last executing test programs: 11.872933304s ago: executing program 1 (id=820): r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000100)) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x82) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) io_uring_setup(0x177f, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x50, r0, 0xa7b7000) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000140)={0x3, 0x1, 0x0, 0xfffffffe}) 11.791201008s ago: executing program 2 (id=821): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x5, 0x1000000400a, 0x5, 0x1000006, 0x15e, 0x1, 0xfc, 0x7ff}, 0x0, &(0x7f00000002c0)={0xc, 0x86, 0xe, 0x7ff, 0x1, 0x2, 0x10000000000101, 0x480000000000004}, &(0x7f00000000c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x3ff, 0x3ff, 0x0, 0x3ac, 0x4, 0x3ff]}, &(0x7f0000000280)=0x78) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') 11.78970688s ago: executing program 4 (id=822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) 10.244790609s ago: executing program 1 (id=823): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r2, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f00000005c0)={0x18, 0x0, r3, {0xb8c}}, 0x18) prlimit64(0x0, 0x3, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT], 0x0, 0x7fe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) 9.756303965s ago: executing program 2 (id=824): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000002c0)={0x2, r5}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000080)={0x2, r5, 0x1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f00000001c0)={r2, 0x407, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r6, 0x10, "d6a5e8d19a022bd38d6fab09495270ab"}, &(0x7f0000000140)=0x18) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000240)={0x2, r8}) ioctl$int_in(r7, 0x40000000af01, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = fcntl$dupfd(r7, 0x0, r9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={&(0x7f0000000440)=@newtaction={0x14, 0x16, 0xe67c0fb78d4e40bf, 0xfffffffe, 0x25dfdbfc, {0xa}}, 0x14}}, 0x10) ioctl$TIOCGPTPEER(r10, 0x4004af07, 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x8c4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000280)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 9.16292495s ago: executing program 2 (id=827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='devlink_hwerr\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/169, 0xa9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@fwd={0x0, 0x0, 0x0, 0x10, 0x2}, @union]}}, 0x0, 0x32}, 0x28) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000480)="1502c56dda4f26fbbbdfe3a504a4975a081858d2284abeeda00ccb3655ef2a3ff2d7b5b33a8a8a0ae0fba3f4a6a3f024ff5f3395541d52d283b1aedf62ebcb6adfd0b4f83d7f6796759d921d96df619d2f37e98d36f61aeb22913e7dc08ada02ab8c5f389a21fa9f9717f737fe31599f2361e4110f451a769bb5512f399543f47aa6b1f4eb9796854fd40550d99dd6f2b0a77d8f37a174697e9f73fbeb62af57f096f90dedcb516c5cee0db9fc151cc4e86a4cc1f4ca397baf479113ef6ec04bc64c84d9d08bb75d3aa0778fde8c57606841813b3859483f4873ccec7816838908d8321a72", 0xe5}, {&(0x7f0000000580)="4b0d5b92d401983e823ddd50d19ff908c1866d93b724c61cb5c226539bdebd3a7798244993ff76930ffdb2ae9029fc5515dce4b8d694845b764f3a55a65d648410ee2491aabdb924352d5e4ddcc2cf260a0df644e7d539757a6696d20b6e64fe569b6218e5e552aec888f4ce6395", 0x6e}, {&(0x7f0000000680)="c47b195b1556769532b9bd7a42507968a54245b9c2c941e6fc1df17bd016b8901abada74bec729fa41513da38150a7557d9cde435be8728b2860b85a6a1e31807e06a3fb1622801a72f012a663e414c0ce104b9661befc22cc17af1f536736447bf97f1ef9e7c5ca4680da908f038f02627374e5103c05a17824f23750d1a6338654912c6d665abdca4f783fd37121326920de394066bc7d405bc6215a1d1922823da8ba5bae55f4812e35892e5058e22a10fd38186c51949074fa9bebac14dc68b8ef3bab2a75ee4e3a01a38d1213e102dda62f", 0xd4}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x1}, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000063f728e9497e7331000000000000000000000000000000000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000013302000000000000"], 0x27c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.159357127s ago: executing program 1 (id=828): poll(&(0x7f0000000040)=[{}], 0x1, 0x4) r0 = epoll_create(0x76f) epoll_wait(r0, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) creat(0x0, 0x12a) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x8010, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) 9.013156773s ago: executing program 4 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_clone(0x10080, &(0x7f0000002000)="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", 0x1000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)="9f9fde6973a6725bc84792acaf7367bc582536b9f614fa5c8d7d5a5fc430d6486dffbb0e572aef0631edf8f8d4a4915517b310") sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x3) 7.911802527s ago: executing program 2 (id=832): r0 = socket$inet6(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x93c41685972140f0}}, 0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7.906466142s ago: executing program 1 (id=833): syz_io_uring_setup(0xca1, &(0x7f0000000100)={0x0, 0x8de0, 0x10310, 0xfffffffe, 0x4a}, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 7.714794532s ago: executing program 4 (id=835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket(0x28, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) r5 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, 0x0, 0xeeeeeeee}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x800) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000001b80), 0x0) 7.198510839s ago: executing program 3 (id=836): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0xffffffffffffffb0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)={0x3, 'veth1_vlan\x00', {}, 0x7f}) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) poll(0x0, 0x0, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000002080)) 6.61624062s ago: executing program 0 (id=837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCL_BLANKSCREEN(r9, 0x4b67, &(0x7f0000000180)) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) 6.497322479s ago: executing program 3 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8e8020980a0000280440001800800014000000000080001400000000408000140000003ff080001400000007f08000140000006860800014000008001080001400000"], 0x38c}}, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000475000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, 0x0, &(0x7f00000001c0)) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0x5}, @wrmsr={0x65, 0x20, {0xe53, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x78dc, 0x7}}, @out_dx={0x6a, 0x28, {0x1, 0x2, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x694, 0xf9ef, 0x4, 0xa}}, @uexit={0x0, 0x18, 0x9}, @in_dx={0x69, 0x20, {0xe60d, 0x6}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x6f84, 0x7, 0x5d}}, @set_irq_handler={0xc8, 0x20, {0xca, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4d9, 0x3, 0x2a, 0xa}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16=0x2, 0x2, 0x72, 0x6}}], 0x1d8}) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000540)) r5 = msgget$private(0x0, 0x10) msgrcv(r5, &(0x7f0000000200)={0x0, ""/211}, 0xdb, 0x3, 0x800) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x1, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x38, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x8, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x2, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0x400000ac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001180)={'syz0\x00', {0xaf0, 0xd033, 0x180}, 0x45, [0xfffffff7, 0x3, 0x2, 0x1, 0x80, 0xaf7, 0x8, 0x6, 0x7fff, 0x9, 0x42, 0x40, 0x3ff, 0x2, 0x1, 0x8000, 0x7ff, 0x20000003, 0x5, 0x5, 0x1, 0x4, 0x6, 0x2, 0x6, 0x6, 0x7, 0x1600000, 0xa, 0xfe, 0x3ff, 0xc6, 0x3, 0x8000, 0x1b, 0xb, 0x7, 0x0, 0xff, 0x4, 0x57, 0x6253, 0x7, 0xda, 0x67aa2099, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xd, 0x6, 0x5, 0x9ec6, 0x4, 0x1, 0x7, 0xff, 0x7, 0x800, 0xfffffffa, 0x3, 0x6, 0x3], [0x3, 0x7ff, 0x7, 0xa, 0x3, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0xfffff283, 0x1ff8, 0x8, 0x100, 0xffffffff, 0x7, 0x3ff, 0xffffffff, 0x0, 0x400000, 0x9, 0x6, 0xe, 0x0, 0x100, 0x1, 0xd, 0x100, 0x800, 0xcb, 0x5, 0x5, 0x6, 0x0, 0x3, 0xe, 0x6, 0x81, 0x3, 0x2, 0x8, 0xfffffffb, 0x6, 0x8, 0x5, 0xd, 0xfffffffa, 0x2, 0x8e, 0x4, 0x8b7, 0xfffffffa, 0x1, 0xfbfffff9, 0x3, 0x9, 0x7, 0x3, 0x942, 0x4, 0x12000, 0x4fb2adfa, 0xdea0], [0x2, 0x3, 0xfffff001, 0xfffffffd, 0x8, 0xe6, 0x8, 0x2, 0xf441, 0xfffffffe, 0xfffffffd, 0x2, 0x10, 0x1000, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0xf361, 0x7, 0x3, 0x0, 0x5, 0x6, 0xff, 0x81, 0xf, 0x1, 0x20000009, 0x7, 0x0, 0x10001, 0x8e5c, 0x4, 0x9, 0x6, 0x1, 0x200, 0x7, 0x40, 0x7a2c, 0x200101, 0x9e38, 0x4c88, 0x6, 0xa8, 0x4, 0x8, 0x9, 0x2, 0x6, 0x5, 0x1, 0x1137, 0x8, 0xae, 0x4d70, 0x400, 0xfaa5, 0xffffff01, 0x15, 0x7a, 0x1], [0x0, 0x8, 0x9, 0x0, 0x6, 0x8, 0x9, 0x4, 0xfffffff8, 0x200, 0xf, 0x1ff, 0x80, 0x6727, 0x7fff, 0x9, 0x200, 0xfffffc3a, 0xe3, 0x400, 0x0, 0x4, 0xdfd2, 0x39, 0x101, 0x9, 0x1, 0x1, 0xa, 0x7, 0x10001, 0x1, 0x6, 0x400, 0x0, 0x8, 0x2, 0x9, 0x9, 0x6, 0x200, 0x0, 0x2334, 0x6, 0x1, 0x2, 0x6f51, 0x81, 0x5, 0x0, 0x7, 0x3, 0x7, 0x34254b70, 0x4ad, 0x3, 0x8b21, 0x1, 0x9, 0x3, 0xc, 0xffff, 0x7, 0x8]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000040)={r3}, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) 5.596277283s ago: executing program 0 (id=839): r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000100)) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x82) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) io_uring_setup(0x177f, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000140)={0x3, 0x1, 0x0, 0xfffffffe}) 5.145282117s ago: executing program 1 (id=840): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="340100001900240026bd7000fcdbdf250a140004fc01000300280000080017000600000014000500ff010000000000000000000000000001050014000400000008001900", @ANYRES32=0x0, @ANYBLOB="eb000880c02d21217f92b08ed1ae755c0dd5048e8d77bb2247b48e92c5c7f80af5a203b53d98f0f1e2a7a75a0202efc06d90ec6a438c3220ba25336372811673706c4d579331dddf99752372f308d9b3e8a8a0f45f773816ff0bc6b5ae43f0a527ae651a193697dc6e639ba91dcbf0c509403b7b386a5989e406656854a6d109d6b7d52f4a6ac4d94bfbe9156fd224c3ecd097a9103a9aca10f5c96d530d875aff5acefacaeec95bb6dd4c27bfd65d9d00e6b984d9b38bba37f3d7a9ca90a3d05525941ae7aef5b7e1ab0d1e6b299cf71c055512f7f45d1217760cb99161fb8eacc9df0c4360bcb837080f3e99d77f00"], 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x64000020) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) read(r5, &(0x7f0000000080)=""/129, 0x20) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0xc3934000) close_range(r4, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r3, &(0x7f0000000040), &(0x7f000009de80), 0x0) 5.124096759s ago: executing program 0 (id=841): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfffffffffffffe9e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x261, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000280)) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x8, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) 5.109680401s ago: executing program 4 (id=842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='devlink_hwerr\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/169, 0xa9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@fwd={0x0, 0x0, 0x0, 0x10, 0x2}, @union]}}, 0x0, 0x32}, 0x28) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000480)="1502c56dda4f26fbbbdfe3a504a4975a081858d2284abeeda00ccb3655ef2a3ff2d7b5b33a8a8a0ae0fba3f4a6a3f024ff5f3395541d52d283b1aedf62ebcb6adfd0b4f83d7f6796759d921d96df619d2f37e98d36f61aeb22913e7dc08ada02ab8c5f389a21fa9f9717f737fe31599f2361e4110f451a769bb5512f399543f47aa6b1f4eb9796854fd40550d99dd6f2b0a77d8f37a174697e9f73fbeb62af57f096f90dedcb516c5cee0db9fc151cc4e86a4cc1f4ca397baf479113ef6ec04bc64c84d9d08bb75d3aa0778fde8c57606841813b3859483f4873ccec7816838908d8321a72", 0xe5}, {&(0x7f0000000580)="4b0d5b92d401983e823ddd50d19ff908c1866d93b724c61cb5c226539bdebd3a7798244993ff76930ffdb2ae9029fc5515dce4b8d694845b764f3a55a65d648410ee2491aabdb924352d5e4ddcc2cf260a0df644e7d539757a6696d20b6e64fe569b6218e5e552aec888f4ce6395", 0x6e}, {&(0x7f0000000680)="c47b195b1556769532b9bd7a42507968a54245b9c2c941e6fc1df17bd016b8901abada74bec729fa41513da38150a7557d9cde435be8728b2860b85a6a1e31807e06a3fb1622801a72f012a663e414c0ce104b9661befc22cc17af1f536736447bf97f1ef9e7c5ca4680da908f038f02627374e5103c05a17824f23750d1a6338654912c6d665abdca4f783fd37121326920de394066bc7d405bc6215a1d1922823da8ba5bae55f4812e35892e5058e22a10fd38186c51949074fa9bebac14dc68b8ef3bab2a75ee4e3a01a38d1213e102dda62f", 0xd4}, {&(0x7f0000000300)}], 0x4, 0x0, 0x0, 0x1}, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000063f728e9497e7331000000000000000000000000000000000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000013302000000000000"], 0x27c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.988962615s ago: executing program 0 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$getown(r1, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000000640), 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040)=0x80000000, 0x4) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.834323894s ago: executing program 4 (id=844): r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000100)) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x82) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) io_uring_setup(0x177f, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x50, r0, 0xa7b7000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000140)={0x3, 0x1, 0x0, 0xfffffffe}) 3.153551775s ago: executing program 2 (id=845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000540)="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", 0x100}, {&(0x7f00000001c0)="59bca454e1d8711aca0e23ccc9354ee43e83078c8d0fd791e0ddadb5feb38ae2b9e3f6a5cca160f0090c1b1cb8eac69ebb2fa73863e9c8f0742101e63d681925dc9f1234035c60a304d9c7a34dffd183fe4ece120fa6d558ffae7822542c436b3e57242217ee348df57e52249011441c059f8e8e7dd3aca6751508d9e34cebabefe9f53a679bf3653b9e", 0x8a}, {&(0x7f0000000640)}], 0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000350001031abd7000fcffffff060000000ef324014560b17b1cfe7dc8a8809995e65129e63ab4add8d416646ef5ede3e3aa28d7867f7978d5d3"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) 3.120773992s ago: executing program 3 (id=846): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0xffffffffffffffb0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)={0x3, 'veth1_vlan\x00', {}, 0x7f}) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) poll(0x0, 0x0, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000002080)) 3.020982686s ago: executing program 0 (id=847): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) fchdir(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000500)=ANY=[@ANYBLOB="8a67b7e400d107a466a7d267a3b16a9e1ad5de2856c1c499886b9b4eead40900000070bc10a09c8fba1116e96f910408d99ec9a68945e445c9c962d01b9933d4699d2dbd699201ca6c1116d95afd940f849f6c6210db8ee50235f01302841a0bacf1"]) 2.390835105s ago: executing program 3 (id=848): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0xffffffffffffffb0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)={0x3, 'veth1_vlan\x00', {}, 0x7f}) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) poll(0x0, 0x0, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000002080)) 2.352811473s ago: executing program 4 (id=849): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a3b830000000000000000050000020900010073797a3048a37634140000001100010000000000000000000000000a"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r4, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) 1.426025511s ago: executing program 0 (id=850): keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.129762025s ago: executing program 3 (id=851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='devlink_hwerr\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/169, 0xa9) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) timer_settime(0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000063f728e9497e7331000000000000000000000000000000000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000013302000000000000"], 0x27c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 632.730597ms ago: executing program 3 (id=852): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket(0x28, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) r5 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, 0x0, 0xeeeeeeee}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}}, 0x800) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000001b80), 0x0) 205.68853ms ago: executing program 1 (id=853): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4802, 0x0, 0x7289, 0x1}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x26, 0x803, 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272f874ee3b", 0xf8, 0x4040004, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 0s ago: executing program 2 (id=854): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fcee3340dd4f13577b94b2dd030109021200190000000009048500000803002e00b9e305b6549963df89af09daa06cac1e2577cc8aa5d158eaabc334439a527ff65bb371151b5d6d37415bef8109a0ca0d8fd968783f"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x3c}}, 0x2000c0d0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001e580)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680040008800c000280080001000000"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d00030068"], 0x5c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x40000, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000014) syz_open_dev$dri(0x0, 0x400, 0x400102) kernel console output (not intermixed with test programs): 1400 audit(1764990815.375:270): avc: denied { create } for pid=6402 comm="syz.3.102" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.886466][ T30] audit: type=1400 audit(1764990815.385:271): avc: denied { mounton } for pid=6402 comm="syz.3.102" path="/20/file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 130.003168][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'. [ 130.029063][ T30] audit: type=1400 audit(1764990815.435:272): avc: denied { ioctl } for pid=6402 comm="syz.3.102" path="socket:[9841]" dev="sockfs" ino=9841 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.662526][ T30] audit: type=1400 audit(1764990817.535:273): avc: denied { read } for pid=6425 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.512149][ T58] libceph: connect (1)[c::]:6789 error -101 [ 132.521382][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 132.600160][ T58] libceph: connect (1)[c::]:6789 error -101 [ 132.610663][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 132.643385][ T30] audit: type=1400 audit(1764990818.515:274): avc: denied { bind } for pid=6437 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.801093][ T30] audit: type=1400 audit(1764990818.545:275): avc: denied { node_bind } for pid=6437 comm="syz.0.109" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 132.872910][ T6424] ceph: No mds server is up or the cluster is laggy [ 132.883133][ T58] libceph: connect (1)[c::]:6789 error -101 [ 133.041188][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.418013][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 134.508699][ T6459] netlink: 'syz.2.113': attribute type 12 has an invalid length. [ 134.675752][ T6459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.113'. [ 134.833869][ T30] audit: type=1400 audit(1764990820.645:276): avc: denied { write } for pid=6453 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 136.728939][ T30] audit: type=1400 audit(1764990822.355:277): avc: denied { mount } for pid=6448 comm="syz.1.112" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.200347][ T30] audit: type=1400 audit(1764990823.075:278): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.391414][ T6480] macvlan2: entered promiscuous mode [ 137.396920][ T6480] bridge0: entered promiscuous mode [ 137.461901][ T30] audit: type=1400 audit(1764990823.165:279): avc: denied { ioctl } for pid=6477 comm="syz.3.118" path="socket:[10710]" dev="sockfs" ino=10710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.486894][ T30] audit: type=1400 audit(1764990823.235:280): avc: denied { getopt } for pid=6477 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.256640][ T6490] new mount options do not match the existing superblock, will be ignored [ 139.449457][ T6487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.091069][ T30] audit: type=1400 audit(1764990825.965:281): avc: denied { bind } for pid=6491 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.029949][ T6492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.131809][ T6509] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 141.452359][ T30] audit: type=1400 audit(1764990827.305:282): avc: denied { ioctl } for pid=6507 comm="syz.0.125" path="socket:[10070]" dev="sockfs" ino=10070 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.485986][ T6492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.628774][ T30] audit: type=1400 audit(1764990827.325:283): avc: denied { write } for pid=6507 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.662899][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.679235][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.693069][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.706071][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.722585][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.731872][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.743753][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.753284][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.890901][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 141.902725][ T6512] netlink: 'syz.0.125': attribute type 3 has an invalid length. [ 142.019060][ T6515] overlayfs: missing 'lowerdir' [ 143.023693][ T6492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.180390][ T6492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.701163][ T30] audit: type=1400 audit(1764990830.575:284): avc: denied { read write } for pid=6526 comm="syz.0.129" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 144.783833][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.949503][ T30] audit: type=1400 audit(1764990830.575:285): avc: denied { open } for pid=6526 comm="syz.0.129" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 145.036010][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.659748][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.774363][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.815858][ T30] audit: type=1326 audit(1764990831.685:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 145.929746][ T30] audit: type=1326 audit(1764990831.685:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 146.227386][ T6535] SELinux: failed to load policy [ 146.229885][ T30] audit: type=1326 audit(1764990831.685:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 146.380166][ T30] audit: type=1326 audit(1764990831.685:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 146.405904][ T30] audit: type=1326 audit(1764990831.685:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 146.429927][ T30] audit: type=1326 audit(1764990831.715:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 146.454377][ T30] audit: type=1326 audit(1764990831.715:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 146.478198][ T30] audit: type=1326 audit(1764990831.715:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 146.542468][ T30] audit: type=1326 audit(1764990831.715:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 146.705640][ T30] audit: type=1326 audit(1764990831.715:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 148.219435][ T5818] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.369703][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 148.413396][ T5818] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 148.426483][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.816989][ T5818] pvrusb2: Hardware description: Terratec Grabster AV400 [ 148.860977][ T5818] pvrusb2: ********** [ 148.864995][ T5818] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 148.915973][ T5818] pvrusb2: Important functionality might not be entirely working. [ 148.936338][ T5818] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 149.057629][ T5818] pvrusb2: ********** [ 149.100761][ T2340] pvrusb2: Invalid write control endpoint [ 149.864025][ T6575] validate_nla: 44 callbacks suppressed [ 149.864056][ T6575] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 149.881260][ T6575] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 150.244073][ T2340] pvrusb2: Invalid write control endpoint [ 150.250900][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 150.261118][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 150.268665][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 150.279043][ T2340] pvrusb2: Device being rendered inoperable [ 150.304884][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 150.371696][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 150.556114][ T2340] pvrusb2: Attached sub-driver cx25840 [ 150.572358][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 151.730387][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 152.187955][ T5823] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 152.429124][ T89] usb 2-1: USB disconnect, device number 2 [ 152.931476][ T6579] sctp: [Deprecated]: syz.3.141 (pid 6579) Use of int in max_burst socket option. [ 152.931476][ T6579] Use struct sctp_assoc_value instead [ 152.952020][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 152.952034][ T30] audit: type=1400 audit(1764990838.825:331): avc: denied { ioctl } for pid=6577 comm="syz.3.141" path="socket:[10904]" dev="sockfs" ino=10904 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.494056][ T6629] hpfs: hpfs_map_sector(): read error [ 154.243055][ T30] audit: type=1400 audit(1764990840.115:332): avc: denied { read write } for pid=6634 comm="syz.0.148" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.952976][ T30] audit: type=1400 audit(1764990840.115:333): avc: denied { open } for pid=6634 comm="syz.0.148" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.032722][ T30] audit: type=1400 audit(1764990840.115:334): avc: denied { read write } for pid=6634 comm="syz.0.148" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 155.109940][ T30] audit: type=1400 audit(1764990840.115:335): avc: denied { open } for pid=6634 comm="syz.0.148" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 155.307196][ T30] audit: type=1400 audit(1764990840.405:336): avc: denied { remount } for pid=6636 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 155.423849][ T6649] ptrace attach of "./syz-executor exec"[5812] was attempted by "./syz-executor exec"[6649] [ 155.563511][ T30] audit: type=1326 audit(1764990840.865:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072af8f749 code=0x7ffc0000 [ 155.566589][ T6648] bridge0: entered promiscuous mode [ 155.648019][ T6648] macsec2: entered promiscuous mode [ 155.891026][ T30] audit: type=1326 audit(1764990840.865:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f072af8f749 code=0x7ffc0000 [ 156.109881][ T30] audit: type=1326 audit(1764990840.865:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072af8f749 code=0x7ffc0000 [ 156.251656][ T30] audit: type=1326 audit(1764990840.865:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.0.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072af8f749 code=0x7ffc0000 [ 158.645120][ T6673] netlink: 60 bytes leftover after parsing attributes in process `syz.0.154'. [ 158.654612][ T6673] unsupported nlmsg_type 40 [ 158.938915][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 158.938931][ T30] audit: type=1400 audit(1764990844.805:346): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.997453][ T30] audit: type=1400 audit(1764990844.845:347): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.203777][ T30] audit: type=1400 audit(1764990844.845:348): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.369497][ T30] audit: type=1400 audit(1764990844.855:349): avc: denied { read } for pid=6668 comm="syz.1.155" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.480268][ T30] audit: type=1400 audit(1764990844.855:350): avc: denied { open } for pid=6668 comm="syz.1.155" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.682519][ T30] audit: type=1400 audit(1764990844.915:351): avc: denied { create } for pid=6668 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.740873][ T30] audit: type=1400 audit(1764990844.925:352): avc: denied { read write } for pid=6668 comm="syz.1.155" name="video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 159.840289][ T30] audit: type=1400 audit(1764990844.935:353): avc: denied { open } for pid=6668 comm="syz.1.155" path="/dev/video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 159.990608][ T30] audit: type=1400 audit(1764990845.105:354): avc: denied { read } for pid=6677 comm="syz.0.156" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.214122][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 161.222035][ T6694] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 161.236600][ T30] audit: type=1400 audit(1764990845.105:355): avc: denied { open } for pid=6677 comm="syz.0.156" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.693836][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 161.723417][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 162.357032][ T6710] SELinux: policydb magic number 0xac0 does not match expected magic number 0xf97cff8c [ 162.473934][ T6710] SELinux: failed to load policy [ 162.670839][ T6712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.325251][ T6712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.652302][ T6712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.061957][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 164.061992][ T30] audit: type=1400 audit(1764990849.925:387): avc: denied { read } for pid=6716 comm="syz.1.165" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.099534][ T30] audit: type=1400 audit(1764990849.925:388): avc: denied { open } for pid=6716 comm="syz.1.165" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.133373][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 164.941720][ T30] audit: type=1400 audit(1764990850.275:389): avc: denied { read } for pid=6718 comm="syz.4.166" dev="nsfs" ino=4026532946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 164.973519][ T30] audit: type=1400 audit(1764990850.285:390): avc: denied { open } for pid=6718 comm="syz.4.166" path="net:[4026532946]" dev="nsfs" ino=4026532946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.017837][ T30] audit: type=1400 audit(1764990850.285:391): avc: denied { create } for pid=6718 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.038435][ T30] audit: type=1326 audit(1764990850.485:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7338f749 code=0x7ffc0000 [ 165.065345][ T30] audit: type=1326 audit(1764990850.485:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7338f749 code=0x7ffc0000 [ 165.090926][ T30] audit: type=1326 audit(1764990850.485:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffa7338f749 code=0x7ffc0000 [ 165.114330][ T30] audit: type=1400 audit(1764990850.565:395): avc: denied { mounton } for pid=6718 comm="syz.4.166" path="/34/file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.136935][ T30] audit: type=1400 audit(1764990850.575:396): avc: denied { remount } for pid=6718 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.610349][ T6740] ptrace attach of "./syz-executor exec"[5815] was attempted by ""[6740] [ 165.623081][ T6740] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.170'. [ 166.005445][ T6712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.016469][ T9] IPVS: starting estimator thread 0... [ 166.159374][ T6744] IPVS: using max 40 ests per chain, 96000 per kthread [ 166.235919][ T9] libceph: connect (1)[c::]:6789 error -101 [ 166.261057][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 166.476615][ T9] libceph: connect (1)[c::]:6789 error -101 [ 166.502050][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 166.801994][ T6755] process 'syz.2.171' launched './file1' with NULL argv: empty string added [ 167.508357][ T9] libceph: connect (1)[c::]:6789 error -101 [ 167.693800][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 167.917454][ T6745] ceph: No mds server is up or the cluster is laggy [ 167.941830][ T3887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.510905][ T89] libceph: connect (1)[c::]:6789 error -101 [ 168.517032][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 168.540232][ T3887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.800500][ T3887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.914457][ T3887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.311425][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 169.311445][ T30] audit: type=1400 audit(1764990855.065:416): avc: denied { ioctl } for pid=6771 comm="syz.0.175" path="socket:[11928]" dev="sockfs" ino=11928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.353065][ T6777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6777 comm=syz.3.176 [ 169.430783][ T6774] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 169.468961][ T6773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.509722][ T30] audit: type=1400 audit(1764990855.185:417): avc: denied { setopt } for pid=6772 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.572888][ T6777] bond1: (slave gretap1): making interface the new active one [ 169.585414][ T6773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.129515][ T30] audit: type=1400 audit(1764990855.435:418): avc: denied { create } for pid=6772 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 170.152357][ T6777] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 170.266242][ T30] audit: type=1400 audit(1764990856.125:419): avc: denied { create } for