last executing test programs: 1m17.111759021s ago: executing program 3 (id=153): socket$inet6_sctp(0xa, 0x0, 0x84) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m11.791375727s ago: executing program 3 (id=158): openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r4, 0x0, 0x0, 0xb, 0x1fd, 0x1}) mkdir(&(0x7f0000000040)='./file0\x00', 0xa8) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', r5, 0x0) lsetxattr$security_selinux(&(0x7f0000000b00)='./file0\x00', &(0x7f0000002280), &(0x7f00000022c0)='system_u:object_r:iptables_exec_t:s0\x00', 0x25, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1m10.579362916s ago: executing program 3 (id=160): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000000700)=""/180) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r4], 0x20}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() listen(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x3, 0x6000, 0x1000, &(0x7f0000595000/0x1000)=nil}) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[], 0x0) socket$rxrpc(0x21, 0x2, 0x2) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000240)=0x1, 0x4) 1m7.329938551s ago: executing program 3 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) unshare(0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3f, 0x0, 0x0) getpid() 1m5.960920056s ago: executing program 3 (id=166): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0xfffc, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@noop, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@remote, 0x8}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @ssrr={0x89, 0x3, 0xbc}, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @remote]}, @generic={0x83, 0xd, "56e6d8476f61c656505253"}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000005880)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000005900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mkdir(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005a00)=@newtaction={0x458, 0x32, 0xffff, 0x0, 0x0, {}, [{0x444, 0x1, [@m_police={0x440, 0x1, 0x0, 0x0, {{0xb}, {0x414, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xb2, 0xfffff158, 0x7, 0x1, 0x9, 0xffffb84a, 0x80000001, 0x9, 0x1ff, 0x0, 0x3, 0x2, 0x4, 0x2, 0x1, 0x7, 0x8, 0x6, 0xb, 0x1, 0x1, 0x0, 0x8, 0x9, 0xcc81, 0x5, 0x0, 0x101, 0xd908, 0x3, 0x4, 0x970, 0x0, 0x200, 0x6, 0x80000000, 0x2, 0x6, 0xfff, 0x1ff, 0x2, 0x0, 0x401, 0x4, 0x5, 0x7ff, 0x3f7, 0x3, 0xda, 0x0, 0x9, 0xfffffeff, 0x8001, 0x48, 0x400, 0x80000000, 0x10, 0xda7, 0x0, 0x0, 0x5, 0x8, 0x9, 0x5, 0xf004, 0xd7, 0x37a2d98c, 0xb85, 0x9, 0x8, 0xb, 0xb, 0xc, 0xfffffffd, 0x7, 0x400, 0xa0ad, 0x1000, 0x4, 0x3, 0x3, 0x3, 0x4, 0x5, 0x4, 0x1, 0x80, 0x9e46, 0xe4, 0x6, 0x0, 0x400, 0x9, 0x6, 0x2, 0x6, 0x4, 0x4, 0x1, 0x8001, 0x0, 0xfff, 0x0, 0x2c00, 0x5, 0x4, 0x9, 0x3, 0xfffffff7, 0x0, 0x6, 0xc7, 0x89, 0x7, 0x5, 0xfffffff7, 0x4, 0xac, 0x6, 0xfe, 0x0, 0x10000, 0x8, 0x5, 0x6, 0x0, 0x9a9, 0x3, 0xf5b, 0x48, 0x8, 0x3, 0x1, 0xfffffffc, 0x6, 0x9, 0xf, 0x2, 0x0, 0x1, 0xd, 0x1, 0x7b6f, 0x0, 0xffffff00, 0x3, 0x7, 0xf, 0x5, 0x2, 0xffff, 0x8, 0x3, 0x101, 0x8, 0x77, 0x7ff, 0x5, 0x4, 0x0, 0x80, 0xd, 0xd, 0xffff, 0x6, 0x7, 0x6, 0x40, 0x100, 0x3, 0x7, 0x4000000, 0x0, 0x8, 0xffffffff, 0x4, 0x2, 0x1, 0xc, 0x4, 0x0, 0x8000, 0x9, 0xffffff01, 0xe8c4, 0x9, 0xc, 0xa, 0x6, 0x81, 0xb, 0x7, 0xffff, 0x6, 0x7, 0x3, 0x1, 0x0, 0x401, 0x2, 0xb, 0x1, 0x9d, 0x9, 0x8000, 0x0, 0xb4, 0x10, 0x9, 0x9, 0x2, 0x7, 0x101, 0x4, 0x9, 0x8, 0x2, 0x7, 0x79, 0x0, 0x7, 0x9, 0x4, 0x10000, 0x350, 0x400, 0x9, 0x100, 0x3, 0x1, 0x0, 0x4, 0x1, 0x520c, 0xfffff00a, 0xfffff3a2, 0x2f, 0x1, 0x81, 0x3, 0x773e, 0x4, 0x5, 0xfffffffe, 0x3, 0x10001, 0x3, 0x800, 0x7, 0xffffff80, 0x2, 0x7, 0xb, 0x7fffffff, 0x8, 0x7298]}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x458}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = dup(r1) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 58.976437872s ago: executing program 3 (id=178): r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000340)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0x0, 0x0, 0x5}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7}) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000000800410072786500140033006970766c616e31000000000000000000b95de198"], 0x38}}, 0x0) 42.512536782s ago: executing program 2 (id=197): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x34b6, &(0x7f0000000180)={0x0, 0x0, 0x30c0}, &(0x7f0000000100), &(0x7f0000000140)) r6 = epoll_create(0xaf2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) epoll_pwait2(r6, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x18, r7, 0x300, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 40.202064639s ago: executing program 2 (id=200): socket$inet6_sctp(0xa, 0x0, 0x84) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 40.200032687s ago: executing program 0 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b7"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e}]}, 0x48}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000a082fc079b43d33d88cd03c56900be58eb8e"], 0x24, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x8000}}, [0x2, 0xd, 0x7, 0x5, 0x4, 0x9, 0x9, 0x0, 0x8001, 0x6, 0x4, 0xfffffffeffffffff, 0xb57, 0x2c4, 0x7]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0305602, &(0x7f0000000880)={0x1, 0x10}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) r11 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r11, 0xc0585611, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x7) 37.378985021s ago: executing program 0 (id=205): openat$ptmx(0xffffffffffffff9c, 0x0, 0x181, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params]}, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) open$dir(0x0, 0x80040, 0x0) rmdir(0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00', 0x0, 0x90000, 0x0, 0x0, 0x0, 0x6, 0x8003, 0x0, 0x2}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x507880, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000600)={{0x6, 0x22}, 'port1\x00', 0x0, 0x0, 0x0, 0x400, 0x10000000, 0x0, 0x1ff, 0x0, 0x3, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2922, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r9 = syz_open_pts(r0, 0x0) r10 = dup(r9) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0x541b, &(0x7f0000000080)={0xffffffffffffffff}) close_range(r11, 0xffffffffffffffff, 0x0) 36.072447198s ago: executing program 0 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b7"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e}]}, 0x48}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000a082fc079b43d33d88cd03c56900be58eb8e"], 0x24, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x8000}}, [0x2, 0xd, 0x7, 0x5, 0x4, 0x9, 0x9, 0x0, 0x8001, 0x6, 0x4, 0xfffffffeffffffff, 0xb57, 0x2c4, 0x7]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={r9, 0x0, 0x30}, 0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0305602, &(0x7f0000000880)={0x1, 0x10}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11) r12 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r12, 0xc0585611, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x7) 35.981458s ago: executing program 2 (id=207): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000100) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x1, 0x2, 0x1003, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4826}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r8, 0x0) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x32314d4e}}) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5fc2445254c1d09fe62b08c814ef0270e6cd0903aec94230a9a632a4118f8278fa7544694a88b9a479bb75c3af77826b997559850adab527e930f426d9b0fdd1f132335e493c463838cbdb822b5e9e94f7bec35541c41aebd23621d10a9103c45206f305293b0b3e81bc8fd44f7f674f871fe3b6b8f6dd94"], 0xfe33) socket$nl_route(0x10, 0x3, 0x0) 34.663849703s ago: executing program 2 (id=208): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003d00)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0xfff7fc, 0x1, {}, {}, 0x9, 0x8100000000000009}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/wireless\x00') r3 = open(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) pwritev2(r3, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x35) readv(r2, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/176, 0xb0}], 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300), 0x42) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)="254f0895", 0x4, 0x0, 0x0, 0x0) 32.900828852s ago: executing program 0 (id=211): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local={0xfb}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x35}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000000, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)={0x1ffffd, 0x5, 0x0, 0xffffffff, 0xfffffffc}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x0, 0x7, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12}, 0x48) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000014c0)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x2}, 0x8, 0x10, 0x0, 0x2e}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xc7, 0xce, 0x36, 0x8, 0x763, 0x2080, 0xd0ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x3, 0xcb}}]}}]}}, 0x0) ftruncate(0xffffffffffffffff, 0x88801) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x40, 0x3, 0x53, 0x18, @remote, @private0, 0x80, 0x80, 0x0, 0x3}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, &(0x7f00007d0000)) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x440000, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) connect$can_bcm(0xffffffffffffffff, &(0x7f00000003c0), 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000e80)={{r4}, "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"}) 29.684344633s ago: executing program 2 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b7"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e}]}, 0x48}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000a082fc079b43d33d88cd03c56900be58eb8e"], 0x24, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x8000}}, [0x2, 0xd, 0x7, 0x5, 0x4, 0x9, 0x9, 0x0, 0x8001, 0x6, 0x4, 0xfffffffeffffffff, 0xb57, 0x2c4, 0x7]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0305602, &(0x7f0000000880)={0x1, 0x10}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) r11 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r11, 0xc0585611, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x7) 29.062876034s ago: executing program 0 (id=216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050401"], 0x7) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) syz_emit_ethernet(0xfdef, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000070000000000001cecaf7a3b588e32b84352932b2a4907864010100ac1414aa0b0090780300000045000000000000000089000000000000ac1414aa862a00000000000d000000000000000000000000054eb8a600529606053d0006ff00800000b61af93a93070700e0000001860c000000000006f11617"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5}]}]}, 0x48}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)="a4", 0x1}], 0x1}}], 0x2, 0x2008800) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100), 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0xb82) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 28.379894712s ago: executing program 2 (id=219): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[@ANYBLOB="00180000", @ANYRES16=r3, @ANYBLOB="cf0400000000000000001300000008000300", @ANYBLOB="04"], 0x54}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x0) io_setup(0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000080), 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r6, &(0x7f0000002180), 0xb) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0xa00, 0x0}}], 0x300, 0x10062, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)='c', 0x1}], 0x1}, 0x0) 22.214476667s ago: executing program 0 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b7"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e}]}, 0x48}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000a082fc079b43d33d88cd03c56900be58eb8e"], 0x24, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x8000}}, [0x2, 0xd, 0x7, 0x5, 0x4, 0x9, 0x9, 0x0, 0x8001, 0x6, 0x4, 0xfffffffeffffffff, 0xb57, 0x2c4, 0x7]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={r9, 0x0, 0x30}, 0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0305602, &(0x7f0000000880)={0x1, 0x10}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11) r12 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r12, 0xc0585611, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x7) 10.846361563s ago: executing program 1 (id=230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x4}, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000430001004000000000000000a56d223000159471"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000004c0)=@ethtool_ringparam={0x1}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getneightbl={0x14, 0x42, 0x60b}, 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) close(r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100040004, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)='?\x00\x00\x00', 0x4) 10.424366448s ago: executing program 4 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000580)={0x50}, 0x50) write$FUSE_OPEN(r5, &(0x7f0000000000)={0x20}, 0x20) write$FUSE_INIT(r5, &(0x7f0000000b80)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) chown(&(0x7f0000000300)='./file0\x00', 0xee01, 0xffffffffffffffff) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) 9.791871086s ago: executing program 4 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) setpriority(0x12a8ab22d90c3a78, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) getrandom(0x0, 0x0, 0x5176620f307ad1db) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x1, 0x2, 0x5579, 0x5}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x1412be, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 9.74878563s ago: executing program 1 (id=233): syz_pidfd_open(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000b70300000000000085000000710000009500000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x10001, r3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001418) ioctl$TUNSETOFFLOAD(r10, 0x80047441, 0x100000000000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mount$nfs(&(0x7f0000002140)='#\x00', &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0), 0x82861, &(0x7f0000002200)={[{'bridge0\x00'}, {'bridge0\x00'}, {'bridge_slave_1\x00'}, {'@'}, {'GPL\x00'}, {'numa_maps\x00'}, {'numa_maps\x00'}, {'\xf1,\'\x95'}, {'\x89}\x95'}, {'limit\x00'}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}, {@uid_gt={'uid>', r2}}, {@flag='rw'}, {@fsname={'fsname', 0x3d, '/+^'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@appraise_type}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040840) 8.574753152s ago: executing program 4 (id=234): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000240)) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='btrfs_sync_file\x00', r1}, 0x23) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socket(0x1d, 0x2, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 7.985937623s ago: executing program 4 (id=235): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe24) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x181000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000003c0)=r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, r4, 0x8, &(0x7f00000002c0)={0x6, 0x80000000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x108, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r7}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r9 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(r8, &(0x7f00000034c0)={&(0x7f0000005440)=@caif, 0x80, 0x0}, 0x0) 7.348522076s ago: executing program 1 (id=236): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000a5db8bdd3bfd5f"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000000}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x10001, r5}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r7, 0x0) r8 = syz_open_procfs(r0, &(0x7f0000000240)='io\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100018) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r9, 0x7af, &(0x7f0000000080)) 4.511625512s ago: executing program 1 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x4}, 0x90) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket(0x2b, 