last executing test programs: 12m28.40489007s ago: executing program 3 (id=691): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='Z', 0x1}], 0x1}}], 0x1, 0x404c484) 12m28.227903658s ago: executing program 3 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) 12m28.101737294s ago: executing program 3 (id=694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x80}}, 0x0) 12m27.81769596s ago: executing program 3 (id=697): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) 12m27.658328464s ago: executing program 3 (id=699): mq_open(&(0x7f0000000000)='}&:[\x00', 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x2000800) 12m26.707198655s ago: executing program 3 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) 12m26.359492703s ago: executing program 32 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) 6m17.040732144s ago: executing program 5 (id=3823): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xe, 0x6, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 6m14.253886362s ago: executing program 5 (id=3856): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0xa2, 0xa, 0x0, 0x2001}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) 6m13.953132802s ago: executing program 5 (id=3860): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r0], 0x24}}, 0x24008000) 6m13.204732942s ago: executing program 5 (id=3864): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 6m12.846257672s ago: executing program 5 (id=3868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8001, 0x7, 0x9223, 0x3}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0x69, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m12.449822815s ago: executing program 5 (id=3872): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80, 0x26, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, r3, 0xa, 0xc741, 0x80, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000200000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 6m12.021955699s ago: executing program 33 (id=3872): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80, 0x26, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, r3, 0xa, 0xc741, 0x80, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000200000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 3m1.834382968s ago: executing program 2 (id=5524): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 3m1.033555711s ago: executing program 2 (id=5527): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 3m1.032995699s ago: executing program 2 (id=5529): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020405490a00000029bd7000070000000300060000000e0002004e2064010100000000000000000002000100000004d400"], 0x50}, 0x1, 0x400000000000000}, 0x0) 3m1.032043382s ago: executing program 2 (id=5530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0xb) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r6, 0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) r8 = fcntl$getown(r2, 0x9) setpgid(r7, r8) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) 3m1.029122262s ago: executing program 2 (id=5531): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x14500, 0xc6) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup2(r5, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) ioprio_get$pid(0x1, 0x0) 3m0.73936258s ago: executing program 2 (id=5533): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x62040200) socket$inet(0x2, 0x80001, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000206010100f300000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e657400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket(0x10, 0x3, 0x0) 2m59.793719707s ago: executing program 34 (id=5533): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x62040200) socket$inet(0x2, 0x80001, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000206010100f300000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e657400000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket(0x10, 0x3, 0x0) 20.543835465s ago: executing program 6 (id=6443): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f1"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 20.440267568s ago: executing program 6 (id=6446): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef6e, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 20.345566495s ago: executing program 6 (id=6450): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() pipe(0x0) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r2, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r6, &(0x7f0000000080)="650032ef35856a89516069e2f4fc4e0f41", 0xffffffffffffffe9) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x5c}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000400)={0x0, 0x0, "44775bcf2b43443e7c24a1f01f0d8e3508000000131433bfe3ae6338f5d891fdcbf1096e00e74ef8d22ca6974010de9775eb6ddb1f5bfd438e79ef8591e5c99b3e268d795022fbe5b6311fcbd7c907e2165bf0b8a8938372a32a3e97cb1dfc8a41076c831a833a48467ad1daa77b1d1eb404ce24fa93b3f7b91c504766cc78358f87d0a9fb449a1232ede2da7b67d46d0ac5c5cfd72dbdf9b56b9c8585607796059e458fea624857d4396f183a2a8ffbff4c03b25c2be69c0f81080f8b346cfd6ebf8f925b39e0fa1c01543bf78dacec0174c4c79eec8e5494a68eaa2fa2c5b5f3ae2dcdc5f2c327e6479ed1de34348a00", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001400)={r8, 0x2}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001400010000000000ffdbdf2508000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x4004040}, 0x0) 19.413074309s ago: executing program 6 (id=6466): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 19.202097884s ago: executing program 6 (id=6467): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r1, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 19.129372348s ago: executing program 6 (id=6470): bpf$MAP_CREATE(0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 14.466116454s ago: executing program 0 (id=6490): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x442) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000003380)=0xffff) 11.270925099s ago: executing program 0 (id=6515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10.706700981s ago: executing program 0 (id=6516): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200087fc, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(&(0x7f0000000000)=""/196) r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000098c0), 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.431809361s ago: executing program 0 (id=6532): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{0x0}], 0x1, 0x401, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0xffffffff, 0x100000000000, 0x2, 0x500, 0x7, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) 6.389954327s ago: executing program 7 (id=6533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 6.389461887s ago: executing program 1 (id=6534): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(0x0, 0x79b6292ad4f66094) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0) 5.929373982s ago: executing program 4 (id=6536): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000092840)={0x0, &(0x7f0000092740)}) 3.921989551s ago: executing program 35 (id=6470): bpf$MAP_CREATE(0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 3.821534s ago: executing program 7 (id=6538): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a00"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) 3.679061968s ago: executing program 0 (id=6539): syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/snmp\x00') getpid() socket$inet6(0xa, 0x4, 0xfffffff9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 3.662357665s ago: executing program 4 (id=6540): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.512252763s ago: executing program 1 (id=6541): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.438802236s ago: executing program 7 (id=6542): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r2, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a0000000900020054495043"], 0x7b}}, 0x8000) write$binfmt_script(r4, &(0x7f0000000000), 0x208e2aa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000580)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 3.435532596s ago: executing program 4 (id=6543): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e05, 0x1, @empty, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x27) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) 3.042941117s ago: executing program 1 (id=6544): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/97, 0x61}], 0x1, 0x0, 0x0, 0xf5000000}, 0x40012040) 2.975467099s ago: executing program 7 (id=6545): r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, 0x0) pread64(r2, &(0x7f00000000c0)=""/22, 0x16, 0x6) 1.934839262s ago: executing program 1 (id=6546): gettid() timer_create(0xb, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 1.934515648s ago: executing program 4 (id=6547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x0, {0x1b}}, 0x14}}, 0x0) 1.884042047s ago: executing program 4 (id=6548): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{0x0}], 0x1, 0x401, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0xffffffff, 0x100000000000, 0x2, 0x500, 0x7, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) 1.723718912s ago: executing program 7 (id=6549): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ff"], 0x0) 1.507139069s ago: executing program 0 (id=6550): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) 1.041180148s ago: executing program 1 (id=6551): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c800000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) 942.155479ms ago: executing program 4 (id=6552): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000080)={r6}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 730.829791ms ago: executing program 1 (id=6553): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 0s ago: executing program 7 (id=6554): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): 7ffc0000 [ 675.538938][ T30] audit: type=1326 audit(1760832962.497:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.1.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 675.562524][ T30] audit: type=1326 audit(1760832962.497:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.1.5310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 675.587449][T21386] lo speed is unknown, defaulting to 1000 [ 675.801786][ T30] audit: type=1326 audit(1760832963.397:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21439 comm="syz.0.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1ab8efc9 code=0x7ffc0000 [ 675.850517][ T30] audit: type=1326 audit(1760832963.397:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21439 comm="syz.0.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda1ab8efc9 code=0x7ffc0000 [ 675.912606][ T30] audit: type=1326 audit(1760832963.397:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21439 comm="syz.0.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fda1ab8efc9 code=0x7ffc0000 [ 676.130385][T21447] lo speed is unknown, defaulting to 1000 [ 676.182221][T21447] lo speed is unknown, defaulting to 1000 [ 676.713431][T21459] netlink: 'syz.2.5324': attribute type 1 has an invalid length. [ 676.775164][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5324'. [ 676.820395][T21459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.156219][T21463] bond3 (unregistering): Released all slaves [ 677.203736][T21455] lo speed is unknown, defaulting to 1000 [ 677.211869][T21455] lo speed is unknown, defaulting to 1000 [ 677.619455][T21447] lo speed is unknown, defaulting to 1000 [ 677.894716][T21455] lo speed is unknown, defaulting to 1000 [ 678.395258][T21483] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 679.038982][T21494] vxcan1: entered allmulticast mode [ 679.244064][T21501] netlink: 'syz.2.5336': attribute type 1 has an invalid length. [ 679.582323][T21501] bond3: entered promiscuous mode [ 679.587698][T21501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 679.609026][T21503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 679.613678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 679.616381][T21503] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 679.624265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 679.633844][T21503] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 679.642599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 679.661687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 679.665873][T21503] bond3: (slave gre1): making interface the new active one [ 679.670364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 679.677117][T21503] gre1: entered promiscuous mode [ 679.692292][T21503] bond3: (slave gre1): Enslaving as an active interface with an up link [ 680.194001][ T30] kauditd_printk_skb: 1204 callbacks suppressed [ 680.194016][ T30] audit: type=1326 audit(1760832967.787:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21521 comm="syz.2.5345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6208b8efc9 code=0x0 [ 680.642924][T21532] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 680.717323][ T30] audit: type=1326 audit(1760832968.247:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 680.995794][ T30] audit: type=1326 audit(1760832968.247:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 681.123432][ T30] audit: type=1326 audit(1760832968.247:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 681.147343][ T30] audit: type=1326 audit(1760832968.257:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 681.170920][ T30] audit: type=1326 audit(1760832968.257:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 681.223083][ T30] audit: type=1326 audit(1760832968.257:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 681.247044][ T30] audit: type=1326 audit(1760832968.257:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 681.286274][ T30] audit: type=1326 audit(1760832968.257:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 681.375678][ T30] audit: type=1326 audit(1760832968.257:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21526 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 681.404669][T21539] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 681.837169][ T10] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 681.861391][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 682.833706][T21592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5371'. [ 682.881214][T21592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5371'. [ 682.920812][T21592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5371'. [ 682.929820][T21592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5371'. [ 683.040469][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5368'. [ 684.867700][T21660] serio: Serial port ptm0 [ 685.505565][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.642490][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 685.642508][ T30] audit: type=1400 audit(1760832973.227:5339): avc: denied { watch_reads } for pid=21683 comm="syz.1.5409" path="/218" dev="tmpfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 685.801569][ T30] audit: type=1400 audit(1760832973.387:5340): avc: denied { compute_member } for pid=21694 comm="syz.4.5413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 685.896910][T21698] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 686.469786][ T30] audit: type=1326 audit(1760832974.047:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.4.