pid=6780 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.293617][ T30] audit: type=1400 audit(1764990856.125:420): avc: denied { write } for pid=6780 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.451396][ T30] audit: type=1400 audit(1764990856.265:421): avc: denied { shutdown } for pid=6780 comm="syz.2.177" lport=39361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.489254][ T6774] vlan2: entered allmulticast mode [ 170.509536][ T6774] bond1: entered allmulticast mode [ 170.525684][ T6774] gretap1: entered allmulticast mode [ 170.538328][ T6774] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 170.783030][ T30] audit: type=1400 audit(1764990856.655:422): avc: denied { read write } for pid=6791 comm="syz.0.179" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 170.811959][ T6792] input: syz0 as /devices/virtual/input/input6 [ 170.821391][ T5920] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 170.916606][ T6793] netlink: 29 bytes leftover after parsing attributes in process `syz.0.179'. [ 171.152018][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 171.166623][ T30] audit: type=1400 audit(1764990856.655:423): avc: denied { open } for pid=6791 comm="syz.0.179" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 171.200274][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 171.226059][ T5920] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 171.241046][ T5920] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 171.276754][ T30] audit: type=1400 audit(1764990856.675:424): avc: denied { ioctl } for pid=6791 comm="syz.0.179" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 171.302742][ T5920] usb 4-1: Product: syz [ 171.307241][ T5920] usb 4-1: Manufacturer: syz [ 171.327827][ T5920] usb 4-1: SerialNumber: syz [ 171.353721][ T30] audit: type=1400 audit(1764990856.705:425): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=2822 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.097850][ T5920] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 172.109952][ T5920] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 172.117892][ T5920] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 172.128192][ T5920] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 172.370522][ T5920] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 172.390871][ T5920] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 172.468611][ T6803] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 172.848783][ T5920] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 172.867458][ T5920] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 172.914958][ T5920] usb 4-1: USB disconnect, device number 3 [ 174.803879][ T6816] affs: No valid root block on device nullb0 [ 174.871601][ T6818] overlayfs: missing 'lowerdir' [ 175.008776][ T5920] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 175.034435][ T5920] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 175.045790][ T5920] visor 4-1:1.0: device disconnected [ 175.679727][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 175.679749][ T30] audit: type=1400 audit(1764990861.545:441): avc: denied { create } for pid=6823 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 177.050329][ T30] audit: type=1400 audit(1764990861.545:442): avc: denied { setopt } for pid=6823 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 177.336457][ T30] audit: type=1400 audit(1764990863.135:443): avc: denied { unlink } for pid=6840 comm="syz.0.190" name="#3" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 177.699979][ T30] audit: type=1400 audit(1764990863.145:444): avc: denied { mount } for pid=6840 comm="syz.0.190" name="/" dev="overlay" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.082252][ T30] audit: type=1400 audit(1764990863.925:445): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 178.324717][ T30] audit: type=1400 audit(1764990864.195:446): avc: denied { create } for pid=6852 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.455945][ T30] audit: type=1400 audit(1764990864.225:447): avc: denied { create } for pid=6850 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.799866][ T30] audit: type=1400 audit(1764990864.675:448): avc: denied { create } for pid=6855 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.841427][ T30] audit: type=1400 audit(1764990864.715:449): avc: denied { connect } for pid=6855 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.864654][ T5965] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 179.031312][ T30] audit: type=1400 audit(1764990864.905:450): avc: denied { write } for pid=6856 comm="syz.1.195" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.610199][ T6861] binder: 6856:6861 ioctl c00c620f 2000000003c0 returned -22 [ 179.714988][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 179.747143][ T5965] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 179.756652][ T5965] usb 3-1: config 0 has no interface number 0 [ 179.765910][ T5965] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 179.776273][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.785964][ T5965] usb 3-1: Product: syz [ 179.802678][ T5965] usb 3-1: Manufacturer: syz [ 179.822298][ T5965] usb 3-1: SerialNumber: syz [ 180.127922][ T5965] usb 3-1: config 0 descriptor?? [ 180.413908][ T5965] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 180.450384][ T6851] bridge0: port 3(syz_tun) entered blocking state [ 180.489711][ T6851] bridge0: port 3(syz_tun) entered disabled state [ 180.539875][ T6851] syz_tun: entered allmulticast mode [ 180.557993][ T6851] syz_tun: entered promiscuous mode [ 180.599930][ T5965] gspca_spca1528: reg_w err -71 [ 180.651199][ T5965] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 180.686105][ T5965] usb 3-1: USB disconnect, device number 2 [ 180.721911][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 180.721923][ T30] audit: type=1400 audit(1764990866.595:456): avc: denied { mount } for pid=6869 comm="syz.3.199" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 181.036181][ T6873] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 181.044166][ T6873] netlink: 'syz.3.199': attribute type 2 has an invalid length. [ 181.054244][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 182.791046][ T30] audit: type=1400 audit(1764990868.655:457): avc: denied { create } for pid=6882 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.840081][ T30] audit: type=1400 audit(1764990868.715:458): avc: denied { bind } for pid=6882 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.997341][ T30] audit: type=1400 audit(1764990868.715:459): avc: denied { getopt } for pid=6882 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.033911][ T30] audit: type=1400 audit(1764990868.765:460): avc: denied { setopt } for pid=6882 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.365187][ T30] audit: type=1400 audit(1764990869.165:461): avc: denied { write } for pid=6891 comm="syz.2.204" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.777679][ T6897] lo speed is unknown, defaulting to 1000 [ 183.784269][ T6897] lo speed is unknown, defaulting to 1000 [ 183.805206][ T6897] lo speed is unknown, defaulting to 1000 [ 183.836673][ T6897] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.892416][ T6897] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 184.143316][ T6897] lo speed is unknown, defaulting to 1000 [ 184.150122][ T6897] lo speed is unknown, defaulting to 1000 [ 184.156544][ T6897] lo speed is unknown, defaulting to 1000 [ 184.163014][ T6897] lo speed is unknown, defaulting to 1000 [ 184.170471][ T6897] lo speed is unknown, defaulting to 1000 [ 184.202231][ T30] audit: type=1400 audit(1764990869.635:462): avc: denied { create } for pid=6894 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.312058][ T30] audit: type=1400 audit(1764990869.645:463): avc: denied { write } for pid=6894 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 185.083680][ T30] audit: type=1400 audit(1764990870.805:464): avc: denied { create } for pid=6900 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 186.133790][ T6918] syz.4.218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 186.659683][ T30] audit: type=1400 audit(1764990872.005:465): avc: denied { create } for pid=6911 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.993392][ T30] audit: type=1400 audit(1764990872.105:466): avc: denied { write } for pid=6913 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.147761][ T30] audit: type=1400 audit(1764990872.105:467): avc: denied { nlmsg_write } for pid=6913 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.369676][ T30] audit: type=1400 audit(1764990872.115:468): avc: denied { create } for pid=6913 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.865597][ T30] audit: type=1400 audit(1764990872.125:469): avc: denied { write } for pid=6913 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 188.689036][ T6922] overlayfs: missing 'lowerdir' [ 189.821085][ T30] audit: type=1400 audit(1764990875.695:470): avc: denied { create } for pid=6932 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.021569][ T30] audit: type=1400 audit(1764990875.715:471): avc: denied { write } for pid=6932 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.212483][ T30] audit: type=1400 audit(1764990876.075:472): avc: denied { read } for pid=6942 comm="syz.3.215" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.235902][ T6944] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[6944] [ 190.433750][ T30] audit: type=1400 audit(1764990876.085:473): avc: denied { open } for pid=6942 comm="syz.3.215" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.592411][ T30] audit: type=1400 audit(1764990876.085:474): avc: denied { ioctl } for pid=6942 comm="syz.3.215" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.200389][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 191.223115][ T6951] netlink: 'syz.2.216': attribute type 10 has an invalid length. [ 191.233326][ T6951] veth1_macvtap: left promiscuous mode [ 191.243424][ T6951] team0: Device veth1_macvtap failed to register rx_handler [ 194.182246][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 194.182265][ T30] audit: type=1400 audit(1764990880.055:477): avc: denied { map } for pid=6975 comm="syz.1.223" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.228600][ T30] audit: type=1400 audit(1764990880.055:478): avc: denied { execute } for pid=6975 comm="syz.1.223" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.431154][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.655598][ T6974] overlayfs: overlapping lowerdir path [ 194.816394][ T6972] overlayfs: overlapping lowerdir path [ 195.353940][ T30] audit: type=1400 audit(1764990880.765:479): avc: denied { create } for pid=6983 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 195.379389][ T5965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 195.442666][ T30] audit: type=1400 audit(1764990880.765:480): avc: denied { connect } for pid=6983 comm="syz.0.225" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.539729][ T30] audit: type=1400 audit(1764990880.775:481): avc: denied { write } for pid=6983 comm="syz.0.225" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.630843][ T5965] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42 [ 195.754663][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.841540][ T30] audit: type=1400 audit(1764990881.655:482): avc: denied { read } for pid=6988 comm="syz.3.226" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.995000][ T30] audit: type=1400 audit(1764990881.655:483): avc: denied { open } for pid=6988 comm="syz.3.226" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.997358][ T5965] usb 2-1: config 0 descriptor?? [ 196.112884][ T30] audit: type=1400 audit(1764990881.655:484): avc: denied { ioctl } for pid=6988 comm="syz.3.226" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 196.158905][ T5965] ldusb 2-1:0.0: Interrupt in endpoint not found [ 196.597869][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 196.598016][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 196.604311][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 196.604336][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 196.604355][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 196.769996][ T30] audit: type=1400 audit(1764990882.645:485): avc: denied { create } for pid=6994 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 197.070389][ T30] audit: type=1400 audit(1764990882.725:486): avc: denied { bind } for pid=6994 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 198.384547][ T7012] ntfs3(loop0): try to read out of volume at offset 0x0 [ 198.857653][ T6825] usb 2-1: USB disconnect, device number 3 [ 199.638802][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 199.664332][ T30] audit: type=1400 audit(1764990885.495:492): avc: denied { ioctl } for pid=7014 comm="syz.1.233" path="socket:[12787]" dev="sockfs" ino=12787 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.883807][ T30] audit: type=1400 audit(1764990885.655:493): avc: denied { setattr } for pid=7017 comm="syz.0.234" name="tty4" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 201.023389][ T30] audit: type=1400 audit(1764990886.895:494): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 201.175555][ T30] audit: type=1400 audit(1764990886.895:495): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.236070][ T30] audit: type=1400 audit(1764990886.895:496): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.301821][ T30] audit: type=1400 audit(1764990886.895:497): avc: denied { search } for pid=5482 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.360856][ T30] audit: type=1400 audit(1764990886.895:498): avc: denied { read } for pid=5482 comm="dhcpcd" name="n100" dev="tmpfs" ino=2867 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.578109][ T7036] SELinux: ebitmap: truncated map [ 201.601039][ T30] audit: type=1400 audit(1764990886.895:499): avc: denied { open } for pid=5482 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2867 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.939914][ T7051] lo speed is unknown, defaulting to 1000 [ 202.301548][ T7049] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 202.309219][ T7036] SELinux: failed to load policy [ 202.359386][ T30] audit: type=1400 audit(1764990886.895:500): avc: denied { getattr } for pid=5482 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2867 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.490524][ T30] audit: type=1400 audit(1764990887.165:501): avc: denied { ioctl } for pid=7024 comm="syz.4.235" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13465 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.463795][ T7084] futex_wake_op: syz.4.243 tries to shift op by 144; fix this program [ 204.790402][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 204.790417][ T30] audit: type=1400 audit(1764990890.665:519): avc: denied { getopt } for pid=7094 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.851693][ T5965] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 205.600228][ T30] audit: type=1400 audit(1764990890.695:520): avc: denied { append } for pid=7094 comm="syz.1.247" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 205.753914][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.790823][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.860599][ T5965] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 205.945844][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.976321][ T5965] usb 4-1: config 0 descriptor?? [ 206.936369][ T30] audit: type=1400 audit(1764990892.225:521): avc: denied { bind } for pid=7110 comm="syz.0.250" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.057570][ T30] audit: type=1400 audit(1764990892.225:522): avc: denied { name_bind } for pid=7110 comm="syz.0.250" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 207.246736][ T30] audit: type=1400 audit(1764990892.225:523): avc: denied { node_bind } for pid=7110 comm="syz.0.250" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 207.272155][ T7093] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 207.287002][ T30] audit: type=1400 audit(1764990893.145:524): avc: denied { relabelfrom } for pid=7092 comm="syz.3.246" name="NETLINK" dev="sockfs" ino=12970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 207.321202][ T5965] usbhid 4-1:0.0: can't add hid device: -71 [ 207.416289][ T30] audit: type=1400 audit(1764990893.155:525): avc: denied { relabelto } for pid=7092 comm="syz.3.246" name="NETLINK" dev="sockfs" ino=12970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 207.445353][ T5965] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 207.894394][ T5965] usb 4-1: USB disconnect, device number 4 [ 207.913942][ T30] audit: type=1400 audit(1764990893.395:526): avc: denied { connect } for pid=7120 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 208.560369][ T30] audit: type=1400 audit(1764990894.385:527): avc: denied { setopt } for pid=7129 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.869486][ T30] audit: type=1400 audit(1764990894.395:528): avc: denied { setopt } for pid=7129 comm="syz.3.254" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.913794][ T7127] SELinux: ebitmap: truncated map [ 210.638638][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 210.638683][ T30] audit: type=1400 audit(1764990896.505:530): avc: denied { module_request } for pid=7125 comm="syz.4.253" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 210.988118][ T7127] SELinux: failed to load policy [ 211.698784][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 211.707701][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 211.716649][ T7155] netlink: 'syz.0.257': attribute type 13 has an invalid length. [ 211.724424][ T7155] netlink: 'syz.0.257': attribute type 12 has an invalid length. [ 212.384761][ T7163] overlayfs: missing 'lowerdir' [ 212.971862][ T30] audit: type=1400 audit(1764990898.845:531): avc: denied { map } for pid=7165 comm="syz.0.260" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 213.002146][ T7166] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.343263][ T30] audit: type=1400 audit(1764990900.195:532): avc: denied { watch watch_reads } for pid=7172 comm="syz.2.262" path="/50" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.491403][ T30] audit: type=1400 audit(1764990900.365:533): avc: denied { getopt } for pid=7174 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 214.695670][ T7179] evm: overlay not supported [ 215.029465][ T30] audit: type=1400 audit(1764990900.585:534): avc: denied { watch } for pid=7175 comm="syz.4.263" path="/49/bus/file1" dev="overlay" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 215.344192][ T7180] openvswitch: netlink: Message has 592 unknown bytes. [ 215.427439][ T7180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.492787][ T30] audit: type=1400 audit(1764990900.585:535): avc: denied { watch_sb watch_reads } for pid=7175 comm="syz.4.263" path="/49/bus/file1" dev="overlay" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.578398][ T30] audit: type=1400 audit(1764990901.265:536): avc: denied { lock } for pid=7174 comm="syz.1.264" path="socket:[13646]" dev="sockfs" ino=13646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 216.693949][ T7192] o2cb: This node has not been configured. [ 216.700417][ T7192] o2cb: Cluster check failed. Fix errors before retrying. [ 216.708648][ T7192] (syz.3.267,7192,0):user_dlm_register:674 ERROR: status = -22 [ 216.716585][ T7192] (syz.3.267,7192,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 217.064964][ T30] audit: type=1400 audit(1764990902.565:537): avc: denied { mount } for pid=7190 comm="syz.3.267" name="/" dev="ocfs2_dlmfs" ino=13072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 217.262037][ T30] audit: type=1400 audit(1764990902.565:538): avc: denied { add_name } for pid=7190 comm="syz.3.267" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.280868][ T7196] Device name cannot be null; rc = [-22] [ 217.462338][ T30] audit: type=1400 audit(1764990902.565:539): avc: denied { create } for pid=7190 comm="syz.3.267" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 217.847418][ T6002] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.018690][ T30] audit: type=1400 audit(1764990902.565:540): avc: denied { associate } for pid=7190 comm="syz.3.267" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 218.045703][ T30] audit: type=1800 audit(1764990902.695:541): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.266" name="bus" dev="overlay" ino=304 res=0 errno=0 [ 218.132133][ T7196] netlink: 'syz.0.268': attribute type 2 has an invalid length. [ 218.239345][ T6002] usb 4-1: Using ep0 maxpacket: 32 [ 218.630874][ T30] audit: type=1400 audit(1764990904.465:542): avc: denied { create } for pid=7209 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.804084][ T30] audit: type=1400 audit(1764990905.595:543): avc: denied { getopt } for pid=7215 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.853058][ T5864] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 220.516630][ T6002] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.531090][ T6002] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 220.540025][ T30] audit: type=1400 audit(1764990906.395:544): avc: denied { bind } for pid=7201 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.603309][ T6002] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 220.614662][ T5864] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 220.629485][ T6002] usb 4-1: can't read configurations, error -71 [ 220.649851][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.709037][ T5864] usb 5-1: Product: syz [ 220.929493][ T5864] usb 5-1: Manufacturer: syz [ 220.952200][ T5864] usb 5-1: SerialNumber: syz [ 222.496508][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 222.622287][ T30] audit: type=1400 audit(1764990908.475:545): avc: denied { write } for pid=7232 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 222.642390][ T7236] netlink: 'syz.1.278': attribute type 2 has an invalid length. [ 223.250334][ T30] audit: type=1400 audit(1764990909.105:546): avc: denied { connect } for pid=7243 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.604221][ T5864] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 223.658147][ T5864] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 223.798670][ T5864] usb 5-1: USB disconnect, device number 4 [ 225.518650][ T30] audit: type=1400 audit(1764990911.385:547): avc: denied { create } for pid=7261 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.589395][ T30] audit: type=1400 audit(1764990911.425:548): avc: denied { bind } for pid=7261 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.681742][ T30] audit: type=1400 audit(1764990911.495:549): avc: denied { write } for pid=7261 comm="syz.0.283" path="socket:[13180]" dev="sockfs" ino=13180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.799459][ T30] audit: type=1400 audit(1764990911.545:550): avc: denied { connect } for pid=7261 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.869341][ T30] audit: type=1400 audit(1764990911.545:551): avc: denied { bind } for pid=7261 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.985182][ T30] audit: type=1400 audit(1764990911.545:552): avc: denied { create } for pid=7261 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 226.616336][ T7274] ALSA: seq fatal error: cannot create timer (-22) [ 227.030226][ T7275] lo speed is unknown, defaulting to 1000 [ 227.086394][ T7277] lo speed is unknown, defaulting to 1000 [ 227.715352][ T30] audit: type=1400 audit(1764990911.545:553): avc: denied { connect } for pid=7261 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.740708][ T30] audit: type=1400 audit(1764990911.545:554): avc: denied { write } for pid=7261 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.773590][ T30] audit: type=1400 audit(1764990911.775:555): avc: denied { getopt } for pid=7261 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.011387][ T30] audit: type=1400 audit(1764990913.745:556): avc: denied { getopt } for pid=7282 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.296256][ T30] audit: type=1400 audit(1764990914.165:557): avc: denied { ioctl } for pid=7285 comm="syz.1.287" path="socket:[14000]" dev="sockfs" ino=14000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.541913][ T7286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.575917][ T30] audit: type=1400 audit(1764990914.435:558): avc: denied { mount } for pid=7289 comm="syz.2.289" name="/" dev="autofs" ino=14375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 230.037276][ T30] audit: type=1400 audit(1764990914.445:559): avc: denied { unmount } for pid=7289 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 230.087725][ T30] audit: type=1400 audit(1764990915.655:560): avc: denied { bind } for pid=7291 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 230.161416][ T30] audit: type=1400 audit(1764990915.655:561): avc: denied { write } for pid=7291 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 230.442957][ T7286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.484494][ T7305] misc userio: Invalid payload size [ 230.570297][ T30] audit: type=1400 audit(1764990916.435:562): avc: denied { read write } for pid=7302 comm="syz.0.288" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 231.041834][ T7286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.496825][ T7286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.696792][ T205] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.724205][ T205] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.751255][ T3512] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.780656][ T3512] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.732625][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 232.732636][ T30] audit: type=1400 audit(1764990918.605:565): avc: denied { bind } for pid=7318 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 233.023023][ T30] audit: type=1400 audit(1764990918.895:566): avc: denied { name_bind } for pid=7323 comm="syz.0.298" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 233.465132][ T30] audit: type=1400 audit(1764990918.915:567): avc: denied { read write } for pid=7323 comm="syz.0.298" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.528430][ T30] audit: type=1400 audit(1764990918.915:568): avc: denied { open } for pid=7323 comm="syz.0.298" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.577198][ T30] audit: type=1400 audit(1764990918.915:569): avc: denied { ioctl } for pid=7323 comm="syz.0.298" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.607419][ T30] audit: type=1400 audit(1764990919.475:570): avc: denied { mount } for pid=7327 comm="syz.3.299" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 234.142930][ T30] audit: type=1400 audit(1764990920.015:571): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 234.464169][ T30] audit: type=1400 audit(1764990920.335:572): avc: denied { ioctl } for pid=7332 comm="syz.3.301" path="socket:[14627]" dev="sockfs" ino=14627 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.664548][ T7339] lo speed is unknown, defaulting to 1000 [ 235.150881][ T5864] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 235.323949][ T5864] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 235.339546][ T5864] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.358908][ T5864] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42 [ 235.375286][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.401638][ T5864] usb 4-1: config 0 descriptor?? [ 235.481555][ T30] audit: type=1400 audit(1764990921.355:573): avc: denied { accept } for pid=7350 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.669291][ T7337] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 236.725411][ T7358] Can't find ip_set type has(:net,net [ 237.144955][ T5987] IPVS: starting estimator thread 0... [ 237.241101][ T30] audit: type=1400 audit(1764990923.105:574): avc: denied { write } for pid=7367 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 237.271376][ T7370] IPVS: using max 38 ests per chain, 91200 per kthread [ 237.366027][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 237.838968][ T5821] usb 4-1: USB disconnect, device number 7 [ 238.431291][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 238.431322][ T30] audit: type=1400 audit(1764990924.165:578): avc: denied { create } for pid=7384 comm="syz.3.310" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 238.709559][ T30] audit: type=1400 audit(1764990924.175:579): avc: denied { mounton } for pid=7384 comm="syz.3.310" path="/61/file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 238.893396][ T30] audit: type=1400 audit(1764990924.765:580): avc: denied { mount } for pid=7389 comm="syz.4.312" name="/" dev="ramfs" ino=14737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 238.962868][ T7371] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 239.031254][ T7371] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 239.678838][ T7404] syzkaller0: entered promiscuous mode [ 239.708485][ T7404] syzkaller0: entered allmulticast mode [ 240.528785][ T7411] ªªªªªª: renamed from lo [ 240.671368][ T30] audit: type=1400 audit(1764990926.545:581): avc: denied { execute } for pid=7389 comm="syz.4.312" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 243.290462][ T30] audit: type=1400 audit(1764990929.045:582): avc: denied { listen } for pid=7430 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.018563][ T30] audit: type=1400 audit(1764990930.875:583): avc: denied { sys_module } for pid=7437 comm="syz.4.325" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 245.892213][ T30] audit: type=1400 audit(1764990931.765:584): avc: denied { read } for pid=7435 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.350977][ T30] audit: type=1400 audit(1764990931.945:585): avc: denied { read write } for pid=7435 comm="syz.3.324" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.501295][ T30] audit: type=1400 audit(1764990931.945:586): avc: denied { open } for pid=7435 comm="syz.3.324" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.529739][ T7460] mac80211_hwsim hwsim5 4: renamed from wlan1 (while UP) [ 247.159397][ T30] audit: type=1400 audit(1764990931.955:587): avc: denied { ioctl } for pid=7454 comm="syz.4.328" path="socket:[14314]" dev="sockfs" ino=14314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.186358][ T30] audit: type=1400 audit(1764990932.665:588): avc: denied { ioctl } for pid=7461 comm="syz.2.329" path="socket:[14323]" dev="sockfs" ino=14323 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 248.353756][ T30] audit: type=1400 audit(1764990934.205:589): avc: denied { setopt } for pid=7474 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 248.865074][ T7485] misc userio: Invalid payload size [ 249.870461][ T5823] Bluetooth: hci3: unexpected event for opcode 0x0024 [ 249.889173][ T7490] binder: 7480:7490 ioctl 400c620e 0 returned -14 [ 249.918028][ T30] audit: type=1400 audit(1764990934.815:590): avc: denied { read } for pid=7482 comm="syz.1.335" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 250.689370][ T30] audit: type=1400 audit(1764990934.815:591): avc: denied { open } for pid=7482 comm="syz.1.335" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 251.407469][ T30] audit: type=1400 audit(1764990935.755:592): avc: denied { read } for pid=7480 comm="syz.0.333" path="socket:[15390]" dev="sockfs" ino=15390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.074961][ T30] audit: type=1400 audit(1764990937.925:593): avc: denied { listen } for pid=7503 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.051568][ T30] audit: type=1400 audit(1764990938.915:594): avc: denied { create } for pid=7518 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 253.215861][ T30] audit: type=1400 audit(1764990938.925:595): avc: denied { ioctl } for pid=7518 comm="syz.2.341" path="socket:[15075]" dev="sockfs" ino=15075 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 253.401405][ T7514] input: syz1 as /devices/virtual/input/input7 [ 253.443159][ T30] audit: type=1400 audit(1764990939.315:596): avc: denied { read } for pid=7522 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.538585][ T30] audit: type=1400 audit(1764990939.385:597): avc: denied { connect } for pid=7522 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.848348][ T30] audit: type=1400 audit(1764990939.435:598): avc: denied { shutdown } for pid=7522 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.123818][ T30] audit: type=1400 audit(1764990939.785:599): avc: denied { read } for pid=7529 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.461061][ T30] audit: type=1400 audit(1764990941.335:600): avc: denied { ioctl } for pid=7545 comm="syz.0.348" path="socket:[15101]" dev="sockfs" ino=15101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.565975][ T5138] Bluetooth: hci4: command 0x0405 tx timeout [ 256.218980][ T7552] netlink: 76 bytes leftover after parsing attributes in process `syz.4.347'. [ 256.577508][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.717333][ T7574] netlink: 'syz.3.354': attribute type 17 has an invalid length. [ 258.725992][ T7574] netlink: 5 bytes leftover after parsing attributes in process `syz.3.354'. [ 258.735336][ T7574] macvtap0: entered allmulticast mode [ 258.741968][ T7574] veth0_macvtap: entered allmulticast mode [ 258.754669][ T7574] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 259.522590][ T5138] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 259.991879][ T30] audit: type=1400 audit(1764990945.865:601): avc: denied { append } for pid=7586 comm="syz.0.357" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 260.906685][ T30] audit: type=1400 audit(1764990945.895:602): avc: denied { create } for pid=7586 comm="syz.0.357" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.503316][ T30] audit: type=1400 audit(1764990945.895:603): avc: denied { write } for pid=7586 