last executing test programs: 8.549330425s ago: executing program 1 (id=872): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000032b4abd6000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaaaaaa50"], 0x22) syz_extract_tcp_res(&(0x7f00000000c0), 0x0, 0x4) 8.415954183s ago: executing program 2 (id=874): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x4e22, 0x0, @mcast2}]}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xe) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.549067727s ago: executing program 2 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}}, 0x0) 7.48969092s ago: executing program 1 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}}, 0x0) 7.330808455s ago: executing program 2 (id=885): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) 6.615662993s ago: executing program 1 (id=887): socket(0xa, 0x2400000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x168, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x148, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x168}}, 0x0) 6.456997232s ago: executing program 2 (id=890): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@host, 0x6dd92a89}, @host, 0x0, 0x7, 0xa, 0x2, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x800000000000006}) 6.444938134s ago: executing program 3 (id=891): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xfe, 0x5, 0x0, @rand_addr=' \x01\x00', @local, 0x80, 0x8000, 0x2, 0x4}}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x5}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) unshare(0x68060200) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x95, 0x7, 0x0, 0x460d, 0x7, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d966000000000000000000000000000000000000000000000000000018e0000000000000feffffff01000000110000000000000081006263736630000002000800000000000073697430000002000000ffff00000000626f6e643000000000000000000000007600000000010000005c121d00000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff030000002000000000000000000000000000000000000000080000000000007f0000000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaacc030000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x2b0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0xfd, 0x8, 0x5, 0x7, 0x100000000, 0xfff], 0x1, 0x0, 0x0, [{}]}, 0x88) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000480)) getsockname$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r5 = socket$inet6(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r5, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.342597574s ago: executing program 1 (id=892): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x4000, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 6.22685257s ago: executing program 2 (id=895): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000032b4abd6000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x0, 0x4) 6.105156656s ago: executing program 0 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 5.37701123s ago: executing program 0 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 5.376438843s ago: executing program 3 (id=899): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, r1}, &(0x7f0000000300)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 4.51388812s ago: executing program 1 (id=901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r3, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000200000000000000950000000000000059ebae0eb7f4c8803605e4b2f7dd3874131b74a180007dd8767d588c23cdb963042468289a8a1fbcd229fe662dfd71d03c1c797aba20c0f9fa155100437f8c1c41daa62210704ac661c1cf7ee90f2b8216ce954d702b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) unshare(0x2c020400) r5 = socket(0x2, 0x2, 0x1) bind$inet6(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 3.691213912s ago: executing program 2 (id=902): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0xbc, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x2}}, [@TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0xde, 0x1, 0x1, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0x3, 0x81, 0x8, 0x4027, 0x1, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x8, 0xfffc, 0xffff5029, 0x0, 0xfffffffd, 0x1912fb1a, 0x6}}, {0x10, 0x2, [0xc5, 0x86a, 0x2, 0xffff, 0x101, 0x0]}}, {{0x1c, 0x1, {0x7f, 0x2, 0x200, 0x1, 0x1, 0x2, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0xbc}}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x90) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) 3.547738841s ago: executing program 0 (id=904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 3.437530838s ago: executing program 3 (id=905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2.693837042s ago: executing program 1 (id=907): openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) rename(&(0x7f0000000e00)='./bus\x00', &(0x7f0000001080)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {}, {}, 0x4, 0xfffffffffffffffd}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x300, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) 1.944372211s ago: executing program 3 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 1.915008064s ago: executing program 0 (id=910): gettid() r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = dup(r0) r3 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x10000000000000) sendfile(r3, r2, 0x0, 0x8a000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.741933935s ago: executing program 3 (id=911): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x4000, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 1.269862641s ago: executing program 4 (id=914): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0x0) 1.210397762s ago: executing program 4 (id=915): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x6646) 1.166632431s ago: executing program 4 (id=916): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.121175583s ago: executing program 4 (id=917): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.070679414s ago: executing program 4 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380), 0x0, 0xfffffffffffffff8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020400) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 963.762997ms ago: executing program 0 (id=919): mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0, 0x41) pipe2$9p(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,usQr_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x3276818}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000909c18d8e03550550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="59f1e4552e75986be30344c577df27f4b4a41646039fbf9beda7bf5a572121f6414ca8bd405e18b655af5c5e013e0c7388225a727cc1eb4eb7c7cd47b2c3d353dec75184436dfd9933bd374d8dfd322d0a5b705731fba628d06c11ab04e155f747b67108a4e376b5711565b653281ada57116b0dbf782e6f343532ef258b42d65df4a96f83b00ce9c66eb1a1ab23f2039927adfe99a3872de7a80ec34aa05b8be26021e61d2e1509d903f77783525e515ae5051541be24502d5123d1a08e06d959aae764ee7bed31361802c486a3f9fbb3824a21fc1b73f95d88167f7659cd90bbb4b7eb78c21e01a9da912544402618285e461cc1c9a1ada2f273d3799feb3d90e373c4f0132554fc3ebe0b8557d521e89f66531514ca337bb1149f86158e7ac94d88fc583a59b7ead0fc249ae26a4ef2ff5bab62209000575441363025553f5012b8eea50bb087202114f8b48ab602fe3fd952bf9886dcc41a9d6c22bfd543f7dec92f32758b99cd239cb69a2fe1c4560426e101666b862aec3e235fd308a6e7560aa2207cc185acabd03b20d4091ff7936120b450b1db200228cd435c434c2626f641cdd8180946982d665352ee755358afa123e7fd9a202e912c528929067ce785f3ba1877968a047f56dfb7cef747d59feeabcff03e73aa3dd3dafb367f32758de4d98dfe15737ba1cb7400ee5bdf4220d6e667c651757d4f8bf536771309d6dfa928e59c9171fa7a710a6d308e757775ce029e0724971c8d7782e29b8ca82de04e883ba042f92e6f7c6b2e627e1242e1f2033ca5bcc81797ba39359e320139cfcf6335086cd646b842e13ab0f90d2fa92ae3cdbeac38deebfc485b2f10f4e29507c858046ae009df144c4ab38ae70e25cccff11078408d7ef4d7bb262310fec1663f1a1dc035864a40616b4690c841c986630ccb784d7af382fef327e7e64817a48db2eae499584fb6cb758a4da7967d283c7400e87657443148a94a352bc46154849a9d6eaf85e4e5556c648017e7f5456be988abcbbcf4a5e2228d2cebf144229fb8b8b6ad244be8f6ccfecfa6df74278761bae6be823eeb6cd08bd0bc01283d04fb719f546cf4d2de5388d1f90eec21674d35c9e295cb1bff104689395cdb6349efcf3d3d99e0141b7bdd4f0ef24fdd6afc35fdca10ade6d539bf1e32ca2e5ab5223e4e975a3cdbfa604dc7904755919905e3ab5e4a1932e2cd7741dd80f4993d0822bbeaf7ea70541e7d18af5a36aa1b928b801bf5a8652adac57dd76f0b7d0629a9fa493db118d6420a18236ca92487cf1b751477bd7b66b6ab97a280306f921493eb9a6172a70cb4f62526c09bd73d148faefe36c47275a0b8822b71c6b09dc80dce0b130ede61296ea03951a563bbf020c75aeea843b95d134bd7228915c22c6e34579bf71479eb4185bf4d11f9735093d9b9d5f18f443a1925f59d2041ff9f6a017eebe9923e5b46de296ba24c25019591cde699475c075904b97f01a639dee3bfce62ecabd2ce078e5fd84b8733392e42e77a6dbb0f51fb0fc59cd7286b6912a8796cdb22e6c3949f6052a014c17b73b3cce6e531127173569d70f07d76359755a6d8bb239f135becb8524ff638452db9d7786e6c52efaa254590a9bfe6bcd485ae8b7114948d58d8c0b9620eb9ace67211e0f7eb4e75740b51f23c0d59903cf2bbcdba9fb516afb8c64cab133c51c0ccca855eba033cc4eb08bbc7632f427f6fb8de4a11bc292aa090503e96a2ae414d5c8907e599874c7e9ffbb8e57ed9b1564ea52f09afffeddb8da0a9ed228da5bbae4a1ef608a0d327cdd7f19fac5d342c31088bbd05cf87c1bb73c55db60087e058c21d313c899071a38ac027e7c2704516b2cbeeb3c18771ecaec46d90c18aaf7cc207cecd60faf27fa4fbea3fecf0dc67336263870e21a1ef39c35e89254fd02bb75848f3729450a08990a410331ac720c1b9c3859a436d65899158caacff7aea71f3bb34e69d954994b698e608836a52b88d8ae8303fb918956e13bc1bb99f955c72474d53ab8ba2ee131730f7fb7dcc4ebcf14b9c3c0553a783d6123c3b9a3cd5ff9c6c2d588c38bae6e81b5f0dabc3b4f6b2d9805474453f66e3f6bbc29b64604374ec82a602109cce44bf4ca88a8b0ea2dd27a49f70eb481f3fb59a4ec5cd0b2196c05a96905cbd0f3b01b579401d20f12aabffc6f9e869af2fb43b0c3362f67a015dbe51b33281236326c3cf93f466a07f5baa29cac348ee7c17088aca34bff6844cc60c5f9376c4869afef5e14b74d780ba0fe5ba3f919d6e3ad2c5a9b259c3a79da133173f107bc2fdf426cdbc144a96a33951bdbc43d5b5a6a5c4e8aeb90816cbde9ffcec6630ca37ae6ccddcd61dc6893b75fc6d951be9d2144b6ae4bf739ddce3400456f0bed97dcec4330b717f590ae2f30cde4203d592a4abc864b27fce63bff3da754425fa0caa91e173f8f99fb0c81910df88b01e2e4918e424322149a283a69a04effe4da0cb417126d674d802455a67bb72aa88f1a6beba6a82f9f0529caff162285679cff18c0a9387abd6ac70135ddd07d04c8cc18143c57bdbf5676feacfb5afcdde7233abc411ad08372a885ee2047017c51167112b1dfb4c3a06a829c8c57c2e6d55c85ed97063c9a5843aa299ff3c63e61440baa42b696adf218d37b39231314acc6ffff7b23d16c8762562ef8a056e31c385d57f8fda45862034abf4487d6abd7816ebda9a7aa8bcd753508babb0d4c08cc25ee88fe3a5eb26842ef5a0687f5bd5c3f0b29e4723fbacfd852f3e194e47ffcc9fefea63b972cb9f3293956ee71308ad6ccb891d760469a62c5864069cefa60b247c5366b32d864d5d63a495209627b1b36b9db1bc0979e13dbf2f7203ba69596ad6cd991dc22cadd0fc55ce89db7fed238b082674458c8fa10398e6fe69b50b8cc8df9324180305fc4c17c3f0ecab996c44f8bb2eb575bbe4300e1c93c39a34ce0f255522f4bad18b6f7ed2b5d712baf19c39bfd974dea6181511e4bce407a38e2ce591f989001bcbff570f78649b8d80d7c51d9415dfe8871f1c4161e685d9a361ee2c3f7386c7d89570ae6894f59219c9e53059a13149fe6f3d37f982c503e11f9a90fff483e3b2e4016f376fbf81a3a95d666460fa0c3f6e873ed7ba2e9b6da20b62eec19de014c540b9dc4c3c25995c0435fa5dac1d5cefd66b248db8cc951a84913341e308a318bf94d1d49e12d80053712d3d68fb4acbf8c07ff3ab721c982b114f98edb9e693afed4c80892d8d75484cf228a41fb9af3e59a31c802bb5883d88f5d804806a1747bee00a1347edffc1d832d5e01d15dcd4c7e21f35c47e90761904d0381b56e8200d69338edba5f5e5992d2439143846e1295aa77dd0745c1f33b02b108e987a3d675d8bd593ad22b49068a6f91478a807275b05261dd14553a112fc85cab73dceea1fd31a319db40ff6646afce5a9dc0588747afc06bd36c4326a5f495a12c4eb6ca44e4b23dc52836336832e267db22165554caf7925cf13c84685ee31bfd19fb988a42a2d931fe0212a64e6ffcf9fcaaeeb9fd211a529364abb1a915811a46c41289da4a3a730942d4e0b9534944ec993555d96fcfb68e4f85c53c297f1ea34781b55b69b25bbdf4f0cfc9572e924adfd354b4c291d77d802bfbdc7d7b24f1d266cabc9ecf63ea5b48d5e7f30d8ce1ee4ad861537c441667405b8223e81ba71f55e09d0e92f1c4233227eb276db865b23c8d28df9b2738f025b59d10a118e156b04da94a15b7d8393783dbbb29131603bd11397625c8cb5d8a86cabf660906bf714079f9261c901815688b76afbc65962aeba08e940c20931ea1e3b875427afbb608634eda3f7f69da64906616f24a8a750abf2da50c1e47cec369ffa25d4c199caf1da2f51ebeca7de266e7550dc12019f0e7dcd8f814c2095b12cbf94404e3343e032ebdb8b598febec6390c84fdb65c3eda086c341c09321d1ee471896be010214de39a658cf48585660010578290b3349f0233e301dce10a9dcaa372ade8a4a7170e68522add35f6cdb23c688ba42b425775f077bd0d9f6706722499763efb84c98ee3717b293b26eb46d097a7af1e8097cec825a2d92cb1038980a8a73a7a351001a6efabf812b00788bb950e8b88784054a299906786b7dbd25c9d8ef4146e45b84611d65e7ad898ac1d234574d174acb1d23d8e206518fa40e521bd3c3953c95aedf265c3755243374ce36500a62dd57a94ac22aa6c9b6d79edbad8c0633263f9ffc04524d23e64a18a22cfc1d9ff00eab75a48cffa364f025b31fc632d4ba3f1a829e78b08a9297d59b9ac9c2ae3fe7ef21a0bdc4ee34477654b4bb80b30e117dd846a4f71750f76cf93afb134eb28e0409b92016ce47871fd2a531b2b05d7684421f524833f7a9ac4a02d8c92a1c83150fbb6c68edf0c4ecc833c9e2e058c91f8f9ba81ee48ba5fb71132bb84c4e4993561b0f0ee77405a5573df396469fa5a1a761a9398e618221bdb888a9f2f07a1e9247fc7e3ff2d72bdad77654645171fc89cf4e93d6eaae95f4e7bd9dc75c1b1fc5c7926aa0d0c70b7b442ab657e734fb39660b058403057f94ae3e9b96233647216e29b891272e4403e3a155e4f77fb227cd56a3e3856969cf3ce85d1aca889c2cb1ddfab9cfdcaba80e2411243e8370757725e2875bceebec0d8174ecdda380dd8bcf63cfc619ebfd4b562949e32c8ae7173d630df595b79afc5b0c2ba6e9613ebdc3912db74a1c41bbd4c50428e1dfeff661fe3c3cbcd8fbe4a6d1c02d2b06068e3fe7fa5fb63eed98361baa5c075ea1694a575551818d3ca4988dd080df8c604f2fcaf0d3d3bd922f142ecd2b88efec2563686447750a1e814926e037c2e4d2c530bae36a0cba4b9b42d21b63d6ff403f1a5bea1a169eb494192a7adcb0787759a944043d0df72d57d775e9604a5236775b44d9553dd186f63512bfd3d4b65667f8d715bc9c100a0855e2ed963da442e0ef54b809b2e794eb9b29daea42a84c2d45c220a1ab3242bf7e2f41754feaba92998b834391aee0005c3b5bf05ca648577d77712c6a2107c0d017b1828b82a63ac32587023ae8214e55b907a08c774d12be071ae593716426038f326b45e565900ae67778cfed493dd873b613d457837bf505622d6270f7c2177b8b0048ada47e3fc97a913552d9b65be45a914c29fe5e2e398c9dc7d541f8244c9ce1fdb8d20547471ae840cdf88e4362e05b3091a80c3b32afec6747b05033f98456bb0503240d63b18d1756bd24656def9f79e6bbaca8084caf07dfd17d77f98343fb3f141f788ed0a9397f0a591023c332f4a16e468643b8dffb950f798d7cb165757b18ffa1863898de59c892b148d268b4d0ec3e5f2e4790358cbe0a40007a4be6cb789ac11badcf369f1aff5c458b5c9514b24cfc395b4b4f0df30ab6b3228feb960d545d027a76abfecf455b673be7caadf0d0f2544cb5473ecbc3a339b08652b444a3b5a28d834e63ae4d831d5abb077297428bc3b6542477fb6d4ffdb1398349cea95e7d6131184e7d793603582e81253974e10f8f947d339d2fdfa4c8871b33403cc23b2e225462d29d0450f285433c75959774fe65058188cc54488bc23a20880a0b786e6cc4622c5621f427af5dc294420c07c268cb04eef4400fcaf6fd1a500504fe59cd3c44836a0b477a62d05c8f43e96962a367cbae1f88dd4f4c22e0c7d2afea8a2de91917599f6db37449474048ba84f144532af50b65cdaba868f50f079a4a495d2ee921d835badc2ac45e2521dfc559bbc664f6f27446a6d5afcc8c0d90d68f991dd503291d7687f64641fd052c73be1786b507252749fd788c0c8edf25ab5efe9ddb2a67ec7e24f22f9fe28966d64338b691222c7cc493a9a5c10430ce0f074703047757a9abed0ee0cca14c20cfa9cb521f0e4e91e886e4b1285ffc996912ca7c9f81f2e8e64454fe6846ff44dd21c294b888d52c37bc386ba8cd7f7c0fedcd524ebf603f0a5b5f19be9c7e0f6da5d0ddbc2543d1adf46f5d0140d40c8798f8baa4ba49d99aa0171ffc797e3f919b21a37d3ca8b7a729781aa262d68a0451a2705f59f18268387fdecaed03045fd6f1759a694a5224c46f7a4c6c4eab6b11089b114e5a78546c258f23a2b80fe7f9503d006799d2b8fed769d87e9dafaf6f923ad1be071538789b771d13125049b58a2f2c4f91a5cedbfd725e419e8b640b9d704f48b96efab1b249784bed0e6c3c938b5ce66b6766ca0bbea73aa3a514a57ad7d1907f72072128be570e016a2a5b5754f60e2b0bcc3bd9a4ed21fe4e9b4655ca22656ab6cccf5091a1f85251e51f59094762252c996d9609430cfba1d160702643060cf386f3c3ab02eb5943326312444ebc0e5df143dfa8e868fafb719fbe1f5b355c472adc7694967522e39c1b162b57d49aeda122bc4a60393bba6db3f083751a41f9aa2d6cb59038f94b896a5623f82bad390d2b729f66d5f87b72cc9b54a2f08b3e7ad321310e8f79556ed4dd0c8a058e6a434b6a3fdf28a6b669b53694c16a72e14c1bce34f81c67071152d75ee8f146e465849a7b3eefc2fddb779fa34685effe59432444b3a6fc237da95fc7655aad861aa319a75880e53858ca6a7dad341b2643918e69e3c81969fecf6cdecec304c519ddd0f54b659ed7f9c3782c58202ba393c3811aa1f34d710db2cd0bd1478db3b3445c5d20811dfeb0e4bc3434ae4fa3518c9c36ebcc73d2e40a1701496f82d186309885af32b9694a7a6616bba665b94bff24ab493488c9a53cf1de2eaac644