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 686.530850][ T30] audit: type=1326 audit(1760832974.047:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.4.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 686.566513][ T30] audit: type=1326 audit(1760832974.057:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.4.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 686.610807][ T30] audit: type=1326 audit(1760832974.057:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21709 comm="syz.4.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 686.672671][T21721] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 686.680776][ T30] audit: type=1326 audit(1760832974.257:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.6.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 686.723832][T21712] lo speed is unknown, defaulting to 1000 [ 686.739311][T21712] lo speed is unknown, defaulting to 1000 [ 686.772973][ T30] audit: type=1326 audit(1760832974.257:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.6.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 686.839480][ T30] audit: type=1326 audit(1760832974.257:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21718 comm="syz.6.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 686.890132][ T30] audit: type=1326 audit(1760832974.287:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21714 comm="syz.1.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 687.587556][T21740] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 688.277492][T21712] lo speed is unknown, defaulting to 1000 [ 689.897665][T21796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5453'. [ 690.086993][T21790] netlink: 'syz.2.5450': attribute type 83 has an invalid length. [ 690.393520][T21829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5467'. [ 690.404777][T16678] IPVS: starting estimator thread 0... [ 690.523666][T21832] IPVS: using max 38 ests per chain, 91200 per kthread [ 690.644805][T21843] SELinux: policydb version 0 does not match my version range 15-35 [ 690.653247][T21843] SELinux: failed to load policy [ 690.753925][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 690.753942][ T30] audit: type=1400 audit(1760832978.347:5409): avc: denied { setattr } for pid=21846 comm="syz.1.5474" name="timer" dev="devtmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 690.857692][T21851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 691.957635][ T30] audit: type=1326 audit(1760832979.547:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 692.044346][ T30] audit: type=1326 audit(1760832979.547:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 692.143489][ T30] audit: type=1326 audit(1760832979.547:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 692.236890][ T30] audit: type=1326 audit(1760832979.547:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 692.374323][ T30] audit: type=1326 audit(1760832979.547:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 692.430799][T20421] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.441441][T20421] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.452759][T20421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.464301][ T30] audit: type=1326 audit(1760832979.547:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 692.493639][ T30] audit: type=1326 audit(1760832979.577:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 692.518448][T20421] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.525995][ T30] audit: type=1326 audit(1760832979.577:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6208b8d810 code=0x7ffc0000 [ 692.564019][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.573995][ T30] audit: type=1326 audit(1760832979.577:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21885 comm="syz.2.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6208b8d810 code=0x7ffc0000 [ 692.665984][ T1099] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.700864][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 692.863354][T21897] lo speed is unknown, defaulting to 1000 [ 692.886298][T21897] lo speed is unknown, defaulting to 1000 [ 692.923145][ T1099] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.335263][ T1099] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.391867][T14128] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 693.402437][T14128] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 693.435236][ T1099] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.860314][ T1099] bridge_slave_1: left allmulticast mode [ 693.889608][ T1099] bridge_slave_1: left promiscuous mode [ 693.900984][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.934272][ T1099] bridge_slave_0: left promiscuous mode [ 693.940015][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.079300][T21923] SELinux: security_context_str_to_sid (us‚Ü$ÖTûFÒer_u) failed with errno=-22 [ 694.568947][T21955] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 694.642707][T16772] Bluetooth: hci5: command tx timeout [ 694.731674][T21956] netlink: 'syz.1.5515': attribute type 1 has an invalid length. [ 694.828100][T21956] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5515'. [ 694.870373][T21956] netlink: 'syz.1.5515': attribute type 1 has an invalid length. [ 695.069842][ T1099] bond0 (unregistering): left promiscuous mode [ 695.076281][ T1099] bond_slave_0: left promiscuous mode [ 695.081821][ T1099] bond_slave_1: left promiscuous mode [ 695.088396][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.098897][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.117042][ T1099] bond0 (unregistering): Released all slaves [ 695.211817][T21959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5512'. [ 695.283698][T21954] lo speed is unknown, defaulting to 1000 [ 695.289791][ T1099] tipc: Disabling bearer [ 695.323823][ T1099] tipc: Left network mode [ 695.327394][T21954] lo speed is unknown, defaulting to 1000 [ 695.766546][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 695.766562][ T30] audit: type=1326 audit(1760832983.317:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.314721][T21982] No such timeout policy "syz0" [ 696.509949][ T30] audit: type=1326 audit(1760832983.317:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.537746][ T30] audit: type=1326 audit(1760832983.317:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.561839][ T30] audit: type=1326 audit(1760832983.317:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.585374][ T30] audit: type=1326 audit(1760832983.317:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.649370][ T30] audit: type=1326 audit(1760832983.317:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.700889][T16772] Bluetooth: hci5: command tx timeout [ 696.727721][T21897] lo speed is unknown, defaulting to 1000 [ 696.781873][ T30] audit: type=1326 audit(1760832983.317:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.850970][ T30] audit: type=1326 audit(1760832983.317:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.915829][ T30] audit: type=1326 audit(1760832983.317:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 696.980267][ T30] audit: type=1326 audit(1760832983.317:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21968 comm="syz.2.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6208b8efc9 code=0x7ffc0000 [ 697.210549][T22007] wireguard0: entered promiscuous mode [ 697.233738][T22007] wireguard0: entered allmulticast mode [ 697.293148][T22012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5528'. [ 697.538804][T21954] lo speed is unknown, defaulting to 1000 [ 697.699427][T21897] chnl_net:caif_netlink_parms(): no params data found [ 698.782563][T16772] Bluetooth: hci5: command tx timeout [ 698.888810][T21897] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.914417][T21897] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.935819][T21897] bridge_slave_0: entered allmulticast mode [ 698.963611][T21897] bridge_slave_0: entered promiscuous mode [ 698.990396][ T1099] team0: left promiscuous mode [ 698.999820][ T1099] team_slave_0: left promiscuous mode [ 699.012121][ T1099] team_slave_1: left promiscuous mode [ 699.132660][ T1099] hsr_slave_0: left promiscuous mode [ 699.171298][ T1099] hsr_slave_1: left promiscuous mode [ 699.177248][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.209708][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.256256][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.323732][ T1099] veth1_macvtap: left promiscuous mode [ 699.330966][ T1099] veth0_macvtap: left promiscuous mode [ 699.336518][ T1099] veth1_vlan: left allmulticast mode [ 699.356245][ T1099] veth1_vlan: left promiscuous mode [ 699.370863][ T1099] veth0_vlan: left promiscuous mode [ 699.482385][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 699.497502][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 699.513975][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 699.523152][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 699.541388][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 699.972142][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 700.020269][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 700.463030][T21897] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.470512][T21897] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.502557][T21897] bridge_slave_1: entered allmulticast mode [ 700.509974][T21897] bridge_slave_1: entered promiscuous mode [ 700.564661][ T10] infiniband syz1: ib_query_port failed (-19) [ 700.702474][T21897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.829386][T21897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.864368][T16772] Bluetooth: hci5: command tx timeout [ 700.876241][T22067] SELinux: ebitmap: truncated map [ 700.935630][T22067] SELinux: failed to load policy [ 701.042440][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 701.042469][ T30] audit: type=1326 audit(1760832988.607:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.252757][T21897] team0: Port device team_slave_0 added [ 701.322825][T22053] lo speed is unknown, defaulting to 1000 [ 701.367811][ T30] audit: type=1326 audit(1760832988.607:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.399665][T21897] team0: Port device team_slave_1 added [ 701.423045][ T30] audit: type=1326 audit(1760832988.607:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.448346][ T30] audit: type=1326 audit(1760832988.607:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.481334][T22053] lo speed is unknown, defaulting to 1000 [ 701.518221][T21897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.526020][ T30] audit: type=1326 audit(1760832988.607:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.552976][T21897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.588083][T16772] Bluetooth: hci0: command tx timeout [ 701.671191][ T30] audit: type=1326 audit(1760832988.617:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.711478][T21897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.728694][ T30] audit: type=1326 audit(1760832988.617:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.762595][T21897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.790831][T21897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.837163][ T30] audit: type=1326 audit(1760832988.617:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.870817][T21897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.897506][ T30] audit: type=1326 audit(1760832988.617:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.945218][ T30] audit: type=1326 audit(1760832988.617:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22065 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 701.950454][ T1099] IPVS: stop unused estimator thread 0... [ 702.139891][T21897] hsr_slave_0: entered promiscuous mode [ 702.168164][T21897] hsr_slave_1: entered promiscuous mode [ 702.174788][T22093] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 702.180816][T21897] debugfs: 'hsr0' already exists in 'hsr' [ 702.187918][T21897] Cannot create hsr debugfs directory [ 702.396218][ T1099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.450882][T22053] lo speed is unknown, defaulting to 1000 [ 702.612752][ T1099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.763934][ T1099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.025359][ T1099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.092659][T22126] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 703.099216][T22126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 703.123479][T22126] vhci_hcd vhci_hcd.0: Device attached [ 703.254006][T22133] wireguard0: entered promiscuous mode [ 703.259697][T22127] vhci_hcd: connection closed [ 703.260513][ T13] vhci_hcd: stop threads [ 703.272015][T22133] wireguard0: entered allmulticast mode [ 703.286666][ T13] vhci_hcd: release socket [ 703.310807][ T13] vhci_hcd: disconnect device [ 703.363125][ T10] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 703.371152][ T10] usb 45-1: enqueue for inactive port 0 [ 703.453881][ T10] vhci_hcd: vhci_device speed not set [ 703.664804][T16772] Bluetooth: hci0: command tx timeout [ 703.843873][T22163] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5565'. [ 703.902143][ T1099] bridge_slave_1: left allmulticast mode [ 703.907803][ T1099] bridge_slave_1: left promiscuous mode [ 703.935438][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.024083][ T1099] bridge_slave_0: left allmulticast mode [ 704.037281][ T1099] bridge_slave_0: left promiscuous mode [ 704.051584][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.359402][ T1099] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 704.940999][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 704.949570][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 705.138317][ T1099] bond3 (unregistering): (slave gre1): Releasing backup interface [ 705.179329][ T1099] gre1 (unregistering): left promiscuous mode [ 705.570552][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.582532][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.594857][ T1099] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 705.606859][ T1099] bond0 (unregistering): Released all slaves [ 705.805037][T16772] Bluetooth: hci0: command tx timeout [ 705.984159][T22214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 706.903842][ T1099] bond1 (unregistering): Released all slaves [ 707.657027][ T1099] bond2 (unregistering): Released all slaves [ 707.876902][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 707.876918][ T30] audit: type=1400 audit(1760832995.467:5635): avc: denied { create } for pid=22236 comm="syz.6.5591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 707.925189][T16772] Bluetooth: hci0: command tx timeout [ 707.932903][ T30] audit: type=1326 audit(1760832995.467:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22237 comm="syz.4.5592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff69358efc9 code=0x0 [ 707.956261][ T30] audit: type=1400 audit(1760832995.527:5637): avc: denied { ioctl } for pid=22236 comm="syz.6.5591" path="socket:[76759]" dev="sockfs" ino=76759 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 708.023321][T22244] netlink: 'syz.6.5594': attribute type 13 has an invalid length. [ 708.033327][T22244] netlink: 'syz.6.5594': attribute type 17 has an invalid length. [ 708.067590][ T1099] bond3 (unregistering): Released all slaves [ 708.087796][T22053] chnl_net:caif_netlink_parms(): no params data found [ 708.169473][T22244] gretap0: refused to change device tx_queue_len [ 708.193382][T22244] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 708.657533][ T5888] lo speed is unknown, defaulting to 1000 [ 708.658961][ T1099] tipc: Disabling bearer [ 708.669101][ T1099] tipc: Left network mode [ 708.834111][ T30] audit: type=1400 audit(1760832996.407:5638): avc: denied { ioctl } for pid=22252 comm="syz.6.5596" path="socket:[77846]" dev="sockfs" ino=77846 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 708.997470][T22053] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.018213][T22053] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.029505][T22053] bridge_slave_0: entered allmulticast mode [ 709.037404][T22053] bridge_slave_0: entered promiscuous mode [ 709.215429][T22053] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.241755][T22053] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.248979][T22053] bridge_slave_1: entered allmulticast mode [ 709.257343][T22053] bridge_slave_1: entered promiscuous mode [ 709.357350][ T30] audit: type=1326 audit(1760832996.907:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22265 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 709.592323][ T30] audit: type=1326 audit(1760832996.907:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22265 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 709.713096][ T30] audit: type=1326 audit(1760832996.917:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22265 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 709.737377][ T30] audit: type=1326 audit(1760832996.917:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22265 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 709.763635][T21897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 709.772387][ T30] audit: type=1326 audit(1760832996.917:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22265 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 709.805536][T21897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 709.842968][ T30] audit: type=1326 audit(1760832996.917:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22265 comm="syz.1.5599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4448f8efc9 code=0x7ffc0000 [ 710.046083][T22053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.073025][T21897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 710.150184][T22053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.279685][T21897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 710.721867][T22053] team0: Port device team_slave_0 added [ 710.862661][T22321] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 710.963352][ T1099] hsr_slave_0: left promiscuous mode [ 711.046931][ T1099] hsr_slave_1: left promiscuous mode [ 711.310418][ T1099] veth1_macvtap: left promiscuous mode [ 711.327522][ T1099] veth0_macvtap: left promiscuous mode [ 711.576524][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5611'. [ 712.291684][ T1099] pim6reg (unregistering): left allmulticast mode [ 713.232251][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 713.279923][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 713.289609][T21401] smc: removing ib device syz! [ 713.639764][ T3005] smc: removing ib device sz1 [ 713.647937][T22053] team0: Port device team_slave_1 added [ 713.685491][ T42] lo speed is unknown, defaulting to 1000 [ 713.692283][ T42] sz1: Port: 1 Link DOWN [ 714.285819][T22053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.318060][T22053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.382454][T22053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.403684][T22335] lo speed is unknown, defaulting to 1000 [ 714.594278][T22053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.601991][T22053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.628132][T22053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.644022][T22335] lo speed is unknown, defaulting to 1000 [ 714.713153][T22361] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 715.177226][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 715.177241][ T30] audit: type=1400 audit(1760833002.767:5683): avc: denied { ioctl } for pid=22365 comm="syz.4.5624" path="socket:[79064]" dev="sockfs" ino=79064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 715.223928][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5624'. [ 716.590421][T22053] hsr_slave_0: entered promiscuous mode [ 716.598907][T22053] hsr_slave_1: entered promiscuous mode [ 716.627184][T22053] debugfs: 'hsr0' already exists in 'hsr' [ 716.670796][T22053] Cannot create hsr debugfs directory [ 716.797798][T22383] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5629'. [ 717.207311][ T1099] IPVS: stop unused estimator thread 0... [ 717.338146][T21897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.476442][T21897] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.501280][ T30] audit: type=1326 audit(1760833005.087:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 717.534879][T10503] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.542031][T10503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.583745][ T30] audit: type=1326 audit(1760833005.087:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 717.626159][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.633302][T10503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.679719][ T30] audit: type=1326 audit(1760833005.097:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 717.761936][ T30] audit: type=1326 audit(1760833005.097:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 717.795211][T22053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 717.979085][ T30] audit: type=1326 audit(1760833005.097:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 717.982548][T22053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 718.003786][ T30] audit: type=1326 audit(1760833005.097:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 718.059920][ T30] audit: type=1326 audit(1760833005.097:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 718.130421][ T30] audit: type=1326 audit(1760833005.097:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 718.495161][ T30] audit: type=1326 audit(1760833005.097:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22410 comm="syz.6.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 718.562240][T22053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 718.638967][T22053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 718.975730][T22053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.028664][T22053] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.042109][T21401] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.049257][T21401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.075296][T22456] : renamed from bond0 [ 719.175365][T21401] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.182602][T21401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.735305][T22053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 719.867923][T21897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.033624][T21897] veth0_vlan: entered promiscuous mode [ 720.538132][T21897] veth1_vlan: entered promiscuous mode [ 720.733377][T21897] veth0_macvtap: entered promiscuous mode [ 720.777771][T21897] veth1_macvtap: entered promiscuous mode [ 720.798821][T22053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.826861][T21897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.944552][T21897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.037274][ T3005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.046133][ T3005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.084696][ T3005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.147777][ T3472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.479675][T21401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.497669][T21401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.739435][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 721.739451][ T30] audit: type=1400 audit(1760833009.327:5700): avc: denied { read } for pid=22531 comm="syz.1.5664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 721.791617][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.799457][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.858842][ T30] audit: type=1400 audit(1760833009.447:5701): avc: denied { mounton } for pid=21897 comm="syz-executor" path="/root/syzkaller.IJd3Ws/syz-tmp" dev="sda1" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 722.028741][T22536] lo speed is unknown, defaulting to 1000 [ 722.044031][T22536] lo speed is unknown, defaulting to 1000 [ 722.360705][ T30] audit: type=1400 audit(1760833009.937:5702): avc: denied { mounton } for pid=21897 comm="syz-executor" path="/root/syzkaller.IJd3Ws/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 722.405758][T22053] veth0_vlan: entered promiscuous mode [ 722.455402][ T30] audit: type=1400 audit(1760833009.937:5703): avc: denied { mounton } for pid=21897 comm="syz-executor" path="/root/syzkaller.IJd3Ws/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=78490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 722.465588][T22053] veth1_vlan: entered promiscuous mode [ 722.483578][ T30] audit: type=1400 audit(1760833009.937:5704): avc: denied { unmount } for pid=21897 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 722.600064][ T30] audit: type=1400 audit(1760833010.017:5705): avc: denied { mounton } for pid=21897 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 722.625038][ T30] audit: type=1400 audit(1760833010.017:5706): avc: denied { mount } for pid=21897 comm="syz-executor" name="/" dev="gadgetfs" ino=6716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 722.649865][ T30] audit: type=1400 audit(1760833010.017:5707): avc: denied { mount } for pid=21897 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 722.672609][ T30] audit: type=1400 audit(1760833010.017:5708): avc: denied { mounton } for pid=21897 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 722.755241][T22053] veth0_macvtap: entered promiscuous mode [ 722.773782][T22053] veth1_macvtap: entered promiscuous mode [ 722.775679][ T30] audit: type=1400 audit(1760833010.017:5709): avc: denied { mount } for pid=21897 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 722.823154][T22053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.853860][T22053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.897718][ T7047] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.915227][ T7047] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.971310][ T7047] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.985564][ T7047] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.525278][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.543445][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.657272][T10503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.676261][T10503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.461748][T22592] block device autoloading is deprecated and will be removed. [ 725.490942][T22603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 725.539033][T22603] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 725.595888][T22603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 725.675308][ T910] IPVS: starting estimator thread 0... [ 725.704627][T22603] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 725.841683][T22643] IPVS: using max 30 ests per chain, 72000 per kthread [ 726.016238][T22603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 726.050876][T22603] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 726.179944][T22603] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 726.195098][T22603] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 726.221273][T22639] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.258255][T22603] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 726.293011][T22603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 726.324842][T22603] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 726.402699][T22603] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 726.472849][T22639] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.774144][T22639] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.788922][T16772] Bluetooth: hci2: command 0x0406 tx timeout [ 727.300123][T22669] lo speed is unknown, defaulting to 1000 [ 727.307340][T22669] lo speed is unknown, defaulting to 1000 [ 727.420272][T22650] warn_alloc: 1 callbacks suppressed [ 727.420288][T22650] syz.7.5698: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 727.543994][T22650] CPU: 1 UID: 0 PID: 22650 Comm: syz.7.5698 Not tainted syzkaller #0 PREEMPT(full) [ 727.544018][T22650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 727.544028][T22650] Call Trace: [ 727.544033][T22650] [ 727.544039][T22650] dump_stack_lvl+0x16c/0x1f0 [ 727.544065][T22650] warn_alloc+0x248/0x3a0 [ 727.544086][T22650] ? __pfx_warn_alloc+0x10/0x10 [ 727.544114][T22650] ? xt_alloc_entry_offsets+0x3f/0x60 [ 727.544146][T22650] ? __vmalloc_node_noprof+0xad/0xf0 [ 727.544176][T22650] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 727.544208][T22650] ? xt_alloc_entry_offsets+0x3f/0x60 [ 727.544234][T22650] ? __x64_sys_setsockopt+0xbd/0x160 [ 727.544254][T22650] ? do_syscall_64+0xcd/0xfa0 [ 727.544277][T22650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 727.544310][T22650] ? ___kmalloc_large_node+0xed/0x160 [ 727.544338][T22650] __kvmalloc_node_noprof+0x431/0x9c0 [ 727.544366][T22650] ? xt_alloc_entry_offsets+0x3f/0x60 [ 727.544390][T22650] ? xt_alloc_entry_offsets+0x3f/0x60 [ 727.544416][T22650] ? xt_alloc_entry_offsets+0x3f/0x60 [ 727.544437][T22650] ? __might_fault+0x13b/0x190 [ 727.544454][T22650] xt_alloc_entry_offsets+0x3f/0x60 [ 727.544477][T22650] translate_table+0x22d/0x1720 [ 727.544500][T22650] ? _copy_from_user+0x59/0xd0 [ 727.544524][T22650] ? __pfx_translate_table+0x10/0x10 [ 727.544547][T22650] do_ipt_set_ctl+0x570/0xae0 [ 727.544564][T22650] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 727.544593][T22650] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 727.544611][T22650] ? lockdep_hardirqs_on+0x7c/0x110 [ 727.544632][T22650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 727.544665][T22650] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 727.544692][T22650] nf_setsockopt+0x8d/0xf0 [ 727.544718][T22650] ip_setsockopt+0xcb/0xf0 [ 727.544737][T22650] tcp_setsockopt+0xa7/0x100 [ 727.544756][T22650] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 727.544783][T22650] do_sock_setsockopt+0xf3/0x1d0 [ 727.544809][T22650] __sys_setsockopt+0x1a0/0x230 [ 727.544832][T22650] __x64_sys_setsockopt+0xbd/0x160 [ 727.544850][T22650] ? do_syscall_64+0x91/0xfa0 [ 727.544869][T22650] ? lockdep_hardirqs_on+0x7c/0x110 [ 727.544889][T22650] do_syscall_64+0xcd/0xfa0 [ 727.544908][T22650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.544924][T22650] RIP: 0033:0x7fb2ebb8efc9 [ 727.544937][T22650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.544952][T22650] RSP: 002b:00007fb2ec943038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 727.544969][T22650] RAX: ffffffffffffffda RBX: 00007fb2ebde5fa0 RCX: 00007fb2ebb8efc9 [ 727.544979][T22650] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 727.544989][T22650] RBP: 00007fb2ebc11f91 R08: 0000000000000278 R09: 0000000000000000 [ 727.544999][T22650] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 727.545009][T22650] R13: 00007fb2ebde6038 R14: 00007fb2ebde5fa0 R15: 00007fff18055328 [ 727.545034][T22650] [ 727.545041][T22650] Mem-Info: [ 727.661049][T16772] Bluetooth: hci4: command 0x0406 tx timeout [ 727.662611][T22650] active_anon:27383 inactive_anon:0 isolated_anon:1454 [ 727.662611][T22650] active_file:20236 inactive_file:40902 isolated_file:0 [ 727.662611][T22650] unevictable:17162 dirty:194 writeback:0 [ 727.662611][T22650] slab_reclaimable:12481 slab_unreclaimable:170224 [ 727.662611][T22650] mapped:35346 shmem:21916 pagetables:1702 [ 727.662611][T22650] sec_pagetables:0 bounce:0 [ 727.662611][T22650] kernel_misc_reclaimable:0 [ 727.662611][T22650] free:1169152 free_pcp:15672 free_cma:0 [ 727.682847][T22639] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.686966][T22650] Node 0 active_anon:109532kB inactive_anon:0kB active_file:80916kB inactive_file:163408kB unevictable:67112kB isolated(anon):5216kB isolated(file):0kB mapped:141356kB dirty:772kB writeback:0kB shmem:86128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12716kB pagetables:6676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 727.939819][T22650] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 727.969998][T22650] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.012877][T22650] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 728.018658][T22650] Node 0 DMA32 free:762644kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:107332kB inactive_anon:0kB active_file:80916kB inactive_file:163408kB unevictable:67112kB writepending:772kB zspages:0kB present:3129332kB managed:2541316kB mlocked:0kB bounce:0kB free_pcp:55800kB local_pcp:32248kB free_cma:0kB [ 728.054246][T22650] lowmem_reserve[]: 0 0 1 1 1 [ 728.059025][T22650] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.095770][T16772] Bluetooth: hci3: command 0x0406 tx timeout [ 728.117269][T22650] lowmem_reserve[]: 0 0 0 0 0 [ 728.157198][T22650] Node 1 Normal free:3898604kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14252kB local_pcp:0kB free_cma:0kB [ 728.233985][T16772] Bluetooth: hci5: command 0x0c1a tx timeout [ 728.276087][ T1099] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.284547][T22650] lowmem_reserve[]: 0 0 0 0 0 [ 728.289275][T22650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 728.314874][ T1099] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.323378][T16772] Bluetooth: hci0: command 0x0c1a tx timeout [ 728.345067][ T7047] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.370822][T22650] Node 0 DMA32: 6*4kB (UME) 50*8kB (ME) 36*16kB (UME) 288*32kB (ME) 369*64kB (UME) 756*128kB (UM) 731*256kB (UME) 372*512kB (UM) 108*1024kB (UME) 8*2048kB (UM) 31*4096kB (UM) = 762152kB [ 728.400903][ T7047] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.457286][T22650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 728.493815][T22650] Node 1 Normal: 14*4kB (UE) 17*8kB (UE) 45*16kB (UE) 211*32kB (UME) 70*64kB (UME) 11*128kB (UME) 6*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (UM) = 3898608kB [ 728.548065][T22650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.567958][T22650] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 728.587513][T22650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.616760][T22650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 728.637160][T22650] 95237 total pagecache pages [ 728.653130][T22650] 0 pages in swap cache [ 728.667214][T22650] Free swap = 124996kB [ 728.681723][T22650] Total swap = 124996kB [ 728.685894][T22650] 2097051 pages RAM [ 728.702025][T22650] 0 pages HighMem/MovableOnly [ 728.710818][T22650] 429696 pages reserved [ 728.720753][T22650] 0 pages cma reserved [ 728.865564][T16772] Bluetooth: hci2: command 0x0406 tx timeout [ 729.373913][T22708] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 729.808729][T16772] Bluetooth: hci4: command 0x0406 tx timeout [ 730.234051][T16772] Bluetooth: hci3: command 0x0406 tx timeout [ 730.301529][T16772] Bluetooth: hci5: command 0x0c1a tx timeout [ 730.386719][T16772] Bluetooth: hci0: command 0x0c1a tx timeout [ 730.402660][T22711] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.582552][T22711] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.659035][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 730.659051][ T30] audit: type=1400 audit(1760833018.247:5750): avc: denied { create } for pid=22717 comm="syz.4.5714" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 730.732624][T22711] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.770822][ T30] audit: type=1400 audit(1760833018.357:5751): avc: denied { write } for pid=22717 comm="syz.4.5714" name="file0" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 730.828769][ T30] audit: type=1400 audit(1760833018.417:5752): avc: denied { unlink } for pid=16865 comm="syz-executor" name="file0" dev="tmpfs" ino=1915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 730.917704][T22711] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.125825][T22732] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5720'. [ 731.642258][ T30] audit: type=1400 audit(1760833019.237:5753): avc: denied { read } for pid=22748 comm="syz.7.5727" path="socket:[81020]" dev="sockfs" ino=81020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 731.666471][T22723] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 731.674596][T22723] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 731.687609][T22723] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 731.695385][T22723] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 731.708509][T22723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 731.714509][T22723] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 731.723386][T22723] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 731.733610][T22723] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 731.742275][T22723] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 731.750598][T22723] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 731.967756][T22761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.071936][T22761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.149053][T22765] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 732.320599][T22761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.918114][T22761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.107312][T22772] lo speed is unknown, defaulting to 1000 [ 733.114720][T22772] lo speed is unknown, defaulting to 1000 [ 733.197024][T21401] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.218946][T21401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.260562][T21401] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.286186][T21401] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.481113][ T30] audit: type=1400 audit(1760833021.067:5754): avc: denied { read } for pid=22789 comm="syz.7.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 733.557249][T22797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5744'. [ 733.696087][T10503] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.705307][T22802] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5749'. [ 733.763874][T21401] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.799770][T21401] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.841561][T21401] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.938120][ T30] audit: type=1400 audit(1760833021.527:5755): avc: denied { read } for pid=22812 comm="syz.1.5755" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 734.321197][ T30] audit: type=1400 audit(1760833021.527:5756): avc: denied { open } for pid=22812 comm="syz.1.5755" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 734.405322][ T30] audit: type=1400 audit(1760833021.997:5757): avc: denied { read write } for pid=22825 comm="syz.6.5759" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 734.470813][ T30] audit: type=1400 audit(1760833021.997:5758): avc: denied { open } for pid=22825 comm="syz.6.5759" path="/dev/video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 734.503832][ T30] audit: type=1400 audit(1760833021.997:5759): avc: denied { ioctl } for pid=22825 comm="syz.6.5759" path="/dev/video37" dev="devtmpfs" ino=1050 ioctlcmd=0x5659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 735.339167][T22840] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5763'. [ 735.395117][T22840] netlink: 51 bytes leftover after parsing attributes in process `syz.7.5763'. [ 735.448952][T22840] netlink: 51 bytes leftover after parsing attributes in process `syz.7.5763'. [ 735.490979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 735.591117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 735.668223][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 735.668238][ T30] audit: type=1400 audit(1760833023.257:5775): avc: denied { map } for pid=22846 comm="syz.7.5767" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 735.713180][ T30] audit: type=1400 audit(1760833023.267:5776): avc: denied { call } for pid=22846 comm="syz.7.5767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 735.765498][ T30] audit: type=1400 audit(1760833023.307:5777): avc: denied { transfer } for pid=22846 comm="syz.7.5767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 735.801185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 736.061976][ T30] audit: type=1400 audit(1760833023.647:5778): avc: denied { ioctl } for pid=22858 comm="syz.4.5771" path="socket:[80831]" dev="sockfs" ino=80831 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 736.317532][T22870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5775'. [ 736.330890][T22870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5775'. [ 736.413774][T22870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5775'. [ 736.507881][T22870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5775'. [ 737.361320][ T30] audit: type=1400 audit(1760833024.857:5779): avc: denied { getopt } for pid=22876 comm="syz.7.5778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 737.728439][ T30] audit: type=1326 audit(1760833024.987:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22882 comm="syz.4.5780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff69358efc9 code=0x0 [ 738.384523][ T30] audit: type=1400 audit(1760833025.977:5781): avc: denied { read } for pid=22895 comm="syz.4.5785" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 738.509211][T22900] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 738.520553][ T30] audit: type=1400 audit(1760833025.977:5782): avc: denied { open } for pid=22895 comm="syz.4.5785" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 738.546161][T22900] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 738.572141][ T30] audit: type=1400 audit(1760833025.977:5783): avc: denied { lock } for pid=22895 comm="syz.4.5785" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 738.818946][ T30] audit: type=1400 audit(1760833026.407:5784): avc: denied { ioctl } for pid=22908 comm="syz.7.5790" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 738.925839][T14128] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 739.130977][T14128] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 739.152194][T14128] usb 5-1: config 0 has no interface number 0 [ 739.158320][T14128] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 739.186081][T14128] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 739.358595][T14128] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 739.370291][T14128] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 739.381589][T14128] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 739.394132][T14128] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 739.414689][T14128] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 739.476752][T14128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.487706][T14128] usb 5-1: config 0 descriptor?? [ 739.494510][T22905] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 739.531336][T22905] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 739.591316][T14128] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 739.906022][T14128] usb 5-1: USB disconnect, device number 6 [ 739.994639][T14128] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 741.638081][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 741.638114][ T30] audit: type=1400 audit(1760833029.177:5788): avc: denied { mount } for pid=22975 comm="syz.4.5804" name="/" dev="rpc_pipefs" ino=81445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 742.277220][T22996] bridge0: port 1(syz_tun) entered blocking state [ 742.285198][T22996] bridge0: port 1(syz_tun) entered disabled state [ 742.291756][T22996] syz_tun: entered allmulticast mode [ 742.297855][T22996] syz_tun: entered promiscuous mode [ 744.603522][ T30] audit: type=1400 audit(1760833032.197:5789): avc: denied { read } for pid=23051 comm="syz.1.5818" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 744.698632][ T30] audit: type=1400 audit(1760833032.197:5790): avc: denied { open } for pid=23051 comm="syz.1.5818" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 745.368642][ T30] audit: type=1400 audit(1760833032.957:5791): avc: denied { ioctl } for pid=23064 comm="syz.7.5821" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=82085 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 745.394783][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.743966][T23084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 746.622164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 746.648041][T23094] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5831'. [ 747.111441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 747.125831][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.890956][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 747.993939][ T30] audit: type=1400 audit(1760833035.587:5792): avc: denied { create } for pid=23101 comm="syz.7.