comm="syz.0.357" name="file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.526389][ T30] audit: type=1400 audit(1764990945.895:604): avc: denied { open } for pid=7586 comm="syz.0.357" path="/80/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 261.648570][ T7603] new mount options do not match the existing superblock, will be ignored [ 262.209356][ T30] audit: type=1400 audit(1764990946.165:605): avc: denied { ioctl } for pid=7586 comm="syz.0.357" path="/80/file0" dev="tmpfs" ino=447 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 262.259574][ T30] audit: type=1400 audit(1764990946.815:606): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.475179][ T30] audit: type=1400 audit(1764990948.995:607): avc: denied { firmware_load } for pid=7605 comm="syz.2.361" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 263.560534][ T7612] syz.2.361 (7612) used greatest stack depth: 18968 bytes left [ 264.471297][ T7624] x_tables: duplicate underflow at hook 1 [ 264.805587][ T30] audit: type=1400 audit(1764990950.355:608): avc: denied { ioctl } for pid=7618 comm="syz.2.364" path="socket:[15182]" dev="sockfs" ino=15182 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 264.841523][ T30] audit: type=1400 audit(1764990950.715:609): avc: denied { ioctl } for pid=7616 comm="syz.1.365" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 265.277558][ T30] audit: type=1400 audit(1764990951.145:610): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 265.671035][ T7634] overlayfs: missing 'lowerdir' [ 268.680878][ T7655] mmap: syz.1.370 (7655) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 269.269379][ T6002] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 270.372112][ T6002] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 270.399762][ T6002] usb 4-1: config 16 has no interface number 0 [ 270.409408][ T6002] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 270.430259][ T6002] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.493566][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'. [ 270.932539][ T7678] tipc: Started in network mode [ 270.939880][ T7678] tipc: Node identity ac14140f, cluster identity 4711 [ 270.949597][ T7678] tipc: New replicast peer: 255.255.255.255 [ 270.961597][ T7678] tipc: Enabled bearer , priority 10 [ 270.973537][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 270.984452][ T7678] tipc: Disabling bearer [ 271.298342][ T6002] usb 4-1: string descriptor 0 read error: -71 [ 271.541953][ T7681] binder: 7679:7681 ioctl 8912 200000000100 returned -22 [ 272.052571][ T6002] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 272.063651][ T6002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.076741][ T6002] usb 4-1: can't set config #16, error -71 [ 272.086567][ T6002] usb 4-1: USB disconnect, device number 8 [ 274.189717][ T30] audit: type=1400 audit(1764990959.575:611): avc: denied { ioctl } for pid=7697 comm="syz.0.380" path="socket:[16196]" dev="sockfs" ino=16196 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 276.015348][ T7720] bridge1: entered promiscuous mode [ 276.020703][ T7720] bridge1: entered allmulticast mode [ 276.354432][ T7722] XFS (nbd3): SB validate failed with error -5. [ 276.418732][ T30] audit: type=1400 audit(1764990962.285:612): avc: denied { block_suspend } for pid=7716 comm="syz.3.385" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 276.809006][ T30] audit: type=1400 audit(1764990962.665:613): avc: denied { append } for pid=7716 comm="syz.3.385" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 278.794777][ T7749] lo speed is unknown, defaulting to 1000 [ 279.479350][ T852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 279.892617][ T852] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 279.924920][ T852] usb 2-1: config 0 has no interface number 0 [ 280.000548][ T852] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 280.039134][ T852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.075277][ T852] usb 2-1: Product: syz [ 280.099503][ T852] usb 2-1: Manufacturer: syz [ 280.108646][ T852] usb 2-1: SerialNumber: syz [ 280.135831][ T852] usb 2-1: config 0 descriptor?? [ 280.226473][ T852] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 280.237518][ T852] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 281.190589][ T30] audit: type=1400 audit(1764990967.055:614): avc: denied { shutdown } for pid=7769 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 281.237627][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 281.318237][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 281.545767][ T30] audit: type=1400 audit(1764990967.415:615): avc: denied { ioctl } for pid=7775 comm="syz.4.398" path="socket:[16736]" dev="sockfs" ino=16736 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 281.610593][ T852] libceph: connect (1)[c::]:6789 error -101 [ 281.624010][ T852] libceph: mon0 (1)[c::]:6789 connect error [ 281.639963][ T6825] IPVS: starting estimator thread 0... [ 281.739340][ T7780] IPVS: using max 39 ests per chain, 93600 per kthread [ 281.885159][ T7772] ceph: No mds server is up or the cluster is laggy [ 282.760589][ T5954] usb 2-1: USB disconnect, device number 4 [ 282.944282][ T30] audit: type=1400 audit(1764990968.815:616): avc: denied { read } for pid=7781 comm="syz.2.399" path="socket:[16757]" dev="sockfs" ino=16757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.687190][ T7824] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 286.008474][ T5920] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 286.982310][ T5920] usb 2-1: config 16 has an invalid interface number: 19 but max is 0 [ 287.025470][ T5920] usb 2-1: config 16 has no interface number 0 [ 287.031731][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 287.031974][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 287.035379][ T7838] IPVS: sh: FWM 3 0x00000003 - no destination available [ 287.052985][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 287.055623][ T5920] usb 2-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 287.060798][ T7831] ceph: No mds server is up or the cluster is laggy [ 287.323371][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 287.329553][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 287.341101][ T5920] usb 2-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.405180][ T5920] usb 2-1: string descriptor 0 read error: -71 [ 287.422578][ T7840] block nbd0: shutting down sockets [ 287.442675][ T5920] usb 2-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 287.536018][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.558764][ T5920] usb 2-1: can't set config #16, error -71 [ 287.586259][ T30] audit: type=1400 audit(1764990973.425:617): avc: denied { wake_alarm } for pid=7843 comm="syz.3.414" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 287.666399][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 287.671405][ T5920] usb 2-1: USB disconnect, device number 5 [ 287.919865][ T5954] libceph: connect (1)[c::]:6789 error -101 [ 287.926066][ T5954] libceph: mon0 (1)[c::]:6789 connect error [ 288.067710][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 288.451316][ T5954] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 289.490021][ T7869] netlink: 76 bytes leftover after parsing attributes in process `syz.4.418'. [ 290.231937][ T7867] netlink: 'syz.2.419': attribute type 4 has an invalid length. [ 290.454683][ T5954] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.463726][ T5954] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.474496][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.483776][ T5954] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 290.497708][ T5954] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 290.534698][ T5954] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.554371][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.589395][ T5954] usb 1-1: Product: syz [ 290.599604][ T5954] usb 1-1: Manufacturer: syz [ 290.621584][ T5954] cdc_wdm 1-1:1.0: skipping garbage [ 290.626844][ T5954] cdc_wdm 1-1:1.0: skipping garbage [ 290.741252][ T5954] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 290.747575][ T5954] cdc_wdm 1-1:1.0: Unknown control protocol [ 291.491554][ T30] audit: type=1400 audit(1764990976.915:618): avc: denied { connect } for pid=7875 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.706722][ T30] audit: type=1400 audit(1764990976.925:619): avc: denied { write } for pid=7875 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.040248][ T7890] netlink: 'syz.1.425': attribute type 17 has an invalid length. [ 292.048395][ T7890] netlink: 5 bytes leftover after parsing attributes in process `syz.1.425'. [ 292.058864][ T7890] macvtap0: entered allmulticast mode [ 292.067407][ T7890] veth0_macvtap: entered allmulticast mode [ 292.077594][ T7890] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 292.112330][ T7876] Sensor B: ================= START STATUS ================= [ 292.120111][ T7876] Sensor B: Test Pattern: 75% Colorbar [ 292.125690][ T7876] Sensor B: Show Information: All [ 292.130737][ T7876] Sensor B: Vertical Flip: false [ 292.135662][ T7876] Sensor B: Horizontal Flip: false [ 292.140779][ T7876] Sensor B: Brightness: 128 [ 292.145258][ T7876] Sensor B: Contrast: 128 [ 292.149765][ T7876] Sensor B: Hue: 0 [ 292.153482][ T7876] Sensor B: Saturation: 128 [ 292.157977][ T7876] Sensor B: ================== END STATUS ================== [ 292.376007][ T7876] wg1: entered promiscuous mode [ 292.380900][ T7876] wg1: entered allmulticast mode [ 292.794428][ T30] audit: type=1400 audit(1764990978.665:620): avc: denied { ioctl } for pid=7892 comm="syz.4.426" path="socket:[16907]" dev="sockfs" ino=16907 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.202003][ T7495] usb 1-1: USB disconnect, device number 2 [ 294.379427][ T30] audit: type=1400 audit(1764990980.005:621): avc: denied { ioctl } for pid=7902 comm="syz.0.429" path="socket:[16934]" dev="sockfs" ino=16934 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.608750][ T7921] netlink: 2 bytes leftover after parsing attributes in process `syz.2.431'. [ 294.715155][ T30] audit: type=1400 audit(1764990980.585:622): avc: denied { sqpoll } for pid=7899 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 294.866947][ T30] audit: type=1400 audit(1764990980.695:623): avc: denied { read write } for pid=7919 comm="syz.0.432" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 294.891932][ T30] audit: type=1400 audit(1764990980.695:624): avc: denied { open } for pid=7919 comm="syz.0.432" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 296.599986][ T30] audit: type=1400 audit(1764990982.475:625): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 297.992034][ T7947] qnx4: unable to read the superblock [ 298.074553][ T7952] netlink: 'syz.4.439': attribute type 17 has an invalid length. [ 298.082811][ T7952] netlink: 5 bytes leftover after parsing attributes in process `syz.4.439'. [ 298.091828][ T7952] macvtap0: entered allmulticast mode [ 298.097241][ T7952] veth0_macvtap: entered allmulticast mode [ 298.109133][ T7952] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 301.640198][ T30] audit: type=1400 audit(1764990987.505:626): avc: denied { ioctl } for pid=7968 comm="syz.0.444" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 302.734561][ T7972] team0 (unregistering): Port device team_slave_0 removed [ 303.306011][ T7997] gfs2: error -5 reading superblock [ 303.522134][ T30] audit: type=1400 audit(1764990989.285:627): avc: denied { accept } for pid=7994 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 303.619745][ T7972] team0 (unregistering): Port device team_slave_1 removed [ 303.789506][ T7985] netlink: 'syz.4.445': attribute type 3 has an invalid length. [ 303.797892][ T7985] netlink: 'syz.4.445': attribute type 3 has an invalid length. [ 304.979405][ T852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 305.159352][ T852] usb 3-1: Using ep0 maxpacket: 8 [ 305.174779][ T852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.299293][ T852] usb 3-1: config 0 has no interfaces? [ 305.304804][ T852] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.340910][ T852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.839652][ T89] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 305.885343][ T852] usb 3-1: config 0 descriptor?? [ 306.013289][ T89] usb 4-1: Using ep0 maxpacket: 8 [ 306.023104][ T89] usb 4-1: unable to get BOS descriptor or descriptor too short [ 306.051011][ T89] usb 4-1: config 4 interface 0 has no altsetting 0 [ 306.072908][ T89] usb 4-1: string descriptor 0 read error: -22 [ 306.089748][ T89] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 306.130989][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.172715][ T89] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 306.354132][ T89] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 306.638588][ T8027] cgroup: No subsys list or none specified [ 306.666453][ T89] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 306.675283][ T89] usb 4-1: media controller created [ 306.693513][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.913859][ T8034] 8021q: VLANs not supported on wg0 [ 306.934996][ T8034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 307.382122][ T89] usb 4-1: USB disconnect, device number 9 [ 307.955601][ T7495] usb 3-1: USB disconnect, device number 3 [ 307.990205][ T6002] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 308.350434][ T6002] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 308.358787][ T6002] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 308.412849][ T6002] usb 5-1: config 171 has no interface number 0 [ 308.419193][ T6002] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 308.590629][ T6002] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 309.129093][ T6002] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 309.422764][ T6002] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 309.436480][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.448744][ T6002] usb 5-1: Product: syz [ 309.563660][ T8056] pimreg: entered allmulticast mode [ 309.643258][ T6002] usb 5-1: Manufacturer: syz [ 309.648337][ T6002] usb 5-1: SerialNumber: syz [ 309.938791][ T8039] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 309.987264][ T8049] pimreg: left allmulticast mode [ 311.069616][ T6002] ath6kl: Failed to submit usb control message: -110 [ 311.092092][ T6002] ath6kl: unable to send the bmi data to the device: -110 [ 311.104831][ T6002] ath6kl: Unable to send get target info: -110 [ 311.112792][ T8073] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 311.216139][ T6002] ath6kl: Failed to init ath6kl core: -110 [ 311.250659][ T6002] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 311.449911][ T8068] netlink: 'syz.4.458': attribute type 21 has an invalid length. [ 311.459050][ T8068] netlink: 156 bytes leftover after parsing attributes in process `syz.4.458'. [ 311.510160][ T8074] netlink: 'syz.4.458': attribute type 21 has an invalid length. [ 311.518650][ T8074] netlink: 156 bytes leftover after parsing attributes in process `syz.4.458'. [ 312.616756][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.624043][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.698844][ T30] audit: type=1400 audit(1764990998.425:628): avc: denied { mounton } for pid=8085 comm="syz.3.469" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.728625][ T8090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.044444][ T6002] usb 5-1: USB disconnect, device number 5 [ 314.039491][ T30] audit: type=1400 audit(1764990999.915:629): avc: denied { ioctl } for pid=8100 comm="syz.3.472" path="socket:[18531]" dev="sockfs" ino=18531 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.159629][ T5987] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 316.321397][ T5987] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 316.342005][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.354353][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.377119][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.407409][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.422113][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.433787][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.442506][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.452367][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.464061][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.471850][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.481036][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.492334][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.500397][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.509486][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.521128][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.528858][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.538319][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.549744][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.557560][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.566796][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.577827][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.588286][ T5987] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.597485][ T5987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.613187][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.624681][ T5987] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 316.634083][ T5987] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 316.644106][ T5987] usb 3-1: Product: syz [ 316.649008][ T5987] usb 3-1: Manufacturer: syz [ 316.654662][ T5987] usb 3-1: SerialNumber: syz [ 316.669942][ T5987] usb 3-1: config 0 descriptor?? [ 316.687541][ T5987] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 317.795058][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 317.971590][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.094060][ T5921] usb 3-1: USB disconnect, device number 4 [ 318.499684][ T30] audit: type=1400 audit(1764991004.235:630): avc: denied { setcheckreqprot } for pid=8129 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 318.685872][ T8143] netlink: 'syz.0.477': attribute type 17 has an invalid length. [ 318.685925][ T8143] netlink: 5 bytes leftover after parsing attributes in process `syz.0.477'. [ 318.686054][ T8143] macvtap0: entered allmulticast mode [ 318.686234][ T8143] veth0_macvtap: entered allmulticast mode [ 318.691871][ T8143] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 318.881008][ T5921] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 319.344083][ T30] audit: type=1400 audit(1764991005.115:631): avc: denied { bind } for pid=8149 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 319.438007][ T8154] netlink: 60 bytes leftover after parsing attributes in process `syz.3.483'. [ 319.639019][ T8161] netlink: 'syz.0.484': attribute type 2 has an invalid length. [ 319.792240][ T8161] netlink: 'syz.0.484': attribute type 2 has an invalid length. [ 320.879855][ T5987] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 321.516499][ T30] audit: type=1400 audit(1764991007.035:632): avc: denied { ioctl } for pid=8168 comm="syz.1.487" path="socket:[18352]" dev="sockfs" ino=18352 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.990200][ T5987] usb 4-1: config 0 has no interfaces? [ 322.011489][ T5987] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 322.022863][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.047771][ T5987] usb 4-1: Product: syz [ 322.053565][ T5987] usb 4-1: Manufacturer: syz [ 322.068504][ T5987] usb 4-1: SerialNumber: syz [ 322.165617][ T5987] usb 4-1: config 0 descriptor?? [ 323.223756][ T30] audit: type=1400 audit(1764991009.095:633): avc: denied { bind } for pid=8164 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.224367][ T8167] Bluetooth: MGMT ver 1.23 [ 323.364623][ T8190] openvswitch: netlink: Duplicate key (type 1). [ 323.625404][ T30] audit: type=1400 audit(1764991009.095:634): avc: denied { write } for pid=8164 comm="syz.3.488" path="socket:[18668]" dev="sockfs" ino=18668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.731749][ T6002] usb 4-1: USB disconnect, device number 10 [ 325.930250][ T30] audit: type=1800 audit(1764991011.735:635): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.496" name="bus" dev="overlay" ino=561 res=0 errno=0 [ 326.282217][ T8207] bridge1: entered promiscuous mode [ 326.658578][ T30] audit: type=1400 audit(1764991012.525:636): avc: denied { create } for pid=8210 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 327.475882][ T8222] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 327.501116][ T8222] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.518625][ T8222] bond0: (slave team0): Enslaving as an active interface with an up link [ 327.573235][ T30] audit: type=1400 audit(1764991013.315:637): avc: denied { read write } for pid=8215 comm="syz.1.500" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 327.720077][ T30] audit: type=1400 audit(1764991013.315:638): avc: denied { open } for pid=8215 comm="syz.1.500" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 327.870071][ T30] audit: type=1400 audit(1764991013.315:639): avc: denied { ioctl } for pid=8215 comm="syz.1.500" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 328.544494][ T8215] delete_channel: no stack [ 328.851352][ T30] audit: type=1400 audit(1764991013.345:640): avc: denied { bind } for pid=8215 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.966311][ T30] audit: type=1400 audit(1764991013.405:641): avc: denied { setopt } for pid=8215 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 329.115858][ T30] audit: type=1400 audit(1764991013.445:642): avc: denied { bind } for pid=8211 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 329.137315][ T30] audit: type=1400 audit(1764991013.615:643): avc: denied { write } for pid=8211 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 329.273417][ T8239] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 329.966086][ T8242] siw: device registration error -23 [ 330.997981][ T8248] lo speed is unknown, defaulting to 1000 [ 331.469330][ T6002] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 331.681552][ T6002] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 331.786187][ T8263] fuse: Unknown parameter '0x0000000000000007' [ 331.800808][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.809655][ T8263] netlink: 'syz.1.508': attribute type 3 has an invalid length. [ 331.817623][ T8263] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 332.247157][ T8238] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 332.817802][ T6002] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.830991][ T6002] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=be.42 [ 332.851927][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.953160][ T8268] pimreg: entered allmulticast mode [ 333.056340][ T6002] usb 5-1: config 0 descriptor?? [ 333.182767][ T6002] usb 5-1: can't set config #0, error -71 [ 333.402341][ T8279] vivid-004: disconnect [ 333.413164][ T8279] vivid-004: reconnect [ 333.819300][ T30] audit: type=1400 audit(1764991019.265:644): avc: denied { getopt } for pid=8274 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.918225][ T6002] usb 5-1: USB disconnect, device number 6 [ 335.213843][ T8293] XFS (nbd1): SB validate failed with error -5. [ 336.412549][ T30] audit: type=1400 audit(1764991021.915:645): avc: denied { connect } for pid=8304 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.926241][ T30] audit: type=1400 audit(1764991021.965:646): avc: denied { write } for pid=8304 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.427508][ T30] audit: type=1400 audit(1764991022.975:647): avc: denied { link } for pid=8307 comm="syz.3.517" name="file1" dev="overlay" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 338.400687][ T8320] 9pnet_virtio: no channels available for device syz [ 340.217683][ T30] audit: type=1400 audit(1764991026.065:648): avc: denied { setopt } for pid=8337 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 345.316660][ T5138] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 345.556246][ T8397] QAT: failed to copy from user cfg_data. [ 346.898877][ T30] audit: type=1400 audit(1764991032.445:649): avc: denied { map } for pid=8403 comm="syz.4.539" path="socket:[19810]" dev="sockfs" ino=19810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 348.162000][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 350.045912][ T30] audit: type=1400 audit(1764991035.905:650): avc: denied { bind } for pid=8437 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 350.652624][ T30] audit: type=1400 audit(1764991036.165:651): avc: denied { create } for pid=8442 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 350.863444][ T30] audit: type=1400 audit(1764991036.315:652): avc: denied { map } for pid=8442 comm="syz.3.550" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 350.909381][ T30] audit: type=1400 audit(1764991036.405:653): avc: denied { ioctl } for pid=8442 comm="syz.3.550" path="socket:[20665]" dev="sockfs" ino=20665 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 352.358851][ T8467] netlink: 96 bytes leftover after parsing attributes in process `syz.1.556'. [ 353.070443][ T30] audit: type=1400 audit(1764991038.915:654): avc: denied { read } for pid=8471 comm="syz.3.558" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 353.634588][ T30] audit: type=1400 audit(1764991038.915:655): avc: denied { open } for pid=8471 comm="syz.3.558" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 353.663410][ T30] audit: type=1400 audit(1764991038.915:656): avc: denied { ioctl } for pid=8471 comm="syz.3.558" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 353.689429][ T30] audit: type=1400 audit(1764991038.915:657): avc: denied { map } for pid=8471 comm="syz.3.558" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 353.714546][ T30] audit: type=1400 audit(1764991038.915:658): avc: denied { execute } for pid=8471 comm="syz.3.558" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 357.330600][ T30] audit: type=1400 audit(1764991043.185:659): avc: denied { append } for pid=8491 comm="syz.2.563" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.974084][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'. [ 359.251222][ T8523] block device autoloading is deprecated and will be removed. [ 360.031756][ T8541] netlink: 'syz.0.576': attribute type 10 has an invalid length. [ 362.640845][ T30] audit: type=1800 audit(1764991048.445:660): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.580" name="bus" dev="overlay" ino=659 res=0 errno=0 [ 363.083015][ T8561] bridge1: entered promiscuous mode [ 366.181961][ T8586] kAFS: unable to lookup cell 'Þ({^ú@' [ 366.258175][ T8590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8590 comm=syz.4.586 [ 366.279649][ T30] audit: type=1400 audit(1764991052.125:661): avc: denied { bind } for pid=8589 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 367.294186][ T30] audit: type=1400 audit(1764991053.165:662): avc: denied { bind } for pid=8602 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.371538][ T8609] ntfs3(loop0): try to read out of volume at offset 0x0 [ 368.918441][ T8617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.592'. [ 369.159487][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 371.835883][ T7495] IPVS: starting estimator thread 0... [ 371.949863][ T8640] IPVS: using max 76 ests per chain, 182400 per kthread [ 373.791762][ T8662] netlink: 96 bytes leftover after parsing attributes in process `syz.0.607'. [ 374.479080][ T30] audit: type=1400 audit(1764991060.335:663): avc: denied { write } for pid=8663 comm="syz.3.605" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 374.682242][ T8667] netlink: 'syz.3.605': attribute type 39 has an invalid length. [ 375.801481][ T30] audit: type=1400 audit(1764991061.675:664): avc: denied { accept } for pid=8679 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 375.802263][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 376.109719][ T8690] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 376.461145][ T8690] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 376.472152][ T8690] overlayfs: failed to look up (tracing) for ino (-66) [ 377.363454][ T30] audit: type=1400 audit(1764991061.945:665): avc: denied { mount } for pid=8684 comm="syz.1.613" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 377.459346][ T30] audit: type=1400 audit(1764991061.955:666): avc: denied { mounton } for pid=8684 comm="syz.1.613" path="/119/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 377.559597][ T30] audit: type=1400 audit(1764991063.355:667): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 378.919722][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.085540][ T8710] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 379.695115][ T7495] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 380.329931][ T7495] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.353633][ T7495] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 380.363695][ T7495] usb 1-1: config 1 has no interface number 0 [ 380.370961][ T7495] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.422706][ T7495] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.463523][ T7495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.485746][ T7495] usb 1-1: Product: syz [ 380.513835][ T7495] usb 1-1: Manufacturer: syz [ 380.518432][ T7495] usb 1-1: SerialNumber: syz [ 380.546344][ T7495] usb 1-1: selecting invalid altsetting 1 [ 381.777045][ T7495] cdc_ncm 1-1:1.1: bind() failure [ 381.802622][ T7495] usb 1-1: USB disconnect, device number 3 [ 383.395013][ T8750] netlink: 96 bytes leftover after parsing attributes in process `syz.1.628'. [ 389.752352][ T8809] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 393.874102][ T8837] XFS (nbd0): SB validate failed with error -5. [ 398.489622][ T5954] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 398.644171][ T5954] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 399.193103][ T5954] usb 3-1: config 0 has no interface number 0 [ 399.462992][ T8882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.974180][ T5954] usb 3-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 399.985842][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.033753][ T5954] usb 3-1: Product: syz [ 400.068834][ T5954] usb 3-1: Manufacturer: syz [ 400.105358][ T5954] usb 3-1: SerialNumber: syz [ 400.211154][ T5954] usb 3-1: config 0 descriptor?? [ 401.470184][ T6002] usb 3-1: USB disconnect, device number 5 [ 401.731960][ T8904] capability: warning: `syz.1.664' uses 32-bit capabilities (legacy support in use) [ 404.842653][ T30] audit: type=1400 audit(1764991090.715:668): avc: denied { append } for pid=8921 comm="syz.2.671" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 406.399601][ T30] audit: type=1400 audit(1764991091.785:669): avc: denied { shutdown } for pid=8931 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 409.059757][ T30] audit: type=1400 audit(1764991094.875:670): avc: denied { mount } for pid=8953 comm="syz.4.678" name="/" dev="configfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 409.601600][ T8959] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 409.766337][ T30] audit: type=1400 audit(1764991094.875:671): avc: denied { search } for pid=8953 comm="syz.4.678" name="/" dev="configfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 409.929298][ T30] audit: type=1400 audit(1764991094.875:672): avc: denied { search } for pid=8953 comm="syz.4.678" name="/" dev="configfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.158287][ T8963] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 410.185241][ T8963] CIFS mount error: No usable UNC path provided in device string! [ 410.185241][ T8963] [ 410.195640][ T8963] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 410.601936][ T30] audit: type=1400 audit(1764991094.885:673): avc: denied { read open } for pid=8953 comm="syz.4.678" path="/" dev="configfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.629776][ T30] audit: type=1400 audit(1764991095.695:674): avc: denied { getopt } for pid=8955 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 411.691054][ T8982] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 414.739148][ T30] audit: type=1400 audit(1764991100.075:675): avc: denied { mount } for pid=8999 comm="syz.0.690" name="/" dev="rpc_pipefs" ino=22063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 417.673029][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 419.026986][ T5987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 419.281348][ T5987] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.300929][ T5987] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 419.312228][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.349107][ T5987] usb 5-1: Product: syz [ 419.389305][ T5987] usb 5-1: Manufacturer: syz [ 419.426209][ T5987] usb 5-1: SerialNumber: syz [ 419.792359][ T5987] usb 5-1: config 0 descriptor?? [ 421.087771][ T5921] usb 5-1: USB disconnect, device number 7 [ 422.400285][ T9069] netlink: 96 bytes leftover after parsing attributes in process `syz.4.706'. [ 423.876298][ T9084] kAFS: unable to lookup cell 'Þ({^ú@' [ 425.094708][ T9096] ptrace attach of "./syz-executor exec"[9098] was attempted by "./syz-executor exec"[9096] [ 426.673114][ T30] audit: type=1400 audit(1764991112.535:676): avc: denied { write } for pid=9106 comm="syz.3.717" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 426.902859][ T9115] lo speed is unknown, defaulting to 1000 [ 427.665866][ T9118] netlink: 96 bytes leftover after parsing attributes in process `syz.1.718'. [ 428.139881][ T30] audit: type=1400 audit(1764991113.995:677): avc: denied { getopt } for pid=9124 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 429.765965][ T9148] vivid-001: disconnect [ 429.785221][ T9148] vivid-001: reconnect [ 432.242765][ T9169] netlink: 'syz.4.727': attribute type 8 has an invalid length. [ 434.181000][ T9179] netlink: 96 bytes leftover after parsing attributes in