last executing test programs: 6m45.055571731s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x3, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xffb}]}) 6m44.608363867s ago: executing program 4 (id=16): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x9}}, 0x18) 6m44.506764026s ago: executing program 4 (id=18): socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @random="a6e286036e89", @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 6m44.277379221s ago: executing program 4 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000002380)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x29101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) 6m44.135945394s ago: executing program 4 (id=21): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4}) mmap(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sync() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x141802, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000200), 0x12) 6m41.234358988s ago: executing program 4 (id=28): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81", 0xcb}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x7, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xaf, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d000100"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m39.742011489s ago: executing program 32 (id=28): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81", 0xcb}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x7, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xaf, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d000100"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m59.808165674s ago: executing program 1 (id=1663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) rename(0x0, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@keyring) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000580)={0xfffffffffffffffa, 0x101}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @local}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001000010700000000ffffffff"], 0x24}}, 0x20008080) 1m58.505520686s ago: executing program 1 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200ac14140d0c000280050001000000000008000740000000002000068008000100ac1414bb08000200e00000010c000380060002004e"], 0x84}}, 0x0) 1m54.100174386s ago: executing program 1 (id=1689): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) symlink(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m54.01767531s ago: executing program 1 (id=1691): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1m53.227918338s ago: executing program 1 (id=1692): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m52.729396597s ago: executing program 1 (id=1695): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x1d, 0x2, 0x6) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m52.402613632s ago: executing program 33 (id=1695): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x1d, 0x2, 0x6) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m16.148180252s ago: executing program 3 (id=1860): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) 1m15.798042032s ago: executing program 3 (id=1863): write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500"], 0xc8) 1m15.580736775s ago: executing program 3 (id=1866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1m14.74303284s ago: executing program 3 (id=1871): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1m14.696135493s ago: executing program 3 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000280)) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xf2, '\x00', 0x27b3, 0x4, 0xcd0a, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x7}, 0x20004004) 1m11.603984948s ago: executing program 3 (id=1882): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0xfffffffd, 0x38b}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x9, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x63, 0x0, 0x0) 1m11.43507131s ago: executing program 34 (id=1882): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0xfffffffd, 0x38b}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x9, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x63, 0x0, 0x0) 9.047318639s ago: executing program 5 (id=2090): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x9) r2 = socket(0x11, 0x3, 0x1b7e) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280)=0xb, 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x1800) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000340)=@get={0x1, &(0x7f0000000580)=""/4087, 0x6}) 8.17589113s ago: executing program 5 (id=2091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x30, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000410}, 0x20040000) 7.588146179s ago: executing program 5 (id=2093): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0], 0x0, 0x10, 0x6}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x109002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001c00)={0x1, [{0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xfff, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x2, 0x0, 0xf, 0x0}, {0x1, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x10, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x8000, 0x0}, {0x0, 0x0, 0x50, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x936, 0x0}, {0x0, 0x0, 0x81, 0x0}, {0x1, 0x0, 0x9, 0x0}]}) 7.379836674s ago: executing program 5 (id=2095): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f00000001c0)) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{@none}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x0, 0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) socket(0x29, 0x5, 0xc) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x17d) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.300645583s ago: executing program 5 (id=2104): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dy']) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 5.637480745s ago: executing program 2 (id=2105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setreuid(0xee01, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000240), 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x64, 0xffffffffffffffff, 0xfffffffffffffff4, 0x10, 0x9, 0x7ff, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0) 5.505087005s ago: executing program 0 (id=2108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000001902000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061796c006164000c00028008000240"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 5.492749806s ago: executing program 6 (id=2109): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 5.423488483s ago: executing program 0 (id=2110): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') r1 = fanotify_init(0x8, 0x0) fanotify_mark(r1, 0x1, 0x40000011, r0, 0x0) pread64(r0, &(0x7f0000000180)=""/116, 0x74, 0x3) io_uring_setup(0x2f9b, &(0x7f0000000240)={0x0, 0x8f1, 0x10000, 0x0, 0x328, 0x0, r0}) 5.296658943s ago: executing program 0 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write(r1, &(0x7f0000000200)="93f8", 0x2) 5.26292271s ago: executing program 0 (id=2112): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x8e}, &(0x7f0000000900), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1) socket$inet(0x2, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x3a3, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r3 = syz_clone(0x4c000, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo\x00') 4.545042009s ago: executing program 0 (id=2113): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4018045}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0) 4.424437784s ago: executing program 2 (id=2114): rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 4.41720029s ago: executing program 2 (id=2115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.317258995s ago: executing program 6 (id=2116): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3.12523663s ago: executing program 6 (id=2119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8a}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r2, 0x0, 0x0) write$sndseq(r2, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 2.271437579s ago: executing program 5 (id=2121): openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000aa3a3740480b032061390000000109021b000100000000090453000127a1410009058b"], 0x0) 2.217979768s ago: executing program 6 (id=2122): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') r1 = fanotify_init(0x8, 0x0) fanotify_mark(r1, 0x1, 0x40000011, r0, 0x0) pread64(r0, &(0x7f0000000180)=""/116, 0x74, 0x3) io_uring_setup(0x2f9b, &(0x7f0000000240)={0x0, 0x8f1, 0x10000, 0x0, 0x328, 0x0, r0}) 2.216831764s ago: executing program 7 (id=2123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.135877998s ago: executing program 2 (id=2124): mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) inotify_init1(0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r5, &(0x7f0000004440)=""/4096, 0x1000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0x5, 0x5, 0x5, 0xcd73, 0x3, 0x5}]}) socket$inet_udp(0x2, 0x2, 0x0) 2.064082242s ago: executing program 7 (id=2125): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x9, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 2.013582014s ago: executing program 6 (id=2126): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 1.888617602s ago: executing program 7 (id=2127): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x3, 0x8}}, 0x28) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 1.473987749s ago: executing program 7 (id=2128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000100)=0xfffffff7, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1}}], 0x2, 0x404c851) 1.078480982s ago: executing program 2 (id=2129): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.077673413s ago: executing program 7 (id=2130): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f00000000c0)=ANY=[]) 924.515025ms ago: executing program 7 (id=2131): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x4d3, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/vmcoreinfo', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4000000000007, 0x4000000000000ffc, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) 347.219964ms ago: executing program 0 (id=2132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, 0x0, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 133.511839ms ago: executing program 2 (id=2133): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) 0s ago: executing program 6 (id=2134): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) kernel console output (not intermixed with test programs): 18.777127][ T5819] usb 3-1: Manufacturer: syz [ 218.781710][ T5819] usb 3-1: SerialNumber: syz [ 218.796549][ T1608] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 218.832392][ T1608] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 218.848887][ T5819] usb 3-1: config 0 descriptor?? [ 218.892342][ T1608] usb 6-1: config 220 has no interface number 2 [ 218.912879][ T1608] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 218.982357][ T1608] usb 6-1: config 220 interface 0 has no altsetting 0 [ 219.029707][ T1608] usb 6-1: config 220 interface 76 has no altsetting 0 [ 219.065837][ T1608] usb 6-1: config 220 interface 1 has no altsetting 0 [ 219.102571][ T1608] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 219.132118][ T1608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.144676][ T5819] usb 3-1: selecting invalid altsetting 1 [ 219.150435][ T5819] sierra 3-1:0.9: Sierra USB modem converter detected [ 220.125612][ T1608] usb 6-1: Product: syz [ 220.129822][ T1608] usb 6-1: Manufacturer: syz [ 220.134862][ T1608] usb 6-1: SerialNumber: syz [ 220.143409][ T5819] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 220.163691][ T5819] usb 3-1: USB disconnect, device number 10 [ 220.449715][ T1608] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 220.469451][ T5819] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 220.503398][ T1608] uvcvideo 6-1:220.0: No valid video chain found. [ 220.516563][ T5819] sierra 3-1:0.9: device disconnected [ 220.543775][ T1608] usb 6-1: selecting invalid altsetting 0 [ 220.595208][ T1608] usb 6-1: selecting invalid altsetting 0 [ 220.619548][ T1608] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 220.661548][ T1608] usb 6-1: USB disconnect, device number 21 [ 221.015798][ T8066] fuse: Unknown parameter 'user_id00000000000000000000' [ 222.681149][ T8083] syzkaller0: entered promiscuous mode [ 222.921264][ T8083] syzkaller0: entered allmulticast mode [ 224.067777][ T29] audit: type=1400 audit(1771941684.937:592): avc: denied { create } for pid=8104 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.090843][ T29] audit: type=1400 audit(1771941684.957:593): avc: denied { write } for pid=8104 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.167976][ T29] audit: type=1400 audit(1771941684.957:594): avc: denied { read } for pid=8104 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 224.201173][ T29] audit: type=1400 audit(1771941684.957:595): avc: denied { module_request } for pid=8104 comm="syz.3.683" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 224.308950][ T29] audit: type=1400 audit(1771941685.097:596): avc: denied { sys_module } for pid=8104 comm="syz.3.683" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 224.456127][ T29] audit: type=1400 audit(1771941685.317:597): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.542422][ T29] audit: type=1400 audit(1771941685.317:598): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.609570][ T29] audit: type=1400 audit(1771941685.317:599): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.639961][ T29] audit: type=1400 audit(1771941685.407:600): avc: denied { wake_alarm } for pid=8109 comm="syz.0.684" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.710338][ T29] audit: type=1400 audit(1771941941.580:601): avc: denied { mounton } for pid=8115 comm="syz.0.686" path="/149/file0" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 224.710352][ T8116] kAFS: No cell specified [ 224.858316][ T8120] Bluetooth: MGMT ver 1.23 [ 224.925371][ T8122] input: syz1 as /devices/virtual/input/input10 [ 225.377478][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 226.215336][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.698'. [ 226.224474][ T8144] kAFS: No cell specified [ 226.228972][ T8143] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 