0x80801, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x7840, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func_proto, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r12, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x19ac1aca404af8f8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x22, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @generic={0x2, 0x5, 0x1, 0x7f5f, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xa6}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x9, '\x00', r8, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000080)={0x4, 0x80, 0x8000, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[r0, r0, r7, r0, r0], 0x0, 0x10, 0x9}, 0x90) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xf, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES32, @ANYRES8=r8, @ANYRESDEC=r0], &(0x7f0000000600)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x7ffc}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r15, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4.094112247s ago: executing program 4 (id=238): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000340)=0x14, 0x80000) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000380)=0x8, 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.046404699s ago: executing program 1 (id=239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x90) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff2000/0x6000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x1000000}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioperm(0x0, 0x1b, 0x4000007ffd) r3 = gettid() process_vm_writev(r3, &(0x7f0000000780)=[{0x0}, {0x0}, {&(0x7f0000001400)=""/69, 0x45}, {0x0}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f0000000680)=""/240, 0xf0}], 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r4 = open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xf6c1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x40010, r2, 0x3ef95000) userfaultfd(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}}) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r5, 0x0, 0xfff) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4) 953.069097ms ago: executing program 4 (id=240): pipe(&(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f0000003f80)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) openat$procfs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = open(&(0x7f00000020c0)='./file0\x00', 0x12538eea49676355, 0x0) ftruncate(r1, 0x88801) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x400000e, 0x4088053, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000480)={0x1, 0x2, 0x1000, 0xff5, &(0x7f0000000800)="bc1546ef4ac21e6fdc412f67adcb4db16244e3325c5705b5a5107c97960937d4c2c8d48a4a64e9a3a8cf389f9746cceb3a0cc29df26a86e3dd0e4791ca53f70dc136f8f9ab668c14458406918b21d5732ada7d27c93c1f6714e75d1e0d5dff1b5393ed808229db8945f9180f5fffa177d5b2805e93afbd52c1d638793522776d434fb204373aabbbb61663b5d6a4ad456d0bfa74004a65c9653e68fe945922d7ffacb1e9d98201cc9b5e1fbc4ff575527fe434e512863bbd00dbc9c6b307781893ab7198162c5c2d988b99edcc463d3e4a3a11f3edf247ccbc9365c13be832f8e7872c6572f276c958f158dfd444eba2d33d9fd51401bef389064ee2018c562b5f0662f38e5ba4e9b777a4a2cdcdd9b158bbada3bd06674bb247ecc091dcb391ace7d599581aa413f54fb58c8b08d097019369c2c47aab5db2131217b1cbe0c2610c031e066b4f5f3f6ab54c11b8110c6fa7fe42ad5e9a049dde34b2a4546cef569b98be1e0b60062bd0bcfe938da553ac8c72526731e67b59175266f458ed05ee7565f28f78ebf4a3aca4ac9772cb548ec509ab0cd5c68c72bc7e2ede0793ba5cdb6560266ee13e7578503de74f4a5c6c54e70764db571cbcb10fd5c0ff6a2bdedc08502a0120adc6e65d3f49405a982a1fa92e975ad2ebd399c76690437cdb9fa3e7b7c0c251e4b74c643729c340a1c04af185445f6e189cff8c79d80df38397adb041697b2f4513c1a6396dac1341a88d6637aaa95bd1b49dcdf572a0fea67be0b8e65d4b4a8d3dcc3089f9ddec7126db7036a6fcd345ecb8c722c00a5636bba792348a1b31e3296cda36c3f820893a739f30d6c7f73aa42dfe92912c05ce22b5974804cbce7645cc46e27ef105ce3339cef41524c10516a8675208cb61681c8116bcb751d48f4a92b7eaacc0442812b112575c155bc903ea3e6fff8e7f8d8b86bfb41298ea0c10794d0a4fb47abe95da022e9d46d5f625d3965e9ae76b9def59d56a313f649d15d5c06ed562763fde5f3a9b00e753e284fe609262c0ae9de7dc23e06843168901364f9d0b3d89eae79a17e702268cb7231f4af9904b9b3f4e7233ca07452b0a76bbbcdb6f4d5f7268cc93c2c8a4393021dc885a41e5c5a6ed1a257d6407d6f45d4d8a9a3bafde49e08dd4a6d8a4170720a38e6b722cd5d3f95340e3291cc52c3644989b67acac2a745b7ca635490ebaea784edbc31a237f909d672d8b7ab0aeb249d0cc606add5d8ad059544f6c1780be328dd7be3183b2b509d3260fba37b655cc34f35ad96362fb8543db3763ae86a25da969b58d82a63515cf19c3ac759b33b8365027109bef358ac96c12ac9d87eb442cf15ebca3d0592d982039fd4d01c6e2d129eb403b172962ac3c9b18babeb4683bb4c7c36865b54351ca14ebdcf68e28aaf7052e153c63f08730b62fcf89457f642ea49ef8e6c64dfb3e56e364012f745d3249dba70794357997a55f62e8bc86917ddbd9783e4e701cbdc3e852ff177e1cd19b9b7eefc69648bcd837f2a98e24b31adeb88b7eecc84594682a89ce5485dab72eb2cd961dead985429835612bc3bd70a85a2f44d7249de622648e227c90b2bb88d65bcc0cf7d511d6e74c644b7f3e426c5e11593e42b6b69f99f9544defbc87b5aaa3aa8d26407922e2ff236f1ceef5fdb10f1e098eb9cef66846d7f27c946d61d516bd19d446a5e0bbe619c8314bc87c2cdebda5cdd3cd38e123e3543127aae3648bd70a2822ad44fa0363a92e34d9f54ca85799401e638d6fa705506c53e8750beb7a16c79baedf70b5dfe1cc98a98684bca0c322a599c9a03cdf02938ab4e31f5c8dc0c97b98852cda8ad4c5d2f71ab478976069a0aad70afc78bd7cf466df5119579d890c1da517cad6fd77107f92493966cce977b100eec1f3e0dec1be5867a3731904b047baf4e2aced9f7f6b02caf21b0951b4e1cb6ea2ac1de89f2dbd08cc97106be7658b5b95affe04ebf3a14e7d48e631753918addba9b1d61979f24ba8f2e612e88f5bb7a11af7dc5a2eb38b7d9cfdce096996e80f366807b855a1a9db847a8635ef1705233150415857888454a75b8001d21f916a986299fdac335a8a698dfe22223a4f61e115e209e5dc661741e1dd4e31687cb1582fde218fb258aea4dddd1c55c63bf64a62fad50875f8b12090e5e15f5a540be898181dbfba2174f12b8c8fb746662827242e84e87087f0b6ba58e9b496d22da16ca5efbd3856cca2f90ca63bc291c8b1e1f931bb2948b7ce9bef532009810e59ffa86e15ada7869c57541a2de0cf780773450c665d504d69c01443062b1ff511204bd1c946aad1865182e85a402d565e32ae657a0636461a072d29aa4edd5bac2d1bd6868f203e43df2fee4d710a5769cd65f1f8327eca94bb2ba650bae485f5a0d29389e180219b87d6534c02cc4a3bf9267760afd0edb2a8176c5854a6279fc102fde02ee350619e3091d8ba6bf6b618a0db6a0b45b3c8ab44b4c1bc34a4afd1d169bf8f7f11a5672157711467a020751ed31f40c276b83396ab12be0d13e9c6f76736dd8cb6caf5d78bc11b416dd419e4e199eb99df19befe5ac89869497c594bd9684dfc5efadedd062eaf9a36d7cfa17fe409e0ad65e3177034ab6a97181d34e2a6c615c3cd96379e3291be61ef269751f49a69484abffceee3ce1cae7a9afefaef85badd0e323cadc93305aacad7f343ec7dbe4132f0f12dc0643da614db271545cc208de4a4144acec219b359233e9a68cfc8860a2d56e0ee3c32fe37478f23495fd5f2e3996b7361459c9173941f3d9653d39b2bec3cb81fbaa4786723985334697c67fd1e8f7df7b4e95626a4acf69e2fac2c3792136aaa869515a88c321aceb5b3379ada93d40f785d4e9c8b2b001d4a0d1c0e73718bed59249e08272d7374c81b46f13e6886c318e13e642a1f4eefbb3233114bf6aaab5385dad06d179014f376026c17e0209418fa4b5f5f6331b5cf643d40d82d0e6eab60f366b6f130323cb8848a43ff6d3770a1b4fa12f33c589f783654b37796f9879ca6f90743560c160e5b73d64fb4344af644d3a91fe66b76767098671cf1449b60a6176fc6b07b424a613a3e972cf0512dee870e0ce33f8d83ef28d3f7345350d072b2019254480f5665dd5f4884c1beb439727d54f5809aad3eb3f7dd729e813badb2be66e984402559edadd596f84c1103ab1688135a6aaf966f2b473accd50f9584427a3286bf6df00c668161dbb5ddffe20d7e2a4c4c7f47f2c681e48ef4fe53ef6e1eb5e19e6ca9a3e5c7be8db9a35f972f9e8e2345b6ceef09abc0da6a4081006727007dd30c93d241ddcf6417493cf27149819b59a73eadb1cca2dcc8bca91c30c922c034e009a5612f9e23d64b816884891070f4b371b721ef122c45848b7bf17a291ae555422b2b3e39b13af571c0dde9dd42a5f528197131174d9d93739d1f82873467d5704f756d4aa0ded23875b8efabba5bf0b04452afcbd75be9450cbbf0b3a9545151855f712ac611b1bf984a5387efb257a024d94d2b52de6c2fd37077437b3b78bb70efa5a6a5a32b0584a50152664281574adedb95fb35f326ded22bcedf7af8943b837516fce58869b9c2dde2024e45781d6247709d0eb315477131c78a223e63e15e39e22a2b8571e70facb509b53a9795df9de67832320b823082d3f79facb4ec7f87a374c3c06725ad5ec62f29004326e5ac8755f92cf1c8248b17374e9142184185dc1b3a1759344831e66cce51ee7c16ec1df8477454a896f8fed88c3ba5b020a7b22a0d84e8b69a406ae54c19678e22d5e98c3714c5dfd86efdd0b8a7623ffa91c62f47e8f2d20050375698a415497d84dcf601d238ee67e921e873e07af343c0e63b790fe358fff84953228aa505fdf66ab262b8abc7dba1609dfe0dca77738e8176482240d8f357e2baf1ab10238de0e942064942754b567c95b0a4bc96e10acce728247a34ebb56a5b636a216733b8c966cc573b6b4b1726f259b423d766e6082e524725929b67b2623760f25bbed0d86465d8382f4ef830f62f0f27456b7696338a35dd210b44dc3da7361bdf33b95378845944a99fe0e4859c190caaa846883c33f90ffe474ed864b7968408992614d0198d06c753fd1385d877f4d444d47ad79ca60c8447241b438f5a2bae5be1821c6b8e844fdd9abd3df1e0eba96bf23a00d6730737285a095778f754130c9c6e8eecf105239b22116c36a14977781ba7b341833abd78775a169ce4989ce255ec2cbf048ad5d228132ea864b6d04336a8a5a7d47988b0b8e4059226263ba88adb1e09bbc05f5a7a8b499062fb8690d781c8143ebffb64f710d88561e80e46ace227d16e3036259f5fbfacb5ef81d95d7edb188cef85bfd207d849f9d8fd249138e69b811b950adfe2eddaf3d1e10065757b8f6a5dde31a15e7378875905200072cb26b114af4dd92357353b719f5449b63800ee12068782e333cb15376ef118e496f0484080300ed8faa31a78e2427c503f568a7515740907c8bf6f0dd4712a4dac09a7293d061b1cbbf04346aa35fe5646ddd2b332ada4c9e73d3507d155f247342dc73c2bc3409158e9ba0f9699e8b8a8a645254d55828fdfbd251e60639514ef28962cd0b57650e6524194b8449580f9b0a7ba24153d0e604710f3d8a62dc3e0ba6db351f6ae899dacf46621cd6eba2207fc8ec0af92d123eea5ab780a6dcd839a4c2c26e586df84b800542cce2de85b37b4c62f2f6ef2814a52baed774410e193c354cb271f6f05e514704b8ba6078108db5a0eedec9ad398ea165ec2e9a77bc5d2dfa934ad360f17341d3a10ede89aefa1e50065b83587c157a3a4571db083903c595d1ead743ce7eeec9d55f94636de15dbdce8e270105b957537b31ae1b5188fbac30da5ff36d7e7b4784b075ed8e2e7c83481e358c3f10b227a648976db9f217b5313912a66014ae0b017dd2f7a2d3cc6837a9ba449ee6dc3a9bcaeb9d135ad0d794b68086756b2f96235de6cb095341a73f5d1badf407deff09ac7b1eb8834f798bed27aff4032b95ecae02e9953c1a4dcab00060294010872bd3bfda6130c202ae3c0ff08c5371c2394b2210f06d40aa49d3f9c7b68509c3681bb59a860c1899958429d9be60022fe2320eab8b50d4c05840b24022c0c4f19d666c5113dc93bb58978362a359471a73644b1bbba84ce44a04485bb70004264e7f215b9091fd80ba0c477e23cb1d87d02d6f8c80f80c218302585be35bfeb112f8ee0e2b8faabe5bccacf4b042d77769c28967120756deb646c1977bd30edd578bdd38589f697150ea43a8eff63ab77c41ac277c9b22803d6f6c5f57b39b9d1c8fc741fc36ebdf69253964763665006260ced0f5caac281825231c8d663866b8d838a7657bf71218f118caa23872825eef00d8ebd3c67a43d88bab83548040e5112145b6190ec671c3d58efbda497a25a75e3a3ec395a75ad72a0bd2de39880b9a8a149a632a5c01bee25eebdfd09e1cb02b509501ae59ed666a2e4acd9d9c92be700a425695e42b30da8d1f7932d1d879189cc0ecb89eb475b9b24cfe00c7c1504c74c08e6abb3ca7fc83ebbc52c1191d04e4c6dcf4f08799346c234f69e50c112b78c8c644be937a02b6bd2a60b76b7370fe9bd120998d2569d68351b8b395f43a45b43001ea1999b7c31abdb6bfdc26158c3276ff7fcce442cfbe6a2070395759d52b4221046b04a32ace467d60ecb0f3252359e4ba5d90364f2dcd99d032107c2059f176ed027828908af8adcd273ec5b6c5d", 0x0, 0x0, &(0x7f0000000380)}) r3 = dup(r2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x28000000) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x43d, 0x0, "49df4ffe5d9c533da378c3ec111d08000000000000009d73660f5d9459f47415f6e029b01d99291517d8a400ed5a20356ce10b0602fe218f3dea0baeaa030000008adda2ddfc936ea8b049d100"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x1c, 0x5e, 0x401, 0x0, 0x25dfdbfb, "", [@typed={0x4}, @typed={0x8, 0x3ffd, 0x0, 0x0, @uid}]}, 0x1c}], 0x1}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES16=r6, @ANYBLOB="0000000e000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001b00)=ANY=[@ANYBLOB], 0x120}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) 0s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0x2, 0x3, 0x33) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x2000529b, 0x0) kernel console output (not intermixed with test programs): etrying later): interface not active [ 79.593504][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.603289][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.635470][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.780154][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.787124][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.813960][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.829532][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.837659][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.866276][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.082155][ T5235] hsr_slave_0: entered promiscuous mode [ 80.090090][ T5235] hsr_slave_1: entered promiscuous mode [ 80.096207][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.104152][ T5235] Cannot create hsr debugfs directory [ 80.201643][ T5222] hsr_slave_0: entered promiscuous mode [ 80.215144][ T5222] hsr_slave_1: entered promiscuous mode [ 80.228378][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.236485][ T5222] Cannot create hsr debugfs directory [ 80.522334][ T5223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.534491][ T5223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.564803][ T5223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.592661][ T5223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.746918][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.759311][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.774850][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.786668][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.800110][ T5231] Bluetooth: hci2: command tx timeout [ 80.800142][ T5240] Bluetooth: hci1: command tx timeout [ 80.878763][ T5240] Bluetooth: hci3: command tx timeout [ 80.878890][ T56] Bluetooth: hci4: command tx timeout [ 80.889721][ T5231] Bluetooth: hci0: command tx timeout [ 80.948111][ T5234] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.961918][ T5234] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.973484][ T5234] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.985829][ T5234] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.171861][ T5235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.186696][ T5235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.198031][ T5235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.231303][ T5235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.291326][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.338038][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.403109][ T5222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.413907][ T5222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.427507][ T5222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.444459][ T5222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.461285][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.505342][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.528305][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.536086][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.547520][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.554665][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.577805][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.585014][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.635289][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.642631][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.834524][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.972868][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.974877][ T29] audit: type=1400 audit(1723684827.968:113): avc: denied { sys_module } for pid=5224 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.014262][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.162452][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.210824][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.218878][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.234729][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.241923][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.276321][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.298491][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.305725][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.386486][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.394047][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.435264][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.456042][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.463257][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.485847][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.526952][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.534191][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.572970][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.682045][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.883305][ T56] Bluetooth: hci1: command tx timeout [ 82.891929][ T56] Bluetooth: hci2: command tx timeout [ 82.960132][ T5231] Bluetooth: hci4: command tx timeout [ 82.965946][ T5231] Bluetooth: hci0: command tx timeout [ 82.971880][ T56] Bluetooth: hci3: command tx timeout [ 83.047417][ T5224] veth0_vlan: entered promiscuous mode [ 83.153367][ T5223] veth0_vlan: entered promiscuous mode [ 83.224379][ T5224] veth1_vlan: entered promiscuous mode [ 83.333890][ T5223] veth1_vlan: entered promiscuous mode [ 83.365545][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.412884][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.488119][ T5224] veth0_macvtap: entered promiscuous mode [ 83.560216][ T5223] veth0_macvtap: entered promiscuous mode [ 83.574039][ T5224] veth1_macvtap: entered promiscuous mode [ 83.591779][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.626686][ T5223] veth1_macvtap: entered promiscuous mode [ 83.741475][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.757130][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.800725][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.809890][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.820806][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.830815][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.867514][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.879511][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.903288][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.950870][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.962323][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.981716][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.995201][ T5223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.004647][ T5223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029197][ T5223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.037936][ T5223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.063731][ T5235] veth0_vlan: entered promiscuous mode [ 84.071215][ T5234] veth0_vlan: entered promiscuous mode [ 84.155644][ T5235] veth1_vlan: entered promiscuous mode [ 84.198228][ T5234] veth1_vlan: entered promiscuous mode [ 84.313136][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.345260][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.369689][ T5222] veth0_vlan: entered promiscuous mode [ 84.437246][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.442946][ T5222] veth1_vlan: entered promiscuous mode [ 84.446200][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.495896][ T5235] veth0_macvtap: entered promiscuous mode [ 84.534206][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.549970][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.569192][ T5234] veth0_macvtap: entered promiscuous mode [ 84.597296][ T29] audit: type=1400 audit(1723684830.588:114): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/root/syzkaller.g3lNLL/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.634478][ T5234] veth1_macvtap: entered promiscuous mode [ 84.656566][ T29] audit: type=1400 audit(1723684830.588:115): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.665660][ T5235] veth1_macvtap: entered promiscuous mode [ 84.681642][ T29] audit: type=1400 audit(1723684830.588:116): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/root/syzkaller.g3lNLL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.725005][ T29] audit: type=1400 audit(1723684830.598:117): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.760975][ T29] audit: type=1400 audit(1723684830.628:118): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.766561][ T2514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.803511][ T29] audit: type=1400 audit(1723684830.628:119): avc: denied { mounton } for pid=5223 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.842684][ T2514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.845843][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.858932][ T29] audit: type=1400 audit(1723684830.628:120): avc: denied { mount } for pid=5223 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.862426][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.908221][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.924223][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.938130][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.948335][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.958879][ T5231] Bluetooth: hci2: command tx timeout [ 84.964483][ T5231] Bluetooth: hci1: command tx timeout [ 84.965487][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.980118][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.994015][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.004274][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.015232][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.027976][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.038741][ T56] Bluetooth: hci3: command tx timeout [ 85.038900][ T5240] Bluetooth: hci4: command tx timeout [ 85.044419][ T5231] Bluetooth: hci0: command tx timeout [ 85.075371][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.088639][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.098857][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.110225][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.127436][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.151784][ T5222] veth0_macvtap: entered promiscuous mode [ 85.184085][ T29] audit: type=1400 audit(1723684831.168:121): avc: denied { read write } for pid=5223 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.219886][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.236915][ T29] audit: type=1400 audit(1723684831.168:122): avc: denied { open } for pid=5223 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.263745][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.275066][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.281964][ T29] audit: type=1400 audit(1723684831.168:123): avc: denied { ioctl } for pid=5223 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.295068][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.336423][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.353033][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.375862][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.394492][ T5234] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.403444][ T5234] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.511324][ T5234] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.520994][ T5234] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.567167][ T5235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.599721][ T5235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.615336][ T5235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.637018][ T5235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.659806][ T5222] veth1_macvtap: entered promiscuous mode [ 85.998348][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.011858][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.026995][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.045441][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.103077][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.140179][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.153374][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.175717][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.189411][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.200310][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.218991][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.285416][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.299087][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.344837][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.399369][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.411294][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.421883][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.471596][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.491634][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.515248][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.532293][ T5319] mmap: syz.2.3 (5319) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.544251][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.564755][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.622428][ T5222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.655132][ T5222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.679808][ T5222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.705893][ T5222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.164124][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.172893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.210656][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.515086][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.626111][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.662474][ T2527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.727732][ T2527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.789835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.752061][ T2519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.818735][ T2519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.959280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.159951][ T5336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.827743][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 89.827762][ T29] audit: type=1400 audit(1723684835.148:153): avc: denied { ioctl } for pid=5332 comm="syz.2.8" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.062907][ T29] audit: type=1400 audit(1723684836.048:154): avc: denied { create } for pid=5335 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.229001][ T29] audit: type=1400 audit(1723684836.188:155): avc: denied { create } for pid=5340 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.250727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.378217][ T29] audit: type=1400 audit(1723684836.328:156): avc: denied { read } for pid=5340 comm="syz.0.9" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.417254][ T5333] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 90.448780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 90.458202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.557913][ T5333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 90.653500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.663310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.855686][ T29] audit: type=1400 audit(1723684836.328:157): avc: denied { open } for pid=5340 comm="syz.0.9" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.959633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.186160][ T29] audit: type=1400 audit(1723684836.348:158): avc: denied { write } for pid=5332 comm="syz.2.8" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.384968][ T29] audit: type=1400 audit(1723684836.358:159): avc: denied { create } for pid=5343 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.483287][ T29] audit: type=1400 audit(1723684836.368:160): avc: denied { read write } for pid=5343 comm="syz.4.5" name="video1" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.597413][ T29] audit: type=1400 audit(1723684836.368:161): avc: denied { open } for pid=5343 comm="syz.4.5" path="/dev/video1" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.698999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.751100][ T47] cfg80211: failed to load regulatory.db [ 92.833551][ T29] audit: type=1400 audit(1723684836.438:162): avc: denied { ioctl } for pid=5335 comm="syz.1.2" path="/dev/v4l-subdev5" dev="devtmpfs" ino=864 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.727567][ T5367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.052269][ T5371] sp0: Synchronizing with TNC [ 95.101769][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 95.101781][ T29] audit: type=1400 audit(1723684841.098:181): avc: denied { search } for pid=4889 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.007396][ T5385] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.710997][ T29] audit: type=1400 audit(1723684841.518:182): avc: denied { create } for pid=5373 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.837065][ T29] audit: type=1400 audit(1723684841.518:183): avc: denied { connect } for pid=5373 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.863849][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.929569][ T29] audit: type=1400 audit(1723684841.528:184): avc: denied { name_connect } for pid=5373 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 97.163082][ T5393] Bluetooth: MGMT ver 1.23 [ 97.283858][ T29] audit: type=1400 audit(1723684841.588:185): avc: denied { listen } for pid=5373 comm="syz.1.15" lport=59651 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.308473][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.333765][ T29] audit: type=1400 audit(1723684841.688:186): avc: denied { accept } for pid=5373 comm="syz.1.15" lport=59651 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.431047][ T29] audit: type=1400 audit(1723684843.148:187): avc: denied { bind } for pid=5388 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.506619][ T29] audit: type=1400 audit(1723684843.158:188): avc: denied { write } for pid=5388 comm="syz.3.18" path="socket:[6883]" dev="sockfs" ino=6883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.888661][ T29] audit: type=1400 audit(1723684843.458:189): avc: denied { write } for pid=5395 comm="syz.2.19" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.122666][ T5406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.169217][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.196520][ T29] audit: type=1400 audit(1723684844.188:190): avc: denied { bind } for pid=5404 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.568787][ T5410] Zero length message leads to an empty skb [ 99.120357][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 99.168044][ T5408] Bluetooth: Short BCSP packet [ 99.389036][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.412878][ T54] Bluetooth: Error in BCSP hdr checksum [ 100.275339][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.288593][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.310035][ T2527] Bluetooth: Error in BCSP hdr checksum [ 100.318233][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 100.333307][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.357358][ T25] usb 3-1: config 0 descriptor?? [ 100.440134][ T25] usb 3-1: can't set config #0, error -71 [ 100.507030][ T25] usb 3-1: USB disconnect, device number 2 [ 100.527119][ T2944] Bluetooth: Error in BCSP hdr checksum [ 100.568792][ T5240] Bluetooth: hci5: command 0x1003 tx timeout [ 100.576836][ T5231] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.658548][ T945] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.852798][ T945] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.874172][ T945] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 100.915454][ T945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.985308][ T945] usb 4-1: config 0 descriptor?? [ 101.034139][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 101.034157][ T29] audit: type=1400 audit(1723684847.028:196): avc: denied { create } for pid=5419 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.150878][ T29] audit: type=1400 audit(1723684847.088:197): avc: denied { write } for pid=5419 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.209397][ T5421] netlink: 76 bytes leftover after parsing attributes in process `syz.0.25'. [ 101.377709][ T5421] Êü: entered promiscuous mode [ 101.636337][ T945] (null): keene_cmd_main failed (-110) [ 101.644196][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.664711][ T945] video4linux radio32: keene_cmd_main failed (-32) [ 102.728593][ T945] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 102.808585][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 102.809755][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.845459][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 102.867463][ T9] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 102.986562][ T9] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 103.030200][ T9] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 103.070592][ T9] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 103.098629][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 103.110865][ T29] audit: type=1400 audit(1723684849.108:198): avc: denied { create } for pid=5427 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 