process `syz.4.729'. [ 434.579045][ T30] audit: type=1800 audit(1764991120.425:678): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.728" name="bus" dev="overlay" ino=869 res=0 errno=0 [ 434.663536][ T9180] bridge1: entered promiscuous mode [ 434.860126][ T9185] kAFS: unable to lookup cell 'Þ({^ú@' [ 439.549113][ T30] audit: type=1400 audit(1764991125.355:679): avc: denied { rename } for pid=9219 comm="syz.1.741" name="#22" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 439.812739][ T30] audit: type=1400 audit(1764991125.685:680): avc: denied { getopt } for pid=9204 comm="syz.0.737" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.119439][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.166558][ T9231] netlink: 96 bytes leftover after parsing attributes in process `syz.1.742'. [ 440.620001][ T30] audit: type=1400 audit(1764991126.495:681): avc: denied { map } for pid=9234 comm="syz.0.745" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 440.683481][ T30] audit: type=1400 audit(1764991126.495:682): avc: denied { execute } for pid=9234 comm="syz.0.745" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 443.456346][ T9258] netlink: 96 bytes leftover after parsing attributes in process `syz.3.750'. [ 443.926478][ T9270] netlink: 96 bytes leftover after parsing attributes in process `syz.2.751'. [ 444.609545][ T9275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 445.003217][ T9280] netlink: 96 bytes leftover after parsing attributes in process `syz.1.755'. [ 445.417153][ T9283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.754'. [ 447.467511][ T9298] lo speed is unknown, defaulting to 1000 [ 448.325479][ T9304] netlink: 'syz.4.761': attribute type 6 has an invalid length. [ 448.625724][ T9309] netlink: 96 bytes leftover after parsing attributes in process `syz.2.762'. [ 448.765923][ T852] libceph: connect (1)[c::]:6789 error -101 [ 448.773056][ T852] libceph: mon0 (1)[c::]:6789 connect error [ 448.925043][ T9308] ceph: No mds server is up or the cluster is laggy [ 449.171828][ T24] libceph: connect (1)[c::]:6789 error -101 [ 449.178255][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 452.795674][ T30] audit: type=1326 audit(1764991138.655:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 453.000003][ T9344] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 453.150979][ T30] audit: type=1326 audit(1764991138.655:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 453.211836][ T9350] netlink: 'syz.2.772': attribute type 10 has an invalid length. [ 453.335371][ T30] audit: type=1326 audit(1764991138.655:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.2.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0a4558f749 code=0x7ffc0000 [ 453.496725][ T9354] hfsplus: unable to find HFS+ superblock [ 454.753021][ T30] audit: type=1326 audit(1764991140.625:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.1.775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd21a38f749 code=0x0 [ 455.945968][ T9375] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 455.982155][ T9375] netlink: 'syz.1.777': attribute type 3 has an invalid length. [ 458.472705][ T9405] xt_TCPMSS: Only works on TCP SYN packets [ 463.135966][ T9456] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 463.143351][ T9456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 463.156188][ T9456] vhci_hcd vhci_hcd.0: Device attached [ 463.168942][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.796'. [ 463.504490][ T5954] usb 34-1: SetAddress Request (2) to port 0 [ 463.535068][ T5954] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 463.599598][ T5987] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 463.807606][ T9464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.308312][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 464.328139][ T5987] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 464.362674][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.563069][ T5987] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 464.582917][ T5987] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 464.594850][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.605297][ T5987] usb 5-1: Product: syz [ 464.610430][ T5987] usb 5-1: Manufacturer: syz [ 464.615642][ T5987] usb 5-1: SerialNumber: syz [ 464.633670][ T5987] usb 5-1: config 0 descriptor?? [ 464.647235][ T5987] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 464.716861][ T5987] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 464.725388][ T5987] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 464.774870][ T9457] vhci_hcd: connection reset by peer [ 464.783519][ T138] vhci_hcd: stop threads [ 464.788550][ T138] vhci_hcd: release socket [ 464.879759][ T30] audit: type=1400 audit(1764991150.755:687): avc: denied { create } for pid=9459 comm="syz.4.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 465.134437][ T138] vhci_hcd: disconnect device [ 465.192503][ T5921] usb 5-1: USB disconnect, device number 8 [ 465.269664][ T30] audit: type=1400 audit(1764991151.055:688): avc: denied { ioctl } for pid=9459 comm="syz.4.797" path="socket:[25132]" dev="sockfs" ino=25132 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 465.539307][ T9472] netlink: 96 bytes leftover after parsing attributes in process `syz.1.801'. [ 466.465627][ T30] audit: type=1400 audit(1764991152.185:689): avc: denied { setopt } for pid=9476 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.789788][ T9496] lo speed is unknown, defaulting to 1000 [ 467.819571][ T30] audit: type=1326 audit(1764991153.475:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaeb8f749 code=0x7ffc0000 [ 468.097345][ T9494] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 468.156956][ T30] audit: type=1326 audit(1764991153.475:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaeb8f749 code=0x7ffc0000 [ 468.166267][ T9499] zonefs (nullb0) ERROR: Not a zoned block device [ 468.415237][ T30] audit: type=1326 audit(1764991153.485:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffbaeb8f749 code=0x7ffc0000 [ 468.589519][ T5954] usb 34-1: device descriptor read/8, error -110 [ 469.182395][ T9509] gfs2: not a GFS2 filesystem [ 469.678332][ T5954] usb usb34-port1: attempt power cycle [ 470.545319][ T5954] usb usb34-port1: unable to enumerate USB device [ 471.031645][ T9534] netlink: 96 bytes leftover after parsing attributes in process `syz.3.815'. [ 472.720162][ T5954] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 473.529321][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 473.567170][ T5954] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 474.254104][ T5954] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 474.265922][ T5954] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 474.275511][ T30] audit: type=1326 audit(1764991159.695:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7338f749 code=0x7ffc0000 [ 474.298816][ T9586] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 474.459860][ T30] audit: type=1326 audit(1764991159.695:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7338f749 code=0x7ffc0000 [ 474.616220][ T30] audit: type=1326 audit(1764991159.705:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.4.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffa7338f749 code=0x7ffc0000 [ 474.627384][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.848199][ T5954] usb 1-1: Product: syz [ 474.894251][ T5954] usb 1-1: Manufacturer: syz [ 474.907665][ T5954] usb 1-1: SerialNumber: syz [ 475.052318][ T30] audit: type=1400 audit(1764991160.905:696): avc: denied { mount } for pid=9591 comm="syz.1.823" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 475.296434][ T30] audit: type=1400 audit(1764991161.165:697): avc: denied { mounton } for pid=9591 comm="syz.1.823" path="/163/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 475.441087][ T9587] lo speed is unknown, defaulting to 1000 [ 475.660519][ T5954] usb 1-1: can't set config #254, error -71 [ 475.775023][ T5954] usb 1-1: USB disconnect, device number 4 [ 475.975151][ T30] audit: type=1400 audit(1764991161.845:698): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 476.125471][ T9604] binder: 9603:9604 unknown command 0 [ 476.359362][ T9604] binder: 9603:9604 ioctl c0306201 200000000080 returned -22 [ 476.445929][ T9614] netlink: 96 bytes leftover after parsing attributes in process `syz.2.827'. [ 476.681788][ T9612] binder: 9603:9612 ioctl c0306201 2000000003c0 returned -14 [ 477.317627][ T9625] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 477.325230][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.336437][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 477.352622][ T9625] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 477.359247][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 477.393938][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 477.460858][ T9625] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 477.467533][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.501669][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 477.569319][ T6002] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 477.609315][ T9637] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 477.615942][ T9637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.786827][ T9637] vhci_hcd vhci_hcd.0: Device attached [ 477.825126][ T9625] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 477.831994][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 477.841400][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 477.875762][ T9625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 477.903723][ T9625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 477.941616][ T9625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 478.090792][ T9625] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(28) [ 478.097441][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 478.164661][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 478.628477][ T9649] vhci_hcd: connection closed [ 478.628738][ T3786] vhci_hcd: stop threads [ 478.646138][ T9644] vhci_hcd: connection closed [ 478.648069][ T9634] vhci_hcd: connection closed [ 478.650071][ T9638] vhci_hcd: connection closed [ 478.655014][ T9626] vhci_hcd: connection reset by peer [ 478.661109][ T9631] vhci_hcd: connection closed [ 478.668220][ T3786] vhci_hcd: release socket [ 478.810262][ T3786] vhci_hcd: disconnect device [ 478.815515][ T3786] vhci_hcd: stop threads [ 478.821452][ T3786] vhci_hcd: release socket [ 478.827266][ T3786] vhci_hcd: disconnect device [ 478.832594][ T3786] vhci_hcd: stop threads [ 478.836844][ T3786] vhci_hcd: release socket [ 478.849702][ T3786] vhci_hcd: disconnect device [ 478.859552][ T3786] vhci_hcd: stop threads [ 478.864362][ T3786] vhci_hcd: release socket [ 478.874571][ T3786] vhci_hcd: disconnect device [ 479.375614][ T3786] vhci_hcd: stop threads [ 479.380208][ T3786] vhci_hcd: release socket [ 479.384752][ T3786] vhci_hcd: disconnect device [ 479.394105][ T3786] vhci_hcd: stop threads [ 479.398716][ T3786] vhci_hcd: release socket [ 479.407118][ T3786] vhci_hcd: disconnect device [ 480.350793][ T9674] hfsplus: unable to find HFS+ superblock [ 480.921754][ T9676] netlink: 96 bytes leftover after parsing attributes in process `syz.4.842'. [ 482.741611][ T6002] vhci_hcd: vhci_device speed not set [ 483.540912][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 483.552728][ T9705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.849'. [ 483.590500][ T30] audit: type=1400 audit(1764991169.435:699): avc: denied { read } for pid=9699 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 484.143162][ T9711] netlink: 96 bytes leftover after parsing attributes in process `syz.3.851'. [ 484.375275][ T5987] usb usb36-port1: attempt power cycle [ 484.960279][ T5987] usb usb36-port1: unable to enumerate USB device [ 485.269199][ C0] ------------[ cut here ]------------ [ 485.275384][ C0] WARNING: net/mptcp/subflow.c:1527 at subflow_data_ready+0x40b/0x790, CPU#0: kworker/u8:1/13 [ 485.285906][ C0] Modules linked in: [ 485.291202][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.303246][ C0] Tainted: [L]=SOFTLOCKUP [ 485.307573][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.318254][ C0] Workqueue: krdsd rds_send_worker [ 485.323405][ C0] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 485.329796][ C0] Code: 89 ee e8 38 a9 6a f6 40 84 ed 75 21 e8 de ae 6a f6 44 89 fe bf 07 00 00 00 e8 81 a9 6a f6 41 83 ff 07 74 09 e8 c6 ae 6a f6 90 <0f> 0b 90 e8 bd ae 6a f6 48 89 df e8 35 ae ff ff 31 ff 89 c5 89 c6 [ 485.349716][ C0] RSP: 0018:ffffc900000069e8 EFLAGS: 00010246 [ 485.356154][ C0] RAX: 0000000000000000 RBX: ffff888055d24f80 RCX: ffffffff8b538aef [ 485.364424][ C0] RDX: ffff88801de80000 RSI: ffffffff8b538afa RDI: 0000000000000005 [ 485.372535][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 485.380643][ C0] R10: 0000000000000004 R11: 0000000061379a64 R12: ffff888032424b00 [ 485.389425][ C0] R13: 1ffff92000000d3d R14: ffff88807a69f800 R15: 0000000000000004 [ 485.398445][ C0] FS: 0000000000000000(0000) GS:ffff888124956000(0000) knlGS:0000000000000000 [ 485.407870][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.414663][ C0] CR2: 00007f0a457e6080 CR3: 000000004edf1000 CR4: 00000000003526f0 [ 485.422665][ C0] Call Trace: [ 485.425945][ C0] [ 485.428781][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 485.434921][ C0] ? tcp_data_ecn_check+0x54/0x740 [ 485.440350][ C0] tcp_data_ready+0x114/0x5a0 [ 485.445053][ C0] tcp_data_queue+0x1aa6/0x5000 [ 485.451083][ C0] ? tcp_urg+0x10f/0xb80 [ 485.456051][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 485.461303][ C0] ? tcp_parse_options+0x11b0/0x1250 [ 485.466613][ C0] tcp_rcv_state_process+0xfb6/0x6490 [ 485.472043][ C0] ? __tcp_send_ack.part.0+0x4ca/0x8f0 [ 485.477548][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 485.483407][ C0] ? __lock_acquire+0x433/0x22f0 [ 485.488979][ C0] ? sk_filter_trim_cap+0x11a/0xde0 [ 485.494493][ C0] ? lock_acquire+0x179/0x330 [ 485.499210][ C0] ? tcp_v6_do_rcv+0x7b8/0x1dc0 [ 485.504163][ C0] tcp_v6_do_rcv+0x7b8/0x1dc0 [ 485.509275][ C0] tcp_v6_rcv+0x2ab5/0x48f0 [ 485.514392][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 485.519997][ C0] ? __pfx_ipvlan_skb_to_addr+0x10/0x10 [ 485.525559][ C0] ? __pfx_raw6_local_deliver+0x10/0x10 [ 485.531331][ C0] ? find_held_lock+0x2b/0x80 [ 485.536053][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 485.540958][ C0] ip6_protocol_deliver_rcu+0x188/0x1520 [ 485.546617][ C0] ip6_input_finish+0x1e4/0x4b0 [ 485.551689][ C0] ip6_input+0x105/0x2f0 [ 485.556039][ C0] ip6_rcv_finish+0x1ac/0x580 [ 485.560767][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 485.565967][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 485.571180][ C0] ip_sabotage_in+0x21e/0x290 [ 485.575954][ C0] nf_hook_slow+0xbe/0x200 [ 485.580427][ C0] nf_hook.constprop.0+0x424/0x750 [ 485.585670][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 485.591376][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 485.597013][ C0] ? ip6_rcv_core+0xbd4/0x1c30 [ 485.601810][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 485.607840][ C0] ? ip6_rcv_core+0xc70/0x1c30 [ 485.612676][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 485.617554][ C0] ipv6_rcv+0xa4/0x650 [ 485.621938][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 485.626630][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 485.632695][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 485.640032][ C0] ? lock_acquire+0x179/0x330 [ 485.644740][ C0] __netif_receive_skb+0x1d/0x160 [ 485.650075][ C0] netif_receive_skb+0x137/0x760 [ 485.655646][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 485.661157][ C0] ? br_netif_receive_skb+0xff/0x200 [ 485.666445][ C0] br_pass_frame_up+0x346/0x490 [ 485.672132][ C0] br_handle_frame_finish+0x12fe/0x1f00 [ 485.678303][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 485.684899][ C0] ? __lock_acquire+0x433/0x22f0 [ 485.691046][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 485.696371][ C0] ? nf_hook_slow+0x132/0x200 [ 485.701112][ C0] br_nf_hook_thresh+0x307/0x410 [ 485.706425][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 485.712509][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 485.718268][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 485.724651][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 485.730571][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 485.736857][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 485.742888][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 485.748794][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 485.754702][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 485.760695][ C0] ? lock_acquire+0x179/0x330 [ 485.765701][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 485.772248][ C0] ? net_generic+0xea/0x2a0 [ 485.776767][ C0] br_nf_pre_routing+0x860/0x15b0 [ 485.781830][ C0] br_handle_frame+0xb28/0x14e0 [ 485.786873][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 