226.358054][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 228.701433][ T8181] kAFS: No cell specified [ 228.838950][ T8187] ======================================================= [ 228.838950][ T8187] WARNING: The mand mount option has been deprecated and [ 228.838950][ T8187] and is ignored by this kernel. Remove the mand [ 228.838950][ T8187] option from the mount to silence this warning. [ 228.838950][ T8187] ======================================================= [ 228.927484][ T8191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.177290][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 229.177306][ T29] audit: type=1400 audit(1771941946.050:659): avc: denied { create } for pid=8201 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.245864][ T29] audit: type=1400 audit(1771941946.080:660): avc: denied { create } for pid=8200 comm="syz.2.720" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.506170][ T8206] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 229.687208][ T29] audit: type=1400 audit(1771941946.090:661): avc: denied { bind } for pid=8201 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.706853][ T29] audit: type=1400 audit(1771941946.090:662): avc: denied { write } for pid=8201 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.760181][ T29] audit: type=1400 audit(1771941946.380:663): avc: denied { create } for pid=8198 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.809582][ T29] audit: type=1400 audit(1771941946.380:664): avc: denied { write } for pid=8198 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.855424][ T29] audit: type=1400 audit(1771941946.650:665): avc: denied { create } for pid=8210 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.034862][ T8216] kAFS: No cell specified [ 230.039340][ T29] audit: type=1400 audit(1771941946.700:666): avc: denied { setopt } for pid=8210 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.270270][ T29] audit: type=1400 audit(1771941947.120:667): avc: denied { write } for pid=8217 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.588707][ T29] audit: type=1400 audit(1771941947.120:668): avc: denied { connect } for pid=8217 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.618632][ T8225] binder: 8224:8225 ioctl c0306201 0 returned -14 [ 231.087272][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'. [ 231.124924][ T8233] bond0: entered promiscuous mode [ 231.130411][ T8233] bond_slave_0: entered promiscuous mode [ 231.150064][ T8233] bond_slave_1: entered promiscuous mode [ 231.166552][ T8233] bond0: left promiscuous mode [ 231.182304][ T8233] bond_slave_0: left promiscuous mode [ 231.197611][ T8233] bond_slave_1: left promiscuous mode [ 231.423024][ T8246] kAFS: No cell specified [ 231.716002][ T8253] afs: Unknown parameter 'dy' [ 232.364151][ T8266] binder: 8265:8266 ioctl c0306201 0 returned -14 [ 232.564833][ T8273] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 232.564833][ T8273] program syz.0.737 not setting count and/or reply_len properly [ 232.912022][ T8279] kAFS: No cell specified [ 234.135016][ T8285] afs: Unknown parameter 'dy' [ 234.322631][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 234.322666][ T29] audit: type=1400 audit(1771941951.200:730): avc: denied { module_request } for pid=8294 comm="syz.2.752" kmod="ematch-kind-1764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 234.362302][ T29] audit: type=1326 audit(1771941951.230:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.0.749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2050f9c629 code=0x0 [ 234.425818][ T29] audit: type=1400 audit(1771941951.290:732): avc: denied { mounton } for pid=8287 comm="syz.0.749" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 234.482401][ T29] audit: type=1400 audit(1771941951.290:733): avc: denied { mount } for pid=8287 comm="syz.0.749" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 234.546262][ T29] audit: type=1400 audit(1771941951.290:734): avc: denied { create } for pid=8287 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.584637][ T8299] netlink: 48 bytes leftover after parsing attributes in process `syz.2.753'. [ 234.593557][ T29] audit: type=1400 audit(1771941951.290:735): avc: denied { connect } for pid=8287 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.593597][ T29] audit: type=1400 audit(1771941951.290:736): avc: denied { bind } for pid=8287 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.593633][ T29] audit: type=1400 audit(1771941951.290:737): avc: denied { write } for pid=8287 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.778737][ T29] audit: type=1400 audit(1771941951.650:738): avc: denied { read write } for pid=8300 comm="syz.2.754" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.826441][ T29] audit: type=1400 audit(1771941951.650:739): avc: denied { open } for pid=8300 comm="syz.2.754" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.013244][ T5894] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 235.067746][ T8303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.755'. [ 235.183736][ T5894] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 235.193595][ T5894] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 235.214900][ T5894] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.222311][ T8307] kAFS: No cell specified [ 235.241057][ T5894] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 235.282389][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.291451][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.314242][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 235.333921][ T5894] usb 3-1: Product: syz [ 235.338093][ T5894] usb 3-1: Manufacturer: syz [ 235.352454][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 235.361443][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 235.382304][ T5894] usb 3-1: SerialNumber: syz [ 235.412306][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 236.325611][ T8325] netlink: 48 bytes leftover after parsing attributes in process `syz.0.764'. [ 236.499933][ T5894] cdc_ncm 3-1:1.0: bind() failure [ 236.537110][ T5894] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 236.552585][ T5894] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 236.569582][ T5894] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 236.593114][ T5894] usb 3-1: USB disconnect, device number 11 [ 236.599568][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 237.204193][ T5880] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 237.412782][ T5880] usb 2-1: device descriptor read/64, error -71 [ 237.652355][ T5880] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 237.674706][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.780'. [ 237.802364][ T5880] usb 2-1: device descriptor read/64, error -71 [ 237.923044][ T5880] usb usb2-port1: attempt power cycle [ 238.442573][ T5880] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 238.460642][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 238.472801][ T5880] usb 2-1: device descriptor read/8, error -71 [ 238.712701][ T5880] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 238.742717][ T5880] usb 2-1: device descriptor read/8, error -71 [ 238.862877][ T5880] usb usb2-port1: unable to enumerate USB device [ 240.414636][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 240.414651][ T29] audit: type=1400 audit(1771941958.286:778): avc: denied { create } for pid=8428 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 240.540448][ T29] audit: type=1400 audit(1771941958.346:779): avc: denied { write } for pid=8428 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 240.733875][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 241.299298][ T29] audit: type=1400 audit(1771941959.166:780): avc: denied { ioctl } for pid=8443 comm="syz.1.813" path="socket:[18410]" dev="sockfs" ino=18410 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.488954][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.501760][ T8436] bridge_slave_1: left allmulticast mode [ 241.509103][ T8436] bridge_slave_1: left promiscuous mode [ 241.532528][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.567801][ T8440] ip6gretap0: entered promiscuous mode [ 241.594344][ T8440] macvtap1: entered promiscuous mode [ 241.599839][ T8440] macvtap1: entered allmulticast mode [ 241.614691][ T8440] ip6gretap0: entered allmulticast mode [ 241.646072][ T8441] ip6gretap0: left allmulticast mode [ 241.656008][ T8441] ip6gretap0: left promiscuous mode [ 241.829507][ T5894] IPVS: starting estimator thread 0... [ 241.846458][ T29] audit: type=1400 audit(1771941959.716:781): avc: denied { bind } for pid=8459 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.943956][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.815'. [ 241.977693][ T8464] vlan2: entered promiscuous mode [ 241.983445][ T8464] veth1_to_bridge: entered promiscuous mode [ 242.032435][ T8462] IPVS: using max 43 ests per chain, 103200 per kthread [ 242.309239][ T29] audit: type=1400 audit(1771941960.176:782): avc: denied { accept } for pid=8459 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.366884][ T29] audit: type=1400 audit(1771941960.196:783): avc: denied { write } for pid=8459 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.022537][ T29] audit: type=1400 audit(1771941961.866:784): avc: denied { read write } for pid=8480 comm="syz.2.826" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.169378][ T29] audit: type=1400 audit(1771941961.866:785): avc: denied { open } for pid=8480 comm="syz.2.826" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.466296][ T29] audit: type=1400 audit(1771941962.336:786): avc: denied { create } for pid=8495 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.587900][ T29] audit: type=1400 audit(1771941962.336:787): avc: denied { connect } for pid=8495 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.608912][ T29] audit: type=1400 audit(1771941962.636:788): avc: denied { create } for pid=8499 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.764619][ T29] audit: type=1400 audit(1771941963.486:789): avc: denied { setopt } for pid=8499 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.888170][ T29] audit: type=1400 audit(1771941963.756:790): avc: denied { read write } for pid=8505 comm="syz.3.836" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.924136][ T29] audit: type=1400 audit(1771941963.756:791): avc: denied { open } for pid=8505 comm="syz.3.836" path="/dev/input/event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 246.038646][ T29] audit: type=1400 audit(1771941963.906:792): avc: denied { ioctl } for pid=8505 comm="syz.3.836" path="/newroot/dev/input/event3" dev="devtmpfs" ino=924 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 246.171374][ T29] audit: type=1400 audit(1771941963.936:793): avc: denied { create } for pid=8515 comm="syz.5.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.224677][ T29] audit: type=1326 audit(1771941963.986:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6b39c629 code=0x7ffc0000 [ 246.331274][ T29] audit: type=1326 audit(1771941963.986:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f2d6b39c629 code=0x7ffc0000 [ 246.355033][ T29] audit: type=1326 audit(1771941963.986:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.1.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6b39c629 code=0x7ffc0000 [ 247.714905][ T8536] netlink: 84 bytes leftover after parsing attributes in process `syz.3.843'. [ 248.186308][ T24] kernel read not supported for file /mdstat (pid: 24 comm: kworker/1:0) [ 250.074899][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.081197][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.845777][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 251.845793][ T29] audit: type=1400 audit(1771941969.716:821): avc: denied { mounton } for pid=8592 comm="syz.3.863" path="/166/file0" dev="tmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 252.104707][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.864'. [ 252.196512][ T29] audit: type=1400 audit(1771941970.066:822): avc: denied { name_bind } for pid=8604 comm="syz.2.870" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 252.312861][ T29] audit: type=1400 audit(1771941970.186:823): avc: denied { wake_alarm } for pid=8613 comm="syz.0.873" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 252.390543][ T8616] xt_hashlimit: size too large, truncated to 1048576 [ 253.158347][ T29] audit: type=1400 audit(1771941970.926:824): avc: denied { bind } for pid=8628 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.266765][ T8633] netlink: 76 bytes leftover after parsing attributes in process `syz.5.879'. [ 253.393609][ T8637] xt_hashlimit: size too large, truncated to 1048576 [ 253.414743][ T29] audit: type=1400 audit(1771941971.276:825): avc: denied { read } for pid=8638 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.460502][ T29] audit: type=1400 audit(1771941971.326:826): avc: denied { connect } for pid=8636 comm="syz.0.882" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.511976][ T29] audit: type=1400 audit(1771941971.326:827): avc: denied { write } for pid=8636 comm="syz.0.882" laddr=fe80::13 lport=60 faddr=fe80::aa fport=20132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.575882][ T29] audit: type=1400 audit(1771941971.366:828): avc: denied { write } for pid=8638 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.632338][ T29] audit: type=1400 audit(1771941971.476:829): avc: denied { create } for pid=8641 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 253.683229][ T29] audit: type=1400 audit(1771941971.486:830): avc: denied { read } for pid=8641 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 253.752549][ T8645] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 253.915775][ T8651] xt_hashlimit: size too large, truncated to 1048576 [ 255.841703][ T8647] lo speed is unknown, defaulting to 1000 [ 255.847953][ T8647] lo speed is unknown, defaulting to 1000 [ 255.856604][ T8647] lo speed is unknown, defaulting to 1000 [ 255.866174][ T8647] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 255.880669][ T8647] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 255.945116][ T8647] lo speed is unknown, defaulting to 1000 [ 255.981971][ T8647] lo speed is unknown, defaulting to 1000 [ 255.993920][ T8647] lo speed is unknown, defaulting to 1000 [ 256.000371][ T8647] lo speed is unknown, defaulting to 1000 [ 256.021669][ T8647] lo speed is unknown, defaulting to 1000 [ 