cd0f8d9ef4930f8bf56797b5ac4abc8132f62125905f7e18db3048a90c4a4779b5e29815830fb4093956bda4e2596bb8956c45313ce4e4662143a95779e5c23933e9312372e29c00ee668e82c7d4de290a5a6a66b85e6738528a58b4d169221a0ac5367196cea76c58b4c236b7da73ae1ce463656941f322d4cdec390d91d813c2c9bd70b10151673585457016c0d302f23f323c4a118fcc32a8076be44606d3241bfa66e78178c8d991093d9dd5d93d3eb455ed085eb5e88d83f3a47ce9c5fa7f9035df5c407eb27daa231c538ab58765668ed5a80e8f8a3a4470181b9f15b56d5c4a43708e7287775ee1e991c8e28af2afefef93b19ce3c4a1cf5d25e9b232f424a312cd4883230ffb071343986092141ea12e9647e5f5ab4e70de17d17756eec8ff64328c0050794c568baf183dce6c798e9b01dc53e76c4b9a0b61f1b65cfb74152d9936e05505df63048cd62cec15a97ec79995c5381b0491e65661c2804cc7a5cba0f418d5ec420ecdcf1363cc48777ac6a9901a30d6aed7bb62651480da8f84c93a61bd66ee6f218f2999d052e7e3fbcb002b57bf3c1292cf75a52a164d5c7f1265f1c7f881683dc8d6572853eef350f3834f888a1ab0eff22ee3b93ec2d82f93ddcb5b915f2c273a296be81f3ea3d5e9855863fb5cdc7289770111d02a7e0ee6558e46e754a5c11e4d36c55946fbc62d0c89f87156e33db0ac968dfb67c3a43a55328996a73cce287d518d45f5753f45051bba90d6dd06d95bd14c13d7707bc1afb44595da6783a48d6675c8e28affea30a55ee55a904d9ffb31e9c4fe04fe3dcdbb459d62d36156b2c6aa015b20205f6222008692f6be91ae531afafba348725ba820bb9fb2b93d3013e3f4766dec362a1e0cf40534eb1a18168c18afe08dfdd65e9953869353ba14cd1daaed1fc0c0ae1fc8deaa98c79b74ebd2043b18076dae9c2b4625ca9459a354ce3571b8c33870cc291983da1c0f32f87133192564e6c22abce03fdde7a7cca192d623253e99d5d1ee2f5e4c6535cb027eaae8fb1486ebd7c09881a14c88494a03030f5dba58f7e45a78905b10a5645409ea754162aeae8551d1026021da8685d4cbafbcb0ad980a1a16199be14b11434b0cd62a559b8584cd373bf9f959641059b17a654523cf3f3e7fd94a809e44a21ce2242cce6f79a32dd5443b79df68ddbbdc73eef492ef6a9f093f3131874064f89f26ff32eda7e6451081990a022a0fe52f189cd1deba409dcc090f91d10fa769d1bd75d11ec22b6e85405cbf9b3256e4f8913d7b8eda2945069e219fb4abca2a191e024d5af78e75cdbe0d9d5471a1d8e8aeb9e0a00274d4474ab6b0ebbb66d41bfc1683642c88a1155c91a7eb2295c4b9aa93eb0e77dc5a928e1698490de1226c65a7ef79fa9237dc9f7fdb8fcf9b54658ee3c714b14297fcaa1371c22e746151608f6f1f49bfdddce0ce24e6fc8da8f8dec534e5fe36106c81f25250be3fc496a4df508e79f49c7a4341d50bb6f96289afab14dbf4e8802a14ae82705a75e18330884c9bb1152792249a68ced40afc63deeb59daf9711484b982ec2675f5d9239f182849c4780046460e59aed8cdaaee156544370962771ced877365d37723bd9f935e8192ffd677348db41e3884704b5cbc6002c32111c9168dfcbbcc1c1ae3fd907b494a1fc7a8da0077517b55cc86393f61b07cf71408c47c9f4ca78c9cd48bf62c3b48232f74fa04f4e1fe9e5a4b88e94cae83397ca74948acc002afad739a3891c16c102fe026e2d1ac172a8b0f8c26689d99c371e275671b4f7ba1a08f7e955175b0dd88bdc63f6c1416fdaad20924c7dfec72d961b7fdde56de6ec0c11d43abf60fba174f4a689a1ff15016e7bbe378255f6724fac6a877a00d34a44b85c332ffb3b48101cb6137ccbb5e79f0e0ebe144800c8eb8ee3540cd23def571a4419908604a4217e4da5c72ac49c188e050c6c154df8f1ae2275a6bf123da80196a01cabbd699b215e6e1d7762c299d22e5b72dc1d17fafc2b42bf8c1546694772a2bd9a5f1f75504906c649988f88dd1f1236ab3e92907da0b87b7b674f5f3856c2d0996c20795a2cf7eca5b8dbbb4715dd4e67ce6ef38848bd50389686f17c059070fd9f1bfbd0409e3df16e7a73fb115c66cebb217cd01c5967c774143aa11d9815f2b0f9030f012bb8df1548a4e495e3553ea8524d374772a287beb18a7e88c88f4678e8835f35ee901eba3276b55095122d36a4da666e3b2a70114bc7c8faa5c73b89744c47aa138463c619a322e4dd8e4414ab12b143d2465401cafd97f500b2b035ee96f87131b3c5acbd7d336d926973e70b7c409372a1bb270e0666831de3fb5f059d25cb733106554ad892b2d46f5b33b00ae6198573c4c57b059266f806943e864a34a2b830003bdb7447fd105244bb975b0d7f1b6e25a72ac98a6fa3be7e3b430701633b95f8560620a58caa3366b0ddef41d153452417e4a5b48cfde67e6525d23c538a90d87f9b3cbd4205ccb30ebbbd54a00c4b0fb30cba4d02c5f108cb25af1cd791711d244c87de9738afd56401755ad8f5e62198d28164475997d7719f91ed7685829c6d536a090353b0b2de436d27e9f1fecb09917c1a3e7cbbe33024a74883790c9d18c2349a3f748f6362a79b92b95f1b3e8ddf118c87fc389c1ca08786b81513b62ebefb9fe472ff79eddbfa06d6569faaa1b8df516e2d0365256bf012da3571c6bc8589c49e0573da6d9ea1f7ad35840450a9f334d5d2cf9aa343dcc0f9864129bc548914507b30075d1a153d98af8a6def82e5c8619d9656f8ed0598b3463632c1cfa8ce86cbb90c772cf1298709fab835fe07b755a955f0d05c0f4dbffecaa7f6b1b6d40fffda03965021fd8f1316b62ee8e2bf6fffa01bc2740c066b7655d39f4be9d96f39713fab5ba34fc5431cd86c7384ee9177c20bf5ed5b9242b5abaefd4429a73195c166366527daaad6ce29136edf7fa974415fdeca13adb617e35d357d9c8d76953b6704bd04c391eb3070b1536342224577305c75b69cbe622e308722b3b76fdd3ad0ee69e7cef96a9cd267a92d846863b97862613b2ff5667559ed286e2fe6805a3a09ffc25e4df4b58302844e747a65310d4eb9d64c1b31995a2df3dce8026426e445b60520933fea52f4a9fc8e15033b75e5f412866f4c75371b6cb6436acb118d62752da91b64f15d40c8263bdc6ab718020442bc9cb8005ff30e90ca8bb4f489b0eb4218d323b39022fc542dcc16841899d094d4a5bf134281a330efdfb2445bb31d818b11d9abfd0e58c6497d2db7ac72a26d068b6b4b62de8d291188d4de82d9e53f3cf597e9c383a308a6a52814269c18a18b654bbf4db4502c11856637400b8c2ec3aa0127a659efcaaf5377adf69cb3d9ec65130864cd49320a8ac21aeb31c1c08f92a483c70318870b0107b4ac6070575e548bf70a25d1b220d8192697bbcf891521e4217efb59429c9ca2638a6eb13845d74a91ce45471e8df8f9d8a3a4ea4c8fab267017294f8054e43af04394dd3cbd35b6e60911f049d0f1048d1941effae8ed0ef726efeabe24607e3036e95297f7ee8d3bade2ca8cc431504524b6b40bfff220cc60f9f64376ad5b5fa7cd8dbc3baf145d6ff4ac00a4a8fc2de132af0e2d84302d02c5677b927d76094d38c8b644c1480c6dbcb7274d15362a3ec973cbe40086137160e6447ebaeec5aeeee932ef2bb03fd0754a7708968f2bba76ce16209e7bf1de26971f8c112581f9c417828a4a0fe4b6f243b939e8c4a7595230039f3f81fb64d84227c3725cde10c89d6413354e53811b2cbfc8a0d27dfb11884af23522a51a68f5415ba529690561df7d3f3d053166fc97e6c931d80968477384da3107cb5321b88940c3602a25195b870af1d956f749ecf6f0321f0bdead7cac3627d2895db23f74a244ba8cef7a7d1ff04f5258d45f5e1aa4a4baa83a36abb0e5fc94104e32314ef739725d83de8d0027218b7aea54c6de45dac43f955dd2ae4f7b89774219f12a25a7d47213d545357d7a0977486f8bbad66d8ef36bc26671c1a9c2a54d35e2e303b7cc4e3c431c2068ac10e6168ff1a0c023bf68868a20f20612ef5062ccc978332f2a97b58b0b92cbefa1ce73815776ef3e658145074592a463e5fce30fb89d3657906129fbbf369f0a7af4d9f1f153b0a840dfb80607da59ab2f01e72413d364f0c4f90a13b313b03df460696a8506c6c1dc6964918093274054bb9b46b7373a30efdea62c115fe9fd396c989c53c31402ee4b6bf6d9db19bf75906a0fd0e807f7e6cb7c5ef4daf0b21edcbf2f64605ccb7b5238bef39231d470d1542da1eab747084516fb6ef188308e62658540bf37e10215f26e2b1cab4d91a2a429e51bc270cb07c4628a8fe4066192893253d22b3a24edb3f3d02e227c613067231da02b449dc5ecce6a6e605ee5708817b2b72453fcf0f4e04f0c22996871d01cc3684e2b73573604366ca12a604f450edd6e113f4d1bda649939270c0ca493eafce9f46547b2ca1dcd8a63ec6053b99a2705a26c71df3a9dc7a347152dfc55b036701e9f7dffbe9138e6f619daff7721ab2c79e41c7f7fc829e3a22c2fc286f08a0117fc53d63d7c241aed27350badef0ff11ffee83920d62fb09f6be8ae44eab4273560e0ff14096afd10580306ab96cf9998da75e1dd04a9f70023673935a470c015762480b4182c32cf4715d7cdec146b1c8f50709c8a704922900bd1941e1e8172981b373f5de5260e84a498ec8110d55de18c99a5310ec0a7c69fcf54c8b70", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="b00000000000000000000000000000000100"/124, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000e1ffffff0000000000000000000000000004000000000000002e"], 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040), 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x80000001, 0x0, 0x3011, 0x1, 0x9b8, 0x10, 0x2}) mkdir(&(0x7f0000000440)='./file1\x00', 0xc) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x468, 0x1a8, 0xa8, 0xfeffffff, 0x1a8, 0x2b0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@icmp={{0x28}, {0x0, "f947"}}, @common=@addrtype={{0x30}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@ecn={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a8}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYBLOB=',access=client,obj_type=fu', @ANYRESDEC=r3, @ANYBLOB="2c7365636c0100008053a4"]) 851.432703ms ago: executing program 0 (id=920): syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000004000000560000000000000001001d66", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0600"/28], 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 63.480825ms ago: executing program 3 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 0s ago: executing program 4 (id=922): syz_io_uring_setup(0x1af4, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000100), &(0x7f0000001000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000280)=0x97e2) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB="08001f00090000004c1e1d532b4e8d9b7867cdea46e6d62d2b954964f496a02031dc728bd50c4c400c"], 0x40}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b100003", 0x2d}], 0x1}, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setresuid(0x0, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x7, 0xe44, {}, {}, 0x0, 0x7}) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) kernel console output (not intermixed with test programs): devsim4 netdevsim2: renamed from eth2 [ 60.405403][ T5222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.479638][ T5223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.490598][ T5223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.500668][ T5223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.514867][ T5223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.614891][ T5217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.634549][ T5217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.665103][ T5217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.677768][ T5217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.737138][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.760954][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.791232][ T5230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.804864][ T5230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.815616][ T5230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.831650][ T5230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.854728][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.877522][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.890969][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.898353][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.941230][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.948394][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.957608][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.964714][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.975174][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.982289][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.996139][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.102110][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.155999][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.163192][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.194198][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 61.194218][ T29] audit: type=1400 audit(1728772266.027:111): avc: denied { sys_module } for pid=5222 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.209526][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.228954][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.346332][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.411342][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.454493][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.493182][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.511563][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.518737][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.539290][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.559154][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.566267][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.584361][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.591551][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.633456][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.641672][ T5233] Bluetooth: hci3: command tx timeout [ 61.643687][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.654301][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.720152][ T5229] Bluetooth: hci0: command tx timeout [ 61.723843][ T53] Bluetooth: hci4: command tx timeout [ 61.725625][ T5220] Bluetooth: hci2: command tx timeout [ 61.731772][ T5233] Bluetooth: hci1: command tx timeout [ 61.797509][ T5217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.810152][ T5217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.837101][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.877499][ T5228] veth0_vlan: entered promiscuous mode [ 61.953171][ T5228] veth1_vlan: entered promiscuous mode [ 62.026427][ T5223] veth0_vlan: entered promiscuous mode [ 62.098913][ T5223] veth1_vlan: entered promiscuous mode [ 62.138324][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.151329][ T5228] veth0_macvtap: entered promiscuous mode [ 62.186195][ T5228] veth1_macvtap: entered promiscuous mode [ 62.227011][ T5222] veth0_vlan: entered promiscuous mode [ 62.239693][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.267757][ T5223] veth0_macvtap: entered promiscuous mode [ 62.276881][ T5222] veth1_vlan: entered promiscuous mode [ 62.297694][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.315976][ T5223] veth1_macvtap: entered promiscuous mode [ 62.327028][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.336147][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.349580][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.360906][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.379595][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.404664][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.416432][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.429505][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.438427][ T5217] veth0_vlan: entered promiscuous mode [ 62.457826][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.468701][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.481682][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.519563][ T5217] veth1_vlan: entered promiscuous mode [ 62.534716][ T5223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.543854][ T5223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.556407][ T5223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.566160][ T5223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.613159][ T5222] veth0_macvtap: entered promiscuous mode [ 62.653782][ T5222] veth1_macvtap: entered promiscuous mode [ 62.666353][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.676281][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.682443][ T5230] veth0_vlan: entered promiscuous mode [ 62.713530][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.727225][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.737446][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.748203][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.759915][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.795842][ T5217] veth0_macvtap: entered promiscuous mode [ 62.826950][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.835376][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.851395][ T5217] veth1_macvtap: entered promiscuous mode [ 62.863664][ T5230] veth1_vlan: entered promiscuous mode [ 62.871669][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.883450][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.893519][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.904563][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.916099][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.942599][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.956095][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.960662][ T5222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.973895][ T5222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.983611][ T5222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.992386][ T5222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.016569][ T29] audit: type=1400 audit(1728772267.857:112): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.b38mdU/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.057112][ T29] audit: type=1400 audit(1728772267.857:113): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.080966][ T29] audit: type=1400 