last executing test programs: 2m39.770090782s ago: executing program 3 (id=772): r0 = syz_usb_connect$hid(0x6, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x383043, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r6, &(0x7f00000103c0)=[{&(0x7f0000000240)="04000000000203", 0x7}, {&(0x7f00000102c0)="fc4a5a91355c28", 0x7}], 0x2) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000000140), 0x0, 0x20000840) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000003c0)={0x2, 0x6, 0x40}) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) semctl$IPC_RMID(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) 2m38.076832515s ago: executing program 3 (id=775): syz_open_dev$media(&(0x7f00000000c0), 0x50d, 0x48000) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f00000003c0)}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) listen(r5, 0x0) 2m36.788240731s ago: executing program 3 (id=777): syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xf1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "919e10e5c17c255c0068a3e890ff746557fbe5d74dffd34d643f4157ed4fa8be8b9ec7dac68fb68af51b31b059cd5e91cbea5c324fac7a9f096dd3ffe60ec19ac63f220dca3dc9ca76fab0f7945e1fdb4c23634ca1213754d6043463e608d3a8dce2a71b674f1465feeff416d4bad13ca0edb1bc3d3bc699ccd7122c0632c86572b9cb8acda174bfb067bf893d0174bc63045d0915dc76893ccfbb4431dce3acb64b4ae45cd253e1d6d1389e4233e80ce4257efa716f71407f0b1d2a2f6aa69637468733fafea5b8ce90da490362c13d8c27a09bcc7930810a230ec25cf3a781fe74544b21b67f4b130bd1c11fdcf8cf5a72ce1bb118ff4d"}}}, 0x102) r0 = socket(0xa, 0x2, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000001800010000000000010000001d01000008", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x24}}, 0x20008030) sendmsg$nl_route_sched(r1, 0x0, 0x2000400c) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) r8 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f128000000", 0x8}], 0x1}}], 0x1, 0x20000054) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) 2m34.394758238s ago: executing program 3 (id=779): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x1}}, 0x18) syz_emit_vhci(&(0x7f0000005740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0xe389, 0x80, 0x300000, 0xa, 0x9, "5dfe0d857a20e634e25b05b045b9bc9f36f992", 0x6, 0x100}) syslog(0x2, &(0x7f0000000080)=""/98, 0x62) 2m31.660242213s ago: executing program 3 (id=788): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r1, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = dup2(r4, r4) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x2020) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 2m27.130479164s ago: executing program 3 (id=795): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2023, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x60140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x78, 0x300, 0x4b0, 0x0, 0x17c, 0x4, 0x2, {}, {}, {0x5}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x6, 0x0, 0x1}) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c00000003000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000bfffffffffc73186fc000000000000b59771eb02f13c2a9238c6852e88cf0e9c835cc3d3d50c09764ca4816a1122c6556ca1f7dbd49cef699b617236dc600494bd5556cf5be5dd2a78781a7274351f0979455e2aba7138aab5d784130cebbb7e03ca25d0bbf71f5f9fb6a17805205fb550d99210dbb98416f83341e0bc29dff9f8d2864e1fb9c4f4dc0ec307", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xcc080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f003950"], 0x41) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r3, &(0x7f0000002000)='`', 0x88020) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001800000c0200000003000000000000090c000000000094784ccd772be7547228d8de0e515e7b8b5a7234ec54471ee97b29a9243883dae7a9c7ad114bead3b21df1b239735ac90324ae2f7cc8682054a3d952a14acfb61e180d46ae157ad6c0e47e1797c992a0fb191eefcebc33b8b3e29911dfc84b10d4e9655d4bc373fc118edf"], &(0x7f0000000180), 0x32, 0x0, 0x1, 0x401}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000070000002f00000018110000", @ANYRESDEC=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r11, 0x70b}, 0x14}}, 0x0) 2m11.892416417s ago: executing program 32 (id=795): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2023, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x60140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x78, 0x300, 0x4b0, 0x0, 0x17c, 0x4, 0x2, {}, {}, {0x5}, {}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x6, 0x0, 0x1}) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c00000003000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000bfffffffffc73186fc000000000000b59771eb02f13c2a9238c6852e88cf0e9c835cc3d3d50c09764ca4816a1122c6556ca1f7dbd49cef699b617236dc600494bd5556cf5be5dd2a78781a7274351f0979455e2aba7138aab5d784130cebbb7e03ca25d0bbf71f5f9fb6a17805205fb550d99210dbb98416f83341e0bc29dff9f8d2864e1fb9c4f4dc0ec307", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xcc080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f003950"], 0x41) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r3, &(0x7f0000002000)='`', 0x88020) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001800000c0200000003000000000000090c000000000094784ccd772be7547228d8de0e515e7b8b5a7234ec54471ee97b29a9243883dae7a9c7ad114bead3b21df1b239735ac90324ae2f7cc8682054a3d952a14acfb61e180d46ae157ad6c0e47e1797c992a0fb191eefcebc33b8b3e29911dfc84b10d4e9655d4bc373fc118edf"], &(0x7f0000000180), 0x32, 0x0, 0x1, 0x401}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000070000002f00000018110000", @ANYRESDEC=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESDEC=r7], &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r11, 0x70b}, 0x14}}, 0x0) 52.48942072s ago: executing program 4 (id=949): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0xfffffffd, @local}, 0x0, {[0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x9]}}, 0x5c) r7 = socket$inet6(0xa, 0x400000000001, 0x7) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r8, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x33f9, 0x72, 0x0, 0x7fff0000}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) chown(&(0x7f00000002c0)='./file0\x00', 0x0, r9) 45.409245924s ago: executing program 4 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r8, 0x53, 0x0) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r7, r6, 0x9, 0x8) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300320000000b000100736f636b6574000008000240"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x80) 44.17111371s ago: executing program 4 (id=964): socket$inet6(0xa, 0x80002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0xfe, "0062baad630400"}) r5 = syz_open_pts(0xffffffffffffffff, 0x80) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) read(r6, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 42.463485965s ago: executing program 4 (id=967): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) 36.459357236s ago: executing program 4 (id=976): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) 31.715545789s ago: executing program 4 (id=988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) r5 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xcdd4, 0x0, 0x0, 0x17b}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 17.187548993s ago: executing program 0 (id=1004): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8382, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) modify_ldt$write(0x1, &(0x7f00000000c0)={0x3, 0x1000, 0x2000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) unshare(0x2c020400) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x29, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @uvalue=0xa}, {0x1, @uvalue=0xc18}, {0x2, @svalue=0x40}]}, 0x7fe}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x40000000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1}) ioctl(r7, 0x8b22, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) socket$kcm(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7) 15.858349286s ago: executing program 33 (id=988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x84) r5 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xcdd4, 0x0, 0x0, 0x17b}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 15.619886029s ago: executing program 0 (id=1006): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) 14.519514231s ago: executing program 1 (id=1008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000000c0)={@dev}, &(0x7f0000000140)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000034000480300001800d00010073796e70726f7879000000001c0002800800034000000004060001400000000005000200"], 0x88}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'bridge0\x00', {0x2, 0x4e23, @private=0xa010100}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) fcntl$setpipe(r3, 0x407, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.260079291s ago: executing program 1 (id=1010): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18208}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c000", @ANYRES16=r1, @ANYBLOB="100026bd7000006100000004005f000a00340001010101010100000a003400010101010101000004005f000a00340002020202020200002b002a008225075a04040000000802110000007f00000040000000090000000101ffffffffffff01feffff00170034001b77463c658c4e05324252e07aed07c7118c270006003600040000001a002a000301b400090303030300000a0006005050505050500000"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000001180), 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) munlockall() socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) 11.701192736s ago: executing program 2 (id=1012): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 10.660200926s ago: executing program 2 (id=1013): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x505, 0x8009967, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) semctl$GETALL(0x0, 0x0, 0xd, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/263}, 0x10f, 0x2, 0x3800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 10.57505992s ago: executing program 0 (id=1014): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x20000013}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x9, 0x9, 0x82}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xca, 0x8, 0x4, 0xff, 0x81, 0x0, 0x800000000000000}, {0xffffff01, 0x0, 0x7, 0x4, 0x4, 0x5, 0x7, 0x8, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x40003}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000002400)={[{0xa, 0xcc, 0xfa, 0x5, 0xff, 0x96, 0xc9, 0x6, 0x4, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0xb5, 0x1, 0x6, 0xbb, 0x2, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x28, 0x2, 0x1, 0x2a, 0x4, 0x8, 0xe, 0x40, 0xf4, 0x4, 0x200}], 0x6}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newspdinfo={0x2c, 0x24, 0x3dd681fbf96b935, 0x0, 0x4000, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xfd}}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x2c}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r5, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8840) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) 9.764990964s ago: executing program 1 (id=1015): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffe}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'macvtap0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000180)={0x8d, 0x1, 0x3, 0x7, 0x3, 0x3, "b8067bdca1a66e65920f2fda16f4192a", 0x7, 0x7, 0xff, 0x9, 0x7, 0x5, 0x5}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000040) unshare(0x28060400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) 9.61350755s ago: executing program 2 (id=1016): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x8000001, 0x1}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2a00000042000100fffffffffd0800000000000004004280100001800c00c8000200000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x470243, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b800000000000001965384333f6d6d8a32ad1d528b918ce50b880728f0a98556362ed7d63ba6d21f3a1e7e1fd1a60bfaafb023b22a96a8d84ae920c237a089ad49c98", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x1, 0x4c5a}, 0x28) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 9.554086012s ago: executing program 5 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @private2, 0x2}, 0x1c) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.551662484s ago: executing program 5 (id=1018): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840), 0x0) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000040)={0x8, 0x101}) 7.99554087s ago: executing program 2 (id=1019): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)={@fallback, 0xffffffffffffffff, 0x9, 0x1c}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @replay_val={0x10, 0xa, {0x70bd29, 0x30bd25, 0x40}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd2a, 0x70bd2b, 0x70bd2d, 0x9, [0x100]}}]}, 0x16c}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffd}, 0x2d, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) connect$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2001, {0x2, 0xf0, 0x1}, 0x1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0xfffffffe, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) 7.825002645s ago: executing program 5 (id=1020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) poll(&(0x7f0000000100)=[{r0, 0x100}], 0x1, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x4000000012, 0x80000003}, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000400)="b55808ea4a1f7218b9ed696961db0f90076b6842093e12b586907c1aee34a7cadd7319ad9678af87aa29632ca393cc7183eac26b43aa2a2708bb389e393e9676164a66cf2e6c255c3a2de32eaf6f1897716300404d6c97ecb23af128cfa47c29b4fb0a8861442b7be1be41", 0x6b, r2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 6.321071006s ago: executing program 2 (id=1021): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x2) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x2165036, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x142) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f00000000c0)=""/84) setrlimit(0x9, &(0x7f0000000180)={0x0, 0x36}) getdents64(r5, 0x0, 0x0) 5.444009711s ago: executing program 1 (id=1022): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) munlockall() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="37263679508bdc2640"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x95) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbba9bbbbaaaaaaaaaabb86dd6012000800108000000000000000000000000000bbff0200000000000000000000000000018600907800d5050040000000ff01000029ca1aaff653c584a076c6878ffc2b6703606f560be5d280673bdff36e072f2bc22d81e82207577dc9dced"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000010000000000fcdbdf250a8000000000000332000300140001002001000000000000000000000000000105001600870000006b52a569aa58bc536c4a95d8156be0e7"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390426bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000000000000011400"/64], 0x5c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="840100001800010000000000000000001d0109004d000f8025b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"], 0x184}}, 0x0) 4.119867556s ago: executing program 5 (id=1023): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) 2.609867863s ago: executing program 0 (id=1024): socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xdfffffce, 0xdff, 0x3, 0x831a, 0x3, "04000000000000000400", 0x28, 0x7f}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xf0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) setpgid(0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') r4 = openat$cgroup_type(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) socket$nl_route(0x10, 0x3, 0x0) 2.606096678s ago: executing program 1 (id=1025): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x505, 0x8009967, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) semctl$GETALL(0x0, 0x0, 0xd, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/263}, 0x10f, 0x2, 0x3800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 1.434815709s ago: executing program 0 (id=1026): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(0xffffffffffffffff, 0x8000000000000000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000340)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40014) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x19, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x8080, 0x800, 0x0, 0x440000, 0x0, 0x0, 0x400000, 0x0, 0xfffffffd, 0x20000, 0x0, 0x7}}) connect$inet(r8, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) 