][ T30] audit: type=1400 audit(1745296255.552:458): avc: denied { setopt } for pid=8159 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.236675][ T5874] usb 1-1: SerialNumber: syz [ 291.913534][ T30] audit: type=1400 audit(1745296256.162:459): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 291.916710][ T5874] usb 1-1: config 0 descriptor?? [ 292.134128][ T5874] usb 1-1: can't set config #0, error -71 [ 292.153517][ T5874] usb 1-1: USB disconnect, device number 7 [ 294.059476][ T971] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 294.758464][ T971] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 294.779387][ T30] audit: type=1400 audit(1745296258.672:460): avc: denied { mount } for pid=8180 comm="syz.1.558" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 294.803165][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.840771][ T971] usb 3-1: config 0 descriptor?? [ 294.897667][ T30] audit: type=1400 audit(1745296258.672:461): avc: denied { search } for pid=8180 comm="syz.1.558" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.052655][ T30] audit: type=1400 audit(1745296258.672:462): avc: denied { read } for pid=8180 comm="syz.1.558" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.052714][ T30] audit: type=1400 audit(1745296258.672:463): avc: denied { open } for pid=8180 comm="syz.1.558" path="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.909567][ T971] ath6kl: Failed to submit usb control message: -71 [ 295.926735][ T971] ath6kl: unable to send the bmi data to the device: -71 [ 295.941172][ T971] ath6kl: Unable to send get target info: -71 [ 295.977359][ T971] ath6kl: Failed to init ath6kl core: -71 [ 295.983515][ T971] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 296.027600][ T971] usb 3-1: USB disconnect, device number 3 [ 296.237897][ T8197] lo speed is unknown, defaulting to 1000 [ 297.463198][ T8209] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 297.489481][ T8209] CIFS mount error: No usable UNC path provided in device string! [ 297.489481][ T8209] [ 297.499918][ T8209] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 298.494789][ T30] audit: type=1400 audit(1745296261.832:464): avc: denied { accept } for pid=8203 comm="syz.2.563" lport=55237 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.666118][ T8243] block device autoloading is deprecated and will be removed. [ 301.700381][ T8242] md: md2 stopped. [ 301.700393][ T30] audit: type=1400 audit(1745296266.012:465): avc: denied { ioctl } for pid=8241 comm="syz.1.572" path="/111/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 303.083695][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 303.120834][ T30] audit: type=1400 audit(1745296267.382:466): avc: denied { checkpoint_restore } for pid=8252 comm="syz.2.576" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.169812][ T30] audit: type=1400 audit(1745296267.482:467): avc: denied { ioctl } for pid=8263 comm="syz.0.577" path="mnt:[4026532798]" dev="nsfs" ino=4026532798 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 303.412864][ T8265] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.421433][ T8265] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.430285][ T8265] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.438626][ T8265] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.460620][ T8265] batman_adv: batadv0: Adding interface: geneve2 [ 303.467155][ T8265] batman_adv: batadv0: Interface activated: geneve2 [ 304.332189][ T8275] team0: Cannot enslave team device to itself [ 306.483814][ T30] audit: type=1400 audit(1745296270.762:468): avc: denied { create } for pid=8295 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 306.505715][ T30] audit: type=1400 audit(1745296270.762:469): avc: denied { write } for pid=8295 comm="syz.0.585" path="socket:[14305]" dev="sockfs" ino=14305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 308.581572][ T8316] netlink: 'syz.3.591': attribute type 12 has an invalid length. [ 308.598980][ T8316] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 308.616845][ T8316] netlink: 148 bytes leftover after parsing attributes in process `syz.3.591'. [ 308.628568][ T8316] netlink: 59 bytes leftover after parsing attributes in process `syz.3.591'. [ 309.733621][ T30] audit: type=1400 audit(1745296274.042:470): avc: denied { create } for pid=8320 comm="syz.2.589" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 310.153021][ T30] audit: type=1400 audit(1745296274.132:471): avc: denied { rename } for pid=8320 comm="syz.2.589" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=14989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 310.294517][ T30] audit: type=1400 audit(1745296274.462:472): avc: denied { setopt } for pid=8319 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 311.407013][ T30] audit: type=1400 audit(1745296275.692:473): avc: denied { execute } for pid=8339 comm="syz.2.596" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 311.902830][ T30] audit: type=1400 audit(1745296276.182:474): avc: denied { execute } for pid=8361 comm="syz.4.603" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 312.141978][ T30] audit: type=1400 audit(1745296276.452:475): avc: denied { bind } for pid=8370 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.175831][ T30] audit: type=1400 audit(1745296276.452:476): avc: denied { accept } for pid=8370 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.229923][ T30] audit: type=1326 audit(1745296276.542:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.2.