audit(1728772267.857:114): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.b38mdU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.099487][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.111547][ T29] audit: type=1400 audit(1728772267.857:115): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.128846][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.140099][ T29] audit: type=1400 audit(1728772267.857:116): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.b38mdU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.174956][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.174983][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.174995][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.175010][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.177416][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.201467][ T29] audit: type=1400 audit(1728772267.897:117): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.b38mdU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.254966][ T29] audit: type=1400 audit(1728772267.897:118): avc: denied { unmount } for pid=5228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.276738][ T29] audit: type=1400 audit(1728772267.897:119): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.303388][ T5230] veth0_macvtap: entered promiscuous mode [ 63.314687][ T29] audit: type=1400 audit(1728772267.897:120): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.317298][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.359920][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.370153][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.380899][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.391827][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.402520][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.416953][ T5228] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.419830][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.442575][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.445895][ T5230] veth1_macvtap: entered promiscuous mode [ 63.456948][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.485813][ T5217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.503686][ T5217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.512625][ T5217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.522225][ T5217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.624463][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.636286][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.647056][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.678765][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.690053][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.701623][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.711624][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.722267][ T5233] Bluetooth: hci3: command tx timeout [ 63.728599][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.740936][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.754166][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.770207][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.781077][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.794196][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.804408][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.814215][ T5233] Bluetooth: hci2: command tx timeout [ 63.814966][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.823120][ T5233] Bluetooth: hci0: command tx timeout [ 63.830320][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.836237][ T5233] Bluetooth: hci1: command tx timeout [ 63.846172][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.851991][ T5233] Bluetooth: hci4: command tx timeout [ 63.861433][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.877418][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.888940][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.927785][ T5308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 63.929709][ T5309] Zero length message leads to an empty skb [ 63.939573][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.950628][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.986788][ T5230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.000634][ T5230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.009597][ T5230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.018382][ T5230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.240556][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.265965][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.578838][ T5322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 64.917975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 65.327938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 65.361771][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.377655][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.444325][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.452705][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.870424][ T5220] Bluetooth: hci3: command tx timeout [ 65.905148][ T5220] Bluetooth: hci4: command tx timeout [ 65.918154][ T5220] Bluetooth: hci1: command tx timeout [ 65.923655][ T5220] Bluetooth: hci0: command tx timeout [ 65.926259][ T5233] Bluetooth: hci2: command tx timeout [ 66.249579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.339523][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 66.339544][ T29] audit: type=1400 audit(1728772271.147:141): avc: denied { read write } for pid=5334 comm="syz.1.2" name="video7" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.393543][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.405478][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.442081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.446036][ T29] audit: type=1400 audit(1728772271.147:142): avc: denied { open } for pid=5334 comm="syz.1.2" path="/dev/video7" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.516535][ T29] audit: type=1400 audit(1728772271.157:143): avc: denied { ioctl } for pid=5334 comm="syz.1.2" path="/dev/video7" dev="devtmpfs" ino=864 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.542522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.556532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.565576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.598619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.659427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.678620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.046638][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.439938][ T29] audit: type=1400 audit(1728772272.287:144): avc: denied { create } for pid=5344 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.738976][ T29] audit: type=1400 audit(1728772272.317:145): avc: denied { connect } for pid=5344 comm="syz.0.12" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.768395][ T29] audit: type=1400 audit(1728772272.317:146): avc: denied { write } for pid=5344 comm="syz.0.12" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.886140][ T5355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 68.186429][ T29] audit: type=1400 audit(1728772272.957:147): avc: denied { read write } for pid=5358 comm="syz.2.17" name="vhost-vsock" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.211671][ T29] audit: type=1400 audit(1728772272.957:148): avc: denied { open } for pid=5358 comm="syz.2.17" path="/dev/vhost-vsock" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.464228][ T29] audit: type=1400 audit(1728772273.227:149): avc: denied { create } for pid=5358 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.656271][ T29] audit: type=1400 audit(1728772273.227:150): avc: denied { read write } for pid=5358 comm="syz.2.17" name="uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.253755][ T5374] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.528465][ T5272] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.691187][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 70.782739][ T5272] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 71.044190][ T5272] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 71.055412][ T5272] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 71.068024][ T5272] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 71.090205][ T5272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 71.141377][ T5272] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 71.156218][ T5272] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 71.171449][ T5272] usb 4-1: Product: syz [ 71.177687][ T5272] usb 4-1: Manufacturer: syz [ 71.187253][ T5272] usb 4-1: SerialNumber: syz [ 71.217478][ T5272] usb 4-1: config 0 descriptor?? [ 71.324350][ T5272] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 71.392715][ T5272] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 71.473552][ T5393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 71.724565][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.731250][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.802333][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 71.802377][ T29] audit: type=1400 audit(1728772276.597:168): avc: denied { connect } for pid=5395 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.392525][ T29] audit: type=1400 audit(1728772276.607:169): avc: denied { name_connect } for pid=5395 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 72.500645][ T5403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.28'. [ 73.848425][ T1167] usb 4-1: USB disconnect, device number 2 [ 73.890538][ T1167] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 74.599814][ T29] audit: type=1400 audit(1728772279.437:170): avc: denied { map } for pid=5422 comm="syz.0.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.705944][ T5434] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.707157][ T29] audit: type=1400 audit(1728772279.437:171): avc: denied { read write } for pid=5422 comm="syz.0.33" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.869339][ T5430] netlink: 'syz.4.34': attribute type 4 has an invalid length. [ 74.899204][ T5430] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 74.925078][ T5430] netlink: 88156 bytes leftover after parsing attributes in process `syz.4.34'. [ 74.941076][ T29] audit: type=1400 audit(1728772279.437:172): avc: denied { create } for pid=5422 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.962440][ T29] audit: type=1400 audit(1728772279.447:173): avc: denied { bind } for pid=5422 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.983471][ T29] audit: type=1400 audit(1728772279.447:174): avc: denied { write } for pid=5422 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.005873][ T29] audit: type=1400 audit(1728772279.467:175): avc: denied { read } for pid=5422 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.046065][ T29] audit: type=1400 audit(1728772279.537:176): avc: denied { read } for pid=5423 comm="syz.4.34" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.070235][ T29] audit: type=1400 audit(1728772279.537:177): avc: denied { open } for pid=5423 comm="syz.4.34" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.098809][ T5456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.42'. [ 78.523179][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 78.523198][ T29] audit: type=1400 audit(1728772282.447:179): avc: denied { create } for pid=5472 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.552314][ T29] audit: type=1400 audit(1728772282.447:180): avc: denied { read } for pid=5472 comm="syz.0.46" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.574676][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.672808][ T29] audit: type=1400 audit(1728772282.447:181): avc: denied { open } for pid=5472 comm="syz.0.46" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.696602][ T29] audit: type=1400 audit(1728772282.547:182): avc: denied { read } for pid=5472 comm="syz.0.46" path="socket:[7030]" dev="sockfs" ino=7030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.719613][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.726510][ T29] audit: type=1400 audit(1728772283.117:183): avc: denied { ioctl } for pid=5461 comm="syz.3.43" path="socket:[7867]" dev="sockfs" ino=7867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.823462][ T5497] netlink: 'syz.1.50': attribute type 4 has an invalid length. [ 80.866498][ T5497] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 80.874319][ T5497] netlink: 88156 bytes leftover after parsing attributes in process `syz.1.50'. [ 81.508091][ T5276] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.759583][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 81.767490][ T5276] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 81.775929][ T5276] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 81.796196][ T5276] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 81.858534][ T5276] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 81.923686][ T5276] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.546792][ T938] cfg80211: failed to load regulatory.db [ 82.653998][ T5276] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 82.663242][ T5276] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 82.694221][ T5276] usb 5-1: Product: syz [ 82.698792][ T5276] usb 5-1: Manufacturer: syz [ 82.704083][ T5276] usb 5-1: SerialNumber: syz [ 82.721754][ T5276] usb 5-1: config 0 descriptor?? [ 82.740700][ T5276] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 82.753489][ T5514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.53'. [ 82.767673][ T5276] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 82.843692][ T5518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.54'. [ 82.944371][ T1167] usb 5-1: USB disconnect, device number 2 [ 82.954722][ T1167] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 86.017292][ T5537] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 86.025320][ T5537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=5537 comm=syz.3.61 [ 86.828781][ T29] audit: type=1400 audit(1728772291.677:184): avc: denied { write } for pid=5533 comm="syz.3.61" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.585718][ T5559] netlink: 'syz.0.63': attribute type 4 has an invalid length. [ 87.624246][ T5559] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 87.632544][ T5559] netlink: 88156 bytes leftover after parsing attributes in process `syz.0.63'. [ 87.667086][ T5562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.65'. [ 87.825120][ T29] audit: type=1400 audit(1728772292.667:185): avc: denied { ioctl } for pid=5566 comm="syz.3.67" path="socket:[8139]" dev="sockfs" ino=8139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.652369][ T29] audit: type=1400 audit(1728772295.457:186): avc: denied { execute } for pid=5586 comm="syz.2.72" path="/13/cpu.stat" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.830140][ T5597] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 90.837812][ T5597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=5597 comm=syz.3.76 [ 90.905248][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 91.131450][ T29] audit: type=1400 audit(1728772295.957:187): avc: denied { create } for pid=5607 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.380761][ T5610] fuse: Unknown parameter 'usQr_id' [ 91.408165][ T29] audit: type=1400 audit(1728772296.227:188): avc: denied { read write } for pid=5608 comm="syz.4.83" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.102282][ T29] audit: type=1400 audit(1728772296.227:189): avc: denied { open } for pid=5608 comm="syz.4.83" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.949146][ T29] audit: type=1400 audit(1728772296.237:190): avc: denied { bind } for pid=5608 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.969199][ T29] audit: type=1400 audit(1728772296.237:191): avc: denied { setopt } for pid=5608 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.990291][ T29] audit: type=1400 audit(1728772296.237:192): avc: denied { mount } for pid=5608 comm="syz.4.83" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.012634][ T29] audit: type=1400 