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 748.430768][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 748.520870][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.541027][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 748.547802][ T5888] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 748.715236][T23122] netlink: 'syz.7.5837': attribute type 10 has an invalid length. [ 748.740955][T23122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.766264][T23122] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 749.051843][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.070950][ T5888] usb 5-1: config 0 descriptor?? [ 749.282688][T23108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.291580][T23108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.960237][ T30] audit: type=1326 audit(1760833037.547:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23134 comm="syz.1.5843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4448f8efc9 code=0x0 [ 750.409430][ T5888] usb 5-1: USB disconnect, device number 7 [ 751.129781][ T30] audit: type=1400 audit(1760833038.657:5794): avc: denied { getopt } for pid=23138 comm="syz.7.5844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 751.149793][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.370285][ T30] audit: type=1400 audit(1760833038.957:5795): avc: denied { read write } for pid=23154 comm="syz.4.5847" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 751.528630][ T30] audit: type=1400 audit(1760833038.957:5796): avc: denied { open } for pid=23154 comm="syz.4.5847" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 751.551759][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.564156][ T30] audit: type=1400 audit(1760833038.967:5797): avc: denied { map } for pid=23154 comm="syz.4.5847" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 751.587190][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.611118][ T30] audit: type=1400 audit(1760833038.967:5798): avc: denied { execute } for pid=23154 comm="syz.4.5847" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 751.634512][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.647967][ T30] audit: type=1400 audit(1760833039.237:5799): avc: denied { ioctl } for pid=23157 comm="syz.1.5849" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 751.673176][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.061597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 752.670788][T14128] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 752.864312][T14128] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.930559][T14128] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 752.961314][T14128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.977343][T14128] usb 5-1: config 0 descriptor?? [ 753.012778][T14128] pwc: Askey VC010 type 2 USB webcam detected. [ 753.091416][ T30] audit: type=1400 audit(1760833040.687:5800): avc: denied { ioctl } for pid=23184 comm="syz.7.5859" path="socket:[82312]" dev="sockfs" ino=82312 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 753.116144][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.321004][T14128] pwc: recv_control_msg error -32 req 02 val 2b00 [ 754.334306][T14128] pwc: recv_control_msg error -32 req 02 val 2700 [ 754.351475][T14128] pwc: recv_control_msg error -32 req 02 val 2c00 [ 754.369253][T14128] pwc: recv_control_msg error -32 req 04 val 1000 [ 754.377814][T14128] pwc: recv_control_msg error -32 req 04 val 1300 [ 754.392174][T14128] pwc: recv_control_msg error -32 req 04 val 1400 [ 754.401648][T14128] pwc: recv_control_msg error -32 req 02 val 2000 [ 755.096594][T14128] pwc: recv_control_msg error -71 req 04 val 1500 [ 755.105085][T14128] pwc: recv_control_msg error -71 req 02 val 2500 [ 755.173848][T14128] pwc: recv_control_msg error -71 req 02 val 2400 [ 755.190919][T14128] pwc: recv_control_msg error -71 req 02 val 2600 [ 755.209899][T14128] pwc: recv_control_msg error -71 req 02 val 2900 [ 755.226984][T14128] pwc: recv_control_msg error -71 req 02 val 2800 [ 755.275177][T14128] pwc: recv_control_msg error -71 req 04 val 1100 [ 755.291289][T14128] pwc: recv_control_msg error -71 req 04 val 1200 [ 755.311648][T14128] pwc: Registered as video103. [ 755.431202][T14128] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 755.605656][ T30] audit: type=1400 audit(1760833043.197:5801): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=2936 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 755.630467][T23202] orangefs_mount: mount request failed with -4 [ 755.641358][T14128] usb 5-1: USB disconnect, device number 8 [ 755.660916][ T30] audit: type=1400 audit(1760833043.197:5802): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2936 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 755.688860][ T30] audit: type=1400 audit(1760833043.197:5803): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2936 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 756.458090][T23227] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5871'. [ 756.796056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 757.011596][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 757.415248][ T30] audit: type=1400 audit(1760833044.977:5804): avc: denied { write } for pid=23235 comm="syz.4.5874" path="socket:[82429]" dev="sockfs" ino=82429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 757.960067][ T30] audit: type=1400 audit(1760833045.117:5805): avc: denied { getopt } for pid=23243 comm="syz.1.5879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 758.418173][ T30] audit: type=1400 audit(1760833045.977:5806): avc: denied { create } for pid=23259 comm="syz.1.5884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 758.565979][T23264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 758.968886][T14128] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 759.154094][T14128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.165211][T14128] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.202113][T14128] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 759.232432][T14128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.283627][T14128] usb 5-1: config 0 descriptor?? [ 759.302652][T23276] lo speed is unknown, defaulting to 1000 [ 759.318722][T23276] lo speed is unknown, defaulting to 1000 [ 759.330416][T23281] netlink: 'syz.1.5891': attribute type 1 has an invalid length. [ 759.348401][T23281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5891'. [ 759.378668][T23281] netlink: 'syz.1.5891': attribute type 1 has an invalid length. [ 759.404922][T23280] kvm: pic: single mode not supported [ 759.405299][T23280] kvm: pic: non byte read [ 759.434601][T23280] kvm: pic: level sensitive irq not supported [ 759.434678][T23280] kvm: pic: non byte read [ 759.445709][T23280] kvm: pic: single mode not supported [ 759.445802][T23280] kvm: pic: non byte read [ 759.456184][T23280] kvm: pic: non byte read [ 759.461012][T23280] kvm: pic: non byte read [ 759.465656][T23280] kvm: pic: single mode not supported [ 759.465710][T23280] kvm: pic: non byte read [ 759.482015][T23280] kvm: pic: non byte read [ 759.486671][T23280] kvm: pic: non byte read [ 759.521159][T23280] kvm: pic: level sensitive irq not supported [ 759.521220][T23280] kvm: pic: non byte read [ 759.535170][T23291] netlink: 'syz.0.5895': attribute type 1 has an invalid length. [ 759.560762][T23291] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5895'. [ 759.760000][ T30] audit: type=1400 audit(1760833047.327:5807): avc: denied { read write } for pid=23287 comm="syz.7.5896" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 759.929793][ T30] audit: type=1400 audit(1760833047.337:5808): avc: denied { open } for pid=23287 comm="syz.7.5896" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 760.102395][T14128] waltop 0003:172F:0032.001B: unknown main item tag 0x0 [ 760.109383][T14128] waltop 0003:172F:0032.001B: unknown main item tag 0x0 [ 760.116396][T14128] waltop 0003:172F:0032.001B: unknown main item tag 0x0 [ 760.123391][T14128] waltop 0003:172F:0032.001B: unknown main item tag 0x0 [ 760.130343][T14128] waltop 0003:172F:0032.001B: unknown main item tag 0x0 [ 760.156172][T14128] waltop 0003:172F:0032.001B: hidraw0: USB HID v0.01 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 760.171100][T14128] usb 5-1: USB disconnect, device number 9 [ 760.396951][T23300] fido_id[23300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 760.481085][ T30] audit: type=1400 audit(1760833048.067:5809): avc: denied { create } for pid=23309 comm="syz.0.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 760.980822][ T30] audit: type=1400 audit(1760833048.567:5810): avc: denied { unmount } for pid=16952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 763.372661][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5924'. [ 763.926819][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5936'. [ 764.004012][ T30] audit: type=1400 audit(1760833051.517:5811): avc: denied { create } for pid=23391 comm="syz.6.5936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 764.049819][ T30] audit: type=1400 audit(1760833051.517:5812): avc: denied { write } for pid=23391 comm="syz.6.5936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 764.070547][ T30] audit: type=1400 audit(1760833051.537:5813): avc: denied { write } for pid=23391 comm="syz.6.5936" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 764.098564][ T30] audit: type=1400 audit(1760833051.547:5814): avc: denied { ioctl } for pid=23391 comm="syz.6.5936" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 764.393926][T23406] batman_adv: batadv0: Adding interface: dummy0 [ 764.431350][T23406] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 764.474439][T23406] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 764.484590][ T30] audit: type=1400 audit(1760833052.067:5815): avc: denied { connect } for pid=23408 comm="syz.7.5943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 765.933376][ T30] audit: type=1400 audit(1760833053.527:5816): avc: denied { mount } for pid=23417 comm="syz.7.5946" name="/" dev="overlay" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 766.372974][T23427] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 766.679169][T23428] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5950'. [ 767.405933][ T30] audit: type=1400 audit(1760833054.997:5817): avc: denied { setopt } for pid=23439 comm="syz.1.5955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 767.493939][T23445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5956'. [ 767.602878][T23454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5961'. [ 768.397388][T23465] netlink: 'syz.4.5964': attribute type 4 has an invalid length. [ 768.405360][T23465] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5964'. [ 769.045145][T23484] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5973'. [ 769.210980][ T5888] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 769.817392][ T30] audit: type=1326 audit(1760833057.407:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23494 comm="syz.4.5977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 769.843603][ T30] audit: type=1326 audit(1760833057.407:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23494 comm="syz.4.5977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 769.852842][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.881856][ T30] audit: type=1326 audit(1760833057.407:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23494 comm="syz.4.5977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 769.905604][ T5888] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 769.910417][ T30] audit: type=1326 audit(1760833057.407:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23494 comm="syz.4.5977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69358efc9 code=0x7ffc0000 [ 769.919476][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.942019][ T30] audit: type=1326 audit(1760833057.537:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23496 comm="syz.4.5978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff69358efc9 code=0x0 [ 769.976444][ T5888] usb 8-1: config 0 descriptor?? [ 769.994748][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 771.031117][T23506] netlink: 4804 bytes leftover after parsing attributes in process `syz.6.5980'. [ 771.031217][T23506] netlink: 4804 bytes leftover after parsing attributes in process `syz.6.5980'. [ 771.433783][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 771.820040][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 771.828598][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 771.837978][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 771.845415][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 771.854361][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 771.862760][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 771.884637][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 772.132138][ T5888] pwc: recv_control_msg error -71 req 02 val 2400 [ 772.255461][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 772.302029][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 772.331154][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 772.343242][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 772.370306][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 772.404909][ T5888] pwc: Registered as video103. [ 772.416522][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input7 [ 772.460953][ T5888] usb 8-1: USB disconnect, device number 2 [ 772.606700][ T30] audit: type=1400 audit(1760833060.197:5823): avc: denied { mount } for pid=23529 comm="syz.0.5988" name="/" dev="autofs" ino=84144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 772.661012][ T30] audit: type=1400 audit(1760833060.237:5824): avc: denied { unmount } for pid=21897 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 775.532186][ T30] audit: type=1400 audit(1760833063.097:5825): avc: denied { getopt } for pid=23557 comm="syz.0.5997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.556876][T23592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6008'. [ 776.571513][ T30] audit: type=1400 audit(1760833064.167:5826): avc: denied { setopt } for pid=23589 comm="syz.0.6007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 778.104654][ T42] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 778.377025][ T42] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 778.886675][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.968735][ T42] usb 5-1: Product: syz [ 778.978142][ T42] usb 5-1: Manufacturer: syz [ 778.989054][ T42] usb 5-1: SerialNumber: syz [ 779.373474][T23628] tipc: Started in network mode [ 779.378419][T23628] tipc: Node identity 1aa3e1a7c8a4, cluster identity 4711 [ 779.386381][T23628] tipc: Enabled bearer , priority 0 [ 779.396248][T23628] syzkaller0: entered promiscuous mode [ 779.401950][T23628] syzkaller0: entered allmulticast mode [ 779.980630][T23625] tipc: Resetting bearer [ 780.023474][T23625] tipc: Disabling bearer [ 781.752517][ T910] libceph: connect (1)[c::]:6789 error -101 [ 781.766866][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 781.830381][T23638] ceph: No mds server is up or the cluster is laggy [ 782.126166][ T910] libceph: connect (1)[c::]:6789 error -101 [ 782.160555][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 782.185364][ T42] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 782.255382][ T42] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 782.478993][ T42] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 783.028099][ T42] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 783.062480][ T42] usb 5-1: USB disconnect, device number 10 [ 783.351991][T23667] netlink: 'syz.4.6030': attribute type 1 has an invalid length. [ 783.359800][T23667] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6030'. [ 783.457022][T23667] netlink: 'syz.4.6030': attribute type 1 has an invalid length. [ 783.639516][T23657] lo speed is unknown, defaulting to 1000 [ 783.810097][T23657] lo speed is unknown, defaulting to 1000 [ 784.280908][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 784.444446][ T10] usb 8-1: no configurations [ 784.449362][ T10] usb 8-1: can't read configurations, error -22 [ 785.181424][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 785.396320][T23693] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 785.443401][T23693] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 785.479627][ T10] usb 8-1: no configurations [ 785.484324][ T10] usb 8-1: can't read configurations, error -22 [ 785.493269][T23695] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 785.499797][T23695] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 785.508396][ T10] usb usb8-port1: attempt power cycle [ 785.517609][T23695] vhci_hcd vhci_hcd.0: Device attached [ 785.532316][T23696] vhci_hcd: connection closed [ 785.564058][ T7047] vhci_hcd: stop threads [ 785.585301][ T7047] vhci_hcd: release socket [ 785.589749][ T7047] vhci_hcd: disconnect device [ 785.998727][T23708] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 786.015007][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 786.085679][ T10] usb 8-1: no configurations [ 786.092906][ T10] usb 8-1: can't read configurations, error -22 [ 786.291000][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 786.582184][ T10] usb 8-1: no configurations [ 786.587286][ T10] usb 8-1: can't read configurations, error -22 [ 786.597328][ T10] usb usb8-port1: unable to enumerate USB device [ 787.942313][T23740] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 788.001269][ T30] audit: type=1326 audit(1760833075.547:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.259721][T23732] rtc_cmos 00:00: Alarms can be up to one day in the future [ 788.355164][ T5860] rtc_cmos 00:00: Alarms can be up to one day in the future [ 788.389407][ T5860] rtc_cmos 00:00: Alarms can be up to one day in the future [ 788.402579][ T30] audit: type=1326 audit(1760833075.547:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.427070][ T5860] rtc_cmos 00:00: Alarms can be up to one day in the future [ 788.451275][ T5860] rtc_cmos 00:00: Alarms can be up to one day in the future [ 788.462598][ T5860] rtc rtc0: __rtc_set_alarm: err=-22 [ 788.474391][ T30] audit: type=1326 audit(1760833075.547:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.499100][ T30] audit: type=1326 audit(1760833075.547:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.543010][ T30] audit: type=1326 audit(1760833075.547:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.620505][ T30] audit: type=1326 audit(1760833075.547:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.644729][ T30] audit: type=1326 audit(1760833075.547:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.668445][ T30] audit: type=1326 audit(1760833075.547:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.692042][ T30] audit: type=1326 audit(1760833075.547:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 788.760043][T23751] Bluetooth: MGMT ver 1.23 [ 789.161054][ T30] audit: type=1326 audit(1760833075.547:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23731 comm="syz.6.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1078efc9 code=0x7ffc0000 [ 789.184913][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 790.591089][T23787] netlink: 'syz.7.6065': attribute type 1 has an invalid length. [ 790.791131][T23786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 791.484897][T23794] bridge1: entered promiscuous mode [ 791.490198][T23794] bridge1: entered allmulticast mode [ 792.215767][T23809] lo speed is unknown, defaulting to 1000 [ 792.227854][T23809] lo speed is unknown, defaulting to 1000 [ 792.252828][T23814] netlink: 'syz.0.6087': attribute type 1 has an invalid length. [ 792.270819][T23814] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6087'. [ 792.328226][T23814] netlink: 'syz.0.6087': attribute type 1 has an invalid length. [ 792.722882][T23824] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 792.954914][T23823] binder: BINDER_SET_CONTEXT_MGR already set [ 793.255181][T23823] binder: 23820:23823 ioctl 4018620d 200000004a80 returned -16 [ 793.378390][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6091'. [ 793.442168][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6091'. [ 793.530990][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6091'. [ 793.784810][T23838] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6096'. [ 794.138688][T23846] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6100'. [ 794.159874][T23846] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6100'. [ 794.475752][T23846] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6100'. [ 794.505311][T23846] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6100'. [ 794.742713][T16678] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 794.916829][T16678] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 795.209382][T16678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.220098][T16678] usb 5-1: config 0 descriptor?? [ 795.242008][T23860] netlink: 'syz.6.6103': attribute type 1 has an invalid length. [ 795.249775][T23860] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6103'. [ 795.580066][T23868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 796.314160][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 796.314177][ T30] audit: type=1400 audit(1760833083.907:5850): avc: denied { sqpoll } for pid=23875 comm="syz.1.6109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 796.401567][ T5860] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 796.571004][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 796.595897][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.641243][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.733019][ T5860] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 796.771257][T16678] usb 5-1: Cannot set autoneg [ 796.777016][T16678] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 796.791900][T16678] usb 5-1: USB disconnect, device number 11 [ 796.804701][ T5860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.854599][T23881] binder: 23875:23881 ioctl 0 200000000040 returned -22 [ 797.010361][ T5860] usb 8-1: config 0 descriptor?? [ 797.716944][ T5860] ntrig 0003:1B96:0008.001C: unknown main item tag 0x0 [ 797.749424][ T5860] ntrig 0003:1B96:0008.001C: unknown main item tag 0x0 [ 797.759876][ T5860] ntrig 0003:1B96:0008.001C: unknown main item tag 0x0 [ 797.779732][ T5860] ntrig 0003:1B96:0008.001C: unknown main item tag 0x0 [ 797.792598][ T5860] ntrig 0003:1B96:0008.001C: unknown main item tag 0x0 [ 797.807552][ T10] kernel write not supported for file /uhid (pid: 10 comm: kworker/0:1) [ 797.816184][ T5860] ntrig 0003:1B96:0008.001C: unknown main item tag 0x0 [ 797.830788][ T5860] ntrig 0003:1B96:0008.001C: unknown main item tag 0x0 [ 797.852299][ T5860] ntrig 0003:1B96:0008.001C: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.7-1/input0 [ 797.902957][ T5860] ntrig 0003:1B96:0008.001C: Firmware version: 4.0.1.3.7 (00c8 7720) [ 798.211089][T23905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 798.554291][T23909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6122'. [ 798.724637][ T24] usb 8-1: USB disconnect, device number 7 [ 799.964207][T23940] input: syz1 as /devices/virtual/input/input8 [ 800.570828][ T5860] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 800.677120][T23951] lo speed is unknown, defaulting to 1000 [ 800.694424][T23951] lo speed is unknown, defaulting to 1000 [ 800.714377][T23953] netlink: 'syz.0.6137': attribute type 1 has an invalid length. [ 800.722329][T23953] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6137'. [ 800.770825][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 800.772792][T23955] lo speed is unknown, defaulting to 1000 [ 800.782099][ T5860] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 800.783097][T23955] lo speed is unknown, defaulting to 1000 [ 800.800285][ T5860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 800.833780][ T5860] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 800.843358][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.881474][ T5860] usb 8-1: Product: syz [ 800.890809][ T5860] usb 8-1: Manufacturer: syz [ 800.895425][ T5860] usb 8-1: SerialNumber: syz [ 800.934320][ T5860] usb 8-1: config 0 descriptor?? [ 800.948339][ T5860] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 800.962466][ T5860] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 801.620968][ T5860] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 801.639793][ T5860] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 801.883993][ T5860] em28xx 8-1:0.0: AC97 command still being executed: not handled properly! [ 801.893470][ T5860] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 801.900426][ T5860] em28xx 8-1:0.0: No AC97 audio processor [ 802.093033][ T5860] usb 8-1: USB disconnect, device number 8 [ 802.100052][ T5860] em28xx 8-1:0.0: Disconnecting em28xx [ 802.118213][ T5860] em28xx 8-1:0.0: Freeing device [ 802.607275][T23985] lo speed is unknown, defaulting to 1000 [ 802.615044][T23985] lo speed is unknown, defaulting to 1000 [ 802.627149][T23986] netlink: 'syz.4.6150': attribute type 1 has an invalid length. [ 802.647074][T23986] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6150'. [ 804.138675][T24004] fuse: Bad value for 'fd' [ 805.369898][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805503dc00: rx timeout, send abort [ 805.380819][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805503dc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 805.459656][T24015] lo speed is unknown, defaulting to 1000 [ 805.480596][T24015] lo speed is unknown, defaulting to 1000 [ 805.577114][T24023] netlink: 'syz.4.6163': attribute type 1 has an invalid length. [ 805.653622][T24023] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6163'. [ 805.755574][T24035] fuse: Bad value for 'fd' [ 806.118006][T24051] hsr0: entered promiscuous mode [ 806.128654][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6171'. [ 806.531224][T24051] hsr_slave_0: left promiscuous mode [ 806.548009][T24051] hsr_slave_1: left promiscuous mode [ 806.597450][ T5860] IPVS: starting estimator thread 0... [ 806.609415][T24051] hsr0 (unregistering): left promiscuous mode [ 806.742639][T24056] IPVS: using max 64 ests per chain, 153600 per kthread [ 809.168528][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6186'. [ 810.079796][ T30] audit: type=1400 audit(1760833097.667:5851): avc: denied { search } for pid=24101 comm="syz.0.6188" name="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 811.211089][ T30] audit: type=1400 audit(1760833097.667:5852): avc: denied { search } for pid=24101 comm="syz.0.6188" name="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 811.470802][ T30] audit: type=1400 audit(1760833097.667:5853): avc: denied { read open } for pid=24101 comm="syz.0.6188" path="/" dev="configfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 813.071025][ T30] audit: type=1400 audit(1760833100.657:5854): avc: denied { read } for pid=24134 comm="syz.1.6197" path="socket:[85554]" dev="sockfs" ino=85554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 814.220886][ T30] audit: type=1400 audit(1760833101.797:5855): avc: denied { bind } for pid=24142 comm="syz.4.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 814.542178][ T30] audit: type=1400 audit(1760833101.797:5856): avc: denied { listen } for pid=24142 comm="syz.4.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 814.582855][ T30] audit: type=1400 audit(1760833101.797:5857): avc: denied { accept } for pid=24142 comm="syz.4.