103.130305][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 103.136939][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 103.167800][ T5225] usb 4-1: USB disconnect, device number 2 [ 103.186736][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 103.204992][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.279866][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 103.303652][ T9] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 103.321449][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.394829][ T25] usb 2-1: config 0 descriptor?? [ 103.513817][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 103.577917][ T9] scsi host1: usb-storage 3-1:1.0 [ 103.901203][ T29] audit: type=1326 audit(1723684849.898:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5442 comm="syz.3.29" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fdc9799b9 code=0x0 [ 103.963292][ T29] audit: type=1400 audit(1723684849.948:200): avc: denied { create } for pid=5442 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.052717][ T29] audit: type=1400 audit(1723684850.038:201): avc: denied { create } for pid=5448 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.542499][ T29] audit: type=1400 audit(1723684850.238:202): avc: denied { mounton } for pid=5448 comm="syz.0.30" path="/proc/27/task" dev="proc" ino=7735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 105.788933][ T9] usb 2-1: USB disconnect, device number 2 [ 105.861296][ T54] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 105.889889][ T29] audit: type=1400 audit(1723684851.158:203): avc: denied { ioctl } for pid=5450 comm="syz.4.31" path="socket:[6996]" dev="sockfs" ino=6996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.957152][ T5310] usb 3-1: USB disconnect, device number 3 [ 105.988913][ T54] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 106.030506][ T2944] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 106.452671][ T5464] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 106.477913][ T5464] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 106.649092][ T29] audit: type=1400 audit(1723684852.638:204): avc: denied { ioctl } for pid=5457 comm="syz.1.33" path="socket:[7749]" dev="sockfs" ino=7749 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.996129][ T29] audit: type=1400 audit(1723684852.978:205): avc: denied { sys_module } for pid=5457 comm="syz.1.33" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.260423][ T2944] sd 1:0:0:0: [sdb] Sense not available. [ 107.534910][ T2944] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 107.566858][ T2944] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 107.589000][ T2944] sd 1:0:0:0: [sdb] Write Protect is off [ 107.595058][ T2944] sd 1:0:0:0: [sdb] Asking for cache data failed [ 107.659568][ T2944] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 107.705246][ T29] audit: type=1400 audit(1723684853.698:206): avc: denied { read write } for pid=5458 comm="syz.0.32" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 107.791150][ T29] audit: type=1400 audit(1723684853.698:207): avc: denied { open } for pid=5458 comm="syz.0.32" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 108.081023][ T5479] ALSA: mixer_oss: invalid OSS volume './file0' [ 108.528089][ T29] audit: type=1400 audit(1723684853.728:208): avc: denied { create } for pid=5475 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.883696][ T29] audit: type=1400 audit(1723684853.808:209): avc: denied { mounton } for pid=5458 comm="syz.0.32" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.906777][ T29] audit: type=1400 audit(1723684853.898:210): avc: denied { mount } for pid=5475 comm="syz.1.36" name="/" dev="configfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 108.966955][ T2944] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 109.048411][ T29] audit: type=1400 audit(1723684853.948:211): avc: denied { remount } for pid=5475 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 109.111546][ T29] audit: type=1400 audit(1723684854.828:212): avc: denied { unmount } for pid=5235 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 109.951148][ T5487] program syz.1.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.481273][ T29] audit: type=1400 audit(1723684855.648:213): avc: denied { create } for pid=5481 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.585629][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.820790][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 111.820809][ T29] audit: type=1326 audit(1723684857.818:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.4.39" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e3799b9 code=0x0 [ 111.877205][ T5279] udevd[5279]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 112.066943][ T29] audit: type=1400 audit(1723684858.058:218): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 112.109507][ T29] audit: type=1400 audit(1723684858.098:219): avc: denied { write } for pid=5484 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.658209][ T29] audit: type=1400 audit(1723684858.378:220): avc: denied { create } for pid=5507 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.702560][ T5279] udevd[5279]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 113.986659][ T29] audit: type=1400 audit(1723684859.518:221): avc: denied { read } for pid=5506 comm="syz.3.42" name="ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.343269][ T29] audit: type=1400 audit(1723684859.518:222): avc: denied { open } for pid=5506 comm="syz.3.42" path="/dev/ptp0" dev="devtmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.542546][ T29] audit: type=1400 audit(1723684859.618:223): avc: denied { getopt } for pid=5506 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.678810][ T29] audit: type=1400 audit(1723684859.628:224): avc: denied { ioctl } for pid=5506 comm="syz.3.42" path="/dev/vbi3" dev="devtmpfs" ino=885 ioctlcmd=0x5649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 114.804406][ T29] audit: type=1400 audit(1723684860.798:225): avc: denied { write } for pid=5511 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.121534][ T5534] overlayfs: failed to resolve './file1': -2 [ 115.172946][ T29] audit: type=1400 audit(1723684861.168:226): avc: denied { setopt } for pid=5527 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.558633][ T5547] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 115.561412][ T5548] IPVS: stopping backup sync thread 5547 ... [ 116.018651][ T5310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.132830][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 116.280767][ T5310] usb 3-1: config index 0 descriptor too short (expected 106, got 36) [ 116.289198][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.333663][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.354380][ T5310] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 116.394368][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 116.407813][ T5560] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 116.418707][ T5560] erspan1: entered promiscuous mode [ 116.423907][ T5560] erspan1: entered allmulticast mode [ 116.460271][ T5560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.52'. [ 116.478972][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.509564][ T5310] usb 3-1: config 0 descriptor?? [ 117.094350][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.137570][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.241236][ T5310] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 117.313242][ T5310] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 117.341001][ T5310] corsair 0003:1B1C:1B3E.0001: item fetching failed at offset 2/5 [ 117.391931][ T5310] corsair 0003:1B1C:1B3E.0001: parse failed [ 117.429753][ T5310] corsair 0003:1B1C:1B3E.0001: probe with driver corsair failed with error -22 [ 117.449812][ T5551] syz.2.49[5551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.450024][ T5551] syz.2.49[5551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.606493][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 117.606512][ T29] audit: type=1400 audit(1723684863.598:231): avc: denied { map } for pid=5566 comm="syz.1.54" path="socket:[8219]" dev="sockfs" ino=8219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.933145][ T29] audit: type=1400 audit(1723684863.648:232): avc: denied { read } for pid=5566 comm="syz.1.54" path="socket:[8219]" dev="sockfs" ino=8219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.088345][ T29] audit: type=1400 audit(1723684863.648:233): avc: denied { create } for pid=5566 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.342871][ T29] audit: type=1400 audit(1723684863.658:234): avc: denied { ioctl } for pid=5566 comm="syz.1.54" path="socket:[8223]" dev="sockfs" ino=8223 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.430906][ T29] audit: type=1400 audit(1723684863.668:235): avc: denied { bind } for pid=5566 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.510949][ T53] usb 3-1: USB disconnect, device number 4 [ 119.602748][ T29] audit: type=1400 audit(1723684863.678:236): avc: denied { read } for pid=5566 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.892928][ T29] audit: type=1400 audit(1723684865.668:237): avc: denied { append } for pid=5587 comm="syz.2.59" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 120.260894][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 120.736730][ T5225] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.873521][ T29] audit: type=1400 audit(1723684865.988:238): avc: denied { ioctl } for pid=5587 comm="syz.2.59" path="socket:[8024]" dev="sockfs" ino=8024 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.039049][ T5225] usb 1-1: Using ep0 maxpacket: 8 [ 121.044181][ T29] audit: type=1400 audit(1723684865.988:239): avc: denied { write } for pid=5587 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.076291][ T5225] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.104738][ T5597] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 121.111465][ T5597] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.140274][ T5225] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.174255][ T29] audit: type=1400 audit(1723684866.898:240): avc: denied { setopt } for pid=5583 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 121.193454][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.212226][ T5225] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.231054][ T5225] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.269613][ T5225] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.291987][ T5597] vhci_hcd vhci_hcd.0: Device attached [ 121.302121][ T5225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.587985][ T5225] usb 1-1: GET_CAPABILITIES returned 0 [ 121.600431][ T5225] usbtmc 1-1:16.0: can't read capabilities [ 121.611777][ T53] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 122.009573][ T942] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.318871][ T942] usb 3-1: Using ep0 maxpacket: 8 [ 122.583616][ T942] usb 3-1: config 0 has no interfaces? [ 122.605296][ T942] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.641069][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.670869][ T942] usb 3-1: Product: syz [ 122.693876][ T942] usb 3-1: Manufacturer: syz [ 122.734449][ T942] usb 3-1: SerialNumber: syz [ 122.833487][ T942] usb 3-1: config 0 descriptor?? [ 122.896133][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 122.896151][ T29] audit: type=1400 audit(1723684868.888:245): avc: denied { write } for pid=5582 comm="syz.0.57" name="usbtmc0" dev="devtmpfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.925368][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.240772][ T5610] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 123.869321][ T29] audit: type=1400 audit(1723684869.268:246): avc: denied { create } for pid=5582 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.962234][ T29] audit: type=1400 audit(1723684869.278:247): avc: denied { bind } for pid=5582 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.999486][ T29] audit: type=1400 audit(1723684869.278:248): avc: denied { name_bind } for pid=5582 comm="syz.0.57" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 124.038114][ T5600] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 124.058748][ T29] audit: type=1400 audit(1723684869.278:249): avc: denied { node_bind } for pid=5582 comm="syz.0.57" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 124.080534][ T29] audit: type=1400 audit(1723684869.978:250): avc: denied { create } for pid=5593 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 124.444233][ T942] usb 1-1: USB disconnect, device number 2 [ 124.692151][ T29] audit: type=1400 audit(1723684870.678:251): avc: denied { name_bind } for pid=5615 comm="syz.0.64" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 124.745233][ T5310] usb 3-1: USB disconnect, device number 5 [ 124.786979][ T5598] vhci_hcd: connection reset by peer [ 124.826149][ T3920] vhci_hcd: stop threads [ 124.849939][ T3920] vhci_hcd: release socket [ 124.915640][ T3920] vhci_hcd: disconnect device [ 125.179622][ T5620] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 125.196684][ T5620] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 125.208801][ T5620] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.65'. [ 126.048934][ T29] audit: type=1400 audit(1723684872.028:252): avc: denied { getopt } for pid=5617 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.373058][ T5637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.099560][ T53] vhci_hcd: vhci_device speed not set [ 127.324305][ T5641] futex_wake_op: syz.1.69 tries to shift op by -1; fix this program [ 127.612947][ T5646] netlink: 64 bytes leftover after parsing attributes in process `syz.0.70'. [ 127.838736][ T942] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.871445][ T5650] iso9660: Unknown parameter '' [ 128.940972][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 129.148111][ T29] audit: type=1400 audit(1723684874.958:253): avc: denied { read } for pid=5651 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.624726][ T942] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 129.638781][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.706215][ T942] usb 2-1: config 0 descriptor?? [ 129.783031][ T942] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 129.887565][ T29] audit: type=1400 audit(1723684875.868:254): avc: denied { ioctl } for pid=5656 comm="syz.3.73" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8395 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 130.007321][ T29] audit: type=1400 audit(1723684875.978:255): avc: denied { read } for pid=4660 comm="acpid" name="mouse1" dev="devtmpfs" ino=2348 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.067333][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.128610][ T29] audit: type=1400 audit(1723684875.978:256): avc: denied { open } for pid=4660 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2348 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.169669][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.469392][ T53] usb 2-1: USB disconnect, device number 3 [ 131.351211][ T29] audit: type=1400 audit(1723684876.558:257): avc: denied { open } for pid=5659 comm="syz.4.74" path="/dev/ttyqc" dev="devtmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 131.553063][ T29] audit: type=1326 audit(1723684876.558:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e3799b9 code=0x7ffc0000 [ 131.592691][ T29] audit: type=1326 audit(1723684876.558:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e3799b9 code=0x7ffc0000 [ 131.763672][ T29] audit: type=1326 audit(1723684876.568:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e9e3799b9 code=0x7ffc0000 [ 131.788306][ T29] audit: type=1326 audit(1723684876.568:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e3799b9 code=0x7ffc0000 [ 131.813773][ T29] audit: type=1326 audit(1723684876.568:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9e3799b9 code=0x7ffc0000 [ 132.802765][ T5669] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 133.201060][ T945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.347138][ T5677] netlink: 'syz.1.77': attribute type 21 has an invalid length. [ 133.388135][ T5677] netlink: 152 bytes leftover after parsing attributes in process `syz.1.77'. [ 134.039178][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.046026][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.843621][ T5678] bridge0: port 