1.434467758s ago: executing program 5 (id=1027): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000000), 0x1, 0x0, 0x27}, 0x0) close(r3) r4 = syz_open_procfs(0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0xec776000) exit(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40045304, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) 1.169231295s ago: executing program 1 (id=1028): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) 240.005856ms ago: executing program 2 (id=1029): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x6) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$FUSE_NOTIFY_POLL(r6, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x1}}, 0x18) syz_emit_vhci(&(0x7f0000005740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0xe389, 0x80, 0x300000, 0xa, 0x9, "5dfe0d857a20e634e25b05b045b9bc9f36f992", 0x6, 0x100}) syslog(0x2, &(0x7f0000000080)=""/98, 0x62) 102.771723ms ago: executing program 0 (id=1030): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r0 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x8000, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe, 0x8]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8200, 0x42) getdents64(r4, &(0x7f0000000340)=""/220, 0xdc) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x80000000000004, 0xffff}, 0x0) timer_create(0x7, 0x0, &(0x7f0000000140)=0x0) timer_getoverrun(r5) mq_timedreceive(r0, &(0x7f0000000440)=""/241, 0xf1, 0x35b66702, &(0x7f00000000c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x90141, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) signalfd4(r7, 0x0, 0x0, 0x800) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$inet(0x2, 0x2, 0xfffffff9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="c4e1fd10fdc44164596512c744240047d60000c744240247000000ff1c24b9800000c00f3235002000000f300f20e035000002000e0f22e0e0b8390140d84f2c66ba420066b8dd947676efc4a17853abb00c00003e470f019c1030000000440f20c08f48309fc500440f22c0", 0x6c}], 0x1, 0x27, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x72, 0x0, 0x0) 0s ago: executing program 5 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0x1, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000001ffe, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0xfffffffffffffdff}) r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x1, @local, 0x7}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={r5, @in={{0x2, 0x4e23, @broadcast}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) kernel console output (not intermixed with test programs): -1: Using ep0 maxpacket: 32 [ 199.682856][ T5794] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.682883][ T5794] usb 3-1: config 0 has no interface number 0 [ 199.689498][ T5794] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 199.689524][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.689543][ T5794] usb 3-1: Product: syz [ 199.689558][ T5794] usb 3-1: Manufacturer: syz [ 199.689572][ T5794] usb 3-1: SerialNumber: syz [ 199.695045][ T5794] usb 3-1: config 0 descriptor?? [ 199.814625][ T5794] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 199.814650][ T5794] usb 3-1: selecting invalid altsetting 1 [ 199.814664][ T5794] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 200.233961][ T30] audit: type=1400 audit(1783909703.090:481): avc: denied { read } for pid=7044 comm="syz.0.282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.239079][ T7046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.282'. [ 200.252218][ T30] audit: type=1400 audit(1783909703.110:482): avc: denied { ioctl } for pid=7044 comm="syz.0.282" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.330618][ T5794] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.331019][ T5794] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 200.331104][ T5794] usb 3-1: media controller created [ 200.359681][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.392036][ T5794] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 200.392089][ T5794] zl10353_read_register: readreg error (reg=127, ret==-71) [ 200.395526][ T5794] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 200.450516][ T5794] usb 3-1: USB disconnect, device number 5 [ 200.464237][ T30] audit: type=1400 audit(1783909703.330:483): avc: denied { read write } for pid=7043 comm="syz.1.283" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 200.645261][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 200.707804][ T30] audit: type=1400 audit(1783909703.330:484): avc: denied { open } for pid=7043 comm="syz.1.283" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 200.709322][ T30] audit: type=1400 audit(1783909703.510:485): avc: denied { bind } for pid=7051 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.709354][ T30] audit: type=1400 audit(1783909703.510:486): avc: denied { write } for pid=7051 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.116172][ T7060] bridge0: port 3(syz_tun) entered blocking state [ 201.123138][ T7060] bridge0: port 3(syz_tun) entered disabled state [ 201.129661][ T7060] syz_tun: entered allmulticast mode [ 201.136252][ T7060] syz_tun: entered promiscuous mode [ 203.513169][ T7053] infiniband syz1: set active [ 203.523517][ T7053] infiniband syz1: added bond0 [ 203.546920][ T7053] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 203.565290][ T7053] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 203.791172][ T7053] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 204.713806][ T7053] RDS/IB: syz1: added [ 204.756992][ T7053] smc: adding ib device syz1 with port count 1 [ 204.783449][ T7053] smc: ib device syz1 port 1 has no pnetid [ 204.917092][ T30] audit: type=1400 audit(1783909707.780:487): avc: denied { setopt } for pid=7088 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.967951][ T30] audit: type=1400 audit(1783909707.780:488): avc: denied { sqpoll } for pid=7088 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 205.539671][ T7098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.689768][ T7098] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 205.706384][ T30] audit: type=1400 audit(1783909708.570:489): avc: denied { write } for pid=7110 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.866545][ T7098] team0 (unregistering): Port device team_slave_0 removed [ 206.426987][ T7098] team0 (unregistering): Port device team_slave_1 removed [ 206.587584][ T30] audit: type=1400 audit(1783909709.450:490): avc: denied { mounton } for pid=7118 comm="syz.1.301" path="/70/file0" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.698788][ T7124] overlay: ./file0 is not a directory [ 207.127899][ T30] audit: type=1400 audit(1783909709.980:491): avc: denied { mount } for pid=7118 comm="syz.1.301" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 207.638400][ T7132] pim6reg: entered allmulticast mode [ 208.327444][ T7130] pim6reg: left allmulticast mode [ 208.910234][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 209.072391][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.092556][ T5811] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 209.118193][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.165685][ T5811] usb 2-1: config 0 descriptor?? [ 209.206884][ T5811] pwc: Askey VC010 type 2 USB webcam detected. [ 209.237110][ T7145] batadv_slave_0: entered promiscuous mode [ 209.254851][ T7145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.307'. [ 209.287614][ T7145] batadv_slave_0: left promiscuous mode [ 209.311756][ T30] audit: type=1400 audit(1783909712.140:492): avc: denied { nlmsg_write } for pid=7142 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 209.607003][ T7148] team_slave_1: Caught tx_queue_len zero misconfig [ 211.708481][ T5811] pwc: send_video_command error -71 [ 211.724101][ T5811] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 211.734098][ T5811] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 211.872117][ T5811] usb 2-1: USB disconnect, device number 4 [ 211.932762][ T7162] sch_fq: defrate 0 ignored. [ 212.989594][ T7179] pim6reg: entered allmulticast mode [ 213.673319][ T7181] kAFS: unable to lookup cell 'ÿ' [ 213.708451][ T7177] pim6reg: left allmulticast mode [ 214.252881][ T7190] netlink: 'syz.1.317': attribute type 49 has an invalid length. [ 214.459186][ T7190] bond0: (slave bond_slave_0): Releasing backup interface [ 214.495752][ T7192] kAFS: unable to lookup cell 'ÿ' [ 214.533669][ T7190] bond_slave_0: entered promiscuous mode [ 214.540776][ T7190] bond_slave_0: entered allmulticast mode [ 214.667937][ T30] audit: type=1400 audit(1783909717.530:493): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.216921][ T30] audit: type=1400 audit(1783909717.550:494): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.319482][ T30] audit: type=1400 audit(1783909717.550:495): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.453905][ T30] audit: type=1400 audit(1783909717.550:496): avc: denied { read } for pid=5271 comm="dhcpcd" name="n508" dev="tmpfs" ino=3291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.480479][ T30] audit: type=1400 audit(1783909717.550:497): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=3291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.504603][ T30] audit: type=1400 audit(1783909717.560:498): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=3291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.612667][ T30] audit: type=1400 audit(1783909718.340:499): avc: denied { read } for pid=7209 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.681976][ T30] audit: type=1400 audit(1783909718.340:500): avc: denied { read open } for pid=7209 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.758247][ T30] audit: type=1400 audit(1783909718.340:501): avc: denied { getattr } for pid=7209 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.169002][ T30] audit: type=1400 audit(1783909719.030:502): avc: denied { write } for pid=7203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.105005][ T7233] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 218.406416][ T7260] xfrm0: left promiscuous mode [ 218.411852][ T7260] xfrm0: left allmulticast mode [ 218.418229][ T7260] vlan2: left allmulticast mode [ 218.424111][ T7260] bond0: left allmulticast mode [ 218.429028][ T7260] bond_slave_0: left allmulticast mode [ 218.435927][ T7260] bond_slave_1: left allmulticast mode [ 219.836650][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 219.836659][ T30] audit: type=1400 audit(1783909722.700:513): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 222.409998][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 222.416043][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 222.727245][ T5794] libceph: connect (1)[c::]:6789 error -101 [ 222.727544][ T7296] ceph: No mds server is up or the cluster is laggy [ 222.939502][ T5794] libceph: mon0 (1)[c::]:6789 connect error [ 223.301437][ T5794] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 224.221921][ T5794] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.234537][ T5794] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.245978][ T5794] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.262961][ T5794] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 224.279903][ T5794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 224.289988][ T5794] usb 5-1: Product: syz [ 224.297435][ T5794] usb 5-1: Manufacturer: syz [ 224.306296][ T5794] usb 5-1: SerialNumber: syz [ 225.237009][ T30] audit: type=1400 audit(1783909728.010:514): avc: denied { mount } for pid=7318 comm="syz.3.340" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 225.516021][ T5794] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 225.898011][ T7309] netlink: 'syz.4.337': attribute type 3 has an invalid length. [ 225.908128][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.916855][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.015556][ T5711] usb 5-1: USB disconnect, device number 2 [ 226.131875][ T5711] usblp0: removed [ 227.224787][ T5711] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.649443][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 228.312244][ T7355] block nbd0: not configured, cannot reconfigure [ 228.800812][ T5711] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.828430][ T5711] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 228.837983][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.852682][ T5711] usb 4-1: Product: syz [ 228.858943][ T5711] usb 4-1: Manufacturer: syz [ 228.864023][ T5711] usb 4-1: SerialNumber: syz [ 228.871683][ T5711] usb 4-1: config 0 descriptor?? [ 229.003948][ T5711] usb 4-1: can't set config #0, error -71 [ 229.044282][ T5711] usb 4-1: USB disconnect, device number 7 [ 229.080546][ T5794] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 229.968114][ T5794] usb 1-1: Using ep0 maxpacket: 8 [ 229.993389][ T5794] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.214292][ T5794] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.325886][ T5794] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.349003][ T5794] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 230.365516][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.384764][ T5794] usb 1-1: Product: syz [ 230.430659][ T5794] usb 1-1: Manufacturer: syz [ 230.447522][ T5794] usb 1-1: SerialNumber: syz [ 231.605599][ T30] audit: type=1400 audit(1783909734.470:515): avc: denied { create } for pid=7357 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.224036][ T30] audit: type=1400 audit(1783909734.510:516): avc: denied { setopt } for pid=7357 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.085987][ T30] audit: type=1400 audit(1783909735.950:517): avc: denied { write } for pid=7381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.268630][ T30] audit: type=1400 audit(1783909736.130:518): avc: denied { write } for pid=7414 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.196044][ T7425] pim6reg: entered allmulticast mode [ 234.212300][ T7425] pim6reg: left allmulticast mode [ 234.291456][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 235.716561][ T30] audit: type=1400 audit(1783909738.450:519): avc: denied { create } for pid=7435 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.517910][ T30] audit: type=1400 audit(1783909738.520:520): avc: denied { create } for pid=7436 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 236.880744][ T30] audit: type=1400 audit(1783909739.530:521): avc: denied { setopt } for pid=7436 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.083501][ T30] audit: type=1400 audit(1783909739.940:522): avc: denied { write } for pid=7436 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.120032][ T5794] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 237.373685][ T5794] usb 1-1: USB disconnect, device number 6 [ 238.023712][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.963709][ T30] audit: type=1400 audit(1783909741.720:523): avc: denied { lock } for pid=7458 comm="syz.1.370" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 239.027532][ T30] audit: type=1400 audit(1783909741.750:524): avc: denied { write } for pid=7458 comm="syz.1.370" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.053546][ T7463] input: syz0 as /devices/virtual/input/input9 [ 239.077655][ T30] audit: type=1400 audit(1783909741.870:525): avc: denied { read write } for pid=7462 comm="syz.2.369" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 239.104112][ T30] audit: type=1400 audit(1783909741.870:526): avc: denied { open } for pid=7462 comm="syz.2.369" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 239.341132][ T30] audit: type=1400 audit(1783909741.870:527): avc: denied { ioctl } for pid=7462 comm="syz.2.369" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 239.379947][ T30] audit: type=1400 audit(1783909741.940:528): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=2995 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.422195][ T30] audit: type=1400 audit(1783909741.940:529): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2995 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.461967][ T30] audit: type=1400 audit(1783909741.940:530): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2995 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.502070][ T7471] pim6reg: entered allmulticast mode [ 239.509094][ T7471] pim6reg: left allmulticast mode [ 240.022264][ T5802] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 