485.793102][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 485.799249][ C0] ? find_held_lock+0x2b/0x80 [ 485.803980][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 485.809400][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 485.816099][ C0] ? bpf_trace_run2+0x180/0x5c0 [ 485.821187][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 485.826777][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 485.834135][ C0] ? __bpf_trace_contention_end+0xc9/0x110 [ 485.841670][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 485.848732][ C0] ? __bpf_trace_contention_end+0xc9/0x110 [ 485.854612][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 485.861005][ C0] ? rcu_is_watching+0x12/0xc0 [ 485.865789][ C0] ? __lock_acquire+0x433/0x22f0 [ 485.871215][ C0] ? process_backlog+0x450/0x1650 [ 485.876788][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 485.882654][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 485.889295][ C0] ? lock_acquire+0x179/0x330 [ 485.894000][ C0] ? process_backlog+0x450/0x1650 [ 485.899432][ C0] __netif_receive_skb+0x1d/0x160 [ 485.904648][ C0] process_backlog+0x4a2/0x1650 [ 485.909542][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 485.914928][ C0] net_rx_action+0x9f9/0xfa0 [ 485.919550][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 485.924661][ C0] ? lock_acquire+0x179/0x330 [ 485.929813][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 485.935632][ C0] ? sched_clock+0x38/0x60 [ 485.940110][ C0] ? sched_clock_cpu+0x6c/0x530 [ 485.945010][ C0] ? mark_held_locks+0x49/0x80 [ 485.949828][ C0] handle_softirqs+0x219/0x8b0 [ 485.954619][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 485.959947][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 485.965250][ C0] ? __dev_queue_xmit+0x782/0x4650 [ 485.970403][ C0] do_softirq+0xb2/0xf0 [ 485.974563][ C0] [ 485.977489][ C0] [ 485.980440][ C0] __local_bh_enable_ip+0x100/0x120 [ 485.986522][ C0] ? __dev_queue_xmit+0x782/0x4650 [ 485.991686][ C0] __dev_queue_xmit+0x797/0x4650 [ 485.996663][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 486.002195][ C0] ? selinux_ip_postroute+0x739/0xdd0 [ 486.007594][ C0] ? __lock_acquire+0x433/0x22f0 [ 486.012567][ C0] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 486.017343][ C0] ? find_held_lock+0x2b/0x80 [ 486.022212][ C0] ? __asan_memcpy+0x3c/0x60 [ 486.026895][ C0] ? eth_header+0x11c/0x1f0 [ 486.031447][ C0] neigh_resolve_output+0x53a/0x940 [ 486.036933][ C0] ip6_finish_output2+0xad1/0x1cf0 [ 486.042176][ C0] __ip6_finish_output+0x3cd/0x1010 [ 486.048268][ C0] ip6_output+0x253/0x710 [ 486.052683][ C0] ip6_xmit+0x1512/0x23f0 [ 486.057033][ C0] ? ip6_dst_check+0x352/0x950 [ 486.062187][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 486.067462][ C0] ? __sk_dst_check+0x36/0x350 [ 486.072407][ C0] inet6_csk_xmit+0x444/0x7f0 [ 486.077126][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 486.082522][ C0] ? csum_ipv6_magic+0x299/0x320 [ 486.087503][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 486.092755][ C0] __tcp_transmit_skb+0x1d67/0x48b0 [ 486.098417][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 486.104455][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 486.109502][ C0] ? rcu_is_watching+0x12/0xc0 [ 486.114281][ C0] ? tcp_small_queue_check.isra.0+0x96/0x380 [ 486.120315][ C0] ? tcp_small_queue_check.isra.0+0x103/0x380 [ 486.126413][ C0] tcp_write_xmit+0x12a9/0x86e0 [ 486.132490][ C0] ? __pfx_skb_splice_from_iter+0x10/0x10 [ 486.138243][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 486.143844][ C0] tcp_push+0x225/0x700 [ 486.148027][ C0] tcp_sendmsg_locked+0x18a0/0x42a0 [ 486.153269][ C0] ? __lock_acquire+0x433/0x22f0 [ 486.159471][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 486.165022][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 486.170059][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.175538][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 486.180897][ C0] tcp_sendmsg+0x2e/0x50 [ 486.185261][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 486.190250][ C0] inet6_sendmsg+0xb9/0x140 [ 486.195061][ C0] sock_sendmsg+0x2b3/0x470 [ 486.199618][ C0] ? __pfx_sock_sendmsg+0x10/0x10 [ 486.205008][ C0] ? rds_tcp_xmit+0x537/0xc40 [ 486.209717][ C0] ? kasan_check_range+0x1b/0x1b0 [ 486.214748][ C0] rds_tcp_xmit+0x352/0xc40 [ 486.219304][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 486.224906][ C0] ? lockdep_init_map_type+0x5c/0x270 [ 486.230803][ C0] ? __asan_memset+0x23/0x50 [ 486.235477][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 486.240562][ C0] rds_send_xmit+0xfa0/0x25c0 [ 486.245281][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 486.250421][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 486.255793][ C0] rds_send_worker+0x8f/0x2e0 [ 486.260492][ C0] process_one_work+0x9ba/0x1b20 [ 486.265444][ C0] ? __pfx_rds_tcp_accept_worker+0x10/0x10 [ 486.271822][ C0] ? __pfx_process_one_work+0x10/0x10 [ 486.277256][ C0] ? assign_work+0x1a0/0x250 [ 486.281919][ C0] worker_thread+0x6c8/0xf10 [ 486.286889][ C0] ? __pfx_worker_thread+0x10/0x10 [ 486.292047][ C0] kthread+0x3c5/0x780 [ 486.296140][ C0] ? __pfx_kthread+0x10/0x10 [ 486.300769][ C0] ? rcu_is_watching+0x12/0xc0 [ 486.305895][ C0] ? __pfx_kthread+0x10/0x10 [ 486.310542][ C0] ret_from_fork+0x983/0xb10 [ 486.315888][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 486.321135][ C0] ? __switch_to+0x7af/0x10d0 [ 486.326449][ C0] ? __pfx_kthread+0x10/0x10 [ 486.331223][ C0] ret_from_fork_asm+0x1a/0x30 [ 486.336297][ C0] [ 486.339354][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.347078][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.358355][ C0] Tainted: [L]=SOFTLOCKUP [ 486.362686][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.373098][ C0] Workqueue: krdsd rds_send_worker [ 486.378229][ C0] Call Trace: [ 486.381506][ C0] [ 486.384356][ C0] dump_stack_lvl+0x3d/0x1f0 [ 486.389260][ C0] vpanic+0x640/0x6f0 [ 486.393257][ C0] ? subflow_data_ready+0x40b/0x790 [ 486.398476][ C0] panic+0xca/0xd0 [ 486.402215][ C0] ? __pfx_panic+0x10/0x10 [ 486.406642][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 486.411760][ C0] check_panic_on_warn+0xab/0xb0 [ 486.416707][ C0] __warn+0x108/0x3c0 [ 486.420886][ C0] __report_bug+0x2a0/0x520 [ 486.425384][ C0] ? subflow_data_ready+0x40b/0x790 [ 486.430590][ C0] ? __pfx___report_bug+0x10/0x10 [ 486.435717][ C0] ? __sk_dst_check+0x120/0x350 [ 486.440940][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.447468][ C0] ? mptcp_get_options+0x19c/0x2af0 [ 486.453129][ C0] ? __pfx_tcp_ack_update_rtt+0x10/0x10 [ 486.458684][ C0] ? subflow_data_ready+0x40b/0x790 [ 486.463897][ C0] report_bug+0xb2/0x220 [ 486.468595][ C0] ? subflow_data_ready+0x40b/0x790 [ 486.473976][ C0] handle_bug+0x127/0x260 [ 486.478329][ C0] exc_invalid_op+0x17/0x50 [ 486.483284][ C0] asm_exc_invalid_op+0x1a/0x20 [ 486.488164][ C0] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 486.494229][ C0] Code: 89 ee e8 38 a9 6a f6 40 84 ed 75 21 e8 de ae 6a f6 44 89 fe bf 07 00 00 00 e8 81 a9 6a f6 41 83 ff 07 74 09 e8 c6 ae 6a f6 90 <0f> 0b 90 e8 bd ae 6a f6 48 89 df e8 35 ae ff ff 31 ff 89 c5 89 c6 [ 486.514014][ C0] RSP: 0018:ffffc900000069e8 EFLAGS: 00010246 [ 486.520067][ C0] RAX: 0000000000000000 RBX: ffff888055d24f80 RCX: ffffffff8b538aef [ 486.529263][ C0] RDX: ffff88801de80000 RSI: ffffffff8b538afa RDI: 0000000000000005 [ 486.537414][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 486.545371][ C0] R10: 0000000000000004 R11: 0000000061379a64 R12: ffff888032424b00 [ 486.553327][ C0] R13: 1ffff92000000d3d R14: ffff88807a69f800 R15: 0000000000000004 [ 486.561473][ C0] ? subflow_data_ready+0x3ff/0x790 [ 486.567199][ C0] ? subflow_data_ready+0x40a/0x790 [ 486.572390][ C0] ? subflow_data_ready+0x40a/0x790 [ 486.577788][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 486.583330][ C0] ? tcp_data_ecn_check+0x54/0x740 [ 486.588524][ C0] tcp_data_ready+0x114/0x5a0 [ 486.593730][ C0] tcp_data_queue+0x1aa6/0x5000 [ 486.598582][ C0] ? tcp_urg+0x10f/0xb80 [ 486.603003][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 486.608198][ C0] ? tcp_parse_options+0x11b0/0x1250 [ 486.613462][ C0] tcp_rcv_state_process+0xfb6/0x6490 [ 486.618904][ C0] ? __tcp_send_ack.part.0+0x4ca/0x8f0 [ 486.624347][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 486.630316][ C0] ? __lock_acquire+0x433/0x22f0 [ 486.635241][ C0] ? sk_filter_trim_cap+0x11a/0xde0 [ 486.640428][ C0] ? lock_acquire+0x179/0x330 [ 486.645791][ C0] ? tcp_v6_do_rcv+0x7b8/0x1dc0 [ 486.650623][ C0] tcp_v6_do_rcv+0x7b8/0x1dc0 [ 486.655279][ C0] tcp_v6_rcv+0x2ab5/0x48f0 [ 486.659765][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 486.665909][ C0] ? __pfx_ipvlan_skb_to_addr+0x10/0x10 [ 486.671724][ C0] ? __pfx_raw6_local_deliver+0x10/0x10 [ 486.677554][ C0] ? find_held_lock+0x2b/0x80 [ 486.682225][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 486.687054][ C0] ip6_protocol_deliver_rcu+0x188/0x1520 [ 486.692985][ C0] ip6_input_finish+0x1e4/0x4b0 [ 486.697970][ C0] ip6_input+0x105/0x2f0 [ 486.702211][ C0] ip6_rcv_finish+0x1ac/0x580 [ 486.706878][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 486.712066][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 486.717542][ C0] ip_sabotage_in+0x21e/0x290 [ 486.722545][ C0] nf_hook_slow+0xbe/0x200 [ 486.726961][ C0] nf_hook.constprop.0+0x424/0x750 [ 486.734275][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 486.740340][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 486.746638][ C0] ? ip6_rcv_core+0xbd4/0x1c30 [ 486.751582][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 486.756875][ C0] ? ip6_rcv_core+0xc70/0x1c30 [ 486.762603][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 486.767349][ C0] ipv6_rcv+0xa4/0x650 [ 486.771410][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 486.776247][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 486.782138][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 486.788633][ C0] ? lock_acquire+0x179/0x330 [ 486.793309][ C0] __netif_receive_skb+0x1d/0x160 [ 486.798328][ C0] netif_receive_skb+0x137/0x760 [ 486.803252][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 486.808703][ C0] ? br_netif_receive_skb+0xff/0x200 [ 486.813978][ C0] br_pass_frame_up+0x346/0x490 [ 486.819351][ C0] br_handle_frame_finish+0x12fe/0x1f00 [ 486.824886][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 486.830767][ C0] ? __lock_acquire+0x433/0x22f0 [ 486.836907][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 486.842133][ C0] ? nf_hook_slow+0x132/0x200 [ 486.847518][ C0] br_nf_hook_thresh+0x307/0x410 [ 486.853815][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 486.860140][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 486.865942][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 486.871995][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.878254][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.884323][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 486.893123][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 486.899307][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 486.905141][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 486.911041][ C0] ? lock_acquire+0x179/0x330 [ 486.915727][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 486.923200][ C0] ? net_generic+0xea/0x2a0 [ 486.928328][ C0] br_nf_pre_routing+0x860/0x15b0 [ 486.933402][ C0] br_handle_frame+0xb28/0x14e0 [ 486.938262][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 486.944080][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 486.950581][ C0] ? find_held_lock+0x2b/0x80 [ 486.956391][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 486.962025][ C0] __netif_receive_skb_core.constprop.0+0x6b3/0x35b0 [ 486.968691][ C0] ? bpf_trace_run2+0x180/0x5c0 [ 486.974397][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 486.980478][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 486.987570][ C0] ? __bpf_trace_contention_end+0xc9/0x110 [ 486.993357][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 486.999941][ C0] ? __bpf_trace_contention_end+0xc9/0x110 [ 487.006386][ C0] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 487.012698][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.018089][ C0] ? __lock_acquire+0x433/0x22f0 [ 487.023993][ C0] ? process_backlog+0x450/0x1650 [ 487.029028][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 487.034920][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 487.042218][ C0] ? lock_acquire+0x179/0x330 [ 487.046979][ C0] ? process_backlog+0x450/0x1650 [ 487.052356][ C0] __netif_receive_skb+0x1d/0x160 [ 487.057565][ C0] process_backlog+0x4a2/0x1650 [ 487.062586][ C0] __napi_poll.constprop.0+0xb3/0x540 [ 487.067934][ C0] net_rx_action+0x9f9/0xfa0 [ 487.072501][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 487.077586][ C0] ? lock_acquire+0x179/0x330 [ 487.082249][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 487.087594][ C0] ? sched_clock+0x38/0x60 [ 487.092094][ C0] ? sched_clock_cpu+0x6c/0x530 [ 487.097187][ C0] ? mark_held_locks+0x49/0x80 [ 487.102032][ C0] handle_softirqs+0x219/0x8b0 [ 487.106870][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 487.112143][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 487.117433][ C0] ? __dev_queue_xmit+0x782/0x4650 [ 487.123654][ C0] do_softirq+0xb2/0xf0 [ 487.127828][ C0] [ 487.130790][ C0] [ 487.133709][ C0] __local_bh_enable_ip+0x100/0x120 [ 487.138901][ C0] ? __dev_queue_xmit+0x782/0x4650 [ 487.144193][ C0] __dev_queue_xmit+0x797/0x4650 [ 487.149631][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 487.155026][ C0] ? selinux_ip_postroute+0x739/0xdd0 [ 487.160588][ C0] ? __lock_acquire+0x433/0x22f0 [ 487.165552][ C0] ? nf_nat_ipv6_fn+0xff/0x2e0 [ 487.170745][ C0] ? find_held_lock+0x2b/0x80 [ 487.175455][ C0] ? __asan_memcpy+0x3c/0x60 [ 487.180212][ C0] ? eth_header+0x11c/0x1f0 [ 487.184700][ C0] neigh_resolve_output+0x53a/0x940 [ 487.189902][ C0] ip6_finish_output2+0xad1/0x1cf0 [ 487.195038][ C0] __ip6_finish_output+0x3cd/0x1010 [ 487.200215][ C0] ip6_output+0x253/0x710 [ 487.204535][ C0] ip6_xmit+0x1512/0x23f0 [ 487.208866][ C0] ? ip6_dst_check+0x352/0x950 [ 487.213619][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 487.218289][ C0] ? __sk_dst_check+0x36/0x350 [ 487.223316][ C0] inet6_csk_xmit+0x444/0x7f0 [ 487.227988][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 487.233192][ C0] ? csum_ipv6_magic+0x299/0x320 [ 487.238562][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 487.243770][ C0] __tcp_transmit_skb+0x1d67/0x48b0 [ 487.248976][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 487.254522][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 487.259289][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.264049][ C0] ? tcp_small_queue_check.isra.0+0x96/0x380 [ 487.270022][ C0] ? tcp_small_queue_check.isra.0+0x103/0x380 [ 487.276082][ C0] tcp_write_xmit+0x12a9/0x86e0 [ 487.281293][ C0] ? __pfx_skb_splice_from_iter+0x10/0x10 [ 487.287015][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 487.292548][ C0] tcp_push+0x225/0x700 [ 487.296690][ C0] tcp_sendmsg_locked+0x18a0/0x42a0 [ 487.301900][ C0] ? __lock_acquire+0x433/0x22f0 [ 487.306910][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 487.312462][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 487.317487][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.322883][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 487.328198][ C0] tcp_sendmsg+0x2e/0x50 [ 487.332440][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 487.337371][ C0] inet6_sendmsg+0xb9/0x140 [ 487.341878][ C0] sock_sendmsg+0x2b3/0x470 [ 487.346365][ C0] ? __pfx_sock_sendmsg+0x10/0x10 [ 487.351815][ C0] ? rds_tcp_xmit+0x537/0xc40 [ 487.357102][ C0] ? kasan_check_range+0x1b/0x1b0 [ 487.362222][ C0] rds_tcp_xmit+0x352/0xc40 [ 487.367061][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 487.372060][ C0] ? lockdep_init_map_type+0x5c/0x270 [ 487.377413][ C0] ? __asan_memset+0x23/0x50 [ 487.382248][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 487.387245][ C0] rds_send_xmit+0xfa0/0x25c0 [ 487.391904][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 487.396994][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 487.402350][ C0] rds_send_worker+0x8f/0x2e0 [ 487.407088][ C0] process_one_work+0x9ba/0x1b20 [ 487.412080][ C0] ? __pfx_rds_tcp_accept_worker+0x10/0x10 [ 487.417879][ C0] ? __pfx_process_one_work+0x10/0x10 [ 487.423233][ C0] ? assign_work+0x1a0/0x250 [ 487.427800][ C0] worker_thread+0x6c8/0xf10 [ 487.432371][ C0] ? __pfx_worker_thread+0x10/0x10 [ 487.437470][ C0] kthread+0x3c5/0x780 [ 487.441512][ C0] ? __pfx_kthread+0x10/0x10 [ 487.446088][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.450837][ C0] ? __pfx_kthread+0x10/0x10 [ 487.455417][ C0] ret_from_fork+0x983/0xb10 [ 487.459988][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 487.465094][ C0] ? __switch_to+0x7af/0x10d0 [ 487.469749][ C0] ? __pfx_kthread+0x10/0x10 [ 487.474314][ C0] ret_from_fork_asm+0x1a/0x30 [ 487.479156][ C0] [ 487.482423][ C0] Kernel Offset: disabled [ 487.487244][ C0] Rebooting in 86400 seconds..