256.038712][ T8647] lo speed is unknown, defaulting to 1000 [ 256.449239][ T8695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.727367][ T82] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 256.824087][ T8697] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 257.283757][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 257.283773][ T29] audit: type=1400 audit(1771941975.156:838): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 257.481682][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 257.559924][ T29] audit: type=1400 audit(1771941975.426:839): avc: denied { write } for pid=8700 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.958622][ T8711] hsr0: entered promiscuous mode [ 258.233257][ T29] audit: type=1400 audit(1771941976.096:840): avc: denied { write } for pid=8706 comm="syz.3.906" path="socket:[19085]" dev="sockfs" ino=19085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.833250][ T5880] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 258.869135][ T8733] fuse: Bad value for 'fd' [ 258.998530][ T5880] usb 6-1: device descriptor read/64, error -71 [ 259.350569][ T5880] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 260.593467][ T5880] usb 6-1: device descriptor read/64, error -71 [ 260.704552][ T5880] usb usb6-port1: attempt power cycle [ 260.750856][ T8749] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 260.750856][ T8749] program syz.2.919 not setting count and/or reply_len properly [ 262.104533][ T29] audit: type=1400 audit(1771941979.826:841): avc: denied { map } for pid=8760 comm="syz.2.925" path="socket:[20022]" dev="sockfs" ino=20022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 263.132765][ T8767] 9pnet_fd: Insufficient options for proto=fd [ 264.213015][ T29] audit: type=1400 audit(1771941982.076:842): avc: denied { read write } for pid=8770 comm="syz.3.927" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 264.281265][ T8779] fuse: Bad value for 'fd' [ 265.104364][ T29] audit: type=1400 audit(1771941982.076:843): avc: denied { open } for pid=8770 comm="syz.3.927" path="/175/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 265.149218][ T29] audit: type=1400 audit(1771941983.016:844): avc: denied { bind } for pid=8780 comm="syz.5.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.231521][ T29] audit: type=1400 audit(1771941983.056:845): avc: denied { setopt } for pid=8780 comm="syz.5.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.486618][ T8791] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 265.486618][ T8791] program syz.2.932 not setting count and/or reply_len properly [ 266.569042][ T29] audit: type=1400 audit(1771941984.406:846): avc: denied { getopt } for pid=8798 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.702544][ T29] audit: type=1400 audit(1771941984.576:847): avc: denied { map } for pid=8802 comm="syz.3.938" path="socket:[19263]" dev="sockfs" ino=19263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 266.785728][ T29] audit: type=1400 audit(1771941984.656:848): avc: denied { setopt } for pid=8808 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.947155][ T8817] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 267.193774][ T29] audit: type=1400 audit(1771941985.056:849): avc: denied { create } for pid=8827 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 267.282703][ T29] audit: type=1400 audit(1771941985.086:850): avc: denied { getopt } for pid=8827 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 268.264388][ T8852] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 269.066891][ T29] audit: type=1400 audit(1771941986.926:851): avc: denied { nlmsg_write } for pid=8856 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 269.376627][ T8858] syzkaller1: entered promiscuous mode [ 269.382126][ T8858] syzkaller1: entered allmulticast mode [ 269.422989][ T29] audit: type=1400 audit(1771941986.926:852): avc: denied { bind } for pid=8856 comm="syz.1.960" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.588334][ T8875] erspan1: entered promiscuous mode [ 270.690224][ T29] audit: type=1400 audit(1771941988.546:853): avc: denied { block_suspend } for pid=8896 comm="syz.3.975" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 271.535846][ T8939] vlan2: entered allmulticast mode [ 271.541350][ T8939] bridge0: port 3(vlan2) entered blocking state [ 271.547940][ T8939] bridge0: port 3(vlan2) entered disabled state [ 271.556719][ T8939] vlan2: entered promiscuous mode [ 271.921509][ T8947] netlink: 92 bytes leftover after parsing attributes in process `syz.5.992'. [ 271.942386][ T8947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.992'. [ 272.051541][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 272.060624][ T8949] netlink: 'syz.5.993': attribute type 8 has an invalid length. [ 272.068760][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.993'. [ 272.092156][ T8949] geneve2: entered promiscuous mode [ 272.097541][ T8949] geneve2: entered allmulticast mode [ 272.154845][ T29] audit: type=1400 audit(1771941990.026:854): avc: denied { ioctl } for pid=8950 comm="syz.2.994" path="socket:[20255]" dev="sockfs" ino=20255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 272.362305][ T29] audit: type=1400 audit(1771941990.226:855): avc: denied { append } for pid=8955 comm="syz.5.997" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 272.622476][ T8966] netlink: 'syz.0.999': attribute type 4 has an invalid length. [ 273.200555][ T29] audit: type=1400 audit(1771941991.066:856): avc: denied { name_connect } for pid=8974 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 273.413861][ T29] audit: type=1400 audit(1771941991.276:857): avc: denied { ioctl } for pid=8974 comm="syz.3.1004" path="socket:[20301]" dev="sockfs" ino=20301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.492766][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1009'. [ 273.634434][ T29] audit: type=1400 audit(1771941991.496:858): avc: denied { execute } for pid=8994 comm="syz.5.1011" name="file1" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 273.795660][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 273.806246][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 273.826215][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 273.844467][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 275.425656][ T29] audit: type=1326 audit(1771941993.286:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 275.609841][ T29] audit: type=1326 audit(1771941993.286:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 276.113534][ T29] audit: type=1326 audit(1771941993.296:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 276.522471][ T9038] syzkaller0: entered promiscuous mode [ 276.527939][ T9038] syzkaller0: entered allmulticast mode [ 276.588356][ T29] audit: type=1326 audit(1771941993.296:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 276.732305][ T29] audit: type=1326 audit(1771941993.296:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 276.794663][ T29] audit: type=1326 audit(1771941993.296:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 276.888992][ T29] audit: type=1326 audit(1771941993.296:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 276.993733][ T29] audit: type=1326 audit(1771941993.326:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 277.070679][ T29] audit: type=1326 audit(1771941993.326:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f300359c629 code=0x7ffc0000 [ 277.775969][ T29] audit: type=1400 audit(1771941995.646:868): avc: denied { mount } for pid=9070 comm="syz.0.1041" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 278.675428][ T9102] gretap0: entered promiscuous mode [ 279.508862][ T9133] 9pnet_fd: Insufficient options for proto=fd [ 280.457494][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 280.457509][ T29] audit: type=1400 audit(1771941998.326:875): avc: denied { write } for pid=9150 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 281.554490][ T9188] syzkaller0: entered promiscuous mode [ 281.560054][ T9188] syzkaller0: entered allmulticast mode [ 282.312876][ T29] audit: type=1400 audit(1771942000.176:876): avc: denied { watch } for pid=9197 comm="syz.1.1092" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 282.876257][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.884072][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.894790][ T9217] bridge0: entered allmulticast mode [ 283.045988][ T9217] bridge_slave_1: left allmulticast mode [ 283.059633][ T29] audit: type=1326 audit(1771942000.926:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.0.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2050f9c629 code=0x7ffc0000 [ 283.093915][ T9217] bridge_slave_1: left promiscuous mode [ 283.108726][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.133378][ T29] audit: type=1326 audit(1771942000.956:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.0.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2050f9c629 code=0x7ffc0000 [ 283.228403][ T29] audit: type=1326 audit(1771942000.956:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.0.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2050f9c629 code=0x7ffc0000 [ 283.294184][ T9217] bridge_slave_0: left allmulticast mode [ 283.315534][ T9217] bridge_slave_0: left promiscuous mode [ 283.358386][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.379839][ T29] audit: type=1326 audit(1771942000.976:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.0.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f2050f9c629 code=0x7ffc0000 [ 283.446685][ T29] audit: type=1326 audit(1771942000.976:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.0.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2050f9c629 code=0x7ffc0000 [ 283.493963][ T29] audit: type=1326 audit(1771942000.976:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.0.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2050f9c629 code=0x7ffc0000 [ 283.517708][ T29] audit: type=1326 audit(1771942000.976:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.0.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2050f9c629 code=0x7ffc0000 [ 283.750568][ T29] audit: type=1326 audit(1771942000.976:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.0.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2050f9c629 code=0x7ffc0000 [ 286.448836][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 286.449022][ T29] audit: type=1400 audit(1771942004.316:887): avc: denied { load_policy } for pid=9270 comm="syz.1.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 286.476810][ T9271] SELinux: policydb version 0 does not match my version range 15-35 [ 286.485417][ T9271] SELinux: failed to load policy [ 286.908838][ T9283] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 287.220025][ T29] audit: type=1400 audit(1771942004.776:888): avc: denied { mac_admin } for pid=9277 comm="syz.1.1125" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 287.427763][ T29] audit: type=1400 audit(1771942004.796:889): avc: denied { relabelto } for pid=9277 comm="syz.1.1125" name="devices.allow" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:admin_passwd_exec_t:s0" [ 287.488944][ T29] audit: type=1400 audit(1771942004.796:890): avc: denied { associate } for pid=9277 comm="syz.1.1125" name="devices.allow" dev="cgroup" ino=82 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:admin_passwd_exec_t:s0" [ 287.521743][ T9292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1129'. [ 287.569226][ T29] audit: type=1400 audit(1771942005.186:891): avc: denied { read write } for pid=9277 comm="syz.1.1125" name="devices.allow" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:admin_passwd_exec_t:s0" [ 287.743675][ T29] audit: type=1400 audit(1771942005.186:892): avc: denied { open } for pid=9277 comm="syz.1.1125" path="/syzcgroup/net/syz1/devices.allow" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:admin_passwd_exec_t:s0" [ 287.921131][ T29] audit: type=1400 audit(1771942005.396:893): avc: denied { bind } for pid=9291 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.061444][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.695181][ T29] audit: type=1400 audit(1771942006.566:894): avc: denied { mount } for pid=9320 comm="syz.2.1136" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 289.737913][ T29] audit: type=1400 audit(1771942007.556:895): avc: denied { create } for pid=9342 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 292.441149][ T29] audit: type=1400 audit(1771942010.306:896): avc: denied { mount } for pid=9387 comm="syz.0.1160" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 293.530762][ T29] audit: type=1400 audit(1771942011.396:897): avc: denied { accept } for pid=9422 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.844694][ T29] audit: type=1400 audit(1771942011.716:898): avc: denied { listen } for pid=9435 comm="syz.0.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.909230][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1190'. [ 294.922058][ T9465] syzkaller0: entered promiscuous mode [ 294.934563][ T9465] syzkaller0: entered allmulticast mode [ 296.930929][ T9491] žÿ: renamed from bond0 (while UP) [ 297.320201][ T9491] 9p: Bad value for 'rfdno' [ 297.829271][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 297.988090][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'. [ 298.126594][ T29] audit: type=1400 audit(1771942015.996:899): avc: denied { shutdown } for pid=9524 comm="syz.2.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.259407][ T29] audit: type=1400 audit(1771942017.126:900): avc: denied { write } for pid=9538 comm="syz.1.1217" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 299.294773][ T9539] usb usb9: usbfs: process 9539 (syz.1.1217) did not claim interface 9 before use [ 299.421049][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1218'. [ 299.484730][ T9543] vlan2: entered promiscuous mode [ 299.489783][ T9543] gretap0: entered promiscuous mode [ 299.632098][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 299.830729][ T9521] kexec: Could not allocate control_code_buffer [ 301.036055][ T29] audit: type=1400 audit(1771942018.906:901): avc: denied { listen } for pid=9577 comm="syz.2.1232" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.592360][ T5821] Bluetooth: hci5: command 0x1003 tx timeout [ 301.745936][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 301.835408][ T29] audit: type=1400 audit(1771942019.706:902): avc: denied { connect } for pid=9604 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.897898][ T29] audit: type=1400 audit(1771942019.766:903): avc: denied { read write } for pid=9606 comm="syz.5.1244" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 301.921961][ T29] audit: type=1400 audit(1771942019.766:904): avc: denied { open } for pid=9606 comm="syz.5.1244" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 303.007670][ T9630] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1252'. [ 303.061705][ T9630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.085622][ T9630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.124213][ T9630] bond0 (unregistering): Released all slaves [ 303.140365][ T29] audit: type=1400 audit(1771942020.996:905): avc: denied { create } for pid=9621 comm="syz.1.