240.791854][ T5802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.802182][ T5802] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.813939][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.816136][ T29] libceph: connect (1)[c::]:6789 error -101 [ 240.824070][ T5802] usb 3-1: config 0 descriptor?? [ 240.839797][ T5802] pwc: Askey VC010 type 2 USB webcam detected. [ 240.847141][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 241.681038][ T7486] ceph: No mds server is up or the cluster is laggy [ 241.970288][ T5626] Bluetooth: hci2: unexpected cc 0x0c12 length: 1 < 3 [ 241.977119][ T5626] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 242.093616][ T29] libceph: connect (1)[c::]:6789 error -101 [ 242.308916][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 242.533488][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'. [ 242.675823][ T7511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'. [ 242.910849][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 242.910878][ T30] audit: type=1400 audit(1783909745.750:532): avc: denied { setopt } for pid=7506 comm="syz.3.381" lport=58160 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 243.533802][ T5802] pwc: send_video_command error -71 [ 243.682003][ T7504] loop4: detected capacity change from 0 to 2640 [ 244.582894][ T5802] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 245.026814][ T5802] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 245.067296][ T5802] usb 3-1: USB disconnect, device number 6 [ 245.070338][ T7511] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 245.081650][ T30] audit: type=1400 audit(1783909746.030:533): avc: denied { append } for pid=7505 comm="syz.1.380" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.126259][ T7511] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 245.165461][ T30] audit: type=1400 audit(1783909746.160:534): avc: denied { module_request } for pid=7505 comm="syz.1.380" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 245.191945][ T7511] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 245.297002][ T7511] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 245.359460][ T7511] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 245.377172][ T7511] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 245.387656][ T7511] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 245.450358][ T7511] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 246.054229][ T7511] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 246.064011][ T7525] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 246.081556][ T7511] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 246.245329][ T30] audit: type=1400 audit(1783909749.110:535): avc: denied { name_bind } for pid=7534 comm="syz.4.385" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 247.233680][ T5626] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 247.814313][ T7552] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.387'. [ 248.648837][ T5704] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 248.789114][ T7562] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.797985][ T7562] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 248.807265][ T7562] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 249.297610][ T7552] veth0_macvtap: left promiscuous mode [ 249.350222][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 249.388465][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.514059][ T5704] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 249.523742][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.561218][ T5704] usb 1-1: config 0 descriptor?? [ 249.773483][ T7573] netlink: 'syz.1.393': attribute type 4 has an invalid length. [ 250.081018][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.087332][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.332377][ T7552] veth0_macvtap: entered promiscuous mode [ 251.281537][ T5626] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 251.291937][ T5626] Bluetooth: hci1: Injecting HCI hardware error event [ 251.311598][ T5618] Bluetooth: hci1: hardware error 0x00 [ 253.452343][ T5618] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 254.080178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 254.100174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 254.267339][ T7605] syz_tun: left allmulticast mode [ 254.276617][ T7605] syz_tun: left promiscuous mode [ 254.291894][ T7605] bridge0: port 3(syz_tun) entered disabled state [ 254.537694][ T7605] bridge_slave_1: left allmulticast mode [ 254.544015][ T7605] bridge_slave_1: left promiscuous mode [ 254.550814][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.573583][ T7605] bridge_slave_0: left allmulticast mode [ 254.579296][ T7605] bridge_slave_0: left promiscuous mode [ 254.586838][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.159408][ T5704] usb 1-1: can't set config #0, error -71 [ 256.979357][ T5704] usb 1-1: USB disconnect, device number 7 [ 257.059013][ T30] audit: type=1400 audit(1783909759.920:536): avc: denied { write } for pid=7590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.607311][ T5618] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 257.651306][ T7612] random: crng reseeded on system resumption [ 257.662193][ T30] audit: type=1400 audit(1783909760.520:537): avc: denied { write } for pid=7609 comm="syz.3.401" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 258.354304][ T30] audit: type=1400 audit(1783909760.520:538): avc: denied { open } for pid=7609 comm="syz.3.401" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 258.959548][ T30] audit: type=1400 audit(1783909761.820:539): avc: denied { write } for pid=7630 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.179501][ T30] audit: type=1400 audit(1783909762.040:540): avc: denied { listen } for pid=7646 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.792947][ T7658] capability: warning: `syz.1.409' uses 32-bit capabilities (legacy support in use) [ 259.818011][ T30] audit: type=1400 audit(1783909762.650:541): avc: denied { watch } for pid=7650 comm="syz.1.409" path="/100/file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.887210][ T30] audit: type=1400 audit(1783909762.650:542): avc: denied { watch_sb watch_reads } for pid=7650 comm="syz.1.409" path="/100/file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 260.254795][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 260.670635][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 260.777123][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.952533][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 261.392671][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.401220][ T9] usb 1-1: Product: syz [ 261.405834][ T9] usb 1-1: Manufacturer: syz [ 261.413055][ T9] usb 1-1: SerialNumber: syz [ 261.419794][ T9] usb 1-1: config 0 descriptor?? [ 261.426942][ T9] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 261.682999][ T5618] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 261.692954][ T5618] Bluetooth: hci2: Injecting HCI hardware error event [ 261.706384][ T5626] Bluetooth: hci2: hardware error 0x00 [ 262.125550][ T7679] kAFS: unable to lookup cell 'ÿ' [ 262.226151][ T30] audit: type=1400 audit(1783909765.090:543): avc: denied { write } for pid=7649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.445105][ T30] audit: type=1400 audit(1783909765.300:544): avc: denied { write } for pid=7684 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.635463][ T7679] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 263.353578][ T9] usb 1-1: USB disconnect, device number 8 [ 263.890434][ T5626] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 264.843389][ T7713] raw_sendmsg: syz.3.418 forgot to set AF_INET. Fix it! [ 265.341190][ T7713] ceph: No mds server is up or the cluster is laggy [ 265.347974][ T29] libceph: connect (1)[c::]:6789 error -101 [ 265.395774][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 265.990310][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 266.700779][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 266.707593][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 266.723386][ T9] usb 3-1: config 0 has no interface number 0 [ 266.745358][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 266.766775][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.796695][ T9] usb 3-1: Product: syz [ 266.821869][ T9] usb 3-1: Manufacturer: syz [ 266.841886][ T9] usb 3-1: SerialNumber: syz [ 266.876998][ T9] usb 3-1: config 0 descriptor?? [ 266.919564][ T9] hub 3-1:0.132: bad descriptor, ignoring hub [ 266.957796][ T9] hub 3-1:0.132: probe with driver hub failed with error -5 [ 267.096941][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input10 [ 268.297903][ T7734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.309916][ T30] audit: type=1400 audit(1783909770.740:545): avc: denied { map } for pid=7721 comm="syz.2.420" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 269.807846][ T7743] netlink: 23 bytes leftover after parsing attributes in process `syz.3.426'. [ 269.856833][ T7745] 9p: Bad value for 'source' [ 269.862849][ T30] audit: type=1400 audit(1783909772.720:546): avc: denied { mounton } for pid=7744 comm="syz.0.424" path="/82/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 270.228437][ T7747] overlay: Unknown parameter 'audit' [ 270.291780][ T30] audit: type=1400 audit(1783909773.160:547): avc: denied { mmap_zero } for pid=7748 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 270.981121][ T30] audit: type=1400 audit(1783909773.830:548): avc: denied { write } for pid=7757 comm="syz.3.428" name="file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 271.956838][ T30] audit: type=1400 audit(1783909773.830:549): avc: denied { open } for pid=7757 comm="syz.3.428" path="/91/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 271.979360][ T30] audit: type=1400 audit(1783909773.830:550): avc: denied { ioctl } for pid=7757 comm="syz.3.428" path="/91/file0" dev="tmpfs" ino=516 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 272.521851][ T7773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.431'. [ 273.737335][ T7783] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 273.899934][ T7785] netlink: 3 bytes leftover after parsing attributes in process `syz.1.435'. [ 273.993692][ T30] audit: type=1400 audit(1783909776.840:551): avc: denied { name_bind 0x1000000 } for pid=7784 comm="syz.1.435" path="socket:[16047]" dev="sockfs" ino=16047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.026416][ T7783] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 274.079716][ T30] audit: type=1400 audit(1783909776.930:552): avc: denied { write } for pid=7784 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.188180][ T7783] team0 (unregistering): Port device team_slave_0 removed [ 274.362073][ T7783] team0 (unregistering): Port device team_slave_1 removed [ 274.657276][ T30] audit: type=1400 audit(1783909777.500:553): avc: denied { create } for pid=7790 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 274.898000][ T30] audit: type=1400 audit(1783909777.520:554): avc: denied { sys_admin } for pid=7790 comm="syz.1.436" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 274.922449][ T7783] team0 (unregistering): Port device netdevsim1 removed [ 274.972929][ T7794] ªªªªªª: renamed from vlan0 (while UP) [ 276.790587][ T805] usb 3-1: USB disconnect, device number 7 [ 276.875794][ T7813] netlink: 'syz.0.439': attribute type 13 has an invalid length. [ 277.474057][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 277.531136][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 277.590536][ T7824] erofs (device loop2): cannot find valid erofs superblock [ 278.197575][ T30] audit: type=1400 audit(1783909781.060:555): avc: denied { write } for pid=7801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.380099][ T30] audit: type=1400 audit(1783909782.240:556): avc: denied { write } for pid=7835 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.477960][ T30] audit: type=1400 audit(1783909785.340:557): avc: denied { write } for pid=7846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.200298][ T30] audit: type=1400 audit(1783909785.560:558): avc: denied { read } for pid=7877 comm="syz.1.450" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.535084][ T30] audit: type=1400 audit(1783909786.350:559): avc: denied { write } for pid=7888 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.723578][ T7896] batadv_slave_0: Caught tx_queue_len zero misconfig [ 284.515163][ T30] audit: type=1400 audit(1783909786.600:560): avc: denied { setopt } for pid=7889 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 286.203068][ T7924] evm: overlay not supported [ 286.215173][ T30] audit: type=1400 audit(1783909789.080:561): avc: denied { getopt } for pid=7922 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.397628][ T30] audit: type=1400 audit(1783909789.260:562): avc: denied { read } for pid=7922 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 287.263889][ T7925] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.301517][ T7948] binder: 7947:7948 ioctl c0306201 200000000040 returned -14 [ 291.056040][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 291.748914][ T805] IPVS: starting estimator thread 0... [ 291.828542][ T7982] trusted_key: encrypted_key: insufficient parameters specified [ 291.940284][ T7981] IPVS: using max 43 ests per chain, 103200 per kthread [ 292.377391][ T7984] syz.1.474 uses obsolete (PF_INET,SOCK_PACKET) [ 294.937331][ T8016] veth0_macvtap: Caught tx_queue_len zero misconfig [ 295.015137][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 295.040055][ T30] audit: type=1400 audit(1783909797.900:563): avc: denied { mounton } for pid=8014 comm="syz.1.481" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 295.478739][ T8031] pim6reg: entered allmulticast mode [ 295.489441][ T8031] pim6reg: left allmulticast mode [ 295.766744][ T8037] batadv_slave_0: Caught tx_queue_len zero misconfig [ 297.251935][ T30] audit: type=1400 audit(1783909800.100:564): avc: denied { bind } for pid=8041 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.384466][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 297.637429][ T30] audit: type=1400 audit(1783909800.500:565): avc: denied { firmware_load } for pid=8042 comm="syz.1.487" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 297.857720][ T8043] syz.1.487 (8043) used greatest stack depth: 18672 bytes left [ 297.938039][ T8052] netlink: 148 bytes leftover after parsing attributes in process `syz.0.489'. [ 297.969758][ T8052] netlink: 56 bytes leftover after parsing attributes in process `syz.0.489'. [ 298.451661][ T8052] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 299.620477][ T5802] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 299.715695][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 299.742718][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 299.832280][ T8066] erofs (device loop1): cannot find valid erofs superblock [ 300.208292][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.225035][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.235009][ T5802] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 300.253927][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.269321][ T5802] usb 1-1: config 0 descriptor?? [ 301.989054][ T5802] usbhid 1-1:0.0: can't add hid device: -71 [ 302.920624][ T5802] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 303.312706][ T5802] usb 1-1: USB disconnect, device number 9 [ 304.411410][ T30] audit: type=1400 audit(1783909806.730:566): avc: denied { write } for pid=8106 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.518600][ T8129] ip6gre1: entered allmulticast mode [ 306.572584][ T8077] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.881831][ T8125] vxfs: unable to read disk superblock at 1 [ 306.888488][ T8125] vxfs: unable to read disk superblock at 8 [ 306.894408][ T8125] vxfs: can't find superblock. [ 308.674369][ T8154] random: crng reseeded on system resumption [ 308.698920][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 308.771334][ T8155] netlink: 104 bytes leftover after parsing attributes in process `syz.3.508'. [ 309.073423][ T8154] Can't find ip_set type hash:ip,port,ne [ 309.755748][ T8166] 9p: Bad value for 'rfdno' [ 310.378557][ T8168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.560254][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.530985][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.537657][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.423420][ T30] audit: type=1400 audit(1783909816.290:567): avc: denied { lock } for pid=8193 comm="syz.0.520" path="socket:[16792]" dev="sockfs" ino=16792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 313.567624][ T8207] dlm: non-version read from control device 0 [ 313.897536][ T30] audit: type=1400 audit(1783909816.340:568): avc: denied { lock } for pid=8193 comm="syz.0.520" path="socket:[17707]" dev="sockfs" ino=17707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.860216][ T5725] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 316.660299][ T5725] usb 2-1: Using ep0 maxpacket: 16 [ 316.681496][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.814790][ T8234] gfs2: error -5 reading superblock [ 317.196916][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.213326][ T5725] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 317.249963][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.277250][ T5725] usb 2-1: config 0 descriptor?? [ 318.189507][ T30] audit: type=1400 audit(1783909821.050:569): avc: denied { append } for pid=8240 comm="syz.0.533" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.374346][ T8250] loop5: detected capacity change from 0 to 2640 [ 318.401322][ T8250] buffer_io_error: 320 callbacks suppressed [ 318.401343][ T8250] Buffer I/O error on dev loop5, logical block 0, async page read [ 318.465631][ T8252] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 318.474907][ T8252] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 318.483811][ T8252] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 318.492705][ T8252] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 318.502292][ T8252] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 318.511442][ T8252] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 318.520544][ T8252] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 318.529356][ T8252] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 318.538287][ T8252] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 318.560287][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.627263][ T5725] usbhid 2-1:0.0: can't add hid device: -71 [ 319.837647][ T5725] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 319.856319][ T5725] usb 2-1: USB disconnect, device number 5 [ 320.061756][ T8266] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.537'. [ 321.190432][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 321.199263][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 321.208132][ T8278] netlink: 'syz.1.540': attribute type 13 has an invalid length. [ 321.215888][ T8278] netlink: 'syz.1.540': attribute type 12 has an invalid length. [ 321.552181][ T1228] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 321.930228][ T8283] gfs2: gfs2 mount does not exist [ 321.939152][ T30] audit: type=1400 audit(1783909824.800:570): avc: denied { connect } for pid=8281 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 322.106042][ T1228] usb 3-1: config 127 has an invalid interface number: 138 but max is 0 [ 322.124356][ T1228] usb 3-1: config 127 has no interface number 0 [ 322.152625][ T1228] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 322.189368][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.209722][ T1228] usb 3-1: Product: syz [ 322.296592][ T1228] usb 3-1: Manufacturer: syz [ 322.301288][ T1228] usb 3-1: SerialNumber: syz [ 322.453618][ T8293] capability: warning: `syz.1.543' uses deprecated v2 capabilities in a way that may be insecure [ 322.957393][ T1228] usb 3-1: probing VID:PID(0424:012C) [ 322.986100][ T1228] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0F [ 323.004370][ T1228] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 323.203332][ T1228] vub300 3-1:127.138: probe with driver vub300 failed with error -22 [ 324.145942][ T1228] usb 3-1: USB disconnect, device number 8 [ 325.615824][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 325.653916][ T8296] overlay: Unknown parameter '/' [ 325.705039][ T30] audit: type=1400 audit(1783909828.560:571): avc: denied { bind } for pid=8307 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 325.773531][ T30] audit: type=1400 audit(1783909828.590:572): avc: denied { listen } for pid=8307 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 326.850864][ T30] audit: type=1400 audit(1783909829.180:573): avc: denied { ioctl } for pid=8311 comm="syz.2.550" path="socket:[17903]" dev="sockfs" ino=17903 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 327.102682][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 327.514461][ T8324] 9p: Bad value for 'wfdno' [ 327.530283][ T30] audit: type=1400 audit(1783909830.390:574): avc: denied { create } for pid=8323 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 327.596932][ T8324] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 329.285082][ T8357] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 330.019921][ T8357] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 330.045401][ T8357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 330.299325][ T30] audit: type=1400 audit(1783909833.110:575): avc: denied { map } for pid=8356 comm="syz.2.558" path="/dev/ublkc1" dev="devtmpfs" ino=3023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.673190][ T8367] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 330.725961][ T8367] fuse: Unknown parameter '00000000000000000007' [ 331.017412][ T30] audit: type=1400 audit(1783909833.880:576): avc: denied { execute } for pid=8372 comm="syz.4.562" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.144233][ T8374] 9pnet_virtio: no channels available for device 127.0.0.1 [ 333.920268][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.114107][ T8413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.638521][ T30] audit: type=1400 audit(1783909838.500:577): avc: denied { connect } for pid=8425 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.783463][ T8429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.575'. [ 336.733534][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 338.327351][ T30] audit: type=1400 audit(1783909841.150:578): avc: denied { bind } for pid=8443 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.418644][ T8452] Bluetooth: MGMT ver 1.23 [ 339.319628][ T30] audit: type=1400 audit(1783909842.120:579): avc: denied { bind } for pid=8467 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.594220][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 340.130556][ T8479] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 340.365688][ T8481] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 340.801549][ T8479] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 341.141607][ T30] audit: type=1400 audit(1783909844.010:580): avc: denied { shutdown } for pid=8485 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.994078][ T8490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.589'. [ 342.367470][ T30] audit: type=1400 audit(1783909845.230:581): avc: denied { ioctl } for pid=8486 comm="syz.0.587" path="socket:[17276]" dev="sockfs" ino=17276 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 342.370152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #286!!! [ 342.850155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 342.910152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 342.982767][ T8502] Bluetooth: (null): Invalid header checksum [ 342.994732][ T144] Bluetooth: (null): Invalid header checksum [ 343.319076][ T144] Bluetooth: (null): Invalid header checksum [ 343.319247][ T144] Bluetooth: (null): Invalid header checksum [ 343.345203][ T144] Bluetooth: (null): Invalid header checksum [ 343.441155][ T8077] Bluetooth: (null): Invalid header checksum [ 343.583101][ T6144] Bluetooth: (null): Invalid header checksum [ 343.693922][ T6144] Bluetooth: (null): Invalid header checksum [ 343.782210][ T8069] Bluetooth: (null): Invalid header checksum [ 343.916415][ T8077] Bluetooth: (null): Invalid header checksum [ 343.930156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 343.940154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 343.990154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 344.000148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 344.010316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 344.088519][ T8077] Bluetooth: (null): Invalid header checksum [ 346.073359][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.596'. [ 346.445205][ T5802] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 347.544810][ T5802] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.966127][ T5802] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 348.207109][ T5802] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 348.306844][ T5802] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 348.364061][ T5802] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 348.448050][ T5802] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.528378][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.608367][ T5802] usb 2-1: Product: syz [ 348.625990][ T8546] pim6reg: entered allmulticast mode [ 348.667743][ T5802] usb 2-1: Manufacturer: syz [ 348.678157][ T8546] pim6reg: left allmulticast mode [ 349.416054][ T5802] usb 2-1: can't set config #1, error -71 [ 349.444859][ T5802] usb 2-1: USB disconnect, device number 6 [ 349.480306][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.604'. [ 349.700316][ T5704] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 349.792275][ T8559] netlink: 92 bytes leftover after parsing attributes in process `syz.1.605'. [ 350.025288][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 350.080794][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 350.093571][ T5704] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 350.107131][ T5704] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 350.248773][ T5704] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 350.258583][ T5704] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 350.268647][ T5704] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 350.278425][ T5704] usb 4-1: config 1 interface 0 has no altsetting 0 [ 350.285321][ T5704] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 350.294614][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.353917][ T8567] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 350.361984][ T8558] trusted_key: encrypted_key: insufficient parameters specified [ 350.371642][ T8558] trusted_key: encrypted_key: keylen parameter is missing [ 350.400264][ T5704] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 350.415779][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.423400][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.470040][ T8568] netlink: 52 bytes leftover after parsing attributes in process `syz.0.607'. [ 351.038206][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.045751][ T8567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.056362][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.063978][ T8567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.997139][ T8567] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 352.023877][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.101867][ T8573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.820374][ T5704] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 353.893457][ T5704] usb 4-1: USB disconnect, device number 8 [ 354.483219][ T30] audit: type=1400 audit(1783909857.060:582): avc: denied { append } for pid=8595 comm="syz.2.613" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 354.547862][ T30] audit: type=1400 audit(1783909857.070:583): avc: denied { read append } for pid=8595 comm="syz.2.613" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 355.664368][ T8619] kAFS: unable to lookup cell 'ÿ' [ 361.350319][ T30] audit: type=1400 audit(1783909864.080:584): avc: denied { mount } for pid=8642 comm="syz.2.622" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 361.377789][ T8652] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 361.386299][ T30] audit: type=1400 audit(1783909864.200:585): avc: denied { mounton } for pid=8642 comm="syz.2.622" path="/119/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 361.411370][ T8653] kAFS: unable to lookup cell 'ÿ' [ 362.214804][ T8653] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 362.245953][ T30] audit: type=1400 audit(1783909865.110:586): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 362.821158][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.829810][ T8653] team0: Port device netdevsim1 added [ 362.983166][ T30] audit: type=1400 audit(1783909865.850:587): avc: denied { link } for pid=8662 comm="syz.2.626" name="#10" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 363.074761][ T30] audit: type=1400 audit(1783909865.870:588): avc: denied { rename } for pid=8662 comm="syz.2.626" name="#11" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 363.370274][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.404742][ T30] audit: type=1400 audit(1783909866.260:589): avc: denied { bind } for pid=8667 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 363.407178][ T8668] xt_hashlimit: size too large, truncated to 1048576 [ 363.523419][ T30] audit: type=1400 audit(1783909866.270:590): avc: denied { setopt } for pid=8667 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.873448][ T8706] xt_hashlimit: overflow, try lower: 6/0 [ 367.985093][ T30] audit: type=1400 audit(1783909870.850:591): avc: denied { getopt } for pid=8707 comm="syz.3.639" lport=47709 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 368.066778][ T30] audit: type=1400 audit(1783909870.880:592): avc: denied { connect } for pid=8707 comm="syz.3.639" lport=47709 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 368.120753][ T8698] fuse: Unknown parameter 'fd0x0000000000000006' [ 368.380208][ T30] audit: type=1400 audit(1783909870.880:593): avc: denied { name_connect } for pid=8707 comm="syz.3.639" dest=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 368.833374][ T8717] kAFS: unable to lookup cell 'ÿ' [ 370.934238][ T8717] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 371.061004][ T8733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.159114][ T30] audit: type=1326 audit(1783909874.020:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.2.645" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883259de59 code=0x7ffc0000 [ 371.279184][ T30] audit: type=1326 audit(1783909874.050:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.2.645" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883259de59 code=0x7ffc0000 [ 371.474040][ T30] audit: type=1326 audit(1783909874.060:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.2.645" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f883259de59 code=0x7ffc0000 [ 371.849346][ T30] audit: type=1326 audit(1783909874.060:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.2.645" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883259de59 code=0x7ffc0000 [ 371.876640][ T30] audit: type=1326 audit(1783909874.070:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.2.645" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883259de59 code=0x7ffc0000 [ 371.927053][ T30] audit: type=1326 audit(1783909874.070:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.2.645" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f883259de59 code=0x7ffc0000 [ 372.046172][ T30] audit: type=1326 audit(1783909874.070:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8734 comm="syz.2.645" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883259de59 code=0x7ffc0000 [ 373.002450][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.008824][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.386604][ T8762] fuse: Unknown parameter 'r00000000S0001000p0' [ 378.006566][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 378.006590][ T30] audit: type=1400 audit(1783909880.870:621): avc: denied { create } for pid=8783 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 379.034019][ T30] audit: type=1400 audit(1783909881.900:622): avc: denied { ioctl } for pid=8794 comm="syz.0.661" path="socket:[19079]" dev="sockfs" ino=19079 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 379.276818][ T8800] pim6reg: entered allmulticast mode [ 