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 814.605766][ T30] audit: type=1400 audit(1760833102.037:5858): avc: denied { read } for pid=24142 comm="syz.4.6198" path="socket:[86499]" dev="sockfs" ino=86499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 815.640815][ T910] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 816.665373][ T910] usb 8-1: Using ep0 maxpacket: 32 [ 817.326000][ T910] usb 8-1: config 0 has an invalid interface number: 83 but max is 0 [ 817.771001][ T910] usb 8-1: config 0 has no interface number 0 [ 818.097750][T24173] Set syz1 is full, maxelem 65536 reached [ 818.228096][ T910] usb 8-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 194 [ 818.342162][ T30] audit: type=1400 audit(1760833105.937:5859): avc: denied { mounton } for pid=24179 comm="syz.0.6210" path="/95/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 818.474439][ T910] usb 8-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 818.508407][ T910] usb 8-1: string descriptor 0 read error: -71 [ 818.521196][ T910] usb 8-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 818.530250][ T910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.566763][ T910] usb 8-1: config 0 descriptor?? [ 818.868013][ T910] usb 8-1: can't set config #0, error -71 [ 819.059385][ T910] usb 8-1: USB disconnect, device number 9 [ 819.086904][ T30] audit: type=1400 audit(1760833106.677:5860): avc: denied { unmount } for pid=21897 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 819.128067][T24196] input: syz1 as /devices/virtual/input/input9 [ 820.751365][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6220'. [ 820.873751][T24218] tipc: Started in network mode [ 820.878643][T24218] tipc: Node identity d65251954b23, cluster identity 4711 [ 820.989241][T24218] tipc: Enabled bearer , priority 0 [ 821.024821][T24222] syzkaller0: entered promiscuous mode [ 821.053515][T24222] syzkaller0: entered allmulticast mode [ 821.125543][T24222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6221'. [ 821.168073][T24218] tipc: Resetting bearer [ 821.190168][T24217] tipc: Resetting bearer [ 821.208802][T24217] tipc: Disabling bearer [ 822.330866][ T30] audit: type=1400 audit(1760833109.907:5861): avc: denied { cmd } for pid=24256 comm="syz.7.6235" path="socket:[85850]" dev="sockfs" ino=85850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 823.255818][T24273] netlink: 341 bytes leftover after parsing attributes in process `syz.6.6240'. [ 823.320860][T16678] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 823.481432][T16678] usb 8-1: Using ep0 maxpacket: 16 [ 823.494367][T16678] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.521706][T16678] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.535226][T16678] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 823.547615][T16678] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.819913][T16678] usb 8-1: config 0 descriptor?? [ 824.685154][T16678] corsair 0003:1B1C:1B02.001D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0 [ 824.707429][T16678] corsair 0003:1B1C:1B02.001D: Failed to get K90 initial state (error -71). [ 824.746271][T16678] usb 8-1: USB disconnect, device number 10 [ 824.823918][T24298] fido_id[24298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 825.623624][T24322] netlink: 'syz.7.6256': attribute type 1 has an invalid length. [ 825.632098][T24322] netlink: 192 bytes leftover after parsing attributes in process `syz.7.6256'. [ 825.776962][ T30] audit: type=1400 audit(1760833113.367:5862): avc: denied { write } for pid=24324 comm="syz.4.6259" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 825.778277][T24327] random: crng reseeded on system resumption [ 825.800193][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.101325][T24329] fuse: Bad value for 'fd' [ 826.624263][T24344] tipc: Enabling of bearer rejected, failed to enable media [ 827.371874][ T30] audit: type=1400 audit(1760833114.967:5863): avc: denied { bind } for pid=24351 comm="syz.7.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 827.398207][T24356] fuse: Bad value for 'fd' [ 827.581108][ T30] audit: type=1400 audit(1760833115.167:5864): avc: denied { append } for pid=24361 comm="syz.4.6274" name="sg0" dev="devtmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 827.604842][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.951844][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 828.175459][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.197227][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 828.931159][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 828.948269][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 828.974871][ T24] usb 5-1: SerialNumber: syz [ 829.725233][ T24] usb 5-1: 0:2 : does not exist [ 829.771198][ T24] usb 5-1: USB disconnect, device number 12 [ 829.970661][T24192] udevd[24192]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.363871][T24422] input: syz0 as /devices/virtual/input/input10 [ 833.355928][T24450] netlink: 'syz.4.6305': attribute type 1 has an invalid length. [ 833.363814][T24450] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6305'. [ 835.149369][T24465] lo speed is unknown, defaulting to 1000 [ 835.185920][T24465] lo speed is unknown, defaulting to 1000 [ 835.862443][T24479] raw_sendmsg: syz.4.6315 forgot to set AF_INET. Fix it! [ 837.461368][T24502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6323'. [ 837.473526][T24502] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6323'. [ 837.641939][T15707] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 837.765902][T24504] overlayfs: failed to resolve './file1': -2 [ 837.861283][T15707] usb 5-1: Using ep0 maxpacket: 32 [ 837.880561][T15707] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 837.892101][T15707] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 837.940787][T15707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 837.963850][T15707] usb 5-1: config 1 has no interface number 0 [ 837.974310][T15707] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 837.987535][T15707] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 838.002361][T15707] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 838.011577][T15707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.027228][T15707] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 838.228510][T15707] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 838.926380][T15707] usb 5-1: USB disconnect, device number 13 [ 838.947045][T15707] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 839.265935][ T30] audit: type=1400 audit(1760833126.687:5865): avc: denied { mounton } for pid=24514 comm="syz.7.6328" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 840.395594][T24545] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6336'. [ 841.448059][T24548] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6338'. [ 841.489735][T24548] gretap0: entered promiscuous mode [ 842.385883][ T30] audit: type=1400 audit(1760833129.977:5866): avc: denied { write } for pid=24565 comm="syz.7.6346" path="socket:[87555]" dev="sockfs" ino=87555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 844.393347][T24596] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 846.038692][T24625] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 846.090650][T24628] Cannot find add_set index 0 as target [ 847.350822][T24655] input: syz0 as /devices/virtual/input/input11 [ 847.754235][ T30] audit: type=1400 audit(1760833135.337:5867): avc: denied { ioctl } for pid=24660 comm="syz.7.6384" path="socket:[88759]" dev="sockfs" ino=88759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 848.232766][T24676] netlink: 'syz.1.6388': attribute type 1 has an invalid length. [ 848.240592][T24676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6388'. [ 848.316093][ T30] audit: type=1400 audit(1760833135.337:5868): avc: denied { bind } for pid=24660 comm="syz.7.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 849.618713][T24687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6391'. [ 849.648509][T24691] Bluetooth: MGMT ver 1.23 [ 852.224517][T24738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6405'. [ 852.920889][T24748] netlink: 'syz.1.6402': attribute type 1 has an invalid length. [ 852.928678][T24748] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6402'. [ 853.411549][T24753] 9pnet_fd: Insufficient options for proto=fd [ 853.558076][T24763] input: syz0 as /devices/virtual/input/input12 [ 854.918856][T24786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 855.570836][ T30] audit: type=1400 audit(1760833143.057:5869): avc: denied { mount } for pid=24783 comm="syz.0.6423" name="/" dev="hugetlbfs" ino=89182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 856.004523][ T30] audit: type=1400 audit(1760833143.597:5870): avc: denied { unmount } for pid=21897 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 856.061649][T24794] Driver unsupported XDP return value 0 on prog (id 1923) dev N/A, expect packet loss! [ 856.378995][T24814] overlayfs: failed to resolve './file1': -2 [ 858.994336][T24889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6465'. [ 860.524580][T24909] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 861.831537][ T30] audit: type=1400 audit(1760833149.417:5871): avc: denied { bind } for pid=24920 comm="syz.4.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 861.988577][ T30] audit: type=1400 audit(1760833149.417:5872): avc: denied { node_bind } for pid=24920 comm="syz.4.6478" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 864.506154][T24959] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6491'. [ 864.574180][ T30] audit: type=1400 audit(1760833152.167:5873): avc: denied { ioctl } for pid=24962 comm="syz.1.6493" path="socket:[90254]" dev="sockfs" ino=90254 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 867.373080][T25010] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6514'. [ 869.407827][T25020] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6516'. [ 869.452542][T25032] syzkaller0: entered promiscuous mode [ 869.458026][T25032] syzkaller0: entered allmulticast mode [ 869.569725][T25022] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6516'. [ 869.595874][T25020] gretap0: entered promiscuous mode [ 869.612247][T25022] 0ªî{X¹¦: renamed from gretap0 [ 869.651499][T25022] 0ªî{X¹¦: left promiscuous mode [ 869.657431][T25022] 0ªî{X¹¦: entered allmulticast mode [ 869.696249][T25022] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 869.825844][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 871.326384][T25060] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6530'. [ 871.531764][T24899] warn_alloc: 1 callbacks suppressed [ 871.531859][T24899] syz.6.6470: vmalloc error: size 1073745920, failed to allocated page array size 2097160, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 872.168699][T24899] CPU: 0 UID: 0 PID: 24899 Comm: syz.6.6470 Not tainted syzkaller #0 PREEMPT(full) [ 872.168728][T24899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 872.168741][T24899] Call Trace: [ 872.168749][T24899] [ 872.168757][T24899] dump_stack_lvl+0x16c/0x1f0 [ 872.168789][T24899] warn_alloc+0x248/0x3a0 [ 872.168816][T24899] ? __pfx_warn_alloc+0x10/0x10 [ 872.168851][T24899] ? hash_netiface_create+0x3ec/0x1250 [ 872.168874][T24899] ? __vmalloc_node_noprof+0xad/0xf0 [ 872.168910][T24899] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 872.168953][T24899] ? hash_netiface_create+0x3ec/0x1250 [ 872.168986][T24899] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 872.169023][T24899] ? ___kmalloc_large_node+0xed/0x160 [ 872.169060][T24899] __kvmalloc_node_noprof+0x431/0x9c0 [ 872.169087][T24899] ? hash_netiface_create+0x3ec/0x1250 [ 872.169112][T24899] ? hash_netiface_create+0x3ec/0x1250 [ 872.169141][T24899] ? hash_netiface_create+0x3ec/0x1250 [ 872.169163][T24899] hash_netiface_create+0x3ec/0x1250 [ 872.169187][T24899] ? __pfx___nla_validate+0xb/0x10 [ 872.169219][T24899] ? __pfx_hash_netiface_create+0x10/0x10 [ 872.169244][T24899] ip_set_create+0x7e4/0x14d0 [ 872.169274][T24899] ? __pfx_ip_set_create+0x10/0x10 [ 872.169326][T24899] ? find_held_lock+0x2b/0x80 [ 872.169355][T24899] nfnetlink_rcv_msg+0x9fc/0x1200 [ 872.169387][T24899] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 872.169413][T24899] ? __lock_acquire+0x622/0x1c90 [ 872.169466][T24899] ? avc_has_perm_noaudit+0x149/0x3b0 [ 872.169496][T24899] netlink_rcv_skb+0x158/0x420 [ 872.169523][T24899] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 872.169546][T24899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.169588][T24899] ? ns_capable+0xd7/0x110 [ 872.169627][T24899] nfnetlink_rcv+0x1b3/0x430 [ 872.169648][T24899] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 872.169668][T24899] ? netlink_deliver_tap+0x1ae/0xd30 [ 872.169707][T24899] netlink_unicast+0x5aa/0x870 [ 872.169738][T24899] ? __pfx_netlink_unicast+0x10/0x10 [ 872.169778][T24899] netlink_sendmsg+0x8c8/0xdd0 [ 872.169811][T24899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.169850][T24899] ____sys_sendmsg+0xa98/0xc70 [ 872.169881][T24899] ? copy_msghdr_from_user+0x10a/0x160 [ 872.169906][T24899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.169944][T24899] ? __pfx_futex_wake_mark+0x10/0x10 [ 872.169979][T24899] ___sys_sendmsg+0x134/0x1d0 [ 872.170001][T24899] ? futex_private_hash_put+0x176/0x300 [ 872.170028][T24899] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.170049][T24899] ? __lock_acquire+0x622/0x1c90 [ 872.170113][T24899] __sys_sendmsg+0x16d/0x220 [ 872.170137][T24899] ? __pfx___sys_sendmsg+0x10/0x10 [ 872.170160][T24899] ? __x64_sys_futex+0x1e0/0x4c0 [ 872.170206][T24899] do_syscall_64+0xcd/0xfa0 [ 872.170234][T24899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.170256][T24899] RIP: 0033:0x7faa1078efc9 [ 872.170274][T24899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.170295][T24899] RSP: 002b:00007faa116e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.170321][T24899] RAX: ffffffffffffffda RBX: 00007faa109e5fa0 RCX: 00007faa1078efc9 [ 872.170336][T24899] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 872.170349][T24899] RBP: 00007faa10811f91 R08: 0000000000000000 R09: 0000000000000000 [ 872.170361][T24899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.170373][T24899] R13: 00007faa109e6038 R14: 00007faa109e5fa0 R15: 00007fff20139d48 [ 872.170405][T24899] [ 872.170413][T24899] Mem-Info: [ 872.531450][T24899] active_anon:24038 inactive_anon:10 isolated_anon:0 [ 872.531450][T24899] active_file:9992 inactive_file:51710 isolated_file:0 [ 872.531450][T24899] unevictable:17162 dirty:257 writeback:0 [ 872.531450][T24899] slab_reclaimable:12798 slab_unreclaimable:173048 [ 872.531450][T24899] mapped:30184 shmem:17744 pagetables:1742 [ 872.531450][T24899] sec_pagetables:0 bounce:0 [ 872.531450][T24899] kernel_misc_reclaimable:0 [ 872.531450][T24899] free:1134118 free_pcp:34254 free_cma:0 [ 872.648539][T24899] Node 0 active_anon:96492kB inactive_anon:40kB active_file:39940kB inactive_file:206640kB unevictable:67112kB isolated(anon):0kB isolated(file):0kB mapped:120744kB dirty:1060kB writeback:0kB shmem:69284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12804kB pagetables:6956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 872.711410][T24899] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 873.856590][T24899] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 874.700974][T24899] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 874.706772][T24899] Node 0 DMA32 free:681652kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96452kB inactive_anon:40kB active_file:39940kB inactive_file:206644kB unevictable:67112kB writepending:1104kB zspages:276kB present:3129332kB managed:2541316kB mlocked:0kB bounce:0kB free_pcp:56628kB local_pcp:32048kB free_cma:0kB [ 874.801015][T24899] lowmem_reserve[]: 0 0 1 1 1 [ 874.821181][T24899] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.920822][T24899] lowmem_reserve[]: 0 0 0 0 0 [ 874.925732][T24899] Node 1 Normal free:3846668kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:66304kB local_pcp:33840kB free_cma:0kB [ 874.990848][T24899] lowmem_reserve[]: 0 0 0 0 0 [ 875.013428][T24899] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 875.088621][T24899] Node 0 DMA32: 875*4kB (ME) 915*8kB (UME) 58*16kB (M) 108*32kB (ME) 117*64kB (UME) 470*128kB (UM) 735*256kB (UME) 383*512kB (UM) 117*1024kB (UME) 13*2048kB (UM) 12*4096kB (U) = 662692kB [ 875.130920][T24899] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 875.157178][T24899] Node 1 Normal: 19*4kB (UE) 20*8kB (UE) 50*16kB (UE) 216*32kB (UME) 72*64kB (UME) 16*128kB (UME) 11*256kB (UME) 5*512kB (UM) 3*1024kB (UM) 7*2048kB (UE) 930*4096kB (UM) = 3846668kB [ 