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.204075][ T29] audit: type=1400 audit(1771942021.006:906): avc: denied { read } for pid=9621 comm="syz.1.1250" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 303.283378][ T29] audit: type=1400 audit(1771942021.076:907): avc: denied { listen } for pid=9621 comm="syz.1.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 305.209327][ T29] audit: type=1400 audit(1771942023.076:908): avc: denied { setopt } for pid=9655 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.361496][ T29] audit: type=1400 audit(1771942023.226:909): avc: denied { bind } for pid=9655 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 308.009697][ T29] audit: type=1400 audit(1771942025.876:910): avc: denied { create } for pid=9675 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 308.056959][ T29] audit: type=1400 audit(1771942025.876:911): avc: denied { bind } for pid=9675 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 308.094367][ T29] audit: type=1400 audit(1771942025.876:912): avc: denied { setopt } for pid=9675 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 308.157649][ T29] audit: type=1400 audit(1771942025.876:913): avc: denied { read write } for pid=9675 comm="syz.1.1267" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 308.226894][ T29] audit: type=1400 audit(1771942025.876:914): avc: denied { open } for pid=9675 comm="syz.1.1267" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 310.860950][ T29] audit: type=1400 audit(1771942028.726:915): avc: denied { setopt } for pid=9761 comm="syz.5.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 311.466083][ T9773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1304'. [ 311.498361][ T9773] vlan2: entered promiscuous mode [ 311.513832][ T9773] gretap0: entered promiscuous mode [ 311.524474][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.531227][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.790735][ T9778] syzkaller0: entered promiscuous mode [ 311.815642][ T9778] syzkaller0: entered allmulticast mode [ 314.160198][ T9817] netlink: 5204 bytes leftover after parsing attributes in process `syz.3.1319'. [ 314.175504][ T9817] nbd: socks must be embedded in a SOCK_ITEM attr [ 314.453248][ T9826] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1322'. [ 314.507761][ T29] audit: type=1400 audit(1771942032.366:916): avc: denied { write } for pid=9829 comm="syz.0.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.549651][ T9826] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1322'. [ 315.498203][ T9857] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1335'. [ 315.769536][ T9873] netlink: 'syz.5.1342': attribute type 10 has an invalid length. [ 316.008828][ T9886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9886 comm=syz.1.1348 [ 316.252381][ T9893] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1351'. [ 316.543855][ T9901] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1353'. [ 316.701764][ T9902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1353'. [ 317.014137][ T29] audit: type=1400 audit(1771942034.876:917): avc: denied { write } for pid=9915 comm="syz.0.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 317.220839][ T29] audit: type=1400 audit(1771942035.036:918): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 317.450485][ T9948] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1375'. [ 317.784286][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 317.802331][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 317.868793][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'. [ 317.878042][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'. [ 318.021488][ T9981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9981 comm=syz.3.1391 [ 318.266818][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'. [ 318.283522][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'. [ 318.594401][T10024] netlink: 'syz.1.1410': attribute type 10 has an invalid length. [ 318.717194][T10024] team0: Device vxcan1 is of different type [ 318.829228][T10035] netlink: 'syz.3.1415': attribute type 10 has an invalid length. [ 318.856467][T10035] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1415'. [ 318.894345][ T29] audit: type=1400 audit(1771942036.726:919): avc: denied { name_bind } for pid=10036 comm="syz.1.1416" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 318.899967][T10035] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 318.916355][ T29] audit: type=1400 audit(1771942036.746:920): avc: denied { name_connect } for pid=10036 comm="syz.1.1416" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 319.278197][ T82] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.599053][ T29] audit: type=1400 audit(1771942038.446:921): avc: denied { read } for pid=10086 comm="syz.1.1436" path="socket:[23902]" dev="sockfs" ino=23902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.975352][T10154] __nla_validate_parse: 4 callbacks suppressed [ 321.975372][T10154] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1461'. [ 322.238480][T10150] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1461'. [ 322.249018][T10158] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1461'. [ 322.421377][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'. [ 323.637362][T10193] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1476'. [ 327.049702][ T29] audit: type=1400 audit(1771942044.916:922): avc: denied { write } for pid=10295 comm="syz.3.1519" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 327.049746][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 327.142352][ T5880] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 327.253651][ T29] audit: type=1400 audit(1771942045.126:923): avc: denied { ioctl } for pid=10303 comm="syz.0.1522" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24188 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 327.391922][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 328.197270][ T5880] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 328.207336][ T5880] usb 2-1: config 0 has no interface number 0 [ 328.224320][ T5880] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 328.255486][ T5880] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 328.268623][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.281126][ T5880] usb 2-1: Product: syz [ 328.333847][ T5880] usb 2-1: Manufacturer: syz [ 328.338952][ T5880] usb 2-1: SerialNumber: syz [ 328.366966][ T5880] usb 2-1: config 0 descriptor?? [ 328.695764][T10283] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.966005][ T5880] asix 2-1:0.188: probe with driver asix failed with error -71 [ 329.035403][ T5880] usb 2-1: USB disconnect, device number 20 [ 330.385205][ T29] audit: type=1400 audit(1771942048.256:924): avc: denied { read write } for pid=10364 comm="syz.3.1525" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 330.523059][ T29] audit: type=1400 audit(1771942048.286:925): avc: denied { open } for pid=10364 comm="syz.3.1525" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 331.157583][T10381] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1548'. [ 331.549376][T10401] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1556'. [ 334.388115][T10437] lo speed is unknown, defaulting to 1000 [ 335.577024][T10468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10468 comm=syz.0.1582 [ 337.442357][ T5814] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 337.602430][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 337.866895][ T5814] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 337.885597][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.901228][ T5814] usb 4-1: Product: syz [ 337.905606][ T5814] usb 4-1: Manufacturer: syz [ 337.910253][ T5814] usb 4-1: SerialNumber: syz [ 337.922132][ T5814] r8152-cfgselector 4-1: Unknown version 0x0000 [ 337.933559][ T5814] r8152-cfgselector 4-1: config 0 descriptor?? [ 338.175265][ T29] audit: type=1400 audit(1771942312.016:926): avc: denied { read } for pid=10495 comm="syz.3.1590" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 338.215315][ T5814] r8152-cfgselector 4-1: Unknown version 0x0000 [ 338.226570][ T5814] r8152-cfgselector 4-1: bad CDC descriptors [ 338.228925][ T29] audit: type=1400 audit(1771942312.026:927): avc: denied { open } for pid=10495 comm="syz.3.1590" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 338.273091][ T5814] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 338.276284][ T29] audit: type=1400 audit(1771942312.026:928): avc: denied { ioctl } for pid=10495 comm="syz.3.1590" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 338.350902][ T29] audit: type=1400 audit(1771942312.216:929): avc: denied { append } for pid=10510 comm="syz.2.1595" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 338.416473][ T29] audit: type=1400 audit(1771942312.246:930): avc: denied { read } for pid=10510 comm="syz.2.1595" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.454413][ T29] audit: type=1400 audit(1771942312.246:931): avc: denied { open } for pid=10510 comm="syz.2.1595" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 339.454897][T10518] lo speed is unknown, defaulting to 1000 [ 339.941443][T10534] binder: BINDER_SET_CONTEXT_MGR already set [ 339.947813][T10534] binder: 10529:10534 ioctl 4018620d 200000004a80 returned -16 [ 340.081474][T10542] fuse: Bad value for 'fd' [ 340.390484][T10554] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1612'. [ 342.802338][ T29] audit: type=1400 audit(1771942316.666:932): avc: denied { map } for pid=10583 comm="syz.5.1623" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.324648][T10586] lo speed is unknown, defaulting to 1000 [ 345.363085][T10610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1631'. [ 345.389882][T10613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1626'. [ 346.036875][ T29] audit: type=1400 audit(1771942319.896:933): avc: denied { getopt } for pid=10636 comm="syz.1.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.442316][ T5819] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 346.601623][T10652] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1646'. [ 346.622483][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 346.629214][ T5819] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 346.641993][ T5819] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 346.661305][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.714408][ T5819] usb 2-1: Product: syz [ 346.744889][ T5819] usb 2-1: Manufacturer: syz [ 346.749488][ T5819] usb 2-1: SerialNumber: syz [ 347.530824][ T5819] usb 2-1: config 0 descriptor?? [ 347.545878][T10642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 348.434222][ T5819] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.662317][ T5819] usb 2-1: USB disconnect, device number 21 [ 348.838055][T10672] syzkaller1: entered promiscuous mode [ 348.852347][T10672] syzkaller1: entered allmulticast mode [ 349.693068][ T29] audit: type=1400 audit(1771942323.306:934): avc: denied { ioctl } for pid=10680 comm="syz.3.1658" path="socket:[25846]" dev="sockfs" ino=25846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.913636][T10692] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1659'. [ 350.526802][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.491556][ T29] audit: type=1400 audit(1771942325.356:935): avc: denied { nlmsg_read } for pid=10711 comm="syz.5.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 352.101749][T10736] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 352.101749][T10736] program syz.5.1671 not setting count and/or reply_len properly [ 352.614396][T10742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1676'. [ 354.083473][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 354.267900][T10757] syz_tun: entered allmulticast mode [ 354.424357][T10754] syz_tun: left allmulticast mode [ 355.878790][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1686'. [ 357.298835][ T5802] syz_tun (unregistering): left allmulticast mode [ 357.534326][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.587193][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 357.725900][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.789698][T10814] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 357.864802][ T29] audit: type=1400 audit(1771942331.696:936): avc: denied { accept } for pid=10816 comm="syz.0.