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde5cd8e169 code=0x0 [ 313.220265][ T30] audit: type=1400 audit(1745296277.532:478): avc: denied { append } for pid=8382 comm="syz.2.609" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.533078][ T8403] tipc: Started in network mode [ 314.538212][ T8403] tipc: Node identity , cluster identity 4711 [ 314.544388][ T8403] tipc: Failed to obtain node identity [ 314.550227][ T8403] tipc: Enabling of bearer rejected, failed to enable media [ 314.914722][ T30] audit: type=1400 audit(1745296279.232:479): avc: denied { connect } for pid=8404 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 315.714002][ T30] audit: type=1400 audit(1745296279.612:480): avc: denied { ioctl } for pid=8406 comm="syz.0.616" path="socket:[15481]" dev="sockfs" ino=15481 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 315.917115][ T8417] netlink: 'syz.3.619': attribute type 13 has an invalid length. [ 315.962169][ T30] audit: type=1400 audit(1745296280.272:481): avc: denied { bind } for pid=8414 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.043481][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.102885][ T30] audit: type=1400 audit(1745296281.392:482): avc: denied { setopt } for pid=8420 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 317.208016][ T30] audit: type=1400 audit(1745296281.402:483): avc: denied { write } for pid=8420 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 319.113017][ T8438] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 319.263496][ T30] audit: type=1400 audit(1745296283.492:484): avc: denied { map } for pid=8442 comm="syz.3.627" path="socket:[15522]" dev="sockfs" ino=15522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 319.458419][ T8447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 320.053401][ T30] audit: type=1400 audit(1745296283.882:485): avc: denied { create } for pid=8437 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 320.093246][ T30] audit: type=1400 audit(1745296283.882:486): avc: denied { ioctl } for pid=8437 comm="syz.0.626" path="socket:[15544]" dev="sockfs" ino=15544 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 320.126298][ T30] audit: type=1400 audit(1745296283.892:487): avc: denied { bind } for pid=8437 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 320.682432][ T8463] overlayfs: failed to clone upperpath [ 321.912662][ T8476] Invalid option length (640) for dns_resolver key [ 322.651769][ T8485] syz.1.640 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 323.236049][ T5874] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 323.290020][ T8499] ceph: No mds server is up or the cluster is laggy [ 323.329373][ T10] libceph: connect (1)[c::]:6789 error -101 [ 323.337266][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 323.614992][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.652117][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.710700][ T5874] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 323.745367][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.767832][ T8518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.778352][ T8518] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.996782][ T9] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 325.178757][ T8518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.189167][ T8518] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.263030][ T8518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.273808][ T8518] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.275117][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 325.305140][ T9] usb 3-1: config 0 has no interface number 0 [ 325.323645][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.353186][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 325.355163][ T8518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.373638][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 325.375292][ T8518] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.413623][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 325.472799][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 325.474545][ T8518] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.491974][ T8518] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.505212][ T8518] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.513440][ T8518] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.526065][ T8518] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.534608][ T8518] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.547571][ T8518] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.555818][ T8518] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 325.633648][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 325.666462][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 325.676341][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.754845][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 325.788881][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 325.873122][ T8528] futex_wake_op: syz.3.654 tries to shift op by -1; fix this program [ 327.692460][ T8551] trusted_key: encrypted_key: master key parameter '/cec#' is invalid [ 328.602781][ T30] audit: type=1400 audit(1745296292.912:488): avc: denied { write } for pid=8547 comm="syz.0.659" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 329.568798][ T8564] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 329.568828][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 330.319305][ T8569] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 330.319334][ T8569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.321315][ T8569] vhci_hcd vhci_hcd.0: Device attached [ 330.323152][ T8569] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 330.323167][ T8569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.323208][ T8569] vhci_hcd vhci_hcd.0: Device attached [ 330.329904][ T8569] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 330.329931][ T8569] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 330.329958][ T8569] vhci_hcd vhci_hcd.0: Device attached [ 330.338888][ T8569] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 330.338908][ T8569] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 330.340929][ T8569] vhci_hcd vhci_hcd.0: Device attached [ 330.344170][ T8569] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 330.386221][ T8576] vhci_hcd: connection closed [ 330.386478][ T8574] vhci_hcd: connection closed [ 330.387460][ T8570] vhci_hcd: connection closed [ 330.387988][ T8572] vhci_hcd: connection closed [ 330.389171][ T5975] vhci_hcd: stop threads [ 330.389823][ T5975] vhci_hcd: release socket [ 330.389844][ T5975] vhci_hcd: disconnect device [ 330.389995][ T5975] vhci_hcd: stop threads [ 330.390002][ T5975] vhci_hcd: release socket [ 330.390012][ T5975] vhci_hcd: disconnect device [ 330.390153][ T5975] vhci_hcd: stop threads [ 330.390166][ T5975] vhci_hcd: release socket [ 330.390174][ T5975] vhci_hcd: disconnect device [ 330.390247][ T5975] vhci_hcd: stop threads [ 330.390254][ T5975] vhci_hcd: release socket [ 330.390263][ T5975] vhci_hcd: disconnect device [ 331.558708][ T8585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.721906][ T8599] overlayfs: failed to clone upperpath [ 334.355925][ T30] audit: type=1400 audit(1745296298.642:489): avc: denied { write } for pid=8606 comm="syz.4.671" name="file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 334.356085][ T30] audit: type=1400 audit(1745296298.642:490): avc: denied { open } for pid=8606 comm="syz.4.671" path="/141/file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 334.356209][ T30] audit: type=1400 audit(1745296298.652:491): avc: denied { ioctl } for pid=8606 comm="syz.4.671" path="/141/file0" dev="tmpfs" ino=754 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.918232][ T8643] overlayfs: failed to clone upperpath [ 341.496694][ T8665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.595042][ T8665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.705855][ T8665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.195356][ T8665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.322173][ T8665] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.333296][ T8665] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.341804][ T8665] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.350124][ T8665] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.225341][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.226456][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.227000][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.228086][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.228561][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.243941][ T30] audit: type=1400 audit(1745296307.552:492): avc: denied { mounton } for pid=8680 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 343.296707][ T8680] lo speed is unknown, defaulting to 1000 [ 343.580955][ T8680] chnl_net:caif_netlink_parms(): no params data found [ 343.584522][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.586644][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.589468][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.590212][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.590643][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.688316][ T8688] lo speed is unknown, defaulting to 1000 [ 343.756967][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.757040][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.757195][ T8680] bridge_slave_0: entered allmulticast mode [ 343.757886][ T8680] bridge_slave_0: entered promiscuous mode [ 343.760011][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.763699][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.763781][ T8680] bridge_slave_1: entered allmulticast mode [ 343.775277][ T8680] bridge_slave_1: entered promiscuous mode [ 344.372311][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.423446][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.701465][ T8680] team0: Port device team_slave_0 added [ 344.705951][ T8680] team0: Port device team_slave_1 added [ 344.740476][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.740490][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.740504][ T8680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.749431][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.749442][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.749455][ T8680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.762768][ T30] audit: type=1400 audit(1745296309.072:493): avc: denied { write } for pid=8703 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 344.806403][ T8680] hsr_slave_0: entered promiscuous mode [ 344.807214][ T8680] hsr_slave_1: entered promiscuous mode [ 344.807689][ T8680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.807758][ T8680] Cannot create hsr debugfs directory [ 345.244586][ T5822] Bluetooth: hci5: command tx timeout [ 345.482755][ T8688] chnl_net:caif_netlink_parms(): no params data found [ 345.647510][ T5822] Bluetooth: hci6: command tx timeout [ 345.898473][ T30] audit: type=1400 audit(1745296310.202:494): avc: denied { ioctl } for pid=8718 comm="syz.4.698" path="socket:[16229]" dev="sockfs" ino=16229 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 347.353853][ T5822] Bluetooth: hci5: command tx timeout [ 347.602562][ T8734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8734 comm=syz.3.701 [ 347.697514][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.698783][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.699336][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.700406][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.700947][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.723875][ T5822] Bluetooth: hci6: command tx timeout [ 349.414259][ T5836] Bluetooth: hci5: command tx timeout [ 349.723676][ T5836] Bluetooth: hci7: command tx timeout [ 349.803695][ T5836] Bluetooth: hci6: command tx timeout [ 351.483786][ T5836] Bluetooth: hci5: command tx timeout [ 351.803653][ T5836] Bluetooth: hci7: command tx timeout [ 351.893720][ T5836] Bluetooth: hci6: command tx timeout [ 353.883686][ T5836] Bluetooth: hci7: command tx timeout [ 355.963897][ T5836] Bluetooth: hci7: command tx timeout [ 362.710221][ T5822] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 362.711509][ T5822] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 362.712002][ T5822] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 362.712730][ T5822] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 362.713228][ T5822] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 364.221494][ T5822] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 364.222992][ T5822] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 364.223450][ T5822] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 364.226416][ T5822] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 364.226915][ T5822] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 364.764110][ T5822] Bluetooth: hci8: command tx timeout [ 366.283700][ T5822] Bluetooth: hci9: command tx timeout [ 366.843693][ T5822] Bluetooth: hci8: command tx timeout [ 368.363850][ T5822] Bluetooth: hci9: command tx timeout [ 368.923657][ T5822] Bluetooth: hci8: command tx timeout [ 370.443757][ T5822] Bluetooth: hci9: command tx timeout [ 371.003702][ T5822] Bluetooth: hci8: command tx timeout [ 372.523691][ T5822] Bluetooth: hci9: command tx timeout [ 378.125552][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.743644][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 402.744981][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 402.745477][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 402.746477][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 402.746992][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 403.247407][ T5836] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 403.248124][ T5836] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 403.248913][ T5836] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 403.249698][ T5836] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 