875.246216][T24899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 875.287905][T24899] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 875.339023][T24899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 875.359603][T24899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 875.389458][T24899] 96630 total pagecache pages [ 875.396793][T24899] 32 pages in swap cache [ 875.411011][T24899] Free swap = 124824kB [ 875.415448][T24899] Total swap = 124996kB [ 875.421541][T24899] 2097051 pages RAM [ 875.425769][T24899] 0 pages HighMem/MovableOnly [ 875.436632][T24899] 429696 pages reserved [ 875.440973][T24899] 0 pages cma reserved [ 875.574488][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 875.592573][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 875.602190][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 875.612873][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 875.634156][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 875.696448][T16772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 875.706061][T16772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 875.715411][T16772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 875.723713][T16772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 875.731615][T16772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 876.678623][T25091] lo speed is unknown, defaulting to 1000 [ 876.725001][T25091] lo speed is unknown, defaulting to 1000 [ 877.171146][T15707] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 877.359520][T25091] chnl_net:caif_netlink_parms(): no params data found [ 877.368212][T15707] usb 8-1: config 6 has an invalid interface number: 2 but max is 0 [ 877.393261][T15707] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 877.423928][T15707] usb 8-1: config 6 has no interface number 0 [ 877.442387][T15707] usb 8-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 877.475333][T15707] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 877.493473][T15707] usb 8-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 877.559755][T15707] usb 8-1: Product: syz [ 877.569922][T15707] usb 8-1: Manufacturer: syz [ 877.577918][T15707] usb 8-1: SerialNumber: syz [ 877.634599][T15707] hso 8-1:6.2: Failed to find INT IN ep [ 877.830921][ T5823] Bluetooth: hci1: command tx timeout [ 877.870413][T25091] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.905579][T25091] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.935027][T25091] bridge_slave_0: entered allmulticast mode [ 877.946080][T16678] usb 8-1: USB disconnect, device number 11 [ 877.971861][T25091] bridge_slave_0: entered promiscuous mode [ 877.992042][T25091] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.999206][T25091] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.085864][ T30] audit: type=1400 audit(1760833165.667:5874): avc: denied { map } for pid=25123 comm="syz.4.6552" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 878.335991][ T30] audit: type=1400 audit(1760833165.667:5875): avc: denied { execute } for pid=25123 comm="syz.4.6552" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 878.451615][T25091] bridge_slave_1: entered allmulticast mode [ 878.459097][T25091] bridge_slave_1: entered promiscuous mode [ 878.576142][T25091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.606337][T25091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.770587][T25129] ================================================================== [ 878.778675][T25129] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 878.785857][T25129] Read of size 8 at addr ffff88807c2ba4f8 by task syz.4.6552/25129 [ 878.793722][T25129] [ 878.796024][T25129] CPU: 0 UID: 0 PID: 25129 Comm: syz.4.6552 Not tainted syzkaller #0 PREEMPT(full) [ 878.796041][T25129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 878.796050][T25129] Call Trace: [ 878.796054][T25129] [ 878.796060][T25129] dump_stack_lvl+0x116/0x1f0 [ 878.796078][T25129] print_report+0xcd/0x630 [ 878.796094][T25129] ? __virt_addr_valid+0x81/0x610 [ 878.796107][T25129] ? __phys_addr+0xe8/0x180 [ 878.796119][T25129] ? __cpa_addr+0x1d3/0x220 [ 878.796133][T25129] kasan_report+0xe0/0x110 [ 878.796150][T25129] ? __cpa_addr+0x1d3/0x220 [ 878.796165][T25129] __cpa_addr+0x1d3/0x220 [ 878.796179][T25129] cpa_flush+0x28b/0x8a0 [ 878.796194][T25129] ? __pfx_cpa_flush+0x10/0x10 [ 878.796209][T25129] ? pgprot2cachemode+0x9a/0x130 [ 878.796221][T25129] ? __pfx_pgprot2cachemode+0x10/0x10 [ 878.796234][T25129] change_page_attr_set_clr+0x34e/0x4a0 [ 878.796251][T25129] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 878.796267][T25129] ? memtype_reserve+0x909/0xc00 [ 878.796283][T25129] _set_pages_array+0x1ab/0x2c0 [ 878.796300][T25129] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 878.796317][T25129] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 878.796332][T25129] ? __pfx___might_resched+0x10/0x10 [ 878.796346][T25129] drm_gem_shmem_mmap+0xc9/0x550 [ 878.796361][T25129] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 878.796377][T25129] drm_gem_mmap_obj+0x1b5/0x560 [ 878.796394][T25129] drm_gem_mmap+0x40b/0x620 [ 878.796410][T25129] ? __pfx_drm_gem_mmap+0x10/0x10 [ 878.796426][T25129] ? __pfx_drm_gem_mmap+0x10/0x10 [ 878.796443][T25129] __mmap_region+0x1309/0x27a0 [ 878.796457][T25129] ? __pfx___mmap_region+0x10/0x10 [ 878.796469][T25129] ? kvm_sched_clock_read+0x11/0x20 [ 878.796482][T25129] ? sched_clock+0x38/0x60 [ 878.796494][T25129] ? lock_acquire+0x179/0x350 [ 878.796510][T25129] ? finish_task_switch.isra.0+0x221/0xc10 [ 878.796527][T25129] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.796554][T25129] ? __pfx_drm_gem_mmap+0x10/0x10 [ 878.796571][T25129] mmap_region+0x1ab/0x3f0 [ 878.796585][T25129] do_mmap+0xa3e/0x1210 [ 878.796602][T25129] ? __pfx_do_mmap+0x10/0x10 [ 878.796617][T25129] ? __pfx_down_write_killable+0x10/0x10 [ 878.796634][T25129] vm_mmap_pgoff+0x29e/0x470 [ 878.796659][T25129] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 878.796677][T25129] ? __fget_files+0x20e/0x3c0 [ 878.796694][T25129] ksys_mmap_pgoff+0x32c/0x5c0 [ 878.796710][T25129] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 878.796727][T25129] __x64_sys_mmap+0x125/0x190 [ 878.796742][T25129] do_syscall_64+0xcd/0xfa0 [ 878.796756][T25129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.796768][T25129] RIP: 0033:0x7ff69358efc9 [ 878.796779][T25129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.796791][T25129] RSP: 002b:00007ff694488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 878.796803][T25129] RAX: ffffffffffffffda RBX: 00007ff6937e6180 RCX: 00007ff69358efc9 [ 878.796811][T25129] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 878.796818][T25129] RBP: 00007ff693611f91 R08: 0000000000000007 R09: 0000000100000000 [ 878.796826][T25129] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 878.796834][T25129] R13: 00007ff6937e6218 R14: 00007ff6937e6180 R15: 00007ffc6a95b6d8 [ 878.796846][T25129] [ 878.796850][T25129] [ 879.122881][T25129] Allocated by task 25129: [ 879.127273][T25129] kasan_save_stack+0x33/0x60 [ 879.131940][T25129] kasan_save_track+0x14/0x30 [ 879.136598][T25129] __kasan_kmalloc+0xaa/0xb0 [ 879.141169][T25129] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 879.146525][T25129] drm_gem_get_pages+0x144/0xa10 [ 879.151449][T25129] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 879.157499][T25129] drm_gem_shmem_mmap+0xc9/0x550 [ 879.162420][T25129] drm_gem_mmap_obj+0x1b5/0x560 [ 879.167256][T25129] drm_gem_mmap+0x40b/0x620 [ 879.171746][T25129] __mmap_region+0x1309/0x27a0 [ 879.176490][T25129] mmap_region+0x1ab/0x3f0 [ 879.180889][T25129] do_mmap+0xa3e/0x1210 [ 879.185030][T25129] vm_mmap_pgoff+0x29e/0x470 [ 879.189603][T25129] ksys_mmap_pgoff+0x32c/0x5c0 [ 879.194350][T25129] __x64_sys_mmap+0x125/0x190 [ 879.199010][T25129] do_syscall_64+0xcd/0xfa0 [ 879.203493][T25129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.209367][T25129] [ 879.211666][T25129] The buggy address belongs to the object at ffff88807c2ba400 [ 879.211666][T25129] which belongs to the cache kmalloc-256 of size 256 [ 879.225695][T25129] The buggy address is located 0 bytes to the right of [ 879.225695][T25129] allocated 248-byte region [ffff88807c2ba400, ffff88807c2ba4f8) [ 879.240164][T25129] [ 879.242465][T25129] The buggy address belongs to the physical page: [ 879.248854][T25129] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c2ba [ 879.257589][T25129] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 879.266062][T25129] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 879.273586][T25129] page_type: f5(slab) [ 879.277550][T25129] raw: 00fff00000000040 ffff88813ff26b40 dead000000000100 dead000000000122 [ 879.286114][T25129] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 879.294677][T25129] head: 00fff00000000040 ffff88813ff26b40 dead000000000100 dead000000000122 [ 879.303324][T25129] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 879.311973][T25129] head: 00fff00000000001 ffffea0001f0ae81 00000000ffffffff 00000000ffffffff [ 879.320619][T25129] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 879.329262][T25129] page dumped because: kasan: bad access detected [ 879.335657][T25129] page_owner tracks the page as allocated [ 879.341343][T25129] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5810, tgid 5810 (syz-executor), ts 76207287500, free_ts 76171462749 [ 879.362683][T25129] post_alloc_hook+0x1c0/0x230 [ 879.367431][T25129] get_page_from_freelist+0x10a3/0x3a30 [ 879.372958][T25129] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 879.378835][T25129] alloc_pages_mpol+0x1fb/0x550 [ 879.383674][T25129] new_slab+0x24a/0x360 [ 879.387808][T25129] ___slab_alloc+0xdc4/0x1ae0 [ 879.392468][T25129] __slab_alloc.constprop.0+0x63/0x110 [ 879.397907][T25129] __kmalloc_noprof+0x501/0x880 [ 879.402739][T25129] fib_create_info+0x53f/0x46b0 [ 879.407571][T25129] fib_table_insert+0x177/0x1c40 [ 879.412496][T25129] fib_magic+0x4d4/0x5c0 [ 879.416724][T25129] fib_add_ifaddr+0x3a1/0x580 [ 879.421377][T25129] fib_netdev_event+0x38a/0x710 [ 879.426205][T25129] notifier_call_chain+0xbc/0x410 [ 879.431214][T25129] call_netdevice_notifiers_info+0xbe/0x140 [ 879.437096][T25129] __dev_notify_flags+0x12c/0x2e0 [ 879.442101][T25129] page last free pid 15 tgid 15 stack trace: [ 879.448051][T25129] __free_frozen_pages+0x7df/0x1160 [ 879.453228][T25129] rcu_core+0x79c/0x1530 [ 879.457458][T25129] handle_softirqs+0x219/0x8e0 [ 879.462209][T25129] run_ksoftirqd+0x3a/0x60 [ 879.466604][T25129] smpboot_thread_fn+0x3f7/0xae0 [ 879.471519][T25129] kthread+0x3c5/0x780 [ 879.475573][T25129] ret_from_fork+0x675/0x7d0 [ 879.480143][T25129] ret_from_fork_asm+0x1a/0x30 [ 879.484888][T25129] [ 879.487186][T25129] Memory state around the buggy address: [ 879.492791][T25129] ffff88807c2ba380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 879.500836][T25129] ffff88807c2ba400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 879.508883][T25129] >ffff88807c2ba480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 879.516917][T25129] ^ [ 879.524867][T25129] ffff88807c2ba500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 879.532906][T25129] ffff88807c2ba580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 879.540943][T25129] ================================================================== [ 879.549921][T25129] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 879.557117][T25129] CPU: 0 UID: 0 PID: 25129 Comm: syz.4.6552 Not tainted syzkaller #0 PREEMPT(full) [ 879.566475][T25129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 879.576512][T25129] Call Trace: [ 879.579778][T25129] [ 879.582697][T25129] dump_stack_lvl+0x3d/0x1f0 [ 879.587278][T25129] vpanic+0x640/0x6f0 [ 879.591246][T25129] panic+0xca/0xd0 [ 879.594955][T25129] ? __pfx_panic+0x10/0x10 [ 879.599360][T25129] ? __cpa_addr+0x1d3/0x220 [ 879.603878][T25129] ? preempt_schedule_common+0x44/0xc0 [ 879.609324][T25129] ? preempt_schedule_thunk+0x16/0x30 [ 879.614684][T25129] check_panic_on_warn+0xab/0xb0 [ 879.619613][T25129] end_report+0x107/0x170 [ 879.623931][T25129] kasan_report+0xee/0x110 [ 879.628335][T25129] ? __cpa_addr+0x1d3/0x220 [ 879.632826][T25129] __cpa_addr+0x1d3/0x220 [ 879.637145][T25129] cpa_flush+0x28b/0x8a0 [ 879.641375][T25129] ? __pfx_cpa_flush+0x10/0x10 [ 879.646128][T25129] ? pgprot2cachemode+0x9a/0x130 [ 879.651048][T25129] ? __pfx_pgprot2cachemode+0x10/0x10 [ 879.656411][T25129] change_page_attr_set_clr+0x34e/0x4a0 [ 879.661950][T25129] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 879.668009][T25129] ? memtype_reserve+0x909/0xc00 [ 879.672941][T25129] _set_pages_array+0x1ab/0x2c0 [ 879.677782][T25129] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 879.683844][T25129] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 879.690422][T25129] ? __pfx___might_resched+0x10/0x10 [ 879.695701][T25129] drm_gem_shmem_mmap+0xc9/0x550 [ 879.700626][T25129] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 879.706767][T25129] drm_gem_mmap_obj+0x1b5/0x560 [ 879.711620][T25129] drm_gem_mmap+0x40b/0x620 [ 879.716114][T25129] ? __pfx_drm_gem_mmap+0x10/0x10 [ 879.721154][T25129] ? __pfx_drm_gem_mmap+0x10/0x10 [ 879.726171][T25129] __mmap_region+0x1309/0x27a0 [ 879.731009][T25129] ? __pfx___mmap_region+0x10/0x10 [ 879.736105][T25129] ? kvm_sched_clock_read+0x11/0x20 [ 879.741290][T25129] ? sched_clock+0x38/0x60 [ 879.745692][T25129] ? lock_acquire+0x179/0x350 [ 879.750364][T25129] ? finish_task_switch.isra.0+0x221/0xc10 [ 879.756160][T25129] ? lockdep_hardirqs_on+0x7c/0x110 [ 879.761366][T25129] ? __pfx_drm_gem_mmap+0x10/0x10 [ 879.766383][T25129] mmap_region+0x1ab/0x3f0 [ 879.770790][T25129] do_mmap+0xa3e/0x1210 [ 879.774937][T25129] ? __pfx_do_mmap+0x10/0x10 [ 879.779514][T25129] ? __pfx_down_write_killable+0x10/0x10 [ 879.785137][T25129] vm_mmap_pgoff+0x29e/0x470 [ 879.789718][T25129] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 879.794817][T25129] ? __fget_files+0x20e/0x3c0 [ 879.799483][T25129] ksys_mmap_pgoff+0x32c/0x5c0 [ 879.804235][T25129] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 879.810290][T25129] __x64_sys_mmap+0x125/0x190 [ 879.814956][T25129] do_syscall_64+0xcd/0xfa0 [ 879.819446][T25129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.825323][T25129] RIP: 0033:0x7ff69358efc9 [ 879.829721][T25129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.849310][T25129] RSP: 002b:00007ff694488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 879.857707][T25129] RAX: ffffffffffffffda RBX: 00007ff6937e6180 RCX: 00007ff69358efc9 [ 879.865661][T25129] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 879.873610][T25129] RBP: 00007ff693611f91 R08: 0000000000000007 R09: 0000000100000000 [ 879.881559][T25129] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 879.889507][T25129] R13: 00007ff6937e6218 R14: 00007ff6937e6180 R15: 00007ffc6a95b6d8 [ 879.897470][T25129] [ 879.900685][T25129] Kernel Offset: disabled [ 879.904987][T25129] Rebooting in 86400 seconds..