audit(1728772296.257:193): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.517688][ T29] audit: type=1400 audit(1728772298.357:194): avc: denied { create } for pid=5628 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 93.569272][ T29] audit: type=1400 audit(1728772298.387:195): avc: denied { create } for pid=5628 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.952907][ T29] audit: type=1400 audit(1728772298.387:196): avc: denied { bind } for pid=5628 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.158396][ T29] audit: type=1400 audit(1728772298.397:197): avc: denied { connect } for pid=5628 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.253208][ T5643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'. [ 94.292750][ T29] audit: type=1400 audit(1728772298.417:198): avc: denied { create } for pid=5629 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.581231][ T5649] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 94.594790][ T5649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=5649 comm=syz.2.94 [ 97.385436][ T5684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 98.092357][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 98.092376][ T29] audit: type=1400 audit(1728772302.937:213): avc: denied { create } for pid=5702 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.484829][ T5241] udevd[5241]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 100.958214][ T29] audit: type=1400 audit(1728772305.787:214): avc: denied { ioctl } for pid=5734 comm="syz.0.118" path="socket:[9800]" dev="sockfs" ino=9800 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.578029][ T29] audit: type=1400 audit(1728772307.407:215): avc: denied { create } for pid=5748 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.581799][ T29] audit: type=1400 audit(1728772307.427:216): avc: denied { setopt } for pid=5748 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.619381][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.674378][ T29] audit: type=1400 audit(1728772307.477:217): avc: denied { connect } for pid=5748 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.694028][ T29] audit: type=1400 audit(1728772307.477:218): avc: denied { name_connect } for pid=5748 comm="syz.3.122" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 103.960367][ T29] audit: type=1400 audit(1728772308.797:219): avc: denied { write } for pid=5768 comm="syz.0.124" name="netlink" dev="proc" ino=4026532830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.994118][ T5769] Bluetooth: MGMT ver 1.23 [ 104.000497][ T29] audit: type=1400 audit(1728772308.807:220): avc: denied { create } for pid=5768 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.036113][ T29] audit: type=1400 audit(1728772308.837:221): avc: denied { write } for pid=5768 comm="syz.0.124" path="socket:[9922]" dev="sockfs" ino=9922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.307350][ T29] audit: type=1400 audit(1728772309.147:222): avc: denied { create } for pid=5776 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.398947][ T29] audit: type=1400 audit(1728772309.157:223): avc: denied { bind } for pid=5776 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.442625][ T29] audit: type=1400 audit(1728772309.157:224): avc: denied { write } for pid=5776 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.550836][ T29] audit: type=1400 audit(1728772309.207:225): avc: denied { ioctl } for pid=5775 comm="syz.0.128" path="socket:[9949]" dev="sockfs" ino=9949 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.576407][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.308415][ T29] audit: type=1400 audit(1728772310.157:226): avc: denied { execute } for pid=5798 comm="syz.0.135" path="/35/cgroup.stat" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.892299][ T29] audit: type=1400 audit(1728772312.727:227): avc: denied { read } for pid=5827 comm="syz.2.145" name="mouse0" dev="devtmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.555070][ T29] audit: type=1400 audit(1728772312.727:228): avc: denied { open } for pid=5827 comm="syz.2.145" path="/dev/input/mouse0" dev="devtmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 109.381706][ T29] audit: type=1400 audit(1728772312.737:229): avc: denied { ioctl } for pid=5827 comm="syz.2.145" path="socket:[8827]" dev="sockfs" ino=8827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.406149][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.433267][ T5274] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.528010][ T29] audit: type=1400 audit(1728772312.737:230): avc: denied { bind } for pid=5827 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.678003][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 109.703779][ T5274] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 109.728054][ T29] audit: type=1400 audit(1728772312.737:231): avc: denied { name_bind } for pid=5827 comm="syz.2.145" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.756440][ T5274] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 110.271452][ T5274] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 110.283486][ T5274] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 110.305969][ T5274] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.307296][ T29] audit: type=1400 audit(1728772312.737:232): avc: denied { node_bind } for pid=5827 comm="syz.2.145" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 110.365988][ T5274] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 110.375465][ T5274] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 110.394214][ T5274] usb 2-1: Product: syz [ 110.398477][ T5274] usb 2-1: Manufacturer: syz [ 110.403119][ T5274] usb 2-1: SerialNumber: syz [ 110.415944][ T29] audit: type=1400 audit(1728772314.357:233): avc: denied { getopt } for pid=5827 comm="syz.2.145" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.439272][ T5274] usb 2-1: config 0 descriptor?? [ 110.484436][ T5274] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 110.530586][ T29] audit: type=1400 audit(1728772315.367:234): avc: denied { read } for pid=5827 comm="syz.2.145" name="ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.555098][ T29] audit: type=1400 audit(1728772315.367:235): avc: denied { open } for pid=5827 comm="syz.2.145" path="/dev/ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.581815][ T5274] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.671084][ T5853] syz.0.152 uses obsolete (PF_INET,SOCK_PACKET) [ 111.235230][ T5274] usb 2-1: USB disconnect, device number 2 [ 111.258310][ T5274] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 112.378365][ T29] audit: type=1400 audit(1728772316.447:236): avc: denied { name_bind } for pid=5859 comm="syz.3.154" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 112.528527][ T29] audit: type=1400 audit(1728772316.447:237): avc: denied { node_bind } for pid=5859 comm="syz.3.154" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 112.667048][ T29] audit: type=1400 audit(1728772317.457:238): avc: denied { create } for pid=5867 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.023404][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 114.577928][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 114.577951][ T29] audit: type=1400 audit(1728772319.327:241): avc: denied { accept } for pid=5872 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.607838][ T29] audit: type=1400 audit(1728772319.327:242): avc: denied { write } for pid=5872 comm="syz.2.157" path="socket:[8884]" dev="sockfs" ino=8884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.928012][ T29] audit: type=1400 audit(1728772319.747:243): avc: denied { write } for pid=5883 comm="syz.3.161" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.222937][ T5884] kvm: user requested TSC rate below hardware speed [ 116.252558][ T29] audit: type=1400 audit(1728772321.097:244): avc: denied { unmount } for pid=5228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 116.311097][ T5274] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.502984][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 116.535341][ T5274] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 116.557563][ T5274] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 116.579362][ T5274] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.591272][ T5274] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 116.616470][ T5274] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.646726][ T5274] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 116.663406][ T5274] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 116.672182][ T5274] usb 2-1: Product: syz [ 116.676516][ T5274] usb 2-1: Manufacturer: syz [ 116.695107][ T5274] usb 2-1: SerialNumber: syz [ 116.724322][ T5274] usb 2-1: config 0 descriptor?? [ 116.735756][ T5274] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.779612][ T5274] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 116.948146][ T5274] usb 2-1: USB disconnect, device number 3 [ 116.992076][ T5274] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 117.429791][ T29] audit: type=1400 audit(1728772322.277:245): avc: denied { write } for pid=5913 comm="syz.2.170" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.438653][ T29] audit: type=1400 audit(1728772322.287:246): avc: denied { open } for pid=5913 comm="syz.2.170" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.438885][ T5915] random: crng reseeded on system resumption [ 117.505737][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.641129][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.997813][ T29] audit: type=1400 audit(1728772324.837:247): avc: denied { name_bind } for pid=5955 comm="syz.1.182" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 120.793179][ T5969] process 'syz.2.183' launched './file0' with NULL argv: empty string added [ 120.893977][ T29] audit: type=1400 audit(1728772325.647:248): avc: denied { execute_no_trans } for pid=5957 comm="syz.2.183" path="/43/file0" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.795703][ T29] audit: type=1400 audit(1728772329.627:249): avc: denied { setopt } for pid=6010 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.848325][ T29] audit: type=1400 audit(1728772329.667:250): avc: denied { bind } for pid=6010 comm="syz.4.199" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.938131][ T29] audit: type=1400 audit(1728772329.667:251): avc: denied { name_bind } for pid=6010 comm="syz.4.199" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 124.959192][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.044407][ T29] audit: type=1400 audit(1728772329.667:252): avc: denied { node_bind } for pid=6010 comm="syz.4.199" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 125.071601][ T6016] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 127.143093][ T29] audit: type=1400 audit(1728772331.947:253): avc: denied { block_suspend } for pid=6045 comm="syz.0.209" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.235083][ T29] audit: type=1400 audit(1728772332.077:254): avc: denied { getopt } for pid=6049 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.046865][ T6082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.221'. [ 130.701867][ T29] audit: type=1400 audit(1728772335.257:255): avc: denied { mount } for pid=6073 comm="syz.4.219" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 131.304215][ T29] audit: type=1400 audit(1728772336.137:256): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 131.324133][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.332208][ T29] audit: type=1400 audit(1728772336.157:257): avc: denied { create } for pid=6085 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.351768][ T29] audit: type=1400 audit(1728772336.167:258): avc: denied { bind } for pid=6085 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.829636][ T29] audit: type=1400 audit(1728772336.607:259): avc: denied { create } for pid=6110 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.043883][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.232'. [ 132.053338][ T29] audit: type=1400 audit(1728772336.607:260): avc: denied { ioctl } for pid=6110 comm="syz.1.228" path="socket:[11350]" dev="sockfs" ino=11350 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.077931][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.104063][ T29] audit: type=1400 audit(1728772336.607:261): avc: denied { write } for pid=6110 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.123202][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.238651][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.245013][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.481090][ T29] audit: type=1326 audit(1728772338.317:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff202d7dff9 code=0x7fc00000 [ 133.726792][ T29] audit: type=1326 audit(1728772338.317:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff202d7dff9 code=0x7fc00000 [ 133.988051][ T29] audit: type=1326 audit(1728772338.777:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.4.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff202d7dff9 code=0x7fc00000 [ 134.135220][ T6137] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 134.176715][ T6137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.226610][ T6137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.240168][ T6137] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 134.260528][ T6137] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 136.311230][ T6156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 137.061394][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 137.118669][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 137.184236][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 137.184254][ T29] audit: type=1400 audit(1728772342.027:268): avc: denied { ioctl } for pid=6174 comm="syz.0.252" path="socket:[11418]" dev="sockfs" ino=11418 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.290900][ T6172] vlan2: entered allmulticast mode [ 137.296089][ T6172] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 138.115843][ T6186] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.257'. [ 138.395447][ T6179] vivid-000: ================= START STATUS ================= [ 138.434925][ T6179] vivid-000: Test Pattern: 75% Colorbar [ 138.489142][ T6179] vivid-000: Fill Percentage of Frame: 100 [ 138.526083][ T6179] vivid-000: Horizontal Movement: Move Left [ 138.988586][ T6179] vivid-000: Vertical Movement: No Movement [ 139.005773][ T6179] vivid-000: OSD Text Mode: All [ 139.011221][ T6179] vivid-000: Show Border: false [ 139.017983][ T6179] vivid-000: Show Square: false [ 139.023076][ T6179] vivid-000: Sensor Flipped Horizontally: false [ 139.029606][ T6179] vivid-000: Sensor Flipped Vertically: false [ 139.035871][ T6179] vivid-000: Insert SAV Code in Image: false [ 139.043041][ T6179] vivid-000: Insert EAV Code in Image: false [ 139.049415][ T6179] vivid-000: Insert Video Guard Band: false [ 139.059506][ T6179] vivid-000: Reduced Framerate: false [ 139.064967][ T6179] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 139.081371][ T6179] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 139.090186][ T6179] vivid-000: Enable Capture Cropping: true [ 139.096056][ T6179] vivid-000: Enable Capture Composing: true [ 139.111549][ T6179] vivid-000: Enable Capture Scaler: true [ 139.117488][ T6179] vivid-000: Timestamp Source: [ 139.121969][ T6202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.260'. [ 139.168561][ T6179] End of Frame [ 139.172042][ T6179] vivid-000: Colorspace: sRGB [ 139.176767][ T6179] vivid-000: Transfer Function: Default [ 139.182467][ T6179] vivid-000: Y'CbCr Encoding: Default [ 139.201755][ T6179] vivid-000: HSV Encoding: Hue 0-179 [ 139.207170][ T6179] vivid-000: Quantization: Default [ 139.261595][ T6179] vivid-000: Apply Alpha To Red Only: false [ 139.267730][ T6179] vivid-000: Standard Aspect Ratio: 4x3 [ 139.275925][ T6179] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 139.285116][ T6179] vivid-000: DV Timings: 640x480p59 inactive [ 139.293853][ T6179] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 139.304237][ T6179] vivid-000: Maximum EDID Blocks: 2 [ 139.320823][ T6179] vivid-000: Limited RGB Range (16-235): false [ 139.337371][ T6179] vivid-000: Rx RGB Quantization Range: Automatic [ 139.354186][ T6179] vivid-000: Power Present: 0x00000001 [ 139.374608][ T6179] tpg source WxH: 320x180 (R'G'B) [ 139.398140][ T6179] tpg field: 1 [ 139.401572][ T6179] tpg crop: 320x180@0x0 [ 139.436498][ T6179] tpg compose: 320x180@0x0 [ 139.466710][ T6179] tpg colorspace: 8 [ 139.494782][ T6179] tpg transfer function: 0/0 [ 139.519327][ T6179] tpg quantization: 0/0 [ 139.606902][ T6179] tpg RGB range: 0/2 [ 139.662244][ T6179] vivid-000: ================== END STATUS ================== [ 140.308092][ T5272] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.419835][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 141.426896][ T5272] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 141.438246][ T5272] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 141.453190][ T5272] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 141.474105][ T6228] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 141.482149][ T5272] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 141.496208][ T6228] netlink: 9092 bytes leftover after parsing attributes in process `syz.0.269'. [ 141.516413][ T5272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 141.525584][ T6228] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 141.534099][ T6228] netlink: 256 bytes leftover after parsing attributes in process `syz.0.269'. [ 141.547799][ T5272] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 141.557798][ T5272] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 141.567747][ T5272] usb 5-1: Product: syz [ 141.602780][ T5272] usb 5-1: Manufacturer: syz [ 141.617943][ T5272] usb 5-1: SerialNumber: syz [ 141.655469][ T5272] usb 5-1: config 0 descriptor?? [ 141.689772][ T5272] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 141.737489][ T5272] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 142.648382][ T9] usb 5-1: USB disconnect, device number 3 [ 142.660551][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 143.073375][ T6244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'. [ 144.084379][ T6262] fuse: Unknown parameter 'usQr_id' [ 144.984562][ T29] audit: type=1400 audit(1728772349.827:269): avc: denied { mounton } for pid=6267 comm="syz.1.281" path="/proc/170/task" dev="proc" ino=11060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 145.308925][ T6276] netlink: 40 bytes leftover after parsing attributes in process `syz.4.286'. [ 145.549707][ T6290] fuse: Unknown parameter 'usQr_id' [ 145.572515][ T6287] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 147.194887][ T6308] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 147.208026][ T6308] netlink: 9092 bytes leftover after parsing attributes in process `syz.2.296'. [ 147.233737][ T6308] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 147.252739][ T6308] netlink: 256 bytes leftover after parsing attributes in process `syz.2.296'. [ 147.423828][ T6313] 9pnet: Unknown protocol version 9p20\++} [ 148.179365][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.299'. [ 148.187155][ T6325] fuse: Unknown parameter 'usQr_id' [ 148.697884][ T6340] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 149.691261][ T6359] 9pnet: Unknown protocol version 9p20\++} [ 149.709986][ T29] audit: type=1400 audit(1728772354.547:270): avc: denied { watch watch_reads } for pid=6352 comm="syz.4.310" path="/proc/180/net/unix" dev="proc" ino=4026532950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 149.913810][ T6363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 151.261193][ T29] audit: type=1400 audit(1728772356.107:271): avc: denied { read write } for pid=6386 comm="syz.4.322" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.339879][ T29] audit: type=1400 audit(1728772356.107:272): avc: denied { open } for pid=6386 comm="syz.4.322" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 152.084025][ T6400] vlan2: entered allmulticast mode [ 152.108011][ T6400] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 152.461537][ T6413] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 153.121318][ T6427] ptrace attach of "./syz-executor exec"[5230] was attempted by "./syz-executor exec"[6427] [ 153.145201][ T29] audit: type=1400 audit(1728772357.987:273): avc: denied { create } for pid=6426 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.177891][ T29] audit: type=1400 audit(1728772358.017:274): avc: denied { setopt } for pid=6426 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.839415][ T29] audit: type=1400 audit(1728772359.687:275): avc: denied { create } for pid=6450 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 154.923234][ T29] audit: type=1400 audit(1728772359.687:276): avc: denied { ioctl } for pid=6450 comm="syz.1.343" path="socket:[13504]" dev="sockfs" ino=13504 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 154.926136][ T6452] input: syz1 as /devices/virtual/input/input8 [ 155.232069][ T29] audit: type=1400 audit(1728772360.067:277): avc: denied { read } for pid=4660 comm="acpid" name="event4" dev="devtmpfs" ino=2364 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.918149][ T29] audit: type=1400 audit(1728772360.067:278): avc: denied { open } for pid=4660 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2364 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.242048][ T29] audit: type=1400 audit(1728772360.067:279): avc: denied { ioctl } for pid=4660 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2364 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.476593][ T6456] 9pnet_virtio: no channels available for device syz [ 156.484512][ T53] Bluetooth: hci1: unexpected event 0x13 length: 0 < 1 [ 156.940201][ T29] audit: type=1400 audit(1728772361.777:280): avc: denied { sqpoll } for pid=6470 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 157.410673][ T29] audit: type=1400 audit(1728772362.167:281): avc: denied { unlink } for pid=6483 comm="syz.2.355" name="#1" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.432726][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.988024][ T5276] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 158.040716][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 158.098496][ T29] audit: type=1400 audit(1728772362.177:282): avc: denied { mount } for pid=6483 comm="syz.2.355" name="/" dev="overlay" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 158.195967][ T29] audit: type=1400 audit(1728772362.877:283): avc: denied { getopt } for pid=6474 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 158.268366][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 158.294273][ T5276] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 158.308102][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 158.324194][ T29] audit: type=1400 audit(1728772363.017:284): avc: denied { listen } for pid=6474 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.354156][ T5276] usb 1-1: Product: syz [ 158.364261][ T5276] usb 1-1: Manufacturer: syz [ 158.375124][ T5276] usb 1-1: SerialNumber: syz [ 158.385998][ T29] audit: type=1400 audit(1728772363.117:285): avc: denied { accept } for pid=6474 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.411978][ T5276] usb 1-1: config 0 descriptor?? [ 158.695421][ T6529] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 159.223555][ T6530] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 159.421166][ T29] audit: type=1400 audit(1728772364.267:286): avc: denied { ioctl } for pid=6474 comm="syz.4.351" path="/dev/ppp" dev="devtmpfs" ino=693 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 159.465047][ T5273] usb 1-1: USB disconnect, device number 2 [ 160.994386][ T6571] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.043435][ T29] audit: type=1400 audit(1728772365.877:287): avc: denied { setopt } for pid=6564 comm="syz.0.368" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.065122][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.688233][ T29] audit: type=1400 audit(1728772365.967:288): avc: denied { create } for pid=6564 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.956124][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 162.990277][ T5276] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.023141][ T29] audit: type=1400 audit(1728772367.867:289): avc: denied { create } for pid=6580 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.075884][ T29] audit: type=1400 audit(1728772367.917:290): avc: denied { listen } for pid=6580 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.116830][ T29] audit: type=1400 audit(1728772367.917:291): avc: denied { accept } for pid=6580 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.388416][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 163.407973][ T5276] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 163.421945][ T5276] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 163.435659][ T5276] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 163.447385][ T5276] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 163.462214][ T5276] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.472536][ T5276] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 163.485091][ T5276] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 163.494078][ T5276] usb 5-1: Product: syz [ 163.498624][ T5276] usb 5-1: Manufacturer: syz [ 163.503255][ T5276] usb 5-1: SerialNumber: syz [ 163.511117][ T5276] usb 5-1: config 0 descriptor?? [ 163.525376][ T5276] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 163.585747][ T5276] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 165.043684][ T29] audit: type=1400 audit(1728772369.837:292): avc: denied { mount } for pid=6599 comm="syz.2.381" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 165.612551][ T29] audit: type=1400 audit(1728772369.977:293): avc: denied { ioctl } for pid=6611 comm="syz.1.385" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.990773][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 166.247334][ T1167] usb 5-1: USB disconnect, device number 4 [ 166.266860][ T1167] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 167.029500][ T29] audit: type=1400 audit(1728772371.847:294): avc: denied { bind } for pid=6632 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.764397][ T29] audit: type=1400 audit(1728772371.857:295): avc: denied { setopt } for pid=6632 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.159694][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.362337][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.392802][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.423150][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 168.434292][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.600748][ T9] usb 4-1: config 0 descriptor?? [ 168.650802][ T29] audit: type=1400 audit(1728772373.437:296): avc: denied { read } for pid=6650 comm="syz.2.398" name="sg0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.924796][ T29] audit: type=1400 audit(1728772373.437:297): avc: denied { open } for pid=6650 comm="syz.2.398" path="/dev/sg0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.000302][ T29] audit: type=1400 audit(1728772373.457:298): avc: denied { write } for pid=6650 comm="syz.2.398" name="sg0" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.026326][ T29] audit: type=1400 audit(1728772373.767:299): avc: denied { ioctl } for pid=6646 comm="syz.3.395" path="/dev/raw-gadget" dev="devtmpfs" ino=732 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.270636][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 169.334630][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 169.343936][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 169.443806][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0001/input/input10 [ 169.625459][ T29] audit: type=1400 audit(1728772374.457:300): avc: denied { read } for pid=6646 comm="syz.3.395" name="event4" dev="devtmpfs" ino=2382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.657649][ T9] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 169.726249][ T29] audit: type=1400 audit(1728772374.457:301): avc: denied { open } for pid=6646 comm="syz.3.395" path="/dev/input/event4" dev="devtmpfs" ino=2382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.058074][ T29] audit: type=1400 audit(1728772374.787:302): avc: denied { write } for pid=6675 comm="syz.2.407" name="udmabuf" dev="devtmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.726112][ T5303] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 174.500755][ T29] audit: type=1400 audit(1728772379.337:303): avc: denied { create } for pid=6702 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 174.532260][ T53] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 174.535899][ T29] audit: type=1400 audit(1728772379.367:304): avc: denied { write } for pid=6702 comm="syz.3.416" path="socket:[13974]" dev="sockfs" ino=13974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 174.567594][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.621583][ T1167] usb 4-1: USB disconnect, device number 3 [ 175.147665][ T29] audit: type=1400 audit(1728772379.977:305): avc: denied { search } for pid=6713 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.223008][ T29] audit: type=1400 audit(1728772380.037:306): avc: denied { read } for pid=6716 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.246113][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.338475][ T29] audit: type=1400 audit(1728772380.037:307): avc: denied { open } for pid=6716 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.435248][ T29] audit: type=1400 audit(1728772380.037:308): avc: denied { getattr } for pid=6716 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.476688][ T29] audit: type=1400 audit(1728772380.047:309): avc: denied { getattr } for pid=6716 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1448 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.476742][ T29] audit: type=1400 audit(1728772380.247:310): avc: denied { read } for pid=6722 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1448 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.476782][ T29] audit: type=1400 audit(1728772380.247:311): avc: denied { open } for pid=6722 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1448 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.538420][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.038076][ T29] audit: type=1400 audit(1728772381.797:312): avc: denied { write } for pid=6713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.438764][ T6761] capability: warning: `syz.0.430' uses deprecated v2 capabilities in a way that may be insecure [ 179.856503][ T6790] ======================================================= [ 179.856503][ T6790] WARNING: The mand mount option has been deprecated and [ 179.856503][ T6790] and is ignored by this kernel. Remove the mand [ 179.856503][ T6790] option from the mount to silence this warning. [ 179.856503][ T6790] ======================================================= [ 181.479981][ T5224] Bluetooth: hci4: command 0x0406 tx timeout [ 181.486098][ T5224] Bluetooth: hci0: command 0x0406 tx timeout [ 181.492714][ T4613] Bluetooth: hci3: command 0x0406 tx timeout [ 181.500911][ T4613] Bluetooth: hci1: command 0x0406 tx timeout [ 181.510167][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 183.407958][ T1167] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.567938][ T1167] usb 2-1: device descriptor read/64, error -71 [ 183.620521][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.829513][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.859011][ T1167] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 184.018060][ T1167] usb 2-1: device descriptor read/64, error -71 [ 184.148704][ T1167] usb usb2-port1: attempt power cycle [ 184.455200][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.502697][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.530416][ T1167] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.559006][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.605950][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.622597][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 185.641843][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.677710][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.687795][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.695502][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.720276][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 185.720294][ T29] audit: type=1400 audit(1728772390.547:320): avc: denied { mounton } for pid=6857 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 185.802630][ T1167] usb 2-1: device descriptor read/8, error -71 [ 186.188110][ T1167] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.829789][ T11] bridge_slave_1: left allmulticast mode [ 186.853306][ T11] bridge_slave_1: left promiscuous mode [ 186.873056][ T1167] usb 2-1: device descriptor read/8, error -71 [ 186.892618][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.990455][ T1167] usb usb2-port1: unable to enumerate USB device [ 187.019632][ T11] bridge_slave_0: left allmulticast mode [ 187.025326][ T11] bridge_slave_0: left promiscuous mode [ 187.050161][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.660495][ T6901] netlink: 68 bytes leftover after parsing attributes in process `syz.3.465'. [ 187.691515][ T29] audit: type=1400 audit(1728772392.507:321): avc: denied { write } for pid=6888 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.764444][ T29] audit: type=1400 audit(1728772392.507:322): avc: denied { nlmsg_write } for pid=6888 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.805881][ T5237] Bluetooth: hci1: command tx timeout [ 189.878891][ T5237] Bluetooth: hci1: command tx timeout [ 189.889330][ T29] audit: type=1400 audit(1728772394.737:323): avc: denied { read } for pid=6941 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.725411][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.773004][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.785229][ T11] bond0 (unregistering): Released all slaves [ 191.958070][ T5237] Bluetooth: hci1: command tx timeout [ 192.090944][ T11] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 193.365796][ T29] audit: type=1400 audit(1728772398.207:324): avc: denied { watch } for pid=6981 comm="syz.0.484" path="/105" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 193.467553][ T29] audit: type=1400 audit(1728772398.237:325): avc: denied { read } for pid=6981 comm="syz.0.484" path="socket:[14426]" dev="sockfs" ino=14426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.581895][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 193.833707][ T7006] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 193.844041][ T7007] fuse: Bad value for 'fd' [ 193.858019][ T7006] netlink: 9092 bytes leftover after parsing attributes in process `syz.3.487'. [ 193.867118][ T7006] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 193.950277][ T7006] netlink: 252 bytes leftover after parsing attributes in process `syz.3.487'. [ 194.039025][ T5237] Bluetooth: hci1: command tx timeout [ 194.088899][ T11] hsr_slave_0: left promiscuous mode [ 194.106649][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 194.128719][ T11] hsr_slave_1: left promiscuous mode [ 194.136110][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.145167][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.156093][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.164268][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.187850][ T11] veth1_macvtap: left promiscuous mode [ 194.210631][ T11] veth0_macvtap: left promiscuous mode [ 194.216532][ T11] veth1_vlan: left promiscuous mode [ 194.223000][ T11] veth0_vlan: left promiscuous mode [ 194.278040][ T5273] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 194.430029][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.442073][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.462389][ T5273] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 194.474759][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.491238][ T5273] usb 1-1: config 0 descriptor?? [ 194.615524][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.625380][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.918018][ T5273] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 194.925337][ T5273] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 194.943662][ T7017] Falling back ldisc for pts0. [ 194.957032][ T5273] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input12 [ 195.066806][ T5273] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 195.237668][ T7020] fuse: Bad value for 'fd' [ 195.238712][ T29] audit: type=1400 audit(1728772400.077:326): avc: denied { mounton } for pid=7019 comm="syz.1.492" path="/95/file0" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.328399][ T29] audit: type=1400 audit(1728772400.157:327): avc: denied { sys_module } for pid=7009 comm="syz.0.488" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 195.676034][ T11] team0 (unregistering): Port device team_slave_1 removed [ 195.777604][ T11] team0 (unregistering): Port device team_slave_0 removed [ 196.167977][ T5303] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 196.414925][ T7040] fuse: Bad value for 'fd' [ 196.514866][ T7045] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 196.523317][ T7045] netlink: 9092 bytes leftover after parsing attributes in process `syz.2.500'. [ 196.534790][ T7045] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 196.543066][ T7045] netlink: 252 bytes leftover after parsing attributes in process `syz.2.500'. [ 196.675088][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.686517][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.694066][ T6857] bridge_slave_0: entered allmulticast mode [ 196.703471][ T6857] bridge_slave_0: entered promiscuous mode [ 196.713479][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.720821][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.728729][ T6857] bridge_slave_1: entered allmulticast mode [ 196.735695][ T6857] bridge_slave_1: entered promiscuous mode [ 196.849918][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.895008][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.928301][ T29] audit: type=1400 audit(1728772401.747:328): avc: denied { connect } for pid=7050 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.051380][ T6857] team0: Port device team_slave_0 added [ 197.062187][ T6857] team0: Port device team_slave_1 added [ 197.122719][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.175388][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.359136][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.818154][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.908032][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.992636][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.271691][ T6857] hsr_slave_0: entered promiscuous mode [ 198.293104][ T6857] hsr_slave_1: entered promiscuous mode [ 198.310874][ T6857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.341803][ T6857] Cannot create hsr debugfs directory [ 198.367572][ T7073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.506'. [ 198.986012][ T5273] usb 1-1: USB disconnect, device number 3 [ 199.342069][ T29] audit: type=1400 audit(1728772404.187:329): avc: denied { create } for pid=7094 comm="syz.1.510" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 200.473851][ T29] audit: type=1400 audit(1728772405.317:330): avc: denied { watch_reads } for pid=7120 comm="syz.1.518" path="/105" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 202.038617][ T29] audit: type=1400 audit(1728772406.877:331): avc: denied { write } for pid=7140 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 202.059044][ T29] audit: type=1400 audit(1728772406.877:332): avc: denied { nlmsg_read } for pid=7140 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 203.340499][ T29] audit: type=1400 audit(1728772408.187:333): avc: denied { create } for pid=7164 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.421400][ T29] audit: type=1400 audit(1728772408.257:334): avc: denied { write } for pid=7164 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.460431][ T5237] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 203.515221][ T29] audit: type=1400 audit(1728772408.307:335): avc: denied { read } for pid=7164 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.622392][ T29] audit: type=1400 audit(1728772408.307:336): avc: denied { connect } for pid=7167 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.685481][ T6857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.711451][ T29] audit: type=1400 audit(1728772408.407:337): avc: denied { getopt } for pid=7164 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.754743][ T6857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.801136][ T6857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.801271][ T6857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.437232][ T29] audit: type=1400 audit(1728772410.377:338): avc: denied { mount } for pid=7191 comm="syz.1.538" name="/" dev="ramfs" ino=15654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 207.553937][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.571284][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.586434][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.593615][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.617447][ T29] audit: type=1804 audit(1728772410.397:339): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.538" name="/newroot/111/file0/bus" dev="ramfs" ino=15655 res=1 errno=0 [ 207.647088][ T29] audit: type=1400 audit(1728772412.347:340): avc: denied { unmount } for pid=5217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 207.718172][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.725359][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.788505][ T6857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.800188][ T6857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.240212][ T29] audit: type=1400 audit(1728772413.007:341): avc: denied { setopt } for pid=7220 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.081546][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.333615][ T6857] veth0_vlan: entered promiscuous mode [ 211.372960][ T6857] veth1_vlan: entered promiscuous mode [ 211.450657][ T29] audit: type=1400 audit(1728772416.297:342): avc: denied { create } for pid=7273 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.820504][ T6857] veth0_macvtap: entered promiscuous mode [ 211.844637][ T6857] veth1_macvtap: entered promiscuous mode [ 211.881481][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.903174][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.928019][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.960701][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.992376][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.013099][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.047865][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.127527][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.210375][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.410845][ T7305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 212.440292][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.452467][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.533634][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.827933][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.894337][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.933811][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.988063][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.005557][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.180028][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.431737][ T6857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.459074][ T6857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.500846][ T6857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.525671][ T6857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.808733][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 214.373095][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.385628][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.501437][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.538685][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.712683][ T7355] ptrace attach of "./syz-executor exec"[5223] was attempted by "./syz-executor exec"[7355] [ 214.715053][ T29] audit: type=1400 audit(1728772419.517:343): avc: denied { mounton } for pid=6857 comm="syz-executor" path="/root/syzkaller.nLuOJV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 214.936798][ T29] audit: type=1400 audit(1728772419.777:344): avc: denied { write } for pid=7361 comm="syz.4.452" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 215.551223][ T29] audit: type=1400 audit(1728772420.327:345): avc: denied { getopt } for pid=7358 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.778766][ T29] audit: type=1400 audit(1728772421.617:346): avc: denied { connect } for pid=7387 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 217.879166][ T7408] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.885215][ T7408] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 217.923625][ T7408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.929618][ T7408] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 217.945527][ T7408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.951975][ T7408] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 217.963475][ T7408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 217.969456][ T7408] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 218.013938][ T7412] ptrace attach of "./syz-executor exec"[6857] was attempted by "./syz-executor exec"[7412] [ 218.200484][ T7408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.206432][ T7408] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 218.320055][ T7421] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 218.554161][ T29] audit: type=1400 audit(1728772423.397:347): avc: denied { create } for pid=7400 comm="syz.1.580" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.307936][ T29] audit: type=1400 audit(1728772423.427:348): avc: denied { read write } for pid=7400 comm="syz.1.580" name="file0" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.330548][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.352251][ T29] audit: type=1400 audit(1728772423.427:349): avc: denied { open } for pid=7400 comm="syz.1.580" path="/119/file0" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.375039][ T29] audit: type=1400 audit(1728772423.427:350): avc: denied { ioctl } for pid=7400 comm="syz.1.580" path="/119/file0" dev="tmpfs" ino=655 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.399110][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.667902][ T51] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 219.801879][ T29] audit: type=1400 audit(1728772424.627:351): avc: denied { write } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.915276][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 220.015223][ T51] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 220.432328][ T29] audit: type=1400 audit(1728772424.627:352): avc: denied { remove_name } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.458062][ T51] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 220.469352][ T51] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 220.480721][ T51] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 220.484954][ T29] audit: type=1400 audit(1728772424.627:353): avc: denied { rename } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.494245][ T51] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.516521][ T29] audit: type=1400 audit(1728772424.627:354): avc: denied { add_name } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.545493][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.551985][ T29] audit: type=1400 audit(1728772424.637:355): avc: denied { unlink } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.574943][ T29] audit: type=1400 audit(1728772424.717:356): avc: denied { create } for pid=4657 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 220.595563][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.686215][ T51] usb 2-1: string descriptor 0 read error: -71 [ 220.692790][ T51] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 220.702165][ T51] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 220.730989][ T51] usb 2-1: config 0 descriptor?? [ 220.748243][ T51] usb 2-1: can't set config #0, error -71 [ 220.758563][ T51] usb 2-1: USB disconnect, device number 8 [ 220.802347][ T29] audit: type=1400 audit(1728772425.647:357): avc: denied { unlink } for pid=5217 comm="syz-executor" name="file0" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.003797][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.592'. [ 221.559176][ T7468] ptrace attach of "./syz-executor exec"[5223] was attempted by "./syz-executor exec"[7468] [ 222.818022][ T5272] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 222.879013][ T29] audit: type=1400 audit(1728772427.727:358): avc: denied { bind } for pid=7511 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 223.657921][ T29] audit: type=1400 audit(1728772428.447:359): avc: denied { write } for pid=7511 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.525308][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 224.536995][ T5272] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 224.555800][ T5272] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 224.579287][ T5272] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 224.602137][ T5272] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 224.655322][ T5272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.716102][ T5272] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 224.725745][ T5272] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 224.823130][ T5272] usb 5-1: Product: syz [ 224.834325][ T5272] usb 5-1: Manufacturer: syz [ 224.858006][ T5272] usb 5-1: SerialNumber: syz [ 224.896193][ T5272] usb 5-1: config 0 descriptor?? [ 224.910344][ T5272] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 224.949944][ T5272] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 225.206119][ T5276] usb 5-1: USB disconnect, device number 5 [ 225.229729][ T5276] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 225.885561][ T7578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.198176][ T5272] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 229.107933][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 229.125394][ T5272] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 229.133849][ T5272] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 229.155911][ T5272] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 229.177760][ T5272] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 229.198653][ T5272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.326925][ T5272] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 229.344035][ T5272] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 229.353202][ T5272] usb 4-1: Product: syz [ 229.358676][ T29] audit: type=1400 audit(1728772434.207:360): avc: denied { connect } for pid=7618 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.404615][ T5272] usb 4-1: Manufacturer: syz [ 229.423117][ T29] audit: type=1400 audit(1728772434.227:361): avc: denied { write } for pid=7618 comm="syz.4.635" path="socket:[17502]" dev="sockfs" ino=17502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 229.446393][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.452681][ T29] audit: type=1400 audit(1728772434.247:362): avc: denied { write } for pid=7623 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.490740][ T5272] usb 4-1: SerialNumber: syz [ 229.538874][ T5272] usb 4-1: config 0 descriptor?? [ 229.577643][ T5272] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 229.629384][ T5272] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 230.213902][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 230.452530][ T7634] kvm: user requested TSC rate below hardware speed [ 230.930626][ T7646] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 231.848594][ T7646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=7646 comm=syz.2.644 [ 232.402932][ T5303] usb 4-1: USB disconnect, device number 4 [ 232.415475][ T5303] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 232.424831][ T7662] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 233.661624][ T29] audit: type=1400 audit(1728772438.397:363): avc: denied { mounton } for pid=7684 comm="syz.0.659" path="/140/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 233.684023][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.297339][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 237.167286][ T7725] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 237.562949][ T29] audit: type=1400 audit(1728772442.407:364): avc: denied { read } for pid=7735 comm="syz.1.678" name="usbmon0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 237.639208][ T29] audit: type=1400 audit(1728772442.437:365): avc: denied { open } for pid=7735 comm="syz.1.678" path="/dev/usbmon0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 237.673460][ T29] audit: type=1400 audit(1728772442.437:366): avc: denied { map } for pid=7735 comm="syz.1.678" path="/dev/usbmon0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 239.586802][ T29] audit: type=1400 audit(1728772444.397:367): avc: denied { read } for pid=7761 comm="syz.1.687" name="rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.628650][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.682847][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.693092][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.700546][ T29] audit: type=1400 audit(1728772444.397:368): avc: denied { open } for pid=7761 comm="syz.1.687" path="/dev/rtc0" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.723746][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.758276][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.779760][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.790850][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.798444][ T29] audit: type=1400 audit(1728772444.397:369): avc: denied { ioctl } for pid=7761 comm="syz.1.687" path="/dev/rtc0" dev="devtmpfs" ino=836 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.878804][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.894456][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.905519][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.917150][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.925376][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.933116][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.435568][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 240.642248][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.668141][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.676029][ T7752] bridge_slave_0: entered allmulticast mode [ 240.689279][ T7752] bridge_slave_0: entered promiscuous mode [ 240.697162][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.708819][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.716124][ T7752] bridge_slave_1: entered allmulticast mode [ 240.727584][ T7752] bridge_slave_1: entered promiscuous mode [ 240.942854][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.962414][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.288072][ T7752] team0: Port device team_slave_0 added [ 241.363380][ T7752] team0: Port device team_slave_1 added [ 241.486415][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.518749][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.042155][ T5229] Bluetooth: hci2: command tx timeout [ 242.068287][ T7752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.090037][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.097028][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.122988][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.255287][ T7752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.129451][ T5229] Bluetooth: hci2: command tx timeout [ 244.280473][ T7752] hsr_slave_0: entered promiscuous mode [ 244.593938][ T7752] hsr_slave_1: entered promiscuous mode [ 244.604442][ T7752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.637247][ T7752] Cannot create hsr debugfs directory [ 244.815250][ T29] audit: type=1400 audit(1728772449.657:370): avc: denied { read } for pid=7829 comm="syz.2.704" path="socket:[18115]" dev="sockfs" ino=18115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.468494][ T7752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.650051][ T7752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.761193][ T7752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.181881][ T7752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.198099][ T5229] Bluetooth: hci2: command tx timeout [ 247.160506][ T7752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.181846][ T7752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.234005][ T7752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.288394][ T7752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.034468][ T7752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.132445][ T7752] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.188111][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.189065][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.228502][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.228583][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.278286][ T5229] Bluetooth: hci2: command tx timeout [ 249.861247][ T7905] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 250.553412][ T7752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.665557][ T7752] veth0_vlan: entered promiscuous mode [ 250.680449][ T7752] veth1_vlan: entered promiscuous mode [ 250.761967][ T7752] veth0_macvtap: entered promiscuous mode [ 250.814718][ T7752] veth1_macvtap: entered promiscuous mode [ 250.895846][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.914993][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.927307][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.938555][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.948839][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.960760][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.971262][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.982230][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.992783][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.009413][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.025820][ T7752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.047266][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.058225][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.075261][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.086557][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.096522][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.107033][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.116929][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.127502][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.138103][ T5303] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 251.153407][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.165013][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.176293][ T7752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.233468][ T7752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.253133][ T7752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.267456][ T7752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.278298][ T7752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.308451][ T5303] usb 4-1: Using ep0 maxpacket: 32 [ 251.315272][ T5303] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 251.327954][ T5303] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 251.346188][ T5303] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 251.358511][ T5303] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 251.377508][ T5303] usb 4-1: config 0 interface 0 has no altsetting 0 [ 251.392681][ T5303] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 251.415555][ T5303] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 251.425192][ T5303] usb 4-1: Product: syz [ 251.429983][ T5303] usb 4-1: Manufacturer: syz [ 251.434803][ T5303] usb 4-1: SerialNumber: syz [ 251.443579][ T5303] usb 4-1: config 0 descriptor?? [ 251.457038][ T5303] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 251.481372][ T5303] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 251.641577][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.663974][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.822161][ T5315] usb 4-1: USB disconnect, device number 5 [ 251.841701][ T5315] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 253.372881][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.675744][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.475077][ T29] audit: type=1400 audit(1728772460.317:371): avc: denied { bind } for pid=7979 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 255.494574][ T5315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 255.528879][ T7992] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 255.593717][ T29] audit: type=1400 audit(1728772460.357:372): avc: denied { name_bind } for pid=7979 comm="syz.4.752" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 255.641646][ T29] audit: type=1400 audit(1728772460.357:373): avc: denied { node_bind } for pid=7979 comm="syz.4.752" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 255.668063][ T5315] usb 3-1: Using ep0 maxpacket: 32 [ 255.880861][ T5315] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 255.894409][ T29] audit: type=1400 audit(1728772460.367:374): avc: denied { listen } for pid=7979 comm="syz.4.752" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 256.438726][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.574623][ T5315] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 256.584566][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.585784][ T5315] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 256.594086][ T29] audit: type=1400 audit(1728772460.367:375): avc: denied { connect } for pid=7979 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.602996][ T5315] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 256.621747][ T29] audit: type=1400 audit(1728772460.477:376): avc: denied { accept } for pid=7979 comm="syz.4.752" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 256.634999][ T5315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.655273][ T29] audit: type=1400 audit(1728772460.477:377): avc: denied { write } for pid=7979 comm="syz.4.752" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=58174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 256.876841][ T5315] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 256.886194][ T5315] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 256.895014][ T5315] usb 3-1: Product: syz [ 256.899569][ T5315] usb 3-1: Manufacturer: syz [ 256.905372][ T5315] usb 3-1: SerialNumber: syz [ 256.932030][ T5315] usb 3-1: config 0 descriptor?? [ 256.955518][ T5315] ldusb 3-1:0.0: Interrupt in endpoint not found [ 256.967190][ T7979] dccp_close: ABORT with 124 bytes unread [ 258.352094][ T29] audit: type=1400 audit(1728772463.197:378): avc: denied { write } for pid=8022 comm="syz.1.