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 357.943937][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.953715][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.961415][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.971015][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.980647][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.006505][ T29] audit: type=1400 audit(1771942331.856:937): avc: denied { mounton } for pid=10819 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 358.430263][T10809] macvlan2: entered promiscuous mode [ 358.441699][T10809] macvlan2: entered allmulticast mode [ 358.448362][T10809] bond1: entered promiscuous mode [ 358.462286][T10809] bridge1: entered promiscuous mode [ 358.468378][T10809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.966790][T10809] bond1: left promiscuous mode [ 358.978614][T10809] bridge1: left promiscuous mode [ 359.049185][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.117391][T10819] lo speed is unknown, defaulting to 1000 [ 359.228167][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.362327][ T5894] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 359.428303][ T29] audit: type=1400 audit(1771942333.296:938): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 359.492462][ T29] audit: type=1400 audit(1771942333.326:939): avc: denied { search } for pid=5472 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.549618][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 359.561633][T10819] chnl_net:caif_netlink_parms(): no params data found [ 359.562578][ T29] audit: type=1400 audit(1771942333.326:940): avc: denied { search } for pid=5472 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.592021][ T61] bridge_slave_1: left allmulticast mode [ 359.601323][ T29] audit: type=1400 audit(1771942333.326:941): avc: denied { search } for pid=5472 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.623705][ T61] bridge_slave_1: left promiscuous mode [ 359.629696][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.638256][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 359.653896][ T61] bridge_slave_0: left allmulticast mode [ 359.672924][ T5894] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 359.682045][ T61] bridge_slave_0: left promiscuous mode [ 359.682822][ T29] audit: type=1400 audit(1771942333.326:942): avc: denied { read } for pid=5472 comm="dhcpcd" name="n104" dev="tmpfs" ino=7277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.692118][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 359.722448][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.740362][ T5894] usb 4-1: Product: syz [ 359.744781][ T5894] usb 4-1: Manufacturer: syz [ 359.750273][ T5894] usb 4-1: SerialNumber: syz [ 359.758288][ T5894] usb 4-1: config 0 descriptor?? [ 359.767341][ T29] audit: type=1400 audit(1771942333.326:943): avc: denied { open } for pid=5472 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=7277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.768208][T10831] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.800726][ T29] audit: type=1400 audit(1771942333.326:944): avc: denied { getattr } for pid=5472 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=7277 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.850901][ T5894] hub 4-1:0.0: bad descriptor, ignoring hub [ 359.884803][ T5894] hub 4-1:0.0: probe with driver hub failed with error -5 [ 359.898311][ T29] audit: type=1400 audit(1771942333.526:945): avc: denied { read open } for pid=10848 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.905332][T10850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.026057][T10850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.072485][ T5821] Bluetooth: hci0: command tx timeout [ 360.118712][T10850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.264878][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.298760][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.336344][ T61] bond0 (unregistering): Released all slaves [ 361.053267][T10831] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 361.065307][T10831] usb 4-1: device reset changed ep0 maxpacket size! [ 361.082371][ T5819] usb 4-1: USB disconnect, device number 11 [ 361.178193][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.185425][T10819] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.194586][T10819] bridge_slave_0: entered allmulticast mode [ 361.203177][T10819] bridge_slave_0: entered promiscuous mode [ 361.222625][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.229773][T10819] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.237982][T10819] bridge_slave_1: entered allmulticast mode [ 361.243282][ T5819] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 361.248233][T10819] bridge_slave_1: entered promiscuous mode [ 361.335999][ T61] hsr_slave_0: left promiscuous mode [ 361.348312][ T61] hsr_slave_1: left promiscuous mode [ 361.361941][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.370711][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.381135][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.400808][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.436293][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 361.442972][ T61] veth1_macvtap: left promiscuous mode [ 361.443392][ T5819] usb 4-1: config 0 has no interfaces? [ 361.448454][ T61] veth0_macvtap: left promiscuous mode [ 361.461418][ T61] veth1_vlan: left promiscuous mode [ 361.466418][ T5819] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 361.480240][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.484531][ T61] veth0_vlan: left promiscuous mode [ 361.512319][ T5819] usb 4-1: Product: syz [ 361.516529][ T5819] usb 4-1: Manufacturer: syz [ 361.521118][ T5819] usb 4-1: SerialNumber: syz [ 361.563825][ T5819] usb 4-1: config 0 descriptor?? [ 361.771513][T10920] futex_wake_op: syz.0.1720 tries to shift op by 32; fix this program [ 362.378781][T10920] xt_hashlimit: max too large, truncated to 1048576 [ 362.392729][ T5821] Bluetooth: hci0: command tx timeout [ 362.417333][ T5894] usb 4-1: USB disconnect, device number 12 [ 362.751278][ T61] team0 (unregistering): Port device team_slave_1 removed [ 362.921069][ T61] team0 (unregistering): Port device team_slave_0 removed [ 363.258361][T10819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.294742][T10819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.409039][T10819] team0: Port device team_slave_0 added [ 363.463318][T10819] team0: Port device team_slave_1 added [ 363.501525][T10819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.547080][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.677477][T10819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.718052][ T61] IPVS: stop unused estimator thread 0... [ 363.725074][T10819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.735157][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.850934][T10819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.344104][T10819] hsr_slave_0: entered promiscuous mode [ 364.351561][T10819] hsr_slave_1: entered promiscuous mode [ 364.358718][T10819] debugfs: 'hsr0' already exists in 'hsr' [ 364.364978][T10819] Cannot create hsr debugfs directory [ 364.482539][ T5821] Bluetooth: hci0: command tx timeout [ 364.673480][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1735'. [ 365.689127][T10819] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.735400][T10819] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.763392][T10819] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.801461][T10819] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.845967][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 365.845983][ T29] audit: type=1400 audit(1771942339.716:988): avc: denied { write } for pid=10984 comm="syz.2.1739" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 365.930905][ T29] audit: type=1400 audit(1771942339.746:989): avc: denied { open } for pid=10984 comm="syz.2.1739" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 365.930946][ T29] audit: type=1400 audit(1771942339.746:990): avc: denied { ioctl } for pid=10984 comm="syz.2.1739" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 366.104135][T10819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.138668][T10819] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.182645][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.189788][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.248925][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.256080][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.572344][ T5821] Bluetooth: hci0: command tx timeout [ 366.752450][ T29] audit: type=1400 audit(1771942340.576:991): avc: denied { listen } for pid=11018 comm="syz.3.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 367.082509][ T29] audit: type=1400 audit(1771942340.576:992): avc: denied { accept } for pid=11018 comm="syz.3.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 368.196518][T10819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.447636][T10819] veth0_vlan: entered promiscuous mode [ 369.492110][T10819] veth1_vlan: entered promiscuous mode [ 369.585365][T10819] veth0_macvtap: entered promiscuous mode [ 369.598355][T10819] veth1_macvtap: entered promiscuous mode [ 369.630184][T10819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.759551][T10819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.801493][ T82] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.252006][ T82] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.301190][ T82] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.339882][ T3572] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.411512][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.439269][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.526077][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.535658][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.602384][ T29] audit: type=1400 audit(1771942344.416:993): avc: denied { mounton } for pid=10819 comm="syz-executor" path="/root/syzkaller.FDNIxK/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 370.692992][ T29] audit: type=1400 audit(1771942344.416:994): avc: denied { mounton } for pid=10819 comm="syz-executor" path="/root/syzkaller.FDNIxK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 370.739815][ T29] audit: type=1400 audit(1771942344.426:995): avc: denied { mounton } for pid=10819 comm="syz-executor" path="/root/syzkaller.FDNIxK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 371.793766][ T29] audit: type=1400 audit(1771942344.436:996): avc: denied { unmount } for pid=10819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 371.875315][ T29] audit: type=1400 audit(1771942344.526:997): avc: denied { mounton } for pid=10819 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 372.111086][ T29] audit: type=1400 audit(1771942344.526:998): avc: denied { mount } for pid=10819 comm="syz-executor" name="/" dev="gadgetfs" ino=7000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 372.278478][ T29] audit: type=1400 audit(1771942344.526:999): avc: denied { mount } for pid=10819 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 372.308776][ T29] audit: type=1400 audit(1771942344.526:1000): avc: denied { mounton } for pid=10819 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 372.353499][ T5880] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 372.393638][ T29] audit: type=1400 audit(1771942344.556:1001): avc: denied { write } for pid=11102 comm="syz.2.1765" path="socket:[27796]" dev="sockfs" ino=27796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.572272][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 372.593833][ T29] audit: type=1400 audit(1771942344.556:1002): avc: denied { read } for pid=11102 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.594781][ T5880] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 373.054190][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.065136][ T5880] usb 7-1: config 0 descriptor?? [ 373.072846][ T5880] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 373.082894][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.089180][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.106014][ T29] audit: type=1400 audit(1771942345.886:1003): avc: denied { listen } for pid=11118 comm="syz.6.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 373.126521][ T5880] usb 7-1: Detected FT2233HP [ 373.157855][ T29] audit: type=1400 audit(1771942346.566:1004): avc: denied { getopt } for pid=11128 comm="syz.2.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.274131][ T5880] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 373.301785][ T5880] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 373.325941][ T5880] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 373.399428][ T5880] usb 7-1: USB disconnect, device number 2 [ 373.422761][ T5880] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 373.455225][ T5880] ftdi_sio 7-1:0.0: device disconnected [ 373.468290][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1775'. [ 373.633681][ T29] audit: type=1400 audit(1771942347.486:1005): avc: denied { write } for pid=11145 comm="syz.5.1778" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 375.286743][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 376.442331][T11213] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 377.998806][T11235] loop6: detected capacity change from 0 to 524288000 [ 378.009355][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 378.009369][ T29] audit: type=1400 audit(1771942351.866:1010): avc: denied { read write } for pid=11225 comm="syz.5.1805" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.236438][ T29] audit: type=1400 audit(1771942351.866:1011): avc: denied { open } for pid=11225 comm="syz.5.1805" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 378.270857][T11242] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1805'. [ 378.384740][T11235] bond0: option ad_user_port_key: invalid value (48421) [ 378.434066][T11235] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 378.503676][T11235] bond0 (unregistering): Released all slaves [ 378.552501][ T29] audit: type=1400 audit(1771942351.866:1012): avc: denied { append } for pid=11225 comm="syz.5.1805" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 378.739816][ T29] audit: type=1400 audit(1771942352.416:1013): avc: denied { append } for pid=11233 comm="syz.6.1808" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.101566][T11275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1814'. [ 381.108942][T11285] Bluetooth: MGMT ver 1.23 [ 381.736778][T11287] futex_wake_op: syz.3.1818 tries to shift op by 32; fix this program [ 382.580201][ T82] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 382.937295][T11304] syzkaller0: entered promiscuous mode [ 382.945113][T11304] syzkaller0: entered allmulticast mode [ 384.792400][ T5880] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 384.973942][ T5880] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 385.022291][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.054828][ T5880] usb 6-1: config 0 descriptor?? [ 385.099698][ T5880] cp210x 6-1:0.0: cp210x converter detected [ 385.756752][ T5880] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 385.859093][ T5880] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 385.894842][ T5880] usb 6-1: cp210x converter now attached to ttyUSB0 [ 385.939530][ T5880] usb 6-1: USB disconnect, device number 25 [ 385.958817][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 385.978367][ T5880] cp210x 6-1:0.0: device disconnected [ 386.173269][T11363] futex_wake_op: syz.2.1835 tries to shift op by 32; fix this program [ 387.327256][ T29] audit: type=1400 audit(1771942361.196:1014): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 387.532554][ T5880] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 387.648340][ T29] audit: type=1400 audit(1771942361.506:1015): avc: denied { setattr } for pid=11376 comm="syz.3.1825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 388.407401][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.449149][ T5880] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 388.622246][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.642526][ T5880] usb 6-1: config 0 descriptor?? [ 389.455010][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 389.475352][ T5880] pwc: recv_control_msg error -32 req 02 val 2b00 [ 389.482497][ T5880] pwc: recv_control_msg error -32 req 02 val 2700 [ 389.489548][ T5880] pwc: recv_control_msg error -32 req 02 val 2c00 [ 389.498606][ T5880] pwc: recv_control_msg error -32 req 04 val 1000 [ 390.442466][ T5880] pwc: recv_control_msg error -32 req 04 val 1300 [ 390.472219][ T5880] pwc: recv_control_msg error -32 req 04 val 1400 [ 390.490209][ T5880] pwc: recv_control_msg error -32 req 02 val 2000 [ 390.521549][ T5880] pwc: recv_control_msg error -32 req 02 val 2100 [ 390.543965][ T5880] pwc: recv_control_msg error -32 req 04 val 1500 [ 390.553211][ T5880] pwc: recv_control_msg error -32 req 02 val 2500 [ 390.582302][ T5880] pwc: recv_control_msg error -32 req 02 val 2400 [ 390.602289][ T5880] pwc: recv_control_msg error -32 req 02 val 2600 [ 390.812676][ T5880] pwc: recv_control_msg error -71 req 02 val 2800 [ 390.829573][ T5880] pwc: recv_control_msg error -71 req 04 val 1100 [ 390.840334][ T5880] pwc: recv_control_msg error -71 req 04 val 1200 [ 390.850251][ T5880] pwc: Registered as video103. [ 390.873002][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 391.012572][ T29] audit: type=1400 audit(1771942364.886:1016): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=3030 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.027783][ T5880] usb 6-1: USB disconnect, device number 26 [ 391.133749][ T29] audit: type=1400 audit(1771942364.886:1017): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3030 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.163764][ T29] audit: type=1400 audit(1771942364.886:1018): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3030 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.696884][ T5880] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 392.261526][T11447] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:017b:70bb [ 392.269929][T11447] tipc: Enabled bearer , priority 10 [ 392.293744][ T29] audit: type=1326 audit(1771942366.106:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 392.332255][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 392.337445][ T29] audit: type=1326 audit(1771942366.106:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 392.378647][ T5880] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 392.394286][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.412257][ T29] audit: type=1326 audit(1771942366.106:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 392.474463][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 392.492506][ T29] audit: type=1326 audit(1771942366.106:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 392.517119][ T5880] usb 7-1: config 0 descriptor?? [ 392.537470][ T5880] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 392.574232][ T5880] usb 7-1: Detected FT2233HP [ 392.580644][ T29] audit: type=1326 audit(1771942366.106:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 392.634898][ T29] audit: type=1326 audit(1771942366.106:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 392.662252][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 392.672714][T11450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.708647][ T29] audit: type=1326 audit(1771942366.106:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc03939dec7 code=0x7ffc0000 [ 392.732910][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 392.745867][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 392.759870][ T5880] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 392.772240][ T29] audit: type=1326 audit(1771942366.106:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc03935cece code=0x7ffc0000 [ 392.949055][ T5880] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 393.049265][ T5880] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 393.062407][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 393.071455][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.080959][ T5880] usb 7-1: USB disconnect, device number 3 [ 393.086850][ T29] audit: type=1326 audit(1771942366.106:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc03935cece code=0x7ffc0000 [ 393.128057][ T24] usb 3-1: Product: syz [ 393.144278][ T24] usb 3-1: Manufacturer: syz [ 393.988905][ T5880] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 394.011015][ T792] tipc: Node number set to 3262564933 [ 394.031122][ T5880] ftdi_sio 7-1:0.0: device disconnected [ 394.067058][ T24] usb 3-1: SerialNumber: syz [ 394.094231][ T24] usb 3-1: config 0 descriptor?? [ 394.123656][ T29] audit: type=1326 audit(1771942366.106:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc03935cece code=0x7ffc0000 [ 394.226556][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 394.248957][ T29] audit: type=1326 audit(1771942366.106:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.5.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc03935cece code=0x7ffc0000 [ 394.282445][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 394.711021][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 394.728974][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 394.867740][ T24] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 394.883615][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 394.933680][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 395.251268][ T24] usb 3-1: USB disconnect, device number 12 [ 395.285901][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 395.325670][ T24] em28xx 3-1:0.0: Freeing device [ 398.342318][ T5894] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 398.502396][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 398.508874][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.521113][ T5894] usb 6-1: config 0 has no interfaces? [ 398.528373][ T5894] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 398.537488][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.549242][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 398.549255][ T29] audit: type=1400 audit(1771942372.426:1062): avc: denied { accept } for pid=11512 comm="syz.2.1879" lport=52386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 398.556135][ T5894] usb 6-1: Product: syz [ 398.582058][ T5894] usb 6-1: Manufacturer: syz [ 398.601910][ T5894] usb 6-1: SerialNumber: syz [ 398.628396][ T5894] usb 6-1: config 0 descriptor?? [ 398.641781][T10751] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.809933][T10751] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.884002][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.926733][ T1608] usb 6-1: USB disconnect, device number 27 [ 398.934847][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.944130][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.959289][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.973827][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.013983][T10751] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.026408][T11530] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1885'. [ 399.056078][T11527] lo speed is unknown, defaulting to 1000 [ 399.083637][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 399.113615][T10751] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.257658][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.270193][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 399.281281][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.383659][ T10] usb 7-1: config 0 descriptor?? [ 400.420589][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 400.437496][T11527] chnl_net:caif_netlink_parms(): no params data found [ 401.032315][ T51] Bluetooth: hci4: command tx timeout [ 401.178106][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 401.217083][ T29] audit: type=1400 audit(1771942375.076:1063): avc: denied { ioctl } for pid=11554 comm="syz.5.1892" path="/dev/radio0" dev="devtmpfs" ino=957 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 401.288682][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 401.329411][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 401.337920][T10751] bridge_slave_0: left allmulticast mode [ 401.338397][ T29] audit: type=1800 audit(1771942375.126:1064): pid=11561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1892" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 401.365284][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 401.376602][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 401.463791][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 401.591208][T10751] bridge_slave_0: left promiscuous mode [ 401.612429][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.620950][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 401.639274][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 401.650908][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 401.662808][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 401.670007][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 401.677631][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 401.690479][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 401.780733][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 401.788995][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 401.796384][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 401.817310][ T10] pwc: Registered as video103. [ 402.277014][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 402.320549][ T10] usb 7-1: USB disconnect, device number 4 [ 402.381093][T11101] udevd[11101]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 402.386803][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1895'. [ 402.593509][T10751] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 402.626016][T10751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.597880][ T51] Bluetooth: hci4: command tx timeout [ 403.631921][T10751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.449969][T10751] bond0 (unregistering): Released all slaves [ 404.466349][T10751] bond1 (unregistering): Released all slaves [ 404.494061][ T29] audit: type=1400 audit(1771942378.356:1065): avc: denied { read } for pid=11590 comm="syz.6.1900" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 404.519131][ T29] audit: type=1400 audit(1771942378.356:1066): avc: denied { open } for pid=11590 comm="syz.6.1900" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 404.662638][ T29] audit: type=1400 audit(1771942378.526:1067): avc: denied { ioctl } for pid=11590 comm="syz.6.1900" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 405.104265][T11527] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.111958][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.125069][T11527] bridge_slave_0: entered allmulticast mode [ 405.142636][T11527] bridge_slave_0: entered promiscuous mode [ 405.177787][T11527] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.214941][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.232099][T11527] bridge_slave_1: entered allmulticast mode [ 405.240138][T11527] bridge_slave_1: entered promiscuous mode [ 405.407820][T11527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.519730][T11527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.673451][ T51] Bluetooth: hci4: command tx timeout [ 405.702255][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 405.754187][T11527] team0: Port device team_slave_0 added [ 405.765525][T11527] team0: Port device team_slave_1 added [ 405.885470][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.932573][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 405.960194][T10751] hsr_slave_0: left promiscuous mode [ 406.002324][T10751] hsr_slave_1: left promiscuous mode [ 406.008795][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.016944][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.016993][T10751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.064488][ T24] usb 3-1: config 0 descriptor?? [ 406.064917][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.098651][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 406.107166][T10751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.166993][T10751] veth1_macvtap: left promiscuous mode [ 406.193905][T10751] veth0_macvtap: left promiscuous mode [ 406.207710][T10751] veth1_vlan: left allmulticast mode [ 406.267485][T11632] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 406.267485][T11632] program syz.5.1908 not setting count and/or reply_len properly [ 406.497474][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 406.509784][T10751] veth1_vlan: left promiscuous mode [ 406.553052][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 406.556181][T10751] veth0_vlan: left promiscuous mode [ 406.561049][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 406.575753][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 406.587625][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 406.594820][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 406.602027][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 406.609519][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 406.616662][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 406.713396][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 406.735332][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 406.743960][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 406.750684][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 406.757614][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 406.765617][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 406.772746][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 406.780540][ T24] pwc: Registered as video103. [ 406.789719][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 406.818258][ T24] usb 3-1: USB disconnect, device number 13 [ 407.144545][T10751] team0 (unregistering): Port device team_slave_1 removed [ 407.179107][T10751] team0 (unregistering): Port device team_slave_0 removed [ 407.752563][ T51] Bluetooth: hci4: command tx timeout [ 409.213447][T11572] lo speed is unknown, defaulting to 1000 [ 409.226324][T11572] infiniband syz0: ib_query_port failed (-19) [ 409.233182][T11527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.240114][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.405606][T11527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.454662][T11527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.476633][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.521781][T11527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.647927][T11527] hsr_slave_0: entered promiscuous mode [ 409.664668][T11527] hsr_slave_1: entered promiscuous mode [ 409.686868][T11527] debugfs: 'hsr0' already exists in 'hsr' [ 409.699300][T11527] Cannot create hsr debugfs directory [ 409.803425][ T5918] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 409.982610][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 410.000879][ T5918] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 410.010719][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.041482][ T5918] usb 7-1: config 0 descriptor?? [ 410.061326][ T5918] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 410.078598][ T5918] usb 7-1: Detected FT2233HP [ 410.734034][ T5918] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 410.756479][ T5918] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 410.774911][ T5918] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 410.906451][ T5918] usb 7-1: USB disconnect, device number 5 [ 410.940064][ T5918] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 410.958434][ T5918] ftdi_sio 7-1:0.0: device disconnected [ 411.942731][T11527] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 411.963171][T11527] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 412.188158][ T29] audit: type=1400 audit(1771942386.056:1068): avc: denied { connect } for pid=11696 comm="syz.2.