3(team0) entered blocking state [ 134.876923][ T5678] bridge0: port 3(team0) entered disabled state [ 134.987339][ T5678] team0: entered allmulticast mode [ 135.015819][ T5678] team_slave_0: entered allmulticast mode [ 135.209434][ T5678] team_slave_1: entered allmulticast mode [ 135.352694][ T5678] team0: entered promiscuous mode [ 135.357744][ T5678] team_slave_0: entered promiscuous mode [ 135.388632][ T5678] team_slave_1: entered promiscuous mode [ 135.431002][ T5678] bridge0: port 3(team0) entered blocking state [ 135.437962][ T5678] bridge0: port 3(team0) entered forwarding state [ 136.150708][ T5699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 136.852111][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 136.852130][ T29] audit: type=1400 audit(1723684882.848:292): avc: denied { read } for pid=5700 comm="syz.4.83" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 137.469753][ T29] audit: type=1400 audit(1723684882.888:293): avc: denied { open } for pid=5700 comm="syz.4.83" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 137.493384][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.828629][ T29] audit: type=1400 audit(1723684883.718:294): avc: denied { mount } for pid=5705 comm="syz.0.84" name="/" dev="ramfs" ino=9293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 137.946717][ T29] audit: type=1400 audit(1723684883.928:295): avc: denied { create } for pid=5705 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 137.959749][ T5709] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 137.973911][ T29] audit: type=1400 audit(1723684883.948:296): avc: denied { connect } for pid=5708 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.906643][ T29] audit: type=1400 audit(1723684883.958:297): avc: denied { write } for pid=5708 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.064199][ T29] audit: type=1400 audit(1723684883.968:298): avc: denied { setattr } for pid=5705 comm="syz.0.84" name="NETLINK" dev="sockfs" ino=8582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 139.064627][ T29] audit: type=1400 audit(1723684883.968:299): avc: denied { ioctl } for pid=5705 comm="syz.0.84" path="socket:[8582]" dev="sockfs" ino=8582 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 139.064780][ T29] audit: type=1400 audit(1723684884.198:300): avc: denied { setopt } for pid=5711 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.064840][ T29] audit: type=1400 audit(1723684884.198:301): avc: denied { ioctl } for pid=5711 comm="syz.3.86" path="socket:[8584]" dev="sockfs" ino=8584 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.110927][ T5720] futex_wake_op: syz.2.87 tries to shift op by -1; fix this program [ 140.338613][ T5282] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.686038][ T5282] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 140.706068][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.765357][ T5282] usb 3-1: config 0 descriptor?? [ 140.814751][ T5282] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 141.522407][ T5735] fuse: Unknown parameter 'd' [ 143.104834][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 143.104876][ T29] audit: type=1400 audit(1723684889.088:306): avc: denied { ioctl } for pid=5738 comm="syz.4.93" path="/dev/usbmon0" dev="devtmpfs" ino=706 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.687111][ T53] usb 3-1: USB disconnect, device number 6 [ 143.980614][ T5747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.94'. [ 145.555339][ T29] audit: type=1400 audit(1723684891.058:307): avc: denied { connect } for pid=5748 comm="syz.2.96" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.692104][ T29] audit: type=1400 audit(1723684891.078:308): avc: denied { write } for pid=5748 comm="syz.2.96" path="socket:[8619]" dev="sockfs" ino=8619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.821276][ T5753] ALSA: seq fatal error: cannot create timer (-22) [ 145.845758][ T29] audit: type=1400 audit(1723684891.228:309): avc: denied { create } for pid=5748 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.932273][ T29] audit: type=1400 audit(1723684891.248:310): avc: denied { connect } for pid=5748 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.004932][ T29] audit: type=1400 audit(1723684891.268:311): avc: denied { bind } for pid=5748 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.024252][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.098212][ T29] audit: type=1400 audit(1723684891.288:312): avc: denied { read } for pid=5748 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.426820][ T29] audit: type=1400 audit(1723684891.378:313): avc: denied { write } for pid=5748 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.069106][ T29] audit: type=1400 audit(1723684892.298:314): avc: denied { listen } for pid=5758 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.468830][ T29] audit: type=1400 audit(1723684892.298:315): avc: denied { accept } for pid=5758 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.884402][ T5782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'. [ 151.583233][ T5310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.271862][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.303701][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.318974][ T5310] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.332589][ T5310] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.356687][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.379526][ T5282] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 152.415357][ T5310] usb 5-1: config 0 descriptor?? [ 152.583428][ T5282] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 152.599012][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.618980][ T5282] usb 3-1: config 0 descriptor?? [ 152.650144][ T5796] futex_wake_op: syz.0.106 tries to shift op by -1; fix this program [ 152.798512][ C0] hrtimer: interrupt took 154434 ns [ 152.965117][ T5310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 153.003803][ T5310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 153.012769][ T5310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 153.022253][ T5310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 153.033361][ T5310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 153.073867][ T5310] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 153.167299][ T5310] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 153.373807][ T53] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.677148][ T53] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 153.679310][ T5282] hackrf 3-1:0.0: usb_control_msg() failed -110 request 0e [ 153.750143][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.770327][ T29] audit: type=1400 audit(1723684899.708:316): avc: denied { write } for pid=5800 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 153.801049][ T53] usb 1-1: config 0 descriptor?? [ 153.821721][ T5282] hackrf 3-1:0.0: Could not detect board [ 153.852831][ T53] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 153.870375][ T5801] syz.3.108: attempt to access beyond end of device [ 153.870375][ T5801] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 153.915700][ T5282] hackrf 3-1:0.0: probe with driver hackrf failed with error -110 [ 153.918724][ T5801] EXT4-fs (nbd3): unable to read superblock [ 154.286788][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.330855][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.352990][ T29] audit: type=1400 audit(1723684900.308:317): avc: denied { search } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.495326][ T5231] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 155.507335][ T5231] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 155.514692][ T5231] Bluetooth: Wrong link type (-22) [ 155.523158][ T5231] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 155.531884][ T5231] Bluetooth: Wrong link type (-22) [ 155.537452][ T5231] Bluetooth: hci3: link tx timeout [ 155.543812][ T5231] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.618952][ T945] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 155.754017][ T5818] ======================================================= [ 155.754017][ T5818] WARNING: The mand mount option has been deprecated and [ 155.754017][ T5818] and is ignored by this kernel. Remove the mand [ 155.754017][ T5818] option from the mount to silence this warning. [ 155.754017][ T5818] ======================================================= [ 157.716902][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 157.757942][ T5819] cgroup: Unknown subsys name 'appraise' [ 157.764113][ T53] usb 3-1: USB disconnect, device number 7 [ 157.766430][ T29] audit: type=1400 audit(1723684903.748:318): avc: denied { mounton } for pid=5817 comm="syz.3.112" path="/26/file0" dev="ramfs" ino=9555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 158.021571][ T29] audit: type=1400 audit(1723684903.958:319): avc: denied { create } for pid=5817 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 158.239428][ T29] audit: type=1400 audit(1723684903.968:320): avc: denied { bind } for pid=5817 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 158.296496][ T29] audit: type=1400 audit(1723684903.968:321): avc: denied { write } for pid=5817 comm="syz.3.112" path="socket:[8776]" dev="sockfs" ino=8776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 158.390900][ T53] usb 1-1: USB disconnect, device number 3 [ 158.443375][ T29] audit: type=1400 audit(1723684904.218:322): avc: denied { unmount } for pid=5817 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 158.552817][ T29] audit: type=1400 audit(1723684904.508:323): avc: denied { mount } for pid=5827 comm="syz.4.116" name="/" dev="autofs" ino=9577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 158.738355][ T5819] Process accounting resumed [ 158.784059][ T5282] usb 5-1: USB disconnect, device number 2 [ 159.254187][ T29] audit: type=1400 audit(1723684905.248:324): avc: denied { ioctl } for pid=5835 comm="syz.3.118" path="socket:[8863]" dev="sockfs" ino=8863 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 159.325725][ T5834] kvm: emulating exchange as write [ 159.417460][ T29] audit: type=1400 audit(1723684905.408:325): avc: denied { create } for pid=5835 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.527824][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.537819][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.555422][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.563573][ T29] audit: type=1400 audit(1723684905.548:326): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 159.586375][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.595438][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.605293][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.625673][ T29] audit: type=1400 audit(1723684905.618:327): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 160.025662][ T2514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.544469][ T2514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.727173][ T5240] Bluetooth: hci2: command tx timeout [ 162.399225][ T2514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.561081][ T53] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.798670][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 162.798694][ T29] audit: type=1400 audit(1723684908.718:329): avc: denied { read } for pid=5863 comm="syz.1.124" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 162.925296][ T29] audit: type=1400 audit(1723684908.718:330): avc: denied { open } for pid=5863 comm="syz.1.124" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.139610][ T53] usb 1-1: Using ep0 maxpacket: 16 [ 164.239841][ T5240] Bluetooth: hci2: command tx timeout [ 165.357520][ T2514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.438735][ T53] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 165.448791][ T53] usb 1-1: can't read configurations, error -71 [ 165.612537][ T5881] trusted_key: encrypted_key: insufficient parameters specified [ 165.958778][ T53] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.199314][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.231848][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.243408][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.263990][ T53] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.278096][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.296374][ T53] usb 1-1: config 0 descriptor?? [ 166.319355][ T5240] Bluetooth: hci2: command tx timeout [ 166.577111][ T5240] Bluetooth: hci4: SCO packet for unknown connection handle 1 [ 166.853195][ T2514] bridge_slave_1: left allmulticast mode [ 166.882644][ T29] audit: type=1400 audit(1723684912.598:331): avc: denied { read } for pid=4889 comm="dhcpcd" name="n69" dev="tmpfs" ino=2035 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.885766][ T53] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 167.487022][ T29] audit: type=1400 audit(1723684912.598:332): avc: denied { open } for pid=4889 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=2035 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.515224][ T2514] bridge_slave_1: left promiscuous mode [ 167.524713][ T29] audit: type=1400 audit(1723684912.598:333): avc: denied { getattr } for pid=4889 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=2035 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.559789][ T2514] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.614420][ T2514] bridge_slave_0: left allmulticast mode [ 167.638639][ T53] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 167.645321][ T2514] bridge_slave_0: left promiscuous mode [ 167.674418][ T53] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 167.694913][ T2514] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.705987][ T53] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 167.751784][ T53] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 167.784349][ T53] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 167.873040][ T29] audit: type=1400 audit(1723684913.838:334): avc: denied { read } for pid=5904 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.873852][ T53] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 167.998087][ T29] audit: type=1400 audit(1723684913.838:335): avc: denied { open } for pid=5904 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.063599][ T29] audit: type=1400 audit(1723684913.838:336): avc: denied { getattr } for pid=5904 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.409940][ T5240] Bluetooth: hci2: command tx timeout [ 168.782014][ T29] audit: type=1400 audit(1723684914.778:337): avc: denied { write } for pid=5900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.914119][ T29] audit: type=1400 audit(1723684914.808:338): avc: denied { add_name } for pid=5900 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.976046][ T29] audit: type=1400 audit(1723684914.808:339): avc: denied { create } for pid=5900 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.047029][ T5282] usb 1-1: USB disconnect, device number 5 [ 169.067357][ T29] audit: type=1400 audit(1723684914.808:340): avc: denied { write } for pid=5900 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2054 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.203197][ T29] audit: type=1400 audit(1723684914.818:341): avc: denied { append } for pid=5900 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2054 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.276038][ T29] audit: type=1400 audit(1723684915.238:342): avc: denied { remove_name } for pid=5918 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2054 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.340223][ T29] audit: type=1400 audit(1723684915.238:343): avc: denied { unlink } for pid=5918 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2054 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.625774][ T2514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.652254][ T2514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.684774][ T2514] bond0 (unregistering): Released all slaves [ 169.928343][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 169.986898][ T53] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.226232][ T53] usb 4-1: config index 0 descriptor too short (expected 11076, got 36) [ 170.282413][ T53] usb 4-1: config 74 has too many interfaces: 179, using maximum allowed: 32 [ 170.306002][ T53] usb 4-1: config 74 has 1 interface, different from the descriptor's value: 179 [ 170.319124][ T53] usb 4-1: config 74 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.338736][ T53] usb 4-1: config 74 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.349111][ T53] usb 4-1: config 74 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.362890][ T53] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 170.418607][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.222761][ T53] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 171.287993][ T53] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 171.368292][ T53] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 171.391581][ T53] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 171.568070][ T53] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 171.575834][ T53] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 171.584236][ T53] wacom 0003:056A:0094.0004: unknown main item tag 0x0 [ 171.592078][ T53] wacom 0003:056A:0094.0004: Using device in hidraw-only mode [ 171.628656][ T5281] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 172.798260][ T53] wacom 0003:056A:0094.0004: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 172.814522][ T53] usb 4-1: USB disconnect, device number 4 [ 173.005969][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.042305][ T5281] usb 5-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 173.071368][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.081285][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.091108][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.110449][ T5281] usb 5-1: Product: syz [ 173.114266][ T5840] bridge_slave_0: entered allmulticast mode [ 173.128277][ T5281] usb 5-1: Manufacturer: syz [ 173.140271][ T5281] usb 5-1: SerialNumber: syz [ 173.142188][ T5840] bridge_slave_0: entered promiscuous mode [ 173.164043][ T5281] usb 5-1: config 0 descriptor?? [ 173.186426][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.197825][ T5281] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 173.212398][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.238232][ T5840] bridge_slave_1: entered allmulticast mode [ 173.252841][ T5840] bridge_slave_1: entered promiscuous mode [ 173.271825][ T5281] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 173.316247][ T5281] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 173.407233][ T2514] hsr_slave_0: left promiscuous mode [ 173.448586][ T2514] hsr_slave_1: left promiscuous mode [ 173.480773][ T5281] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 173.504933][ T2514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.509562][ T5281] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 173.538832][ T2514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.582329][ T2514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.646114][ T5281] usb 5-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 173.717150][ T945] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 173.843692][ T2514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.888182][ T5281] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 173.941184][ T2514] veth1_macvtap: left promiscuous mode [ 174.555080][ T945] usb 2-1: Using ep0 maxpacket: 16 [ 174.568333][ T2514] veth0_macvtap: left promiscuous mode [ 174.610484][ T2514] veth1_vlan: left promiscuous mode [ 174.629097][ T2514] veth0_vlan: left promiscuous mode [ 174.645317][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.716288][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.765092][ T945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.817937][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 174.817954][ T29] audit: type=1400 audit(1723684920.808:354): avc: denied { append } for pid=5952 comm="syz.3.137" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.893200][ T945] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.938788][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.986743][ T945] usb 2-1: config 0 descriptor?? [ 175.568906][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.580504][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.625466][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.651674][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.674814][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.699768][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.732860][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.774668][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.800590][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.822296][ T945] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.908019][ T945] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input8 [ 175.937510][ T945] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 176.009439][ T29] audit: type=1400 audit(1723684921.998:355): avc: denied { ioctl } for pid=4660 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2526 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.371104][ T2514] team0 (unregistering): Port device team_slave_1 removed [ 176.427533][ T2514] team0 (unregistering): Port device team_slave_0 removed [ 177.004575][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.134'. [ 177.099077][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.132513][ T5315] usb 5-1: USB disconnect, device number 3 [ 177.166644][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.208373][ T53] usb 2-1: USB disconnect, device number 4 [ 177.701893][ T5840] team0: Port device team_slave_0 added [ 178.405266][ T29] audit: type=1400 audit(1723684923.788:356): avc: denied { watch watch_reads } for pid=5988 comm="syz.4.140" path="/31/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.446439][ T5840] team0: Port device team_slave_1 added [ 178.666827][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 179.464641][ T29] audit: type=1400 audit(1723684925.398:357): avc: denied { write } for pid=6004 comm="syz.0.143" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.545470][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.559172][ T29] audit: type=1400 audit(1723684925.398:358): avc: denied { map } for pid=6004 comm="syz.0.143" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.572898][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.620344][ T6007] Falling back ldisc for ptm0. [ 179.704264][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.727868][ T29] audit: type=1400 audit(1723684925.398:359): avc: denied { execute } for pid=6004 comm="syz.0.143" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.838601][ T29] audit: type=1400 audit(1723684925.488:360): avc: denied { setopt } for pid=6004 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 179.887971][ T29] audit: type=1400 audit(1723684925.498:361): avc: denied { watch watch_reads } for pid=6001 comm="syz.4.144" path="/32/file1" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.921441][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.931298][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.203411][ T29] audit: type=1400 audit(1723684926.088:362): avc: denied { read write } for pid=6019 comm="syz.0.146" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.218582][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.249672][ T6018] warning: `syz.4.145' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.263508][ T29] audit: type=1400 audit(1723684926.088:363): avc: denied { open } for pid=6019 comm="syz.0.146" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.385022][ T29] audit: type=1400 audit(1723684926.138:364): avc: denied { ioctl } for pid=6019 comm="syz.0.146" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.722991][ T29] audit: type=1400 audit(1723684926.718:365): avc: denied { mount } for pid=6027 comm="syz.1.147" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 180.992665][ T5840] hsr_slave_0: entered promiscuous mode [ 181.070673][ T5840] hsr_slave_1: entered promiscuous mode [ 181.111438][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.147593][ T5840] Cannot create hsr debugfs directory [ 181.177546][ T29] audit: type=1400 audit(1723684927.168:366): avc: denied { create } for pid=6032 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.271327][ T29] audit: type=1400 audit(1723684927.268:367): avc: denied { setopt } for pid=6042 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.983516][ T6052] process 'syz.1.151' launched './file0' with NULL argv: empty string added [ 181.988700][ T29] audit: type=1400 audit(1723684927.838:368): avc: denied { watch watch_reads } for pid=6047 comm="syz.1.151" path="/31/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 187.996238][ T6070] futex_wake_op: syz.0.162 tries to shift op by -1; fix this program [ 188.640257][ T5315] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 188.648513][ T5282] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.924667][ T5282] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.958574][ T5315] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 188.984179][ T5282] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 188.998172][ T5315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.013668][ T5282] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.055193][ T5315] usb 1-1: config 0 descriptor?? [ 189.083557][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.127872][ T5315] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 189.179047][ T6074] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.267677][ T5282] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.627627][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.853223][ T29] audit: type=1400 audit(1723684936.348:369): avc: denied { ioctl } for pid=6073 comm="syz.1.154" path="/dev/input/event0" dev="devtmpfs" ino=835 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 192.014185][ T29] audit: type=1400 audit(1723684936.358:370): avc: denied { getopt } for pid=6073 comm="syz.1.154" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.143751][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.259135][ T5282] usb 2-1: USB disconnect, device number 5 [ 193.056452][ T6108] SELinux: Context system_u:object_r:iptables_exec_t:s0 is not valid (left unmapped). [ 193.873511][ T29] audit: type=1400 audit(1723684939.068:371): avc: denied { relabelto } for pid=6106 comm="syz.3.158" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:iptables_exec_t:s0" [ 194.021854][ T29] audit: type=1400 audit(1723684939.068:372): avc: denied { associate } for pid=6106 comm="syz.3.158" name="file0" dev="tmpfs" ino=210 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_exec_t:s0" [ 194.023268][ T47] usb 1-1: USB disconnect, device number 6 [ 194.079075][ T29] audit: type=1400 audit(1723684940.058:373): avc: denied { rmdir } for pid=5234 comm="syz-executor" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:iptables_exec_t:s0" [ 194.106443][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.108650][ T5282] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 194.138737][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.252999][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.284053][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.321403][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.374357][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.130849][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.294280][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.516214][ T942] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 195.528541][ T5282] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.545819][ T5282] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.556108][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.593168][ T5282] usb 2-1: config 0 descriptor?? [ 195.691696][ T5282] usb 2-1: can't set config #0, error -71 [ 195.726564][ T5282] usb 2-1: USB disconnect, device number 6 [ 195.736549][ T942] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 195.752928][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.784120][ T942] usb 5-1: Product: syz [ 195.784146][ T942] usb 5-1: Manufacturer: syz [ 195.784165][ T942] usb 5-1: SerialNumber: syz [ 195.785459][ T29] audit: type=1400 audit(1723684941.778:374): avc: denied { relabelfrom } for pid=6111 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 195.787302][ T29] audit: type=1400 audit(1723684941.778:375): avc: denied { relabelto } for pid=6111 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 195.800387][ T942] usb 5-1: config 0 descriptor?? [ 195.812018][ T942] ch341 5-1:0.0: ch341-uart converter detected [ 196.241540][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.614451][ T6124] raw_sendmsg: syz.1.164 forgot to set AF_INET. Fix it! [ 196.779777][ T29] audit: type=1400 audit(1723684942.768:376): avc: denied { setopt } for pid=6111 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.842841][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.879044][ T6132] xt_TCPMSS: Only works on TCP SYN packets [ 196.915470][ T942] usb 5-1: failed to receive control message: -110 [ 196.915551][ T942] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 196.937374][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.019210][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.064520][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.065116][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.151291][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.158246][ T6120] tty tty20: ldisc open failed (-12), clearing slot 19 [ 197.164793][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.165378][ T5225] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 197.488758][ T5225] usb 2-1: Using ep0 maxpacket: 8 [ 197.501834][ T5225] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.519096][ T5225] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 197.596585][ T5225] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.732201][ T5225] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 198.616116][ T5225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.658526][ T5225] usb 2-1: Product: syz [ 198.662745][ T5225] usb 2-1: Manufacturer: syz [ 198.667362][ T5225] usb 2-1: SerialNumber: syz [ 198.713347][ T5225] usb 2-1: config 0 descriptor?? [ 198.743088][ T5225] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 198.968146][ T5225] pwc: Failed to set LED on/off time (-71) [ 199.012170][ T5225] pwc: send_video_command error -71 [ 199.038603][ T5225] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 199.062293][ T5225] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 199.146196][ T5225] usb 2-1: USB disconnect, device number 7 [ 199.300482][ T25] usb 5-1: USB disconnect, device number 4 [ 199.369499][ T6166] netlink: 52 bytes leftover after parsing attributes in process `syz.0.167'. [ 199.972725][ T25] ch341 5-1:0.0: device disconnected [ 200.173749][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.400106][ T5840] veth0_vlan: entered promiscuous mode [ 200.415529][ T29] audit: type=1400 audit(1723684946.388:377): avc: denied { mount } for pid=6172 comm="syz.4.170" name="/" dev="hugetlbfs" ino=10657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 200.503538][ T5840] veth1_vlan: entered promiscuous mode [ 200.875042][ T6184] bridge0: entered allmulticast mode [ 200.992615][ T6192] futex_wake_op: syz.1.171 tries to shift op by -1; fix this program [ 201.073876][ T5840] veth0_macvtap: entered promiscuous mode [ 201.187996][ T5840] veth1_macvtap: entered promiscuous mode [ 201.275231][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.327017][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.390853][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.419875][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.456598][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.487799][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.569184][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.618201][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.679888][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 201.728081][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.793517][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.845397][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.869724][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.901049][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.921979][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.936178][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.947390][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 