379.622194][ T8800] pim6reg: left allmulticast mode [ 381.782889][ T8820] kAFS: unable to lookup cell 'ÿ' [ 382.903660][ T8827] tipc: Trying to set illegal importance in message [ 382.943235][ T8828] netlink: 'syz.0.663': attribute type 10 has an invalid length. [ 383.561040][ T8823] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 384.357981][ T8828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.388817][ T8828] team0: Port device netdevsim1 added [ 385.038014][ T8843] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 385.047678][ T8843] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 385.057442][ T8843] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 386.962841][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.673'. [ 387.862372][ T8867] pim6reg: entered allmulticast mode [ 387.873970][ T8867] pim6reg: left allmulticast mode [ 389.206550][ T30] audit: type=1400 audit(1783909892.060:623): avc: denied { append } for pid=8871 comm="syz.2.676" name="001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 389.575862][ T30] audit: type=1400 audit(1783909892.070:624): avc: denied { ioctl } for pid=8871 comm="syz.2.676" path="socket:[19165]" dev="sockfs" ino=19165 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 390.005885][ T8885] binder: BINDER_SET_CONTEXT_MGR already set [ 390.012263][ T8885] binder: 8884:8885 ioctl 4018620d 200000004a80 returned -16 [ 390.845090][ T8896] gfs2: error -5 reading superblock [ 391.587901][ T8887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.705208][ T30] audit: type=1400 audit(1783909894.570:625): avc: denied { ioctl } for pid=8898 comm="syz.3.683" path="socket:[19231]" dev="sockfs" ino=19231 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 393.106706][ T30] audit: type=1400 audit(1783909895.880:626): avc: denied { getopt } for pid=8899 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.875891][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 393.884797][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 393.893631][ T8920] netlink: 'syz.4.686': attribute type 13 has an invalid length. [ 393.901400][ T8920] netlink: 'syz.4.686': attribute type 12 has an invalid length. [ 395.969300][ T8921] bond1: entered promiscuous mode [ 396.488787][ T8921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.516818][ T8923] dummy0: entered allmulticast mode [ 396.537585][ T8923] dummy0: left allmulticast mode [ 396.569107][ T8931] pim6reg: entered allmulticast mode [ 396.594012][ T8931] pim6reg: left allmulticast mode [ 398.044578][ T8948] kAFS: unable to lookup cell 'ÿ' [ 400.225796][ T8967] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 400.402343][ T8967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.635282][ T8969] bond1: (slave veth3): Enslaving as an active interface with a down link [ 400.763850][ T8970] vlan2: entered allmulticast mode [ 400.784907][ T8970] veth0_to_bond: entered allmulticast mode [ 400.808277][ T8970] bond1: (slave vlan2): Opening slave failed [ 400.850197][ T5712] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 401.043597][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 401.078624][ T5712] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 401.113533][ T5712] usb 2-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 401.162261][ T5712] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 401.192513][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.225179][ T5712] usb 2-1: Product: syz [ 401.242116][ T5712] usb 2-1: Manufacturer: syz [ 401.258072][ T5712] usb 2-1: SerialNumber: syz [ 401.398051][ T30] audit: type=1400 audit(1783909904.220:627): avc: denied { write } for pid=8972 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 401.735127][ T5794] Process accounting resumed [ 402.253796][ T8978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 402.260419][ T8978] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 402.271910][ T8978] vhci_hcd vhci_hcd.0: Device attached [ 402.581300][ T5794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 402.593652][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 402.605171][ T8981] vhci_hcd: connection closed [ 402.706687][ T8002] vhci_hcd vhci_hcd.2: stop threads [ 402.798508][ T8002] vhci_hcd vhci_hcd.2: release socket [ 402.980171][ T5794] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 403.010035][ T8002] vhci_hcd vhci_hcd.2: disconnect device [ 403.685624][ T5794] usb 37-1: enqueue for inactive port 0 [ 403.924498][ T5794] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 403.934001][ T29] IPVS: starting estimator thread 0... [ 404.052726][ T5712] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 404.064039][ T5712] usb 2-1: USB disconnect, device number 7 [ 404.220215][ T8987] IPVS: using max 46 ests per chain, 110400 per kthread [ 404.502396][ T8993] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 404.510536][ T8993] overlayfs: failed to set xattr on upper [ 404.516876][ T8993] overlayfs: ...falling back to redirect_dir=nofollow. [ 404.525567][ T8993] overlayfs: ...falling back to index=off. [ 404.532439][ T8993] overlayfs: ...falling back to uuid=null. [ 404.582578][ T8990] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 404.603118][ T30] audit: type=1400 audit(1783909907.220:628): avc: denied { mount } for pid=8988 comm="syz.0.700" name="/" dev="ramfs" ino=19965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 404.762016][ T8995] pim6reg: entered allmulticast mode [ 404.777444][ T8995] pim6reg: left allmulticast mode [ 405.891525][ T30] audit: type=1400 audit(1783909907.340:629): avc: denied { mounton } for pid=8988 comm="syz.0.700" path="/file0" dev="ramfs" ino=19966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 406.462403][ T30] audit: type=1400 audit(1783909907.460:630): avc: denied { bind } for pid=8973 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 407.928594][ T30] audit: type=1400 audit(1783909910.790:631): avc: denied { read } for pid=9022 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.103541][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 408.496925][ T30] audit: type=1326 audit(1783909911.360:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.4.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92959de59 code=0x7ffc0000 [ 408.552417][ T30] audit: type=1326 audit(1783909911.400:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.4.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92959de59 code=0x7ffc0000 [ 408.582401][ T30] audit: type=1326 audit(1783909911.400:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.4.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92959de59 code=0x7ffc0000 [ 408.691286][ T30] audit: type=1326 audit(1783909911.400:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.4.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92959de59 code=0x7ffc0000 [ 408.876529][ T30] audit: type=1326 audit(1783909911.400:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.4.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc92959de59 code=0x7ffc0000 [ 409.228102][ T30] audit: type=1326 audit(1783909911.410:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.4.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92959de59 code=0x7ffc0000 [ 410.621105][ T30] audit: type=1326 audit(1783909911.410:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.4.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92959de59 code=0x7ffc0000 [ 410.686319][ T9046] xt_hashlimit: overflow, try lower: 6/0 [ 410.714081][ T30] audit: type=1326 audit(1783909911.410:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9029 comm="syz.4.711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92959de59 code=0x7ffc0000 [ 412.461565][ T9058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 414.302676][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.715'. [ 414.479277][ T9089] xt_connbytes: Forcing CT accounting to be enabled [ 414.588029][ T9089] set match dimension is over the limit! [ 419.652364][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 419.652405][ T30] audit: type=1400 audit(1783909922.260:706): avc: denied { read } for pid=9110 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.160296][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.702697][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'. [ 428.574297][ T9184] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 428.814688][ T9189] gfs2: error -5 reading superblock [ 430.919268][ T9201] loop5: detected capacity change from 0 to 7 [ 430.980001][ T9201] Dev loop5: unable to read RDB block 7 [ 431.004178][ T9201] loop5: AHDI p2 [ 431.026963][ T9201] loop5: partition table partially beyond EOD, truncated [ 431.347085][ T9213] overlayfs: invalid redirect (./bus) [ 434.519764][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.644295][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.698005][ T9233] comedi comedi0: comedi_config --init_data is deprecated [ 435.321367][ T30] audit: type=1400 audit(1783909938.190:707): avc: denied { append } for pid=9235 comm="syz.4.753" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 436.168237][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 437.029193][ T30] audit: type=1400 audit(1783909939.890:708): avc: denied { read } for pid=9254 comm="syz.3.758" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 437.455210][ T30] audit: type=1400 audit(1783909939.920:709): avc: denied { open } for pid=9254 comm="syz.3.758" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 437.547135][ T30] audit: type=1400 audit(1783909939.930:710): avc: denied { ioctl } for pid=9254 comm="syz.3.758" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 437.738459][ T30] audit: type=1400 audit(1783909939.990:711): avc: denied { setopt } for pid=9254 comm="syz.3.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 437.761994][ T30] audit: type=1400 audit(1783909940.040:712): avc: denied { ioctl } for pid=9254 comm="syz.3.758" path="socket:[20421]" dev="sockfs" ino=20421 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 437.944683][ T9275] CUSE: unknown device info "" [ 438.835137][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.763'. [ 438.877314][ T9275] CUSE: unknown device info "Ö" [ 439.020329][ T9275] CUSE: unknown device info "" [ 439.025645][ T9275] CUSE: unknown device info "" [ 439.032619][ T9275] CUSE: unknown device info "" [ 439.091056][ T9275] CUSE: unknown device info "" [ 439.102777][ T9275] CUSE: unknown device info "ðÿÿÿ" [ 439.115612][ T9275] CUSE: unknown device info "" [ 439.142306][ T9275] CUSE: unknown device info "" [ 439.179714][ T9275] CUSE: unknown device info "" [ 439.802114][ T9275] CUSE: unknown device info "" [ 439.941602][ T9275] CUSE: unknown device info "r" [ 439.976825][ T9275] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 439.992508][ T9275] CUSE: unknown device info "ÿÿÿÿ" [ 440.038158][ T9275] CUSE: unknown device info "" [ 440.083094][ T8835] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 440.113929][ T8835] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 440.114902][ T9275] CUSE: unknown device info "€" [ 440.329542][ T9275] CUSE: DEVNAME unspecified [ 441.465185][ T5712] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 441.852954][ T5712] usb 1-1: device descriptor read/64, error -71 [ 442.410166][ T5712] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 443.010264][ T5712] usb 1-1: device descriptor read/64, error -71 [ 443.910434][ T5712] usb usb1-port1: attempt power cycle [ 444.700160][ T5712] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 446.649431][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'. [ 447.474192][ T5712] usb 1-1: device descriptor read/8, error -71 [ 448.553772][ T30] audit: type=1400 audit(1783909950.660:713): avc: denied { map } for pid=9353 comm="syz.0.781" path="socket:[21094]" dev="sockfs" ino=21094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 448.672070][ T30] audit: type=1400 audit(1783909950.660:714): avc: denied { read write } for pid=9353 comm="syz.0.781" path="socket:[21094]" dev="sockfs" ino=21094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 448.992682][ T9362] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 449.018681][ T9364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.783'. [ 449.423814][ T30] audit: type=1400 audit(1783909952.290:715): avc: denied { write } for pid=9365 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 451.026385][ T9387] kAFS: unable to lookup cell 'ÿ' [ 451.140157][ T805] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 451.323400][ T805] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 451.338702][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.341525][ T9387] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 451.395302][ T805] usb 2-1: Product: syz [ 451.411821][ T805] usb 2-1: Manufacturer: syz [ 451.433056][ T805] usb 2-1: SerialNumber: syz [ 451.466352][ T805] usb 2-1: config 0 descriptor?? [ 451.487620][ T805] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 451.525463][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 451.553441][ T805] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 451.588148][ T805] usb 2-1: media controller created [ 452.100708][ T9404] lo speed is unknown, defaulting to 1000 [ 452.111393][ T9404] lo speed is unknown, defaulting to 1000 [ 452.186949][ T9404] lo speed is unknown, defaulting to 1000 [ 452.262071][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.295642][ T9404] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 452.328843][ T805] DVB: Unable to find symbol mt352_attach() [ 452.384080][ T805] DVB: Unable to find symbol nxt6000_attach() [ 452.391175][ T805] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 452.402985][ T9404] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 452.427620][ T805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 452.441921][ T9404] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 452.452904][ T805] dvb-usb: schedule remote query interval to 1000 msecs. [ 452.460454][ T805] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 452.475105][ T805] dvb-usb: bulk message failed: -22 (7/0) [ 452.504461][ T805] dvb-usb: bulk message failed: -22 (7/0) [ 452.521289][ T9404] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 452.721208][ T9404] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 452.977899][ T9404] lo speed is unknown, defaulting to 1000 [ 453.014852][ T9404] lo speed is unknown, defaulting to 1000 [ 453.042695][ T9404] lo speed is unknown, defaulting to 1000 [ 453.073400][ T9404] lo speed is unknown, defaulting to 1000 [ 453.098698][ T9404] lo speed is unknown, defaulting to 1000 [ 453.521914][ T9414] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 453.523607][ T5712] dvb-usb: bulk message failed: -22 (7/0) [ 453.538402][ T9414] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 453.539392][ T5712] dvb-usb: error while querying for an remote control event. [ 453.829819][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 453.858703][ T9383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.867730][ T9383] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.881780][ T9383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.904216][ T9402] dvb-usb: bulk message failed: -22 (7/0) [ 453.925734][ T9383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.934760][ T9383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.946466][ T9383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.957183][ T9383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.971426][ T9383] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 454.132045][ T5794] lo speed is unknown, defaulting to 1000 [ 454.158553][ T5794] syz2: Port: 1 Link ACTIVE [ 454.414034][ T5712] usb 2-1: USB disconnect, device number 8 [ 454.731940][ T5712] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 459.440853][ T30] audit: type=1400 audit(1783909962.190:716): avc: denied { accept } for pid=9438 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 459.551614][ T9441] random: crng reseeded on system resumption [ 459.612479][ T9441] Restarting kernel threads ... [ 459.619969][ T9441] Done restarting kernel threads. [ 460.199287][ T30] audit: type=1400 audit(1783909962.470:717): avc: denied { ioctl } for pid=9438 comm="syz.1.799" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 462.466523][ T9450] Bluetooth: MGMT ver 1.23 [ 463.545204][ T9472] kAFS: unable to lookup cell 'ÿ' [ 463.860293][ T9472] netlink: 'syz.4.805': attribute type 10 has an invalid length. [ 466.556063][ T9499] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 467.812564][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 467.822440][ T9510] hsr_slave_0: left promiscuous mode [ 467.828421][ T9510] hsr_slave_1: left promiscuous mode [ 467.841481][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 469.070469][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 470.807159][ T30] audit: type=1400 audit(1783909973.670:718): avc: denied { write } for pid=9522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.869619][ T805] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 470.920144][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 470.936279][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 470.946340][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 470.960032][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 470.967716][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 470.991133][ T805] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 471.217945][ T30] audit: type=1400 audit(1783909974.080:719): avc: denied { write } for pid=9562 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.050273][ T5618] Bluetooth: hci5: command tx timeout [ 473.238678][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.826'. [ 473.301888][ T9582] netlink: 84 bytes leftover after parsing attributes in process `syz.1.826'. [ 473.579559][ T9555] lo speed is unknown, defaulting to 1000 [ 475.124749][ T5618] Bluetooth: hci5: command tx timeout [ 476.487303][ T9615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.832'. [ 476.519883][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.546322][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.575489][ T9555] bridge_slave_0: entered allmulticast mode [ 476.606663][ T9555] bridge_slave_0: entered promiscuous mode [ 476.664335][ T9617] bridge0: port 3(vlan0) entered blocking state [ 476.691520][ T9617] bridge0: port 3(vlan0) entered disabled state [ 476.703738][ T9617] vlan0: entered allmulticast mode [ 476.709317][ T9617] geneve0: entered allmulticast mode [ 476.723051][ T9617] vlan0: entered promiscuous mode [ 476.728592][ T9617] geneve0: entered promiscuous mode [ 476.740515][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.748346][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.759649][ T9555] bridge_slave_1: entered allmulticast mode [ 476.775288][ T9555] bridge_slave_1: entered promiscuous mode [ 476.890827][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.913800][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.077336][ T9555] team0: Port device team_slave_0 added [ 477.093616][ T9555] team0: Port device team_slave_1 added [ 477.151196][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.164116][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.200654][ T5618] Bluetooth: hci5: command tx timeout [ 477.223492][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.265464][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.287174][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.364888][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.970842][ T9555] hsr_slave_0: entered promiscuous mode [ 477.998787][ T9555] hsr_slave_1: entered promiscuous mode [ 478.453667][ T9639] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 478.462952][ T9639] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 478.472194][ T9639] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 478.573186][ T9642] overlayfs: missing 'lowerdir' [ 479.014001][ T30] audit: type=1800 audit(1783909981.880:720): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.836" name="/newroot/159/bus" dev="tmpfs" ino=858 res=0 errno=0 [ 479.301695][ T5618] Bluetooth: hci5: command tx timeout [ 482.910667][ T9555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 483.138010][ T9555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.185386][ T9555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 483.255810][ T9555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.304539][ T9555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 483.426020][ T9555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.466257][ T9555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 483.522776][ T9555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.545075][ T9677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.843'. [ 484.275336][ T9690] lo: Caught tx_queue_len zero misconfig [ 484.324685][ T9555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.377249][ T9555] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.414028][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.422145][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.488221][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.495611][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.051148][ T30] audit: type=1326 audit(1783909987.920:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.111587][ T30] audit: type=1326 audit(1783909987.920:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.157162][ T30] audit: type=1326 audit(1783909987.920:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.199560][ T8835] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 485.211031][ T30] audit: type=1326 audit(1783909987.920:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.238211][ T30] audit: type=1326 audit(1783909987.920:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.285747][ T30] audit: type=1326 audit(1783909987.920:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.405093][ T9703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 485.606697][ T30] audit: type=1326 audit(1783909987.920:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.739138][ T8835] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 485.759635][ T8835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.773549][ T30] audit: type=1326 audit(1783909987.920:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.801836][ T8835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 485.801859][ T8835] usb 1-1: config 1 has no interface number 0 [ 485.801885][ T8835] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 485.801914][ T8835] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 485.814148][ T8835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.845826][ T30] audit: type=1326 audit(1783909987.920:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 485.857141][ T8835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.964492][ T30] audit: type=1326 audit(1783909987.920:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4b579de59 code=0x7ffc0000 [ 486.040388][ T8835] usb 1-1: Product: syz [ 486.044582][ T8835] usb 1-1: Manufacturer: syz [ 486.051653][ T8835] usb 1-1: SerialNumber: syz [ 486.614288][ T8080] Bluetooth: (null): Invalid header checksum [ 486.700897][ T8080] Bluetooth: (null): Invalid header checksum [ 487.064930][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.265450][ T1228] usb 1-1: USB disconnect, device number 14 [ 490.832265][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 490.832291][ T30] audit: type=1400 audit(1783909993.690:747): avc: denied { execute } for pid=9754 comm="syz.0.856" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=23326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 490.931522][ T9555] veth0_vlan: entered promiscuous mode [ 490.973913][ T9555] veth1_vlan: entered promiscuous mode [ 491.085779][ T9555] veth0_macvtap: entered promiscuous mode [ 491.122687][ T9555] veth1_macvtap: entered promiscuous mode [ 491.184224][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.214796][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.248460][ T6147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.268745][ T6147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.309797][ T6147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.326778][ T6147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.462089][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.483397][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.529999][ T8002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.538460][ T8002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.557864][ T30] audit: type=1400 audit(1783909994.420:748): avc: denied { mounton } for pid=9555 comm="syz-executor" path="/root/syzkaller.5UrxJX/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 491.603117][ T5704] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 491.637089][ T30] audit: type=1400 audit(1783909994.420:749): avc: denied { mounton } for pid=9555 comm="syz-executor" path="/root/syzkaller.5UrxJX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 491.728981][ T30] audit: type=1400 audit(1783909994.450:750): avc: denied { mounton } for pid=9555 comm="syz-executor" path="/root/syzkaller.5UrxJX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 491.860222][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 491.866783][ T5704] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.880535][ T5704] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.890628][ T30] audit: type=1400 audit(1783909994.460:751): avc: denied { mounton } for pid=9555 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 491.900337][ T5704] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 492.248272][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.256968][ T5704] usb 2-1: Product: syz [ 492.261570][ T5704] usb 2-1: Manufacturer: syz [ 492.266237][ T5704] usb 2-1: SerialNumber: syz [ 492.281546][ T5704] usb 2-1: config 0 descriptor?? [ 492.301717][ T5704] gs_usb 2-1:0.0: Required endpoints not found [ 494.919659][ T30] audit: type=1400 audit(1783909997.780:752): avc: denied { setattr } for pid=9756 comm="syz.4.857" name="[io_uring]" dev="anon_inodefs" ino=23329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.073707][ T805] usb 2-1: USB disconnect, device number 9 [ 495.311658][ T9784] SELinux: policydb magic number 0x38 does not match expected magic number 0xf97cff8c [ 495.332302][ T30] audit: type=1400 audit(1783909998.160:753): avc: denied { load_policy } for pid=9756 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 495.404615][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.862'. [ 495.652115][ T9784] SELinux: failed to load policy [ 495.843450][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.849779][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.247426][ T30] audit: type=1400 audit(1783909999.110:754): avc: denied { map } for pid=9793 comm="syz.4.865" path="socket:[23648]" dev="sockfs" ino=23648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 496.630232][ T30] audit: type=1400 audit(1783909999.110:755): avc: denied { accept } for pid=9793 comm="syz.4.865" path="socket:[23648]" dev="sockfs" ino=23648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 497.669308][ T9812] lo speed is unknown, defaulting to 1000 [ 497.810277][ T30] audit: type=1326 audit(1783910000.630:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9806 comm="syz.0.868" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x0 [ 499.335114][ T30] audit: type=1400 audit(1783910002.190:757): avc: denied { mounton } for pid=9809 comm="syz.4.869" path="/proc/701/cgroup" dev="proc" ino=23715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 501.194766][ T30] audit: type=1326 audit(1783910004.060:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 501.316627][ T30] audit: type=1326 audit(1783910004.060:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 501.488647][ T30] audit: type=1326 audit(1783910004.060:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 501.625398][ T30] audit: type=1326 audit(1783910004.060:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 501.782668][ T30] audit: type=1326 audit(1783910004.060:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 501.902033][ T9849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 501.912733][ T30] audit: type=1326 audit(1783910004.060:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 502.109354][ T30] audit: type=1326 audit(1783910004.060:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 503.257951][ T30] audit: type=1326 audit(1783910004.060:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 503.426436][ T30] audit: type=1326 audit(1783910004.060:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 505.045630][ T30] audit: type=1326 audit(1783910004.060:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 505.073476][ T30] audit: type=1326 audit(1783910004.060:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.0.873" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6759de59 code=0x7ffc0000 [ 506.418397][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 509.666129][ T9894] netlink: 40 bytes leftover after parsing attributes in process `syz.5.885'. [ 511.004963][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 511.004979][ T30] audit: type=1400 audit(1783910013.380:829): avc: denied { search } for pid=9896 comm="syz.0.886" name="/" dev="configfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 511.962442][ T9903] ip6gre1: entered allmulticast mode [ 511.969400][ T144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.991416][ T9903] vxfs: unable to read disk superblock at 1 [ 512.063126][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.091478][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.102875][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.114217][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.125058][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.136035][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.152159][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.162553][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.174081][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.228250][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 512.283728][ T9903] vxfs: unable to read disk superblock at 8 [ 512.289700][ T9903] vxfs: can't find superblock. [ 513.546417][ T30] audit: type=1800 audit(1783910016.240:830): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.893" name="file0" dev="overlay" ino=942 res=0 errno=0 [ 513.911662][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 515.920365][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.577744][ T9938] netlink: 'syz.1.897': attribute type 8 has an invalid length. [ 517.565757][ T9] usb 6-1: device descriptor read/all, error -71 [ 518.100742][ T9953] __nla_validate_parse: 28 callbacks suppressed [ 518.100773][ T9953] netlink: 288 bytes leftover after parsing attributes in process `syz.2.898'. [ 519.443684][ T30] audit: type=1400 audit(1783910022.310:831): avc: denied { write } for pid=9955 comm="syz.5.900" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 521.420316][ T30] audit: type=1400 audit(1783910022.310:832): avc: denied { open } for pid=9955 comm="syz.5.900" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 521.760846][ T30] audit: type=1400 audit(1783910022.350:833): avc: denied { ioctl } for pid=9955 comm="syz.5.900" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 521.968090][ T30] audit: type=1400 audit(1783910023.310:834): avc: denied { append } for pid=9955 comm="syz.5.900" name="sg0" dev="devtmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 521.993264][ T30] audit: type=1400 audit(1783910024.690:835): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 522.344821][ T9973] netlink: 860 bytes leftover after parsing attributes in process `syz.1.902'. [ 523.107412][ T5704] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 523.360368][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 524.930387][ T5704] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 524.978412][ T5704] usb 1-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 525.023127][ T9978] netlink: 'syz.1.905': attribute type 6 has an invalid length. [ 525.047199][ T9978] netlink: 'syz.1.905': attribute type 6 has an invalid length. [ 525.067847][ T5704] usb 1-1: config 0 has no interface number 0 [ 525.099488][ T5704] usb 1-1: too many endpoints for config 0 interface 214 altsetting 105: 108, using maximum allowed: 30 [ 525.145001][ T5704] usb 1-1: config 0 interface 214 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 108 [ 525.192114][ T5704] usb 1-1: config 0 interface 214 has no altsetting 0 [ 525.225269][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 525.247267][ T5704] usb 1-1: string descriptor 0 read error: -71 [ 525.272849][ T5704] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 525.320303][ T805] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 525.399286][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 525.678585][ T5704] usb 1-1: config 0 descriptor?? [ 525.702478][ T5704] usb 1-1: can't set config #0, error -71 [ 525.742633][ T5704] usb 1-1: USB disconnect, device number 15 [ 525.769640][ T30] audit: type=1400 audit(1783910028.620:836): avc: denied { write } for pid=9967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.826989][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 525.885715][ T805] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 526.120352][ T30] audit: type=1400 audit(1783910028.850:837): avc: denied { ioctl } for pid=9992 comm="syz.5.908" path="socket:[24810]" dev="sockfs" ino=24810 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 526.148902][ T805] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 526.225789][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.404731][ T805] usb 3-1: Product: syz [ 526.408984][ T805] usb 3-1: Manufacturer: syz [ 526.413934][ T805] usb 3-1: SerialNumber: syz [ 526.421139][ T805] usb 3-1: config 0 descriptor?? [ 526.428759][ T805] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 526.436904][ T805] dvb-usb: bulk message failed: -22 (2/0) [ 526.487055][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 526.550756][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 526.804086][ T805] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 526.812500][ T805] usb 3-1: media controller created [ 526.826086][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.863303][ T9988] cxusb: i2c rd: len=80 is too big! [ 526.863303][ T9988] [ 526.905260][ T805] usb 3-1: selecting invalid altsetting 7 [ 526.931642][ T30] audit: type=1400 audit(1783910029.790:838): avc: denied { write } for pid=10011 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.961932][ T805] cxusb: set interface failed [ 526.989013][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 527.768427][ T805] DVB: Unable to find symbol lgdt330x_attach() [ 527.775921][ T805] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 528.453875][ T805] rc_core: IR keymap rc-dvico-portable not found [ 528.502722][ T805] Registered IR keymap rc-empty [ 528.528502][ T805] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 528.721638][ T805] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 529.541876][ T805] dvb-usb: schedule remote query interval to 100 msecs. [ 529.579061][ T805] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 529.852146][ T5712] dvb-usb: bulk message failed: -22 (1/0) [ 529.863885][ T805] usb 3-1: USB disconnect, device number 9 [ 530.076980][ T805] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 530.729832][T10048] Bluetooth: hci0: unsupported parameter 255 [ 530.736226][T10048] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 531.519293][ T30] audit: type=1400 audit(1783910033.920:839): avc: denied { write } for pid=10028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.980514][ T30] audit: type=1400 audit(1783910034.720:840): avc: denied { create } for pid=10059 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 532.336247][ T8077] wlan0: Trigger new scan to find an IBSS to join [ 533.866142][ T30] audit: type=1400 audit(1783910036.730:841): avc: denied { write } for pid=10072 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.183931][ T30] audit: type=1400 audit(1783910037.050:842): avc: denied { accept } for pid=10075 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 534.287981][T10081] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 534.295175][T10081] SELinux: failed to load policy [ 535.801095][T10093] program syz.0.926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 535.810559][T10093] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 535.880577][T10094] netlink: 'syz.0.926': attribute type 39 has an invalid length. [ 536.722690][ T6144] wlan0: Trigger new scan to find an IBSS to join [ 537.511560][ T30] audit: type=1400 audit(1783910040.190:843): avc: denied { mount } for pid=10078 comm="syz.2.922" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 537.561531][ T30] audit: type=1400 audit(1783910040.420:844): avc: denied { mounton } for pid=10078 comm="syz.2.922" path="/179/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 537.993980][T10103] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 538.080357][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.387078][ T6147] wlan0: Creating new IBSS network, BSSID 3e:55:7b:86:29:bf [ 541.087459][ T30] audit: type=1400 audit(1783910043.950:845): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 541.920247][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.280464][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 544.299779][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 544.345333][T10162] erofs (device loop4): cannot find valid erofs superblock [ 545.519872][T10167] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 546.740175][T10177] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 546.810861][ T30] audit: type=1400 audit(1783910049.600:846): avc: denied { listen } for pid=10170 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 547.475655][ T30] audit: type=1400 audit(1783910049.610:847): avc: denied { connect } for pid=10170 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 547.816680][T10183] overlayfs: missing 'lowerdir' [ 547.963778][T10183] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 548.270289][T10188] kernel profiling enabled (shift: 9) [ 548.285516][ T30] audit: type=1400 audit(1783910051.120:848): avc: denied { ioctl } for pid=10184 comm="syz.4.947" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 549.447946][T10196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.299690][T10229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22042 sclass=netlink_route_socket pid=10229 comm=syz.2.956 [ 553.681923][ T30] audit: type=1326 audit(1783910056.540:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.4.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc92959de59 code=0x0 [ 555.781214][ T30] audit: type=1400 audit(1783910058.650:850): avc: denied { mounton } for pid=10242 comm="syz.2.960" path="/proc/775/task" dev="proc" ino=25240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 555.960530][ T30] audit: type=1400 audit(1783910058.820:851): avc: denied { getopt } for pid=10242 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 556.568720][T10250] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 557.389641][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.397061][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.554278][ T30] audit: type=1400 audit(1783910060.420:852): avc: denied { setopt } for pid=10252 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 559.442128][T10273] overlayfs: unescaped trailing colons in lowerdir mount option. [ 559.503322][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'. [ 562.020138][ T30] audit: type=1400 audit(1783910064.860:853): avc: denied { getopt } for pid=10277 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 562.840765][T10289] 9p: Unknown access argument clien: -22 [ 563.959181][ T30] audit: type=1400 audit(1783910066.820:854): avc: denied { create } for pid=10291 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 564.048089][ T30] audit: type=1400 audit(1783910066.820:855): avc: denied { connect } for pid=10291 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 564.259018][ T5712] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 564.298124][ T30] audit: type=1400 audit(1783910066.850:856): avc: denied { bind } for pid=10291 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 564.318951][ T30] audit: type=1326 audit(1783910067.000:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23df9de59 code=0x7ffc0000 [ 564.425871][T10308] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 564.652494][ T30] audit: type=1326 audit(1783910067.000:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23df9de59 code=0x7ffc0000 [ 564.679801][ T30] audit: type=1326 audit(1783910067.000:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fb23df9de59 code=0x7ffc0000 [ 564.706559][ T30] audit: type=1326 audit(1783910067.000:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23df9de59 code=0x7ffc0000 [ 564.735402][ T30] audit: type=1326 audit(1783910067.000:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23df9de59 code=0x7ffc0000 [ 564.766969][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.784707][ T5712] usb 1-1: config 0 has no interfaces? [ 564.836195][ T5712] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 564.872049][ T30] audit: type=1326 audit(1783910067.000:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.974" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb23df9de59 code=0x7ffc0000 [ 564.904386][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.936020][ T5712] usb 1-1: Product: syz [ 565.055043][ T5712] usb 1-1: Manufacturer: syz [ 565.096199][ T5712] usb 1-1: SerialNumber: syz [ 565.151120][ T5712] usb 1-1: config 0 descriptor?? [ 565.251350][T10310] Cannot find set identified by id 0 to match [ 565.548086][T10314] batadv_slave_1: entered promiscuous mode [ 566.241571][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.950004][ T5811] usb 1-1: USB disconnect, device number 16 [ 568.024517][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.058925][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.132321][T10330] trusted_key: encrypted_key: insufficient parameters specified [ 568.164399][ T9] lo speed is unknown, defaulting to 1000 [ 568.172513][ T9] syz2: Port: 1 Link DOWN [ 568.183844][T10309] batadv_slave_1: left promiscuous mode [ 568.585531][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 568.585546][ T30] audit: type=1400 audit(1783910071.450:880): avc: denied { setopt } for pid=10338 comm="syz.5.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 569.158227][ T30] audit: type=1400 audit(1783910072.020:881): avc: denied { watch watch_reads } for pid=10345 comm="syz.2.982" path="pipe:[25472]" dev="pipefs" ino=25472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 569.598405][ T30] audit: type=1400 audit(1783910072.460:882): avc: denied { write } for pid=10331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.139833][ T30] audit: type=1400 audit(1783910073.000:883): avc: denied { write } for pid=10360 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.418503][ T30] audit: type=1400 audit(1783910074.660:884): avc: denied { ioctl } for pid=10385 comm="syz.1.989" path="socket:[25506]" dev="sockfs" ino=25506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 573.200166][T10402] lo speed is unknown, defaulting to 1000 [ 573.677332][T10403] lo speed is unknown, defaulting to 1000 [ 577.227904][T10418] block device autoloading is deprecated and will be removed. [ 577.714990][ T30] audit: type=1400 audit(1783910080.580:885): avc: denied { write } for pid=10384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.928406][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 578.525538][ T30] audit: type=1400 audit(1783910081.390:886): avc: denied { write } for pid=10431 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.961050][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 579.009127][T10435] SELinux: failed to load policy [ 579.031327][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 579.188101][ T9] usb 3-1: can't read configurations, error -71 [ 581.393844][ T30] audit: type=1400 audit(1783910084.260:887): avc: denied { write } for pid=10442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.487825][T10461] trusted_key: encrypted_key: insufficient parameters specified [ 582.139370][ T30] audit: type=1400 audit(1783910085.000:888): avc: denied { write } for pid=10471 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.466385][T10461] could not allocate digest TFM handle ghash-ce [ 585.243386][T10494] lo speed is unknown, defaulting to 1000 [ 586.619789][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 586.637477][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 586.647031][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 586.659999][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 586.672598][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 586.724643][ T6147] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 587.448442][ T30] audit: type=1400 audit(1783910090.310:889): avc: denied { ioctl } for pid=10506 comm="syz.5.1007" path="socket:[26522]" dev="sockfs" ino=26522 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 587.966460][T10511] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 588.731020][ T5626] Bluetooth: hci6: command tx timeout [ 589.994518][T10503] lo speed is unknown, defaulting to 1000 [ 590.960412][ T5626] Bluetooth: hci6: command tx timeout [ 592.296807][ T9] IPVS: starting estimator thread 0... [ 592.560505][T10559] IPVS: using max 38 ests per chain, 91200 per kthread [ 592.954266][T10503] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.981902][T10503] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.997808][T10503] bridge_slave_0: entered allmulticast mode [ 593.037660][T10503] bridge_slave_0: entered promiscuous mode [ 593.046594][ T5626] Bluetooth: hci6: command tx timeout [ 593.103979][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.112826][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.124620][T10503] bridge_slave_1: entered allmulticast mode [ 593.136591][T10503] bridge_slave_1: entered promiscuous mode [ 593.534763][T10503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.574701][T10503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.704703][T10503] team0: Port device team_slave_0 added [ 593.733471][T10503] team0: Port device team_slave_1 added [ 593.819082][T10503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.828163][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.886764][T10503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.922644][T10503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.930936][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.402324][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 595.120250][ T5626] Bluetooth: hci6: command tx timeout [ 595.343936][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 596.131039][T10503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.509138][T10503] hsr_slave_0: entered promiscuous mode [ 598.659114][T10503] hsr_slave_1: entered promiscuous mode [ 598.678122][T10503] debugfs: 'hsr0' already exists in 'hsr' [ 598.685266][T10503] Cannot create hsr debugfs directory [ 598.700134][T10595] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1022'. [ 598.880143][ T29] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 599.094397][ T29] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 599.107548][ T29] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 599.136532][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.372651][ T29] usb 3-1: config 0 has no interface number 0 [ 599.404428][ T29] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 599.438724][ T29] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 599.455558][ T9496] Bluetooth: hci4: command 0x1003 tx timeout [ 599.463614][ T5618] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 599.515823][ T29] usb 3-1: config 0 interface 255 has no altsetting 0 [ 599.537350][ T29] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 599.588793][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.669404][ T29] usb 3-1: config 0 descriptor?? [ 600.103367][T10503] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 600.138193][ T29] usb 3-1: can't set config #0, error -71 [ 600.174519][ T29] usb 3-1: USB disconnect, device number 12 [ 600.185699][T10503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 600.230224][T10503] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 600.440395][T10503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.951369][T10503] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 601.364907][T10503] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 601.393816][T10611] team_slave_1: Caught tx_queue_len zero misconfig [ 601.402989][T10503] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 601.515919][T10503] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 601.713119][T10629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.823277][ T30] audit: type=1400 audit(1783910104.680:890): avc: denied { connect } for pid=10628 comm="syz.5.