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 412.298475][ T29] audit: type=1400 audit(1771942386.056:1069): avc: denied { write } for pid=11696 comm="syz.2.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 412.529946][ T29] audit: type=1400 audit(1771942386.086:1070): avc: denied { create } for pid=11696 comm="syz.2.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 412.773281][ T49] Bluetooth: Error in BCSP hdr checksum [ 412.801101][ T29] audit: type=1400 audit(1771942386.086:1071): avc: denied { bind } for pid=11696 comm="syz.2.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 413.617662][T11527] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 413.949133][T11527] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 414.113291][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 414.242256][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 414.614409][T11720] trusted_key: encrypted_key: key user:syz not found [ 415.520303][T11527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.598229][T11527] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.656824][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.663989][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.724814][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.731941][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.954743][ T29] audit: type=1400 audit(1771942389.826:1072): avc: denied { setopt } for pid=11732 comm="syz.6.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.621223][T11527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.914280][ T5866] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 418.134068][ T5866] usb 7-1: Using ep0 maxpacket: 16 [ 419.063035][ T5866] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 419.081713][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.143288][T11527] veth0_vlan: entered promiscuous mode [ 419.155371][ T5866] usb 7-1: config 0 descriptor?? [ 419.190514][T11527] veth1_vlan: entered promiscuous mode [ 419.201755][ T5866] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 419.227206][ T5866] usb 7-1: Detected FT2233HP [ 419.284711][T11527] veth0_macvtap: entered promiscuous mode [ 419.312822][T11527] veth1_macvtap: entered promiscuous mode [ 419.365490][ T5866] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 419.378842][T11527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.394412][ T5866] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 419.426720][T11527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.445315][ T5866] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 419.479993][ T5866] usb 7-1: USB disconnect, device number 6 [ 419.488688][ T3572] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.496717][ T5866] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 419.516476][ T3572] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.541423][ T5866] ftdi_sio 7-1:0.0: device disconnected [ 419.561880][ T3572] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.600732][ T3572] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.739081][ T29] audit: type=1400 audit(1771942393.606:1073): avc: denied { create } for pid=11775 comm="syz.2.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 419.760615][T11779] delete_channel: no stack [ 419.834312][ T29] audit: type=1400 audit(1771942393.646:1074): avc: denied { setopt } for pid=11775 comm="syz.2.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 419.940580][ T29] audit: type=1400 audit(1771942393.666:1075): avc: denied { connect } for pid=11775 comm="syz.2.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 421.256115][T11778] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 421.302282][T11778] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 421.343665][T11778] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 421.345783][ T29] audit: type=1400 audit(1771942395.216:1076): avc: denied { firmware_load } for pid=11775 comm="syz.2.1940" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 421.394273][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.409773][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.465466][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.473982][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.701709][T11800] qrtr: Invalid version 0 [ 422.062951][ T5880] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 422.072339][T11814] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 422.087350][T11814] Error validating options; rc = [-22] [ 423.623979][ T5880] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 423.642289][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.660957][ T5880] usb 7-1: config 0 descriptor?? [ 424.120255][ T5880] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 424.435868][ T5880] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 424.449116][ T5880] [drm] Initialized udl on minor 2 [ 424.554774][ T5880] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 424.595537][ T5880] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 424.894172][ T5866] usb 7-1: USB disconnect, device number 7 [ 424.934492][ T5918] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.951933][ T5918] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 424.958064][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 425.142625][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 425.166213][ T10] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 425.464947][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.505501][ T10] usb 8-1: config 0 descriptor?? [ 425.534439][ T10] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 425.552153][ T10] usb 8-1: Detected FT2233HP [ 425.742634][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 425.763059][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 425.798314][ T10] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 425.836671][ T10] usb 8-1: USB disconnect, device number 2 [ 425.858498][T11859] qrtr: Invalid version 0 [ 425.863687][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 425.896210][ T10] ftdi_sio 8-1:0.0: device disconnected [ 428.311313][T11879] vlan2: entered promiscuous mode [ 428.316681][T11879] vlan2: entered allmulticast mode [ 428.322564][T11879] hsr_slave_1: entered allmulticast mode [ 428.353267][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'. [ 429.631670][T11891] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 429.640713][T11891] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 429.649756][T11891] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 429.690250][T11892] delete_channel: no stack [ 429.921089][T11894] afs: Unknown parameter 'dy' [ 430.445023][T11900] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1964'. [ 431.702805][ T29] audit: type=1400 audit(1771942405.446:1077): avc: denied { write } for pid=11911 comm="syz.6.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 432.382418][ T5918] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 432.753126][ T5918] usb 8-1: Using ep0 maxpacket: 16 [ 432.762088][ T5918] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 432.772917][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.789882][ T5918] usb 8-1: config 0 descriptor?? [ 432.811367][ T5918] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 432.842749][ T5918] usb 8-1: Detected FT2233HP [ 433.014555][ T5918] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 433.029086][ T5918] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 433.052996][ T5918] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 433.089837][ T5918] usb 8-1: USB disconnect, device number 3 [ 433.120581][ T5918] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 433.147569][ T5918] ftdi_sio 8-1:0.0: device disconnected [ 434.407818][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.416939][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.709301][T11953] syzkaller0: entered promiscuous mode [ 435.771939][T11953] syzkaller0: entered allmulticast mode [ 436.378085][ T29] audit: type=1400 audit(1771942410.246:1078): avc: denied { open } for pid=11975 comm="syz.6.1986" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 436.470089][ T29] audit: type=1400 audit(1771942410.286:1079): avc: denied { ioctl } for pid=11975 comm="syz.6.1986" path="/dev/ptyr1" dev="devtmpfs" ino=136 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 436.797134][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1987'. [ 437.256079][T11991] futex_wake_op: syz.5.1989 tries to shift op by 32; fix this program [ 437.402793][T11992] xt_hashlimit: max too large, truncated to 1048576 [ 442.307952][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2004'. [ 442.477946][T12049] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 442.955272][ T5894] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 443.136685][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 443.174723][ T5894] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 443.244889][ T5894] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 443.390442][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.519422][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.626978][T12077] 9pnet_fd: p9_fd_create_tcp (12077): problem connecting socket to 127.0.0.1 [ 443.645783][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 443.731620][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 443.813216][ T5894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.864576][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.905676][ T5894] usb 3-1: Product: syz [ 443.922674][ T5894] usb 3-1: Manufacturer: syz [ 443.936208][ T5894] usb 3-1: SerialNumber: syz [ 444.261000][ T5894] usb 3-1: 0:2 : does not exist [ 444.431297][ T5894] usb 3-1: USB disconnect, device number 14 [ 444.828643][T12064] udevd[12064]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.653663][T10751] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 445.743351][T12129] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2020'. [ 446.052733][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 446.310300][ T29] audit: type=1400 audit(1771942676.182:1080): avc: denied { ioctl } for pid=12136 comm="syz.2.2022" path="socket:[30379]" dev="sockfs" ino=30379 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 446.686549][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 446.738240][ T24] usb 6-1: config 1 has an invalid interface number: 241 but max is 0 [ 446.754423][ T24] usb 6-1: config 1 has no interface number 0 [ 446.771167][ T24] usb 6-1: config 1 interface 241 altsetting 3 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 446.795552][T12146] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 446.804289][ T24] usb 6-1: config 1 interface 241 has no altsetting 0 [ 446.831245][ T24] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=df.06 [ 446.840821][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.855805][ T24] usb 6-1: Product: syz [ 446.865194][ T24] usb 6-1: Manufacturer: syz [ 446.876159][ T24] usb 6-1: SerialNumber: syz [ 447.628452][ T24] qmi_wwan 6-1:1.241: probe with driver qmi_wwan failed with error -22 [ 447.843926][ T24] usb 6-1: USB disconnect, device number 28 [ 450.010468][T12171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.144888][T12171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.521357][T12187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2032'. [ 450.644322][T12192] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2033'. [ 450.784921][T12171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.889208][T12171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.434800][ T29] audit: type=1400 audit(1771942681.312:1081): avc: denied { ioctl } for pid=12217 comm="syz.2.2039" path="/436/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 451.633297][T12213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.670105][T12213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.739881][T12213] hsr0: left promiscuous mode [ 451.906299][T12247] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2045'. [ 452.064845][T12213] geneve2: left promiscuous mode [ 452.069823][T12213] geneve2: left allmulticast mode [ 452.088203][T12213] vlan2: left promiscuous mode [ 452.119121][T12213] gretap0: left promiscuous mode [ 452.139663][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.159730][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.187960][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.211641][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.246127][ T35] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.292491][ T35] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.301743][ T35] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.392264][T12264] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 452.392264][T12264] program syz.7.2051 not setting count and/or reply_len properly [ 452.592610][ T35] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.791523][ T29] audit: type=1400 audit(1771942683.292:1082): avc: denied { audit_write } for pid=12266 comm="syz.0.2052" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 455.122421][ T29] audit: type=1400 audit(1771942684.992:1083): avc: denied { mount } for pid=12292 comm="syz.7.2061" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 455.184228][ T29] audit: type=1400 audit(1771942684.992:1084): avc: denied { watch } for pid=12292 comm="syz.7.2061" path="/18/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 455.232656][ T792] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 455.281947][ T29] audit: type=1400 audit(1771942685.152:1085): avc: denied { unmount } for pid=11527 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 455.414709][ T792] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 455.415767][T12295] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.434186][ T792] usb 3-1: config 0 has no interface number 0 [ 455.454810][ T792] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=19.c9 [ 455.464898][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.473295][ T792] usb 3-1: Product: syz [ 455.480696][ T792] usb 3-1: Manufacturer: syz [ 455.494155][ T792] usb 3-1: SerialNumber: syz [ 455.524014][ T792] usb 3-1: config 0 descriptor?? [ 455.599173][T12295] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.797433][ T792] ftdi_sio 3-1:0.16: FTDI USB Serial Device converter detected [ 455.822868][T12295] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.823163][ T792] ftdi_sio ttyUSB0: unknown device type: 0x19c9 [ 457.117469][T12295] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.164780][ T792] usb 3-1: USB disconnect, device number 15 [ 457.175126][ T792] ftdi_sio 3-1:0.16: device disconnected [ 457.287206][ T49] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.316811][ T49] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.341336][ T49] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.363209][ T49] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.283155][T12345] pimreg: entered allmulticast mode [ 459.461623][T12354] afs: Unknown parameter 'dy' [ 459.539711][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2084'. [ 459.812404][T12234] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 461.163510][T12234] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.174800][T12234] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 461.185130][T12234] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.195193][T12234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.223164][T12360] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 461.886658][T12234] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.147389][T12234] usb 8-1: USB disconnect, device number 4 [ 462.776520][ T29] audit: type=1326 audit(1771942692.652:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 462.833069][ T29] audit: type=1326 audit(1771942692.652:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 462.987563][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2097'. [ 462.998194][ T29] audit: type=1326 audit(1771942692.652:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 463.022028][ T29] audit: type=1326 audit(1771942692.652:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 463.046301][ T29] audit: type=1326 audit(1771942692.682:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 463.070054][ T29] audit: type=1326 audit(1771942692.682:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 463.181516][T12400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2098'. [ 463.381341][T12400] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2098'. [ 463.496997][ T29] audit: type=1326 audit(1771942692.682:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 463.520835][ T29] audit: type=1326 audit(1771942692.682:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 463.544732][ T29] audit: type=1326 audit(1771942692.682:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 463.588873][T12386] 9pnet_fd: p9_fd_create_tcp (12386): problem connecting socket to 127.0.0.1 [ 463.599137][ T29] audit: type=1326 audit(1771942692.692:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.5.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc03939c629 code=0x7ffc0000 [ 463.797856][T12413] vlan3: entered promiscuous mode [ 464.315948][T12413] vlan3: entered allmulticast mode [ 464.322349][T12413] hsr_slave_1: entered allmulticast mode [ 464.356642][T12419] syz.6.2103 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 464.367808][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 464.377904][T12421] afs: Unknown parameter 'dy' [ 464.699680][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 465.963405][T12447] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.970629][T12447] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.014910][T12447] bridge_slave_0: left allmulticast mode [ 466.020725][T12447] bridge_slave_0: left promiscuous mode [ 466.026668][T12447] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.120312][T12447] bridge_slave_1: left allmulticast mode [ 466.126126][T12447] bridge_slave_1: left promiscuous mode [ 466.132209][T12447] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.153922][T12447] bond0: (slave bond_slave_0): Releasing backup interface [ 466.168224][T12447] bond0: (slave bond_slave_1): Releasing backup interface [ 466.600583][T12447] team0: Port device team_slave_0 removed [ 466.627521][T12447] team0: Port device team_slave_1 removed [ 466.637512][T12447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.652007][T12447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.846272][T12447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.890426][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2120'. [ 467.916514][T12447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.974127][T12447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 468.062235][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 468.062249][ T29] audit: type=1400 audit(1771942697.932:1194): avc: denied { watch watch_reads } for pid=12469 comm="syz.6.2122" path="/proc/224/net/dev_mcast" dev="proc" ino=4026533144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 468.323216][T12234] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 469.113818][T12234] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 469.122062][T12234] usb 6-1: config 0 has no interface number 0 [ 469.133025][T12234] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 469.142980][T12234] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 469.152107][T12234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.164031][T12234] usb 6-1: config 0 descriptor?? [ 469.178088][T12234] ttusbir 6-1:0.83: cannot find expected altsetting [ 470.166188][T12226] usb 6-1: USB disconnect, device number 29 [ 470.207864][T12496] [ 470.210205][T12496] ====================================================== [ 470.217214][T12496] WARNING: possible circular locking dependency detected [ 470.224218][T12496] syzkaller #0 Tainted: G L [ 470.230169][T12496] ------------------------------------------------------ [ 470.237164][T12496] syz.7.2131/12496 is trying to acquire lock: [ 470.243202][T12496] ffff88801cac8220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 470.253351][T12496] [ 470.253351][T12496] but task is already holding lock: [ 470.260683][T12496] ffff888026edf2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 470.271882][T12496] [ 470.271882][T12496] which lock already depends on the new lock. [ 470.271882][T12496] [ 470.282264][T12496] [ 470.282264][T12496] the existing dependency chain (in reverse order) is: [ 470.291252][T12496] [ 470.291252][T12496] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 470.299829][T12496] blk_alloc_queue+0x610/0x790 [ 470.305103][T12496] blk_mq_alloc_queue+0x174/0x290 [ 470.310626][T12496] __blk_mq_alloc_disk+0x29/0x120 [ 470.316150][T12496] loop_add+0x498/0xb60 [ 470.320810][T12496] loop_init+0x1d3/0x200 [ 470.325562][T12496] do_one_initcall+0x11d/0x760 [ 470.330825][T12496] kernel_init_freeable+0x6e5/0x7a0 [ 470.336523][T12496] kernel_init+0x1f/0x1e0 [ 470.341351][T12496] ret_from_fork+0x754/0xd80 [ 470.346439][T12496] ret_from_fork_asm+0x1a/0x30 [ 470.351704][T12496] [ 470.351704][T12496] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 470.358890][T12496] fs_reclaim_acquire+0xc4/0x100 [ 470.364327][T12496] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 470.370203][T12496] __kernfs_iattrs+0x126/0x400 [ 470.375466][T12496] __kernfs_setattr+0x4d/0x3c0 [ 470.380729][T12496] kernfs_iop_setattr+0xda/0x130 [ 470.386169][T12496] notify_change+0xb25/0x1330 [ 470.391359][T12496] do_truncate+0x1df/0x240 [ 470.396297][T12496] path_openat+0x2a55/0x31a0 [ 470.401390][T12496] do_file_open+0x20e/0x430 [ 470.406400][T12496] do_sys_openat2+0x10d/0x1e0 [ 470.411585][T12496] __x64_sys_openat+0x12d/0x210 [ 470.416938][T12496] do_syscall_64+0x106/0xf80 [ 470.422029][T12496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.428422][T12496] [ 470.428422][T12496] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 470.436914][T12496] __lock_acquire+0x14b8/0x2630 [ 470.442273][T12496] lock_acquire+0x1cf/0x380 [ 470.447289][T12496] down_read+0x99/0x460 [ 470.451942][T12496] kernfs_iop_getattr+0x9c/0xf0 [ 470.457297][T12496] vfs_getattr_nosec+0x2d4/0x430 [ 470.462731][T12496] vfs_getattr+0x4a/0x60 [ 470.467473][T12496] loop_query_min_dio_size.isra.0+0x117/0x250 [ 470.474042][T12496] lo_ioctl+0x13aa/0x1bc0 [ 470.478876][T12496] blkdev_ioctl+0x5ad/0x6f0 [ 470.483878][T12496] __x64_sys_ioctl+0x18e/0x210 [ 470.489143][T12496] do_syscall_64+0x106/0xf80 [ 470.494230][T12496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.500620][T12496] [ 470.500620][T12496] other info that might help us debug this: [ 470.500620][T12496] [ 470.510821][T12496] Chain exists of: [ 470.510821][T12496] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 470.510821][T12496] [ 470.525220][T12496] Possible unsafe locking scenario: [ 470.525220][T12496] [ 470.532640][T12496] CPU0 CPU1 [ 470.537976][T12496] ---- ---- [ 470.543312][T12496] lock(&q->q_usage_counter(io)#24); [ 470.548663][T12496] lock(fs_reclaim); [ 470.555135][T12496] lock(&q->q_usage_counter(io)#24); [ 470.563007][T12496] rlock(&root->kernfs_iattr_rwsem); [ 470.568352][T12496] [ 470.568352][T12496] *** DEADLOCK *** [ 470.568352][T12496] [ 470.576468][T12496] 3 locks held by syz.7.2131/12496: [ 470.581634][T12496] #0: ffff88802719f448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 470.591792][T12496] #1: ffff888026edf2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 470.603431][T12496] #2: ffff888026edf2f8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 470.615240][T12496] [ 470.615240][T12496] stack backtrace: [ 470.621108][T12496] CPU: 0 UID: 0 PID: 12496 Comm: syz.7.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.621127][T12496] Tainted: [L]=SOFTLOCKUP [ 470.621132][T12496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.621139][T12496] Call Trace: [ 470.621144][T12496] [ 470.621150][T12496] dump_stack_lvl+0x100/0x190 [ 470.621171][T12496] print_circular_bug.cold+0x178/0x1c7 [ 470.621192][T12496] check_noncircular+0x146/0x160 [ 470.621215][T12496] __lock_acquire+0x14b8/0x2630 [ 470.621238][T12496] lock_acquire+0x1cf/0x380 [ 470.621257][T12496] ? kernfs_iop_getattr+0x9c/0xf0 [ 470.621276][T12496] ? __pfx___might_resched+0x10/0x10 [ 470.621292][T12496] down_read+0x99/0x460 [ 470.621307][T12496] ? kernfs_iop_getattr+0x9c/0xf0 [ 470.621323][T12496] ? find_held_lock+0x2b/0x80 [ 470.621339][T12496] ? __pfx_down_read+0x10/0x10 [ 470.621353][T12496] ? kernfs_root+0xee/0x2a0 [ 470.621375][T12496] kernfs_iop_getattr+0x9c/0xf0 [ 470.621394][T12496] vfs_getattr_nosec+0x2d4/0x430 [ 470.621407][T12496] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 470.621426][T12496] vfs_getattr+0x4a/0x60 [ 470.621438][T12496] loop_query_min_dio_size.isra.0+0x117/0x250 [ 470.621459][T12496] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 470.621487][T12496] lo_ioctl+0x13aa/0x1bc0 [ 470.621509][T12496] ? __pfx_lo_ioctl+0x10/0x10 [ 470.621527][T12496] ? irqentry_exit+0x180/0x670 [ 470.621540][T12496] ? lockdep_hardirqs_on+0x78/0x100 [ 470.621552][T12496] ? irqentry_exit+0x180/0x670 [ 470.621567][T12496] ? blk_get_meta_cap+0xd4/0x6c0 [ 470.621588][T12496] ? blkdev_common_ioctl+0x510/0x2ba0 [ 470.621609][T12496] ? blkdev_common_ioctl+0x515/0x2ba0 [ 470.621631][T12496] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 470.621652][T12496] ? __pfx___schedule+0x10/0x10 [ 470.621672][T12496] ? preempt_schedule_irq+0x7b/0x90 [ 470.621693][T12496] ? irqentry_exit+0x180/0x670 [ 470.621705][T12496] ? lockdep_hardirqs_on+0x78/0x100 [ 470.621717][T12496] ? irqentry_exit+0x180/0x670 [ 470.621732][T12496] ? blkdev_ioctl+0xc7/0x6f0 [ 470.621742][T12496] ? __pfx_lo_ioctl+0x10/0x10 [ 470.621762][T12496] blkdev_ioctl+0x5ad/0x6f0 [ 470.621773][T12496] ? __pfx_blkdev_ioctl+0x10/0x10 [ 470.621793][T12496] ? selinux_file_ioctl+0x139/0x290 [ 470.621807][T12496] ? selinux_file_ioctl+0xb4/0x290 [ 470.621821][T12496] ? __pfx_blkdev_ioctl+0x10/0x10 [ 470.621842][T12496] __x64_sys_ioctl+0x18e/0x210 [ 470.621860][T12496] do_syscall_64+0x106/0xf80 [ 470.621872][T12496] ? clear_bhb_loop+0x40/0x90 [ 470.621887][T12496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.621900][T12496] RIP: 0033:0x7fc46d79c629 [ 470.621912][T12496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.621925][T12496] RSP: 002b:00007fc46e600028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.621937][T12496] RAX: ffffffffffffffda RBX: 00007fc46da16090 RCX: 00007fc46d79c629 [ 470.621946][T12496] RDX: 0000000000000007 RSI: 0000000000004c06 RDI: 0000000000000006 [ 470.621954][T12496] RBP: 00007fc46d832b39 R08: 0000000000000000 R09: 0000000000000000 [ 470.621962][T12496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.621969][T12496] R13: 00007fc46da16128 R14: 00007fc46da16090 R15: 00007ffd1a4e6388 [ 470.621982][T12496] [ 477.703081][ T403] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)