403.250174][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 404.763695][ T5822] Bluetooth: hci10: command tx timeout [ 405.324494][ T5822] Bluetooth: hci11: command tx timeout [ 406.843854][ T5822] Bluetooth: hci10: command tx timeout [ 407.403737][ T5822] Bluetooth: hci11: command tx timeout [ 407.756634][ T5836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 407.757581][ T5836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 407.758073][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 407.758825][ T5836] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 407.759303][ T5836] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 408.923827][ T5822] Bluetooth: hci10: command tx timeout [ 409.483769][ T5822] Bluetooth: hci11: command tx timeout [ 409.813696][ T5822] Bluetooth: hci12: command tx timeout [ 411.003746][ T5822] Bluetooth: hci10: command tx timeout [ 411.563627][ T5822] Bluetooth: hci11: command tx timeout [ 411.884156][ T5822] Bluetooth: hci12: command tx timeout [ 413.963772][ T5822] Bluetooth: hci12: command tx timeout [ 416.043935][ T5822] Bluetooth: hci12: command tx timeout [ 422.769599][ T5836] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 422.770364][ T5836] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 422.770839][ T5836] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 422.771571][ T5836] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 422.772046][ T5836] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 424.272942][ T5836] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 424.273511][ T5836] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 424.276330][ T5836] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 424.277061][ T5836] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 424.277553][ T5836] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 424.843721][ T5822] Bluetooth: hci13: command tx timeout [ 426.283725][ T5822] Bluetooth: hci14: command tx timeout [ 426.923825][ T5822] Bluetooth: hci13: command tx timeout [ 428.363695][ T5822] Bluetooth: hci14: command tx timeout [ 429.003709][ T5822] Bluetooth: hci13: command tx timeout [ 430.443658][ T5822] Bluetooth: hci14: command tx timeout [ 431.083966][ T5822] Bluetooth: hci13: command tx timeout [ 432.523734][ T5822] Bluetooth: hci14: command tx timeout [ 439.575385][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.818623][ T5836] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 462.819354][ T5836] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 462.819843][ T5836] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 462.820573][ T5836] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 462.821053][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 463.254097][ T31] INFO: task kworker/0:7:5907 blocked for more than 143 seconds. [ 463.254122][ T31] Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 [ 463.254132][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.254139][ T31] task:kworker/0:7 state:D stack:22216 pid:5907 tgid:5907 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 463.254189][ T31] Workqueue: md_misc mddev_delayed_delete [ 463.254211][ T31] Call Trace: [ 463.254218][ T31] [ 463.254228][ T31] __schedule+0x116f/0x5de0 [ 463.254255][ T31] ? __lock_acquire+0xe91/0x1ba0 [ 463.254280][ T31] ? __pfx___schedule+0x10/0x10 [ 463.254304][ T31] ? find_held_lock+0x2b/0x80 [ 463.254327][ T31] ? schedule+0x2d7/0x3a0 [ 463.254349][ T31] schedule+0xe7/0x3a0 [ 463.254367][ T31] schedule_timeout+0x257/0x290 [ 463.254382][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 463.254398][ T31] ? mark_held_locks+0x49/0x80 [ 463.254407][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.254426][ T31] __wait_for_common+0x2fc/0x4e0 [ 463.254441][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 463.254454][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 463.254470][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 463.254488][ T31] devtmpfs_submit_req+0xa8/0x100 [ 463.254504][ T31] devtmpfs_delete_node+0xf6/0x160 [ 463.254520][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 463.254537][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 463.254549][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.254569][ T31] ? kernfs_put+0x4e/0x60 [ 463.254582][ T31] ? sysfs_remove_group+0xc6/0x180 [ 463.254596][ T31] device_del+0x734/0x9f0 [ 463.254613][ T31] ? __pfx_device_del+0x10/0x10 [ 463.254628][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.254642][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 463.254656][ T31] del_gendisk+0x486/0xc40 [ 463.254670][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 463.254681][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 463.254696][ T31] md_kobj_release+0xb2/0x100 [ 463.254709][ T31] kobject_put+0x1e4/0x5a0 [ 463.254727][ T31] process_one_work+0x9cc/0x1b70 [ 463.254745][ T31] ? __pfx_process_one_work+0x10/0x10 [ 463.254761][ T31] ? assign_work+0x1a0/0x250 [ 463.254774][ T31] worker_thread+0x6c8/0xf10 [ 463.254790][ T31] ? __kthread_parkme+0x19e/0x250 [ 463.254807][ T31] ? __pfx_worker_thread+0x10/0x10 [ 463.254819][ T31] kthread+0x3c2/0x780 [ 463.254830][ T31] ? __pfx_kthread+0x10/0x10 [ 463.254840][ T31] ? __pfx_kthread+0x10/0x10 [ 463.254850][ T31] ? __pfx_kthread+0x10/0x10 [ 463.254861][ T31] ? __pfx_kthread+0x10/0x10 [ 463.254871][ T31] ? rcu_is_watching+0x12/0xc0 [ 463.254885][ T31] ? __pfx_kthread+0x10/0x10 [ 463.254896][ T31] ret_from_fork+0x45/0x80 [ 463.254907][ T31] ? __pfx_kthread+0x10/0x10 [ 463.254918][ T31] ret_from_fork_asm+0x1a/0x30 [ 463.254941][ T31] [ 463.254959][ T31] [ 463.254959][ T31] Showing all locks held in the system: [ 463.254965][ T31] 3 locks held by kworker/0:0/9: [ 463.254971][ T31] #0: ffff8881416c2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 463.255000][ T31] #1: ffffc900000e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 463.255028][ T31] #2: ffff888029183198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 463.255053][ T31] 3 locks held by kworker/u8:0/12: [ 463.255059][ T31] #0: ffff88814d3cc948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 463.255087][ T31] #1: ffffc90000117d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 463.255115][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 463.255145][ T31] 2 locks held by kdevtmpfs/26: [ 463.255151][ T31] #0: ffff888141280950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 463.255186][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 463.255217][ T31] 1 lock held by khungtaskd/31: [ 463.255223][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 463.255264][ T31] 2 locks held by getty/5587: [ 463.255269][ T31] #0: ffff88814d9a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 463.255299][ T31] #1: ffffc900036e32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 463.255329][ T31] 3 locks held by kworker/0:4/5874: [ 463.255335][ T31] #0: ffff8881416c2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 463.255362][ T31] #1: ffffc90004defd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 463.255389][ T31] #2: ffff8881457c8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 463.255418][ T31] 3 locks held by kworker/0:6/5905: [ 463.255424][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 463.255451][ T31] #1: ffffc90004e2fd18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 463.255478][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 463.255510][ T31] 2 locks held by kworker/0:7/5907: [ 463.255516][ T31] #0: ffff8880226a1148 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 463.255543][ T31] #1: ffffc90004e4fd18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 463.255570][ T31] 3 locks held by kworker/u8:15/6891: [ 463.255576][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 463.255603][ T31] #1: ffffc9001b867d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 463.255630][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 463.255665][ T31] 3 locks held by syz.2.658/8546: [ 463.255671][ T31] #0: ffffffff8f0a4488 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90 [ 463.255695][ T31] #1: ffff8880289c31c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x37/0x500 [ 463.255719][ T31] #2: ffffffff8e3ace40 (console_lock){+.+.}-{0:0}, at: con_install+0x99/0x600 [ 463.255749][ T31] 1 lock held by syz.1.669/8600: [ 463.255755][ T31] #0: ffffffff8f0a4488 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90 [ 463.255778][ T31] 2 locks held by syz-executor/8680: [ 463.255784][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 463.255814][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 463.255842][ T31] 2 locks held by syz-executor/8688: [ 463.255848][ T31] #0: ffffffff908682a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 463.255877][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 463.255905][ T31] 1 lock held by syz.3.701/8734: [ 463.255911][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 463.255939][ T31] 1 lock held by syz-executor/8736: [ 463.255945][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.255973][ T31] 1 lock held by syz.4.705/8747: [ 463.255979][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 463.256007][ T31] 1 lock held by syz-executor/8755: [ 463.256013][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.256040][ T31] 1 lock held by syz-executor/8758: [ 463.256046][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.256074][ T31] 1 lock held by syz-executor/8761: [ 463.256080][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.256107][ T31] 1 lock held by syz-executor/8764: [ 463.256113][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.256141][ T31] 1 lock held by syz-executor/8767: [ 463.256147][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.256174][ T31] 1 lock held by syz-executor/8770: [ 463.256180][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.256208][ T31] 1 lock held by syz-executor/8773: [ 463.256214][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.256241][ T31] 1 lock held by syz-executor/8777: [ 463.256247][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 463.256275][ T31] [ 463.256277][ T31] ============================================= [ 463.256277][ T31] [ 463.256282][ T31] NMI backtrace for cpu 1 [ 463.256289][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 463.256302][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.256307][ T31] Call Trace: [ 463.256310][ T31] [ 463.256314][ T31] dump_stack_lvl+0x116/0x1f0 [ 463.256328][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 463.256339][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.256351][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 463.256363][ T31] watchdog+0xf70/0x12c0 [ 463.256376][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.256385][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.256399][ T31] ? __kthread_parkme+0x19e/0x250 [ 463.256417][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.256428][ T31] kthread+0x3c2/0x780 [ 463.256438][ T31] ? __pfx_kthread+0x10/0x10 [ 463.256447][ T31] ? __pfx_kthread+0x10/0x10 [ 463.256456][ T31] ? __pfx_kthread+0x10/0x10 [ 463.256465][ T31] ? __pfx_kthread+0x10/0x10 [ 463.256474][ T31] ? rcu_is_watching+0x12/0xc0 [ 463.256487][ T31] ? __pfx_kthread+0x10/0x10 [ 463.256497][ T31] ret_from_fork+0x45/0x80 [ 463.256507][ T31] ? __pfx_kthread+0x10/0x10 [ 463.256517][ T31] ret_from_fork_asm+0x1a/0x30 [ 463.256537][ T31] [ 463.256540][ T31] Sending NMI from CPU 1 to CPUs 0: [ 463.256570][ C0] NMI backtrace for cpu 0 [ 463.256579][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 463.256594][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.256601][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 463.256617][ C0] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 463.256629][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 463.256639][ C0] RAX: 0000000000ff486f RBX: 0000000000000000 RCX: ffffffff8b72a419 [ 463.256647][ C0] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 463.256655][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 463.256663][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 463.256671][ C0] R13: ffffffff8e097740 R14: ffffffff90864910 R15: 0000000000000000 [ 463.256679][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 463.256692][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.256700][ C0] CR2: 00007f9ab17d99d0 CR3: 0000000030888000 CR4: 00000000003526f0 [ 463.256708][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.256716][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.256723][ C0] Call Trace: [ 463.256727][ C0] [ 463.256731][ C0] default_idle+0x13/0x20 [ 463.256748][ C0] default_idle_call+0x6d/0xb0 [ 463.256765][ C0] do_idle+0x391/0x510 [ 463.256782][ C0] ? __pfx_do_idle+0x10/0x10 [ 463.256796][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 463.256814][ C0] ? do_idle+0x2ea/0x510 [ 463.256829][ C0] cpu_startup_entry+0x4f/0x60 [ 463.256844][ C0] rest_init+0x16b/0x2b0 [ 463.256854][ C0] ? acpi_subsystem_init+0x133/0x180 [ 463.256869][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 463.256888][ C0] start_kernel+0x3e9/0x4d0 [ 463.256905][ C0] x86_64_start_reservations+0x18/0x30 [ 463.256922][ C0] x86_64_start_kernel+0xb0/0xc0 [ 463.256938][ C0] common_startup_64+0x13e/0x148 [ 463.256958][ C0] [ 463.257555][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 463.257563][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 463.257575][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.257581][ T31] Call Trace: [ 463.257584][ T31] [ 463.257588][ T31] dump_stack_lvl+0x3d/0x1f0 [ 463.257602][ T31] panic+0x71c/0x800 [ 463.257612][ T31] ? __pfx_panic+0x10/0x10 [ 463.257620][ T31] ? __pfx__printk+0x10/0x10 [ 463.257629][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 463.257646][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 463.257660][ T31] ? irq_work_queue+0xce/0x100 [ 463.257672][ T31] ? watchdog+0xdda/0x12c0 [ 463.257682][ T31] ? watchdog+0xdcd/0x12c0 [ 463.257694][ T31] watchdog+0xdeb/0x12c0 [ 463.257706][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.257716][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.257730][ T31] ? __kthread_parkme+0x19e/0x250 [ 463.257746][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.257756][ T31] kthread+0x3c2/0x780 [ 463.257766][ T31] ? __pfx_kthread+0x10/0x10 [ 463.257776][ T31] ? __pfx_kthread+0x10/0x10 [ 463.257786][ T31] ? __pfx_kthread+0x10/0x10 [ 463.257795][ T31] ? __pfx_kthread+0x10/0x10 [ 463.257805][ T31] ? rcu_is_watching+0x12/0xc0 [ 463.257818][ T31] ? __pfx_kthread+0x10/0x10 [ 463.257828][ T31] ret_from_fork+0x45/0x80 [ 463.257838][ T31] ? __pfx_kthread+0x10/0x10 [ 463.257849][ T31] ret_from_fork_asm+0x1a/0x30 [ 463.257869][ T31] [ 463.258077][ T31] Kernel Offset: disabled