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 601.953689][T10503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.334581][T10503] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.684401][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.691530][ T8077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.767527][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.775379][ T8077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.857528][ C1] ================================================================== [ 602.865607][ C1] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 602.874982][ C1] Read of size 1 at addr ffff88804522f010 by task syz-executor/5606 [ 602.882948][ C1] [ 602.885270][ C1] CPU: 1 UID: 0 PID: 5606 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 602.885299][ C1] Tainted: [L]=SOFTLOCKUP [ 602.885306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 602.885317][ C1] Call Trace: [ 602.885323][ C1] [ 602.885330][ C1] dump_stack_lvl+0x100/0x190 [ 602.885355][ C1] print_report+0x13d/0x4b0 [ 602.885381][ C1] ? __virt_addr_valid+0x239/0x430 [ 602.885403][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 602.885427][ C1] kasan_report+0xdf/0x1c0 [ 602.885450][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 602.885476][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 602.885499][ C1] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 602.885523][ C1] llc_conn_state_process+0x3ec/0x1480 [ 602.885551][ C1] llc_conn_tmr_common_cb+0x2d4/0x880 [ 602.885572][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 602.885596][ C1] call_timer_fn+0x19a/0x610 [ 602.885615][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 602.885635][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 602.885659][ C1] ? mark_held_locks+0x40/0x70 [ 602.885680][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 602.885709][ C1] __run_timers+0x757/0xb00 [ 602.885731][ C1] ? __pfx___run_timers+0x10/0x10 [ 602.885753][ C1] ? ktime_get+0x9f/0x320 [ 602.885772][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 602.885796][ C1] run_timer_base+0x114/0x190 [ 602.885814][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 602.885835][ C1] run_timer_softirq+0x1a/0x50 [ 602.885853][ C1] handle_softirqs+0x1ea/0x9b0 [ 602.885877][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 602.885899][ C1] ? _raw_spin_unlock+0x28/0x50 [ 602.885920][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 602.885947][ C1] __irq_exit_rcu+0x162/0x210 [ 602.885968][ C1] irq_exit_rcu+0x9/0x30 [ 602.885987][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 602.886012][ C1] [ 602.886018][ C1] [ 602.886025][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 602.886045][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 602.886070][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ba 40 29 f6 48 89 df e8 42 90 29 f6 e8 2d f4 55 f6 fb bf 01 00 00 00 12 a0 18 f6 65 8b 05 5b 49 a7 08 85 c0 74 06 5b e9 81 4a 00 00 [ 602.886087][ C1] RSP: 0018:ffffc90003a77748 EFLAGS: 00000202 [ 602.886102][ C1] RAX: 000000000029c8fb RBX: ffff888022f8e9f0 RCX: 0000000000000040 [ 602.886115][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a3c59 RDI: 0000000000000001 [ 602.886126][ C1] RBP: ffff888022f8e9e8 R08: 0000000000000001 R09: 0000000000000000 [ 602.886137][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888022f8e9f0 [ 602.886149][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000019 [ 602.886166][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 602.886189][ C1] filemap_remove_folio+0x104/0x2a0 [ 602.886214][ C1] truncate_inode_folio+0x49/0x70 [ 602.886231][ C1] shmem_undo_range+0x3ae/0x1570 [ 602.886262][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 602.886297][ C1] ? __kernel_text_address+0xd/0x30 [ 602.886315][ C1] ? unwind_get_return_address+0x59/0xa0 [ 602.886342][ C1] ? arch_stack_walk+0xa6/0xf0 [ 602.886376][ C1] ? kasan_save_stack+0x3f/0x50 [ 602.886394][ C1] ? kasan_save_stack+0x30/0x50 [ 602.886411][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 602.886435][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 602.886459][ C1] shmem_evict_inode+0x3a5/0xbe0 [ 602.886486][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 602.886512][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 602.886539][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 602.886566][ C1] ? find_held_lock+0x2b/0x80 [ 602.886591][ C1] ? evict+0x37e/0xad0 [ 602.886611][ C1] ? evict+0x37e/0xad0 [ 602.886631][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 602.886658][ C1] evict+0x3c2/0xad0 [ 602.886679][ C1] ? __pfx_evict+0x10/0x10 [ 602.886705][ C1] ? iput.part.0+0x981/0x1050 [ 602.886729][ C1] iput.part.0+0x989/0x1050 [ 602.886751][ C1] iput+0x35/0x40 [ 602.886771][ C1] filename_unlinkat+0x466/0x730 [ 602.886791][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 602.886813][ C1] ? do_getname+0x191/0x390 [ 602.886835][ C1] __x64_sys_unlink+0x46/0x70 [ 602.886853][ C1] do_syscall_64+0x115/0x870 [ 602.886879][ C1] ? clear_bhb_loop+0x40/0x90 [ 602.886899][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.886917][ C1] RIP: 0033:0x7f883259cf47 [ 602.886932][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 602.886950][ C1] RSP: 002b:00007ffd57512b98 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 602.886967][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f883259cf47 [ 602.886978][ C1] RDX: 00007ffd57512bc0 RSI: 00007ffd57512c50 RDI: 00007ffd57512c50 [ 602.886990][ C1] RBP: 00007ffd57512c50 R08: 00007ffd57513c50 R09: 00000000ffffffff [ 602.887002][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd57513ce0 [ 602.887013][ C1] R13: 00007f88326332ca R14: 0000000000091eb2 R15: 00007ffd57513d20 [ 602.887031][ C1] [ 602.887038][ C1] [ 603.391275][ C1] Allocated by task 10630: [ 603.395673][ C1] kasan_save_stack+0x30/0x50 [ 603.400346][ C1] kasan_save_track+0x14/0x30 [ 603.405009][ C1] __kasan_kmalloc+0xaa/0xb0 [ 603.409587][ C1] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 603.414952][ C1] llc_sap_open+0x120/0x3b0 [ 603.419444][ C1] llc_ui_autobind.isra.0+0x2ae/0x580 [ 603.424805][ C1] llc_ui_connect+0x582/0xdb0 [ 603.429469][ C1] __sys_connect_file+0x141/0x1a0 [ 603.434483][ C1] __sys_connect+0x141/0x170 [ 603.439064][ C1] __x64_sys_connect+0x72/0xb0 [ 603.443821][ C1] do_syscall_64+0x115/0x870 [ 603.448404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.454281][ C1] [ 603.456589][ C1] Freed by task 5704: [ 603.460548][ C1] kasan_save_stack+0x30/0x50 [ 603.465213][ C1] kasan_save_track+0x14/0x30 [ 603.469876][ C1] kasan_save_free_info+0x3b/0x70 [ 603.474894][ C1] __kasan_slab_free+0x5f/0x80 [ 603.479643][ C1] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 603.485092][ C1] rcu_free_sheaf+0x1a/0xe0 [ 603.489578][ C1] rcu_core+0x5a2/0x10d0 [ 603.493811][ C1] handle_softirqs+0x1ea/0x9b0 [ 603.498561][ C1] __irq_exit_rcu+0x162/0x210 [ 603.503224][ C1] irq_exit_rcu+0x9/0x30 [ 603.507454][ C1] sysvec_call_function_single+0xa3/0xc0 [ 603.513078][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 603.519047][ C1] [ 603.521353][ C1] The buggy address belongs to the object at ffff88804522f000 [ 603.521353][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 603.535386][ C1] The buggy address is located 16 bytes inside of [ 603.535386][ C1] freed 2048-byte region [ffff88804522f000, ffff88804522f800) [ 603.549168][ C1] [ 603.551475][ C1] The buggy address belongs to the physical page: [ 603.557867][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45228 [ 603.566608][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 603.575086][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 603.582614][ C1] page_type: f5(slab) [ 603.586580][ C1] raw: 00fff00000000040 ffff88813fe22000 dead000000000100 dead000000000122 [ 603.595146][ C1] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 603.603716][ C1] head: 00fff00000000040 ffff88813fe22000 dead000000000100 dead000000000122 [ 603.612371][ C1] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 603.621036][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 603.629689][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 603.638342][ C1] page dumped because: kasan: bad access detected [ 603.644734][ C1] page_owner tracks the page as allocated [ 603.650442][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10503, tgid 10503 (syz-executor), ts 601755053688, free_ts 576409208082 [ 603.671526][ C1] post_alloc_hook+0xfd/0x120 [ 603.676199][ C1] get_page_from_freelist+0xf48/0x3530 [ 603.681650][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 603.687541][ C1] new_slab+0xa2/0x650 [ 603.691600][ C1] refill_objects+0xe3/0x410 [ 603.696184][ C1] __pcs_replace_empty_main+0x376/0x680 [ 603.701724][ C1] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 603.708135][ C1] kmalloc_reserve+0xe8/0x350 [ 603.712804][ C1] __alloc_skb+0x185/0x710 [ 603.717208][ C1] inet6_ifinfo_notify+0x77/0x140 [ 603.722217][ C1] addrconf_notify+0xb54/0x1ba0 [ 603.727069][ C1] notifier_call_chain+0x99/0x3f0 [ 603.732085][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 603.737965][ C1] __dev_notify_flags+0x12c/0x2e0 [ 603.742980][ C1] netif_change_flags+0x108/0x160 [ 603.748001][ C1] do_setlink.isra.0+0x1ac4/0x3e60 [ 603.753095][ C1] page last free pid 10409 tgid 10408 stack trace: [ 603.759575][ C1] __free_frozen_pages+0x79f/0x1090 [ 603.764765][ C1] qlist_free_all+0x47/0xf0 [ 603.769251][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 603.774692][ C1] __kasan_slab_alloc+0x69/0x90 [ 603.779533][ C1] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 603.784977][ C1] taskstats_exit+0x6d3/0xca0 [ 603.789638][ C1] do_exit+0x65c/0x2ae0 [ 603.793785][ C1] do_group_exit+0xd5/0x2a0 [ 603.798277][ C1] get_signal+0x1ec7/0x21e0 [ 603.802770][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 603.808299][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 603.813659][ C1] do_syscall_64+0x666/0x870 [ 603.818246][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.824123][ C1] [ 603.826430][ C1] Memory state around the buggy address: [ 603.832043][ C1] ffff88804522ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 603.840085][ C1] ffff88804522ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 603.848128][ C1] >ffff88804522f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 603.856170][ C1] ^ [ 603.860739][ C1] ffff88804522f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 603.868785][ C1] ffff88804522f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 603.876823][ C1] ================================================================== [ 603.884946][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 603.892128][ C1] CPU: 1 UID: 0 PID: 5606 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 603.903135][ C1] Tainted: [L]=SOFTLOCKUP [ 603.907439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 603.917485][ C1] Call Trace: [ 603.920758][ C1] [ 603.923594][ C1] dump_stack_lvl+0x100/0x190 [ 603.928274][ C1] vpanic+0x552/0x970 [ 603.932252][ C1] ? __pfx_vpanic+0x10/0x10 [ 603.936751][ C1] ? mark_held_locks+0x40/0x70 [ 603.941514][ C1] ? irqentry_exit+0x24d/0xa00 [ 603.946279][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 603.952861][ C1] panic+0xd1/0xe0 [ 603.956572][ C1] ? __pfx_panic+0x10/0x10 [ 603.960979][ C1] ? check_panic_on_warn+0x1f/0x90 [ 603.966089][ C1] check_panic_on_warn.cold+0x19/0x34 [ 603.971451][ C1] end_report.part.0+0x3a/0x90 [ 603.976208][ C1] kasan_report.cold+0xe/0x18 [ 603.980881][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 603.987463][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 603.993868][ C1] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 604.000796][ C1] llc_conn_state_process+0x3ec/0x1480 [ 604.006251][ C1] llc_conn_tmr_common_cb+0x2d4/0x880 [ 604.011611][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 604.017237][ C1] call_timer_fn+0x19a/0x610 [ 604.021813][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 604.026910][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 604.032537][ C1] ? mark_held_locks+0x40/0x70 [ 604.037292][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 604.042921][ C1] __run_timers+0x757/0xb00 [ 604.047419][ C1] ? __pfx___run_timers+0x10/0x10 [ 604.052435][ C1] ? ktime_get+0x9f/0x320 [ 604.056755][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 604.061774][ C1] run_timer_base+0x114/0x190 [ 604.066439][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 604.071626][ C1] run_timer_softirq+0x1a/0x50 [ 604.076379][ C1] handle_softirqs+0x1ea/0x9b0 [ 604.081144][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 604.086422][ C1] ? _raw_spin_unlock+0x28/0x50 [ 604.091264][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 604.096897][ C1] __irq_exit_rcu+0x162/0x210 [ 604.101566][ C1] irq_exit_rcu+0x9/0x30 [ 604.105797][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 604.111424][ C1] [ 604.114340][ C1] [ 604.117259][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.123231][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 604.129032][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ba 40 29 f6 48 89 df e8 42 90 29 f6 e8 2d f4 55 f6 fb bf 01 00 00 00 12 a0 18 f6 65 8b 05 5b 49 a7 08 85 c0 74 06 5b e9 81 4a 00 00 [ 604.148625][ C1] RSP: 0018:ffffc90003a77748 EFLAGS: 00000202 [ 604.154681][ C1] RAX: 000000000029c8fb RBX: ffff888022f8e9f0 RCX: 0000000000000040 [ 604.162642][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a3c59 RDI: 0000000000000001 [ 604.170597][ C1] RBP: ffff888022f8e9e8 R08: 0000000000000001 R09: 0000000000000000 [ 604.178551][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888022f8e9f0 [ 604.186507][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000019 [ 604.194468][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.199658][ C1] filemap_remove_folio+0x104/0x2a0 [ 604.204859][ C1] truncate_inode_folio+0x49/0x70 [ 604.209873][ C1] shmem_undo_range+0x3ae/0x1570 [ 604.214812][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 604.220188][ C1] ? __kernel_text_address+0xd/0x30 [ 604.225377][ C1] ? unwind_get_return_address+0x59/0xa0 [ 604.231003][ C1] ? arch_stack_walk+0xa6/0xf0 [ 604.235771][ C1] ? kasan_save_stack+0x3f/0x50 [ 604.240608][ C1] ? kasan_save_stack+0x30/0x50 [ 604.245449][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 604.250815][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 604.256875][ C1] shmem_evict_inode+0x3a5/0xbe0 [ 604.261812][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 604.267526][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 604.272979][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 604.279044][ C1] ? find_held_lock+0x2b/0x80 [ 604.283717][ C1] ? evict+0x37e/0xad0 [ 604.287775][ C1] ? evict+0x37e/0xad0 [ 604.291833][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 604.297287][ C1] evict+0x3c2/0xad0 [ 604.301177][ C1] ? __pfx_evict+0x10/0x10 [ 604.305587][ C1] ? iput.part.0+0x981/0x1050 [ 604.310256][ C1] iput.part.0+0x989/0x1050 [ 604.314750][ C1] iput+0x35/0x40 [ 604.318378][ C1] filename_unlinkat+0x466/0x730 [ 604.323302][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 604.328764][ C1] ? do_getname+0x191/0x390 [ 604.333260][ C1] __x64_sys_unlink+0x46/0x70 [ 604.337927][ C1] do_syscall_64+0x115/0x870 [ 604.342512][ C1] ? clear_bhb_loop+0x40/0x90 [ 604.347181][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.353063][ C1] RIP: 0033:0x7f883259cf47 [ 604.357467][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 604.377062][ C1] RSP: 002b:00007ffd57512b98 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 604.385462][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f883259cf47 [ 604.393421][ C1] RDX: 00007ffd57512bc0 RSI: 00007ffd57512c50 RDI: 00007ffd57512c50 [ 604.401379][ C1] RBP: 00007ffd57512c50 R08: 00007ffd57513c50 R09: 00000000ffffffff [ 604.409336][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd57513ce0 [ 604.417294][ C1] R13: 00007f88326332ca R14: 0000000000091eb2 R15: 00007ffd57513d20 [ 604.425260][ C1] [ 604.428455][ C1] Kernel Offset: disabled [ 604.432754][ C1] Rebooting in 86400 seconds..