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.229304][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 259.256109][ T9] usb 3-1: USB disconnect, device number 2 [ 259.349425][ T29] audit: type=1400 audit(1728772464.197:379): avc: denied { map } for pid=8048 comm="syz.4.776" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 259.372858][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.483078][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.779'. [ 259.687523][ T8064] ptrace attach of "./syz-executor exec"[5230] was attempted by "./syz-executor exec"[8064] [ 259.737928][ T5274] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 259.929764][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.015100][ T5274] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 260.184012][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.201933][ T5274] usb 1-1: config 0 descriptor?? [ 261.240966][ T5274] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 261.254663][ T5274] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input13 [ 261.308221][ T5315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 261.375379][ T8090] tipc: Started in network mode [ 261.408576][ T8090] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 261.435773][ T8090] tipc: Enabling of bearer rejected, failed to enable media [ 261.489450][ T5315] usb 4-1: Using ep0 maxpacket: 8 [ 262.078044][ T5315] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 262.097929][ T5315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.140599][ T5315] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.194697][ T5315] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.217666][ T5274] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 262.220628][ T5315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.255588][ T5274] usb 1-1: USB disconnect, device number 4 [ 262.322437][ T5315] usb 4-1: config 0 descriptor?? [ 262.713403][ T8105] ptrace attach of "./syz-executor exec"[6857] was attempted by "./syz-executor exec"[8105] [ 262.735502][ T8083] vcan0: entered promiscuous mode [ 262.735830][ T8083] vlan2: entered promiscuous mode [ 262.735925][ T8083] vlan2: entered allmulticast mode [ 262.735942][ T8083] vcan0: entered allmulticast mode [ 262.738584][ T8083] vcan0: left allmulticast mode [ 262.738737][ T8083] vcan0: left promiscuous mode [ 263.235629][ T29] audit: type=1400 audit(1728772468.077:380): avc: denied { map } for pid=8126 comm="syz.0.804" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 263.296712][ T8125] kvm: user requested TSC rate below hardware speed [ 263.925486][ T5274] usb 4-1: USB disconnect, device number 6 [ 266.344816][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 266.410564][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 266.427879][ T8179] netlink: 'syz.4.816': attribute type 11 has an invalid length. [ 266.590688][ T8179] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.600945][ T8179] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.609803][ T8179] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.618579][ T8179] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.656618][ T8179] vxlan0: entered promiscuous mode [ 266.710154][ T8187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.821'. [ 266.772444][ T8189] fuse: Unknown parameter 'grou00000000000000000000' [ 269.921572][ T5229] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 269.921646][ T5229] CPU: 1 UID: 0 PID: 5229 Comm: kworker/u9:4 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 269.921682][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.921701][ T5229] Workqueue: hci2 hci_rx_work [ 269.921758][ T5229] Call Trace: [ 269.921767][ T5229] [ 269.921780][ T5229] dump_stack_lvl+0x16c/0x1f0 [ 269.921825][ T5229] sysfs_warn_dup+0x7f/0xa0 [ 269.921857][ T5229] sysfs_create_dir_ns+0x24d/0x2b0 [ 269.921888][ T5229] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 269.921943][ T5229] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 269.921978][ T5229] ? kobject_add_internal+0x12d/0x990 [ 269.922022][ T5229] ? do_raw_spin_unlock+0x172/0x230 [ 269.922058][ T5229] kobject_add_internal+0x2c8/0x990 [ 269.922106][ T5229] kobject_add+0x16f/0x240 [ 269.922132][ T5229] ? __pfx_kobject_add+0x10/0x10 [ 269.922156][ T5229] ? class_to_subsys+0x3e/0x160 [ 269.922197][ T5229] ? do_raw_spin_unlock+0x172/0x230 [ 269.922230][ T5229] ? kobject_put+0xab/0x5a0 [ 269.922283][ T5229] device_add+0x289/0x1a70 [ 269.922317][ T5229] ? __pfx_dev_set_name+0x10/0x10 [ 269.922342][ T5229] ? __pfx_device_add+0x10/0x10 [ 269.922378][ T5229] ? mgmt_send_event_skb+0x2f2/0x460 [ 269.922415][ T5229] hci_conn_add_sysfs+0x17e/0x230 [ 269.922448][ T5229] le_conn_complete_evt+0x1078/0x1d80 [ 269.922485][ T5229] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 269.922511][ T5229] ? trace_contention_end+0xea/0x140 [ 269.922551][ T5229] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 269.922584][ T5229] ? skb_pull_data+0x166/0x210 [ 269.922627][ T5229] hci_le_meta_evt+0x2e2/0x5d0 [ 269.922657][ T5229] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 269.922694][ T5229] hci_event_packet+0x666/0x1180 [ 269.922725][ T5229] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 269.922758][ T5229] ? __pfx_hci_event_packet+0x10/0x10 [ 269.922786][ T5229] ? mark_held_locks+0x9f/0xe0 [ 269.922814][ T5229] ? kcov_remote_start+0x3cf/0x6e0 [ 269.922840][ T5229] ? lockdep_hardirqs_on+0x7c/0x110 [ 269.922882][ T5229] hci_rx_work+0x2c6/0x16c0 [ 269.922916][ T5229] ? lock_acquire+0x2f/0xb0 [ 269.922949][ T5229] ? process_one_work+0x921/0x1ba0 [ 269.922984][ T5229] process_one_work+0x9c5/0x1ba0 [ 269.923025][ T5229] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 269.923054][ T5229] ? __pfx_process_one_work+0x10/0x10 [ 269.923094][ T5229] ? assign_work+0x1a0/0x250 [ 269.923141][ T5229] worker_thread+0x6c8/0xf00 [ 269.923185][ T5229] ? __pfx_worker_thread+0x10/0x10 [ 269.923212][ T5229] kthread+0x2c1/0x3a0 [ 269.923242][ T5229] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.923272][ T5229] ? __pfx_kthread+0x10/0x10 [ 269.923306][ T5229] ret_from_fork+0x45/0x80 [ 269.923331][ T5229] ? __pfx_kthread+0x10/0x10 [ 269.923364][ T5229] ret_from_fork_asm+0x1a/0x30 [ 269.923419][ T5229] [ 269.923805][ T5229] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 269.924708][ T5229] Bluetooth: hci2: failed to register connection device [ 270.720960][ T8231] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 271.391477][ T8247] fuse: Unknown parameter 'group_i00000000000000000000' [ 271.611060][ T8253] vlan3: entered promiscuous mode [ 271.688663][ T8258] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 271.978384][ T5237] Bluetooth: hci2: command tx timeout [ 271.999404][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 272.418123][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 272.437626][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 272.709103][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 272.747956][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.796896][ T9] usb 1-1: Product: syz [ 272.812763][ T9] usb 1-1: Manufacturer: syz [ 272.839609][ T9] usb 1-1: SerialNumber: syz [ 272.870761][ T9] usb 1-1: config 0 descriptor?? [ 272.879474][ T8262] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.936867][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 272.967972][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 273.034152][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 273.132177][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 273.858582][ T9] usb 1-1: USB disconnect, device number 5 [ 275.638011][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 276.501942][ T8335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.865'. [ 277.438014][ T8346] fuse: Unknown parameter 'group_id00000000000000000000' [ 277.749485][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 278.098938][ T8358] netlink: 148 bytes leftover after parsing attributes in process `syz.0.873'. [ 278.488421][ T8369] openvswitch: netlink: Flow key attr not present in new flow. [ 278.528107][ T8376] vlan3: entered promiscuous mode [ 280.328750][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 282.606772][ T8438] fuse: Unknown parameter 'group_id00000000000000000000' [ 284.098235][ T8450] vlan2: entered promiscuous mode [ 284.130963][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 284.134136][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 284.665184][ T8468] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 284.763936][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'. [ 294.677791][ C0] sched: DL replenish lagged too much [ 322.143884][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.170609][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.921881][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.513041][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 418.607879][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 440.359976][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.366346][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.757733][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 443.764721][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8486/1:b..l [ 443.773049][ C0] rcu: (detected by 0, t=10502 jiffies, g=23989, q=1399657 ncpus=2) [ 443.781110][ C0] task:syz-executor state:R running task stack:26112 pid:8486 tgid:8486 ppid:5207 flags:0x00004000 [ 443.793650][ C0] Call Trace: [ 443.796949][ C0] [ 443.799880][ C0] __schedule+0xef5/0x5750 [ 443.804305][ C0] ? __pfx___schedule+0x10/0x10 [ 443.809165][ C0] preempt_schedule_irq+0x51/0x90 [ 443.814186][ C0] irqentry_exit+0x36/0x90 [ 443.818597][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 443.824583][ C0] RIP: 0010:sized_strscpy+0x10d/0x290 [ 443.829955][ C0] Code: ff df 48 c1 eb 07 4c 21 c3 80 3c 0e 00 0f 85 6f 01 00 00 f3 48 0f bc c0 48 c1 e8 03 48 89 1f 4c 01 f8 48 83 c4 10 5b 5d 41 5c <41> 5d 41 5e 41 5f c3 cc cc cc cc 48 89 f2 b8 00 10 00 00 81 e2 ff [ 443.849582][ C0] RSP: 0018:ffffc900112e7420 EFLAGS: 00000282 [ 443.855688][ C0] RAX: 000000000000000c RBX: ffff88801f999088 RCX: ffffffff8b12d5fe [ 443.863656][ C0] RDX: ffffed1005d16117 RSI: 0000000000000000 RDI: ffff88801f999094 [ 443.871625][ C0] RBP: 000000000000000d R08: 0000000000000004 R09: ffffed1005d16116 [ 443.879594][ C0] R10: ffff88802e8b08b0 R11: 0000000000000000 R12: ffff88801f999060 [ 443.887555][ C0] R13: dffffc0000000000 R14: ffff88801f999088 R15: 0000000000000008 [ 443.895525][ C0] ? read_word_at_a_time+0xe/0x20 [ 443.900577][ C0] __update_page_owner_handle+0x256/0x320 [ 443.906302][ C0] __set_page_owner+0x13f/0x560 [ 443.911148][ C0] ? free_unref_folios+0xb70/0x1310 [ 443.916346][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 443.921710][ C0] ? bad_range+0x264/0x440 [ 443.926120][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.931319][ C0] post_alloc_hook+0x2d1/0x350 [ 443.936078][ C0] get_page_from_freelist+0x101e/0x3070 [ 443.941630][ C0] ? __pfx___might_resched+0x10/0x10 [ 443.946912][ C0] ? fs_reclaim_acquire+0xae/0x150 [ 443.952014][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 443.957905][ C0] ? should_fail_alloc_page+0xee/0x130 [ 443.963364][ C0] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 443.969686][ C0] __alloc_pages_noprof+0x223/0x25a0 [ 443.974968][ C0] ? unwind_get_return_address+0x59/0xa0 [ 443.980598][ C0] ? arch_stack_walk+0xa7/0x100 [ 443.985466][ C0] ? hlock_class+0x4e/0x130 [ 443.989964][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 443.995687][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 444.000877][ C0] ? kasan_save_stack+0x42/0x60 [ 444.005723][ C0] ? kasan_save_stack+0x33/0x60 [ 444.010570][ C0] ? kasan_save_track+0x14/0x30 [ 444.015415][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 444.020431][ C0] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 444.026488][ C0] ? alloc_vmap_area+0x636/0x2a70 [ 444.031514][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.037408][ C0] ? policy_nodemask+0xea/0x4e0 [ 444.042254][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 444.047725][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 444.053733][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 444.058754][ C0] ? lock_acquire+0x2f/0xb0 [ 444.063247][ C0] ? kasan_populate_vmalloc_pte+0xfb/0x160 [ 444.069048][ C0] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 444.075289][ C0] get_free_pages_noprof+0xc/0x40 [ 444.080312][ C0] kasan_populate_vmalloc_pte+0x2d/0x160 [ 444.085939][ C0] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 444.092174][ C0] __apply_to_page_range+0x5fd/0xd30 [ 444.097477][ C0] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 444.103743][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 444.109650][ C0] ? insert_vmap_area+0x2ef/0x4d0 [ 444.114687][ C0] alloc_vmap_area+0x93e/0x2a70 [ 444.119549][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 444.124840][ C0] __get_vm_area_node+0x17e/0x2d0 [ 444.129865][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.135760][ C0] __vmalloc_node_range_noprof+0x26a/0x15a0 [ 444.141648][ C0] ? kcov_ioctl+0x4c/0x730 [ 444.146056][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 444.151099][ C0] ? kcov_ioctl+0x4c/0x730 [ 444.155516][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.161846][ C0] ? kcov_ioctl+0x4c/0x730 [ 444.166266][ C0] vmalloc_user_noprof+0x6b/0x90 [ 444.171200][ C0] ? kcov_ioctl+0x4c/0x730 [ 444.175605][ C0] kcov_ioctl+0x4c/0x730 [ 444.179846][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 444.184694][ C0] __x64_sys_ioctl+0x18f/0x220 [ 444.189457][ C0] do_syscall_64+0xcd/0x250 [ 444.193960][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.199851][ C0] RIP: 0033:0x7f8a6e77dbfb [ 444.204268][ C0] RSP: 002b:00007ffeaeab1620 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.212686][ C0] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f8a6e77dbfb [ 444.220669][ C0] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 444.228650][ C0] RBP: 00007f8a6e936018 R08: 0000000000000005 R09: 0000000000000000 [ 444.236617][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.245012][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 444.252989][ C0] [ 444.256000][ C0] rcu: rcu_preempt kthread starved for 2768 jiffies! g23989 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 444.267199][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 444.277177][ C0] rcu: RCU grace-period kthread stack dump: [ 444.283056][ C0] task:rcu_preempt state:R running task stack:27968 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 444.294800][ C0] Call Trace: [ 444.298089][ C0] [ 444.301016][ C0] __schedule+0xef5/0x5750 [ 444.305453][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 444.310648][ C0] ? _raw_spin_lock_irq+0x40/0x50 [ 444.315677][ C0] ? __pfx___schedule+0x10/0x10 [ 444.320529][ C0] ? schedule+0x298/0x350 [ 444.324871][ C0] ? __pfx_lock_release+0x10/0x10 [ 444.329888][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 444.335083][ C0] ? lock_acquire+0x2f/0xb0 [ 444.339576][ C0] ? schedule+0x1fd/0x350 [ 444.343902][ C0] schedule+0xe7/0x350 [ 444.347964][ C0] schedule_timeout+0x136/0x2a0 [ 444.352806][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 444.358180][ C0] ? __pfx_process_timeout+0x10/0x10 [ 444.363462][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 444.369262][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 444.374715][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 444.379481][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 444.384756][ C0] ? rcu_gp_init+0xc82/0x1630 [ 444.389428][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 444.394622][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 444.400423][ C0] rcu_gp_kthread+0x271/0x380 [ 444.405094][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 444.410287][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 444.415486][ C0] ? __kthread_parkme+0x148/0x220 [ 444.420514][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 444.425712][ C0] kthread+0x2c1/0x3a0 [ 444.429775][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.434974][ C0] ? __pfx_kthread+0x10/0x10 [ 444.439562][ C0] ret_from_fork+0x45/0x80 [ 444.444056][ C0] ? __pfx_kthread+0x10/0x10 [ 444.448661][ C0] ret_from_fork_asm+0x1a/0x30 [ 444.453429][ C0] [ 444.456437][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 444.462757][ C0] Sending NMI from CPU 0 to CPUs 1: [ 444.467962][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20