201.966034][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.022577][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.048413][ T25] usb 2-1: config 0 descriptor?? [ 202.090083][ T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 202.169124][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.244053][ T4613] Bluetooth: hci1: command 0x0406 tx timeout [ 202.244124][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 202.251334][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 202.256497][ T5228] Bluetooth: hci0: command 0x0406 tx timeout [ 202.288539][ T29] audit: type=1400 audit(1723684948.268:378): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 202.327885][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.418836][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.459797][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.517908][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.557267][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.608806][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.717867][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.769681][ T6211] netlink: 'syz.4.173': attribute type 4 has an invalid length. [ 202.822420][ T29] audit: type=1400 audit(1723684948.808:379): avc: denied { write } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.845135][ T29] audit: type=1400 audit(1723684948.808:380): avc: denied { remove_name } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.869567][ T29] audit: type=1400 audit(1723684948.808:381): avc: denied { rename } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 202.897476][ T29] audit: type=1400 audit(1723684948.808:382): avc: denied { add_name } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.028200][ T29] audit: type=1400 audit(1723684948.808:383): avc: denied { unlink } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.111186][ T29] audit: type=1400 audit(1723684948.808:384): avc: denied { create } for pid=4657 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.311327][ T29] audit: type=1400 audit(1723684949.178:385): avc: denied { read write } for pid=6206 comm="syz.4.173" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 203.381414][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.422434][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.433466][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.454696][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.486333][ T29] audit: type=1400 audit(1723684949.188:386): avc: denied { open } for pid=6206 comm="syz.4.173" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 203.518729][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.561327][ T2514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.569865][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.603154][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.611055][ T2514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.618748][ T942] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.667752][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.688586][ T29] audit: type=1400 audit(1723684949.278:387): avc: denied { nlmsg_read } for pid=6219 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.729960][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.810329][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.842367][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.876553][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.923460][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.937740][ T942] usb 5-1: config 0 has no interfaces? [ 203.947163][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 203.971425][ T942] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 203.987722][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.995550][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.025400][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.034928][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.055588][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.071676][ T942] usb 5-1: config 0 descriptor?? [ 204.089818][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.141397][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.190105][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.220508][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.245899][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.281198][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.308826][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.356290][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.533903][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.568642][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.576384][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.588923][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.596488][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.604186][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.612303][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.621780][ T5315] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.881980][ T5315] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 205.418652][ T25] usb 2-1: USB disconnect, device number 8 [ 205.732166][ T6230] SELinux: failed to load policy [ 206.815803][ T25] usb 5-1: USB disconnect, device number 5 [ 207.220848][ T6262] autofs: Unknown parameter './file1' [ 209.169737][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 209.169757][ T29] audit: type=1400 audit(1723684955.138:424): avc: denied { setopt } for pid=6273 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 210.025469][ T6244] infiniband syz1: set down [ 210.079971][ T6285] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 210.131797][ T6244] infiniband syz1: added ipvlan1 [ 210.188000][ T6244] syz1: rxe_create_cq: returned err = -12 [ 210.224883][ T6244] infiniband syz1: Couldn't create ib_mad CQ [ 210.258027][ T6244] infiniband syz1: Couldn't open port 1 [ 210.367571][ T6244] RDS/IB: syz1: added [ 210.387694][ T6244] smc: adding ib device syz1 with port count 1 [ 210.436454][ T6244] smc: ib device syz1 port 1 has pnetid [ 210.447074][ T29] audit: type=1400 audit(1723684956.428:425): avc: denied { read } for pid=6296 comm="syz.0.185" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 210.568217][ T29] audit: type=1400 audit(1723684956.428:426): avc: denied { open } for pid=6296 comm="syz.0.185" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 210.593571][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.874002][ T29] audit: type=1400 audit(1723684956.448:427): avc: denied { ioctl } for pid=6296 comm="syz.0.185" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 210.900084][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.884714][ T6311] futex_wake_op: syz.4.187 tries to shift op by -1; fix this program [ 212.348571][ T942] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.652596][ T942] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 212.706720][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.727407][ T6320] 9pnet_fd: Insufficient options for proto=fd [ 212.862246][ T942] usb 5-1: config 0 descriptor?? [ 212.950223][ T29] audit: type=1400 audit(1723684958.938:428): avc: denied { execute } for pid=6312 comm="syz.0.188" path="/42/cpuacct.usage_percpu_user" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.011821][ T942] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 213.078311][ T29] audit: type=1400 audit(1723684958.998:429): avc: denied { connect } for pid=6323 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.212271][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.298993][ T29] audit: type=1400 audit(1723684959.288:430): avc: denied { getopt } for pid=6323 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.406074][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.445054][ T29] audit: type=1400 audit(1723684959.368:431): avc: denied { connect } for pid=6323 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.800924][ T29] audit: type=1400 audit(1723684959.758:432): avc: denied { write } for pid=6323 comm="syz.1.189" path="socket:[11798]" dev="sockfs" ino=11798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.004598][ T47] usb 5-1: USB disconnect, device number 6 [ 215.595488][ T29] audit: type=1400 audit(1723684961.588:433): avc: denied { mount } for pid=6356 comm="syz.4.194" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 215.817378][ T29] audit: type=1400 audit(1723684961.808:434): avc: denied { create } for pid=6350 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 221.380326][ T29] audit: type=1400 audit(1723684961.808:435): avc: denied { lock } for pid=6354 comm="syz.1.193" path="socket:[11087]" dev="sockfs" ino=11087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 222.737325][ T29] audit: type=1400 audit(1723684968.728:436): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 223.846931][ T29] audit: type=1400 audit(1723684969.658:437): avc: denied { shutdown } for pid=6384 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.102372][ T29] audit: type=1400 audit(1723684970.078:438): avc: denied { create } for pid=6392 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 224.232711][ T29] audit: type=1400 audit(1723684970.078:439): avc: denied { setopt } for pid=6392 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 225.887197][ T6412] bridge0: port 3(team0) entered blocking state [ 225.964704][ T6412] bridge0: port 3(team0) entered disabled state [ 226.165373][ T6412] team0: entered allmulticast mode [ 226.175042][ T6412] team_slave_0: entered allmulticast mode [ 226.182904][ T6412] team_slave_1: entered allmulticast mode [ 226.858131][ T6412] team0: entered promiscuous mode [ 226.884379][ T6412] team_slave_0: entered promiscuous mode [ 226.891180][ T6412] team_slave_1: entered promiscuous mode [ 226.917066][ T6412] bridge0: port 3(team0) entered blocking state [ 226.923552][ T6412] bridge0: port 3(team0) entered forwarding state [ 227.019583][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.030150][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.038331][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.056660][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.064717][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 227.072343][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.176912][ T2559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.178413][ T6422] 9pnet_fd: Insufficient options for proto=fd [ 227.448057][ T6427] futex_wake_op: syz.4.204 tries to shift op by -1; fix this program [ 227.533764][ T2559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.742979][ T2559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.078842][ T5315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 228.224202][ T2559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.365000][ T5315] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 228.417177][ T5315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.441631][ T5315] usb 5-1: config 0 descriptor?? [ 228.489419][ T5315] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 229.820864][ T5232] Bluetooth: hci4: command tx timeout [ 229.940496][ T29] audit: type=1400 audit(1723684975.198:440): avc: denied { map } for pid=6432 comm="syz.2.207" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 230.069838][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.084913][ T29] audit: type=1400 audit(1723684975.198:441): avc: denied { execute } for pid=6432 comm="syz.2.207" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 230.143611][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.078858][ T29] audit: type=1400 audit(1723684976.898:442): avc: denied { create } for pid=6445 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.667151][ T29] audit: type=1400 audit(1723684976.898:443): avc: denied { connect } for pid=6445 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.777813][ T29] audit: type=1400 audit(1723684976.908:444): avc: denied { bind } for pid=6445 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.843973][ T5232] Bluetooth: hci4: command tx timeout [ 231.932677][ T29] audit: type=1400 audit(1723684976.908:445): avc: denied { read } for pid=6445 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.980848][ T2559] bridge_slave_1: left allmulticast mode [ 231.986640][ T2559] bridge_slave_1: left promiscuous mode [ 232.020816][ T29] audit: type=1400 audit(1723684976.958:446): avc: denied { write } for pid=6445 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.048772][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.099308][ T2559] bridge_slave_0: left allmulticast mode [ 232.111893][ T2559] bridge_slave_0: left promiscuous mode [ 232.117720][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.195098][ T5225] usb 5-1: USB disconnect, device number 7 [ 232.391492][ T29] audit: type=1400 audit(1723684978.378:447): avc: denied { name_bind } for pid=6454 comm="syz.0.211" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 232.478815][ T6456] capability: warning: `syz.0.211' uses deprecated v2 capabilities in a way that may be insecure [ 233.389597][ T29] audit: type=1400 audit(1723684978.708:448): avc: denied { create } for pid=6462 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 233.430238][ T5282] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 233.658618][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 233.689003][ T5282] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 233.722893][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.794009][ T5282] usb 1-1: Product: syz [ 233.811907][ T5282] usb 1-1: Manufacturer: syz [ 233.854316][ T5282] usb 1-1: SerialNumber: syz [ 233.934349][ T5232] Bluetooth: hci4: command tx timeout [ 233.974296][ T5282] usb 1-1: config 0 descriptor?? [ 234.332683][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.379276][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.425632][ T2559] bond0 (unregistering): Released all slaves [ 234.464456][ T6416] chnl_net:caif_netlink_parms(): no params data found [ 234.518645][ T5282] usb 1-1: USB disconnect, device number 7 [ 235.137363][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 235.570792][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.597773][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.637539][ T6416] bridge_slave_0: entered allmulticast mode [ 235.660226][ T6416] bridge_slave_0: entered promiscuous mode [ 235.729858][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.778884][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.848880][ T6416] bridge_slave_1: entered allmulticast mode [ 235.858085][ T6416] bridge_slave_1: entered promiscuous mode [ 236.004894][ T5232] Bluetooth: hci4: command tx timeout [ 236.088145][ T29] audit: type=1400 audit(1723684982.078:449): avc: denied { recv } for pid=5374 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.0.235 dest=38644 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 236.287237][ T29] audit: type=1400 audit(1723684982.278:450): avc: denied { write } for pid=6506 comm="syz.1.218" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 236.397572][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.592310][ T29] audit: type=1400 audit(1723684982.588:451): avc: denied { module_request } for pid=6506 comm="syz.1.218" kmod="crypto-seqiv(rfc4106(gcm(aes)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 237.138544][ T29] audit: type=1400 audit(1723684982.998:452): avc: denied { connect } for pid=6514 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.184856][ T29] audit: type=1400 audit(1723684983.018:453): avc: denied { write } for pid=6514 comm="syz.2.219" path="socket:[12531]" dev="sockfs" ino=12531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.253722][ T29] audit: type=1400 audit(1723684983.028:454): avc: denied { read } for pid=6514 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.286059][ T29] audit: type=1400 audit(1723684983.048:455): avc: denied { setopt } for pid=6514 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.463757][ T6515] sched: RT throttling activated [ 242.514526][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.678239][ T2559] hsr_slave_0: left promiscuous mode [ 242.691223][ T2559] hsr_slave_1: left promiscuous mode [ 242.757287][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.768813][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.805653][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.934317][ T6533] cgroup: noprefix used incorrectly [ 243.016241][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.017847][ T5232] Bluetooth: hci0: unexpected event for opcode 0x080f [ 248.585268][ T5232] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 248.594740][ T5232] Bluetooth: hci0: Injecting HCI hardware error event [ 248.602872][ T5232] Bluetooth: hci0: hardware error 0x00 [ 248.939668][ T2559] veth1_macvtap: left promiscuous mode [ 248.968759][ T2559] veth0_macvtap: left promiscuous mode [ 248.974613][ T2559] veth1_vlan: left promiscuous mode [ 248.996662][ T2559] veth0_vlan: left promiscuous mode [ 249.250884][ T6540] Unsupported ieee802154 address type: 0 [ 249.277085][ T29] audit: type=1400 audit(1723684995.248:456): avc: denied { bind } for pid=6537 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.135343][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.146904][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.157993][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.170710][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.181270][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 250.189989][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.570860][ T54] smc: removing ib device syz1 [ 250.799382][ T5232] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 250.931617][ T29] audit: type=1400 audit(1723684996.928:457): avc: denied { write } for pid=6547 comm="syz.4.226" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.970208][ T29] audit: type=1400 audit(1723684996.958:458): avc: denied { open } for pid=6547 comm="syz.4.226" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.072538][ T29] audit: type=1400 audit(1723684996.958:459): avc: denied { read } for pid=6547 comm="syz.4.226" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 252.239469][ T5232] Bluetooth: hci5: command tx timeout [ 252.370061][ T2559] team0 (unregistering): Port device team_slave_1 removed [ 252.476252][ T2559] team0 (unregistering): Port device team_slave_0 removed [ 253.101569][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.122658][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.137399][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.147715][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.165092][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 253.174066][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.668283][ T6416] team0: Port device team_slave_0 added [ 253.730445][ T6416] team0: Port device team_slave_1 added [ 253.760290][ T29] audit: type=1400 audit(1723684999.728:460): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 254.015758][ T29] audit: type=1800 audit(1723685000.008:461): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.229" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 254.072825][ T29] audit: type=1800 audit(1723685000.058:462): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.229" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 254.260502][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.267481][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.338688][ T5240] Bluetooth: hci5: command tx timeout [ 254.346721][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.490502][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.500999][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.530194][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.472594][ T5240] Bluetooth: hci2: command tx timeout [ 255.569835][ T6416] hsr_slave_0: entered promiscuous mode [ 255.593485][ T6416] hsr_slave_1: entered promiscuous mode [ 255.765716][ T6416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.788583][ T6416] Cannot create hsr debugfs directory [ 256.367552][ T6606] Bluetooth: MGMT ver 1.23 [ 256.405511][ T5240] Bluetooth: hci5: command tx timeout [ 256.425669][ T2559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.500361][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.523987][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.575415][ T29] audit: type=1400 audit(1723685002.568:463): avc: denied { write } for pid=6593 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.752889][ T2559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.930307][ T2559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.274032][ T2559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.456183][ T29] audit: type=1400 audit(1723685003.448:464): avc: denied { write } for pid=6611 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 257.569043][ T5240] Bluetooth: hci2: command tx timeout [ 257.899402][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 258.508672][ T5240] Bluetooth: hci5: command tx timeout [ 258.727356][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 259.708842][ T5240] Bluetooth: hci2: command tx timeout [ 260.512702][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 263.255825][ T5240] Bluetooth: hci2: command tx timeout [ 263.598183][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.620915][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.648824][ T6542] bridge_slave_0: entered allmulticast mode [ 263.669155][ T6542] bridge_slave_0: entered promiscuous mode [ 263.739750][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.746932][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.758892][ T6563] bridge_slave_0: entered allmulticast mode [ 263.772893][ T6563] bridge_slave_0: entered promiscuous mode [ 263.888015][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.897009][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.917259][ T6542] bridge_slave_1: entered allmulticast mode [ 263.951183][ T6542] bridge_slave_1: entered promiscuous mode [ 263.980349][ T942] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 264.000430][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.013985][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.028657][ T6563] bridge_slave_1: entered allmulticast mode [ 264.047766][ T6563] bridge_slave_1: entered promiscuous mode [ 264.168549][ T942] usb 5-1: Using ep0 maxpacket: 8 [ 264.177779][ T942] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 264.205893][ T942] usb 5-1: config 179 has no interface number 0 [ 264.224259][ T942] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 264.243981][ T942] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 264.256802][ T942] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 264.290755][ T942] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 264.311628][ T942] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 264.321680][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.385707][ T6659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.423807][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.482819][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.527423][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.727772][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.838393][ T6563] team0: Port device team_slave_0 added [ 264.874320][ T6563] team0: Port device team_slave_1 added [ 265.027260][ T53] usb 5-1: USB disconnect, device number 8 [ 265.027255][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 265.027318][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 265.050544][ C0] ================================================================== [ 265.059246][ C0] BUG: KASAN: slab-use-after-free in register_lock_class+0x101f/0x1230 [ 265.067707][ C0] Read of size 1 at addr ffff88806ab86091 by task syz.1.241/6665 [ 265.075621][ C0] [ 265.077944][ C0] CPU: 0 UID: 0 PID: 6665 Comm: syz.1.241 Not tainted 6.11.0-rc3-syzkaller-00036-g9d5906799f7d #0 [ 265.088534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 265.099776][ C0] Call Trace: [ 265.103339][ C0] [ 265.106285][ C0] dump_stack_lvl+0x116/0x1f0 [ 265.111955][ C0] print_report+0xc3/0x620 [ 265.116491][ C0] ? __virt_addr_valid+0x5e/0x590 [ 265.121538][ C0] ? __phys_addr+0xc6/0x150 [ 265.126089][ C0] kasan_report+0xd9/0x110 [ 265.130534][ C0] ? register_lock_class+0x101f/0x1230 [ 265.136009][ C0] ? register_lock_class+0x101f/0x1230 [ 265.141475][ C0] register_lock_class+0x101f/0x1230 [ 265.146768][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 265.152408][ C0] ? __wake_up_klogd.part.0+0x99/0xf0 [ 265.157791][ C0] __lock_acquire+0x135/0x3cb0 [ 265.162753][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 265.168048][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 265.173381][ C0] lock_acquire+0x1b1/0x560 [ 265.178970][ C0] ? __wake_up+0x1c/0x60 [ 265.183341][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 265.188394][ C0] ? find_held_lock+0x2d/0x110 [ 265.193699][ C0] ? __usb_hcd_giveback_urb+0x466/0x6e0 [ 265.199720][ C0] ? __pfx_lock_release+0x10/0x10 [ 265.205344][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 265.210568][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 265.215770][ C0] ? __wake_up+0x1c/0x60 [ 265.220017][ C0] __wake_up+0x1c/0x60 [ 265.224088][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 265.229640][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 265.235642][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 265.241015][ C0] dummy_timer+0x17c3/0x38d0 [ 265.246129][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 265.251574][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 265.257103][ C0] ? __pfx_lock_release+0x10/0x10 [ 265.262531][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 265.267730][ C0] ? timerqueue_del+0x83/0x150 [ 265.273448][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 265.279255][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 265.284678][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 265.292246][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 265.298721][ C0] hrtimer_interrupt+0x31b/0x800 [ 265.304005][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 265.310060][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 265.315775][ C0] [ 265.318688][ C0] [ 265.322206][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.328280][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 265.334279][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 aa 75 53 f6 48 89 df e8 c2 f2 53 f6 e8 9d d5 7c f6 fb bf 01 00 00 00 62 66 45 f6 65 8b 05 43 e4 ee 74 85 c0 74 06 5b c3 cc cc cc cc [ 265.353962][ C0] RSP: 0018:ffffc90003b7f4e8 EFLAGS: 00000202 [ 265.360017][ C0] RAX: 00000000000046e9 RBX: ffff88807bc50a30 RCX: 1ffffffff28c8d28 [ 265.367969][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc4c0 RDI: 0000000000000001 [ 265.375918][ C0] RBP: 0000000000000cc0 R08: 0000000000000001 R09: fffffbfff28c60df [ 265.383865][ C0] R10: ffffffff946306ff R11: 0000000000000000 R12: ffffc90003b7f558 [ 265.391811][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 265.399765][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.404949][ C0] shmem_add_to_page_cache+0x611/0xaf0 [ 265.410823][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 265.416869][ C0] shmem_alloc_and_add_folio+0x36c/0xce0 [ 265.422507][ C0] ? filemap_get_entry+0x1b2/0x3c0 [ 265.427630][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 265.433102][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 265.439243][ C0] ? shmem_allowable_huge_orders+0x2c9/0x340 [ 265.445204][ C0] shmem_get_folio_gfp+0xa62/0x15e0 [ 265.450389][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 265.456179][ C0] ? filemap_map_pages+0xeb6/0x1440 [ 265.461361][ C0] shmem_fault+0x205/0xaf0 [ 265.465761][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 265.470682][ C0] ? __handle_mm_fault+0x370b/0x5660 [ 265.476041][ C0] ? __pfx_lock_release+0x10/0x10 [ 265.481051][ C0] __do_fault+0x10a/0x490 [ 265.485363][ C0] __handle_mm_fault+0x37c4/0x5660 [ 265.490473][ C0] ? no_page_table+0xc7/0x230 [ 265.495130][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 265.500568][ C0] ? follow_page_pte+0x3dc/0x1cf0 [ 265.505576][ C0] ? vma_pgtable_walk_end+0x3d/0x70 [ 265.510758][ C0] handle_mm_fault+0x44e/0x7b0 [ 265.515596][ C0] __get_user_pages+0x475/0x15c0 [ 265.520517][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 265.525873][ C0] populate_vma_page_range+0x27f/0x3a0 [ 265.531330][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 265.537292][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 265.543077][ C0] ? vm_mmap_pgoff+0x25b/0x360 [ 265.547820][ C0] __mm_populate+0x1d6/0x380 [ 265.552393][ C0] ? __pfx___mm_populate+0x10/0x10 [ 265.557485][ C0] ? up_write+0x1b2/0x520 [ 265.561796][ C0] vm_mmap_pgoff+0x293/0x360 [ 265.566368][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 265.571465][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 265.576380][ C0] ? __x64_sys_futex+0x1ea/0x4c0 [ 265.581314][ C0] ksys_mmap_pgoff+0x7d/0x5d0 [ 265.585973][ C0] __x64_sys_mmap+0x125/0x190 [ 265.590628][ C0] do_syscall_64+0xcd/0x250 [ 265.595129][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.601185][ C0] RIP: 0033:0x7f8adb9799b9 [ 265.605674][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.627526][ C0] RSP: 002b:00007f8adc7a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 265.636889][ C0] RAX: ffffffffffffffda RBX: 00007f8adbb15f80 RCX: 00007f8adb9799b9 [ 265.644840][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 265.653660][ C0] RBP: 00007f8adb9e78d8 R08: ffffffffffffffff R09: 0000000000000000 [ 265.661637][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 265.669586][ C0] R13: 0000000000000000 R14: 00007f8adbb15f80 R15: 00007fff95b9eed8 [ 265.677540][ C0] [ 265.680537][ C0] [ 265.682837][ C0] Allocated by task 942: [ 265.687170][ C0] kasan_save_stack+0x33/0x60 [ 265.691844][ C0] kasan_save_track+0x14/0x30 [ 265.696632][ C0] __kasan_kmalloc+0xaa/0xb0 [ 265.701210][ C0] xpad_probe+0x27e/0x1f50 [ 265.705610][ C0] usb_probe_interface+0x309/0x9d0 [ 265.710705][ C0] really_probe+0x23e/0xa90 [ 265.715199][ C0] __driver_probe_device+0x1de/0x440 [ 265.720663][ C0] driver_probe_device+0x4c/0x1b0 [ 265.725696][ C0] __device_attach_driver+0x1df/0x310 [ 265.731059][ C0] bus_for_each_drv+0x157/0x1e0 [ 265.735911][ C0] __device_attach+0x1e8/0x4b0 [ 265.740659][ C0] bus_probe_device+0x17f/0x1c0 [ 265.745587][ C0] device_add+0x114b/0x1a70 [ 265.750602][ C0] usb_set_configuration+0x10cb/0x1c50 [ 265.756597][ C0] usb_generic_driver_probe+0xb1/0x110 [ 265.762059][ C0] usb_probe_device+0xec/0x3e0 [ 265.766902][ C0] really_probe+0x23e/0xa90 [ 265.771391][ C0] __driver_probe_device+0x1de/0x440 [ 265.776758][ C0] driver_probe_device+0x4c/0x1b0 [ 265.781777][ C0] __device_attach_driver+0x1df/0x310 [ 265.787489][ C0] bus_for_each_drv+0x157/0x1e0 [ 265.792743][ C0] __device_attach+0x1e8/0x4b0 [ 265.797633][ C0] bus_probe_device+0x17f/0x1c0 [ 265.802730][ C0] device_add+0x114b/0x1a70 [ 265.807352][ C0] usb_new_device+0xd90/0x1a10 [ 265.812105][ C0] hub_event+0x2db0/0x4e20 [ 265.816770][ C0] process_one_work+0x9c5/0x1b40 [ 265.821708][ C0] worker_thread+0x6c8/0xf20 [ 265.826288][ C0] kthread+0x2c1/0x3a0 [ 265.830355][ C0] ret_from_fork+0x45/0x80 [ 265.834769][ C0] ret_from_fork_asm+0x1a/0x30 [ 265.839520][ C0] [ 265.841836][ C0] Freed by task 53: [ 265.845619][ C0] kasan_save_stack+0x33/0x60 [ 265.850283][ C0] kasan_save_track+0x14/0x30 [ 265.854940][ C0] kasan_save_free_info+0x3b/0x60 [ 265.859951][ C0] poison_slab_object+0xf7/0x160 [ 265.864965][ C0] __kasan_slab_free+0x32/0x50 [ 265.869897][ C0] kfree+0x12a/0x3b0 [ 265.873794][ C0] xpad_disconnect+0x1cf/0x580 [ 265.878637][ C0] usb_unbind_interface+0x1e8/0x970 [ 265.883910][ C0] device_remove+0x122/0x170 [ 265.888493][ C0] device_release_driver_internal+0x44a/0x610 [ 265.894550][ C0] bus_remove_device+0x22f/0x420 [ 265.899468][ C0] device_del+0x396/0x9f0 [ 265.903778][ C0] usb_disable_device+0x36c/0x7f0 [ 265.908789][ C0] usb_disconnect+0x2e1/0x920 [ 265.913452][ C0] hub_event+0x1dbb/0x4e20 [ 265.918149][ C0] process_one_work+0x9c5/0x1b40 [ 265.923102][ C0] worker_thread+0x6c8/0xf20 [ 265.927770][ C0] kthread+0x2c1/0x3a0 [ 265.932134][ C0] ret_from_fork+0x45/0x80 [ 265.939092][ C0] ret_from_fork_asm+0x1a/0x30 [ 265.944671][ C0] [ 265.947624][ C0] The buggy address belongs to the object at ffff88806ab86000 [ 265.947624][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 265.963267][ C0] The buggy address is located 145 bytes inside of [ 265.963267][ C0] freed 1024-byte region [ffff88806ab86000, ffff88806ab86400) [ 265.977213][ C0] [ 265.979514][ C0] The buggy address belongs to the physical page: [ 265.985904][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6ab80 [ 265.994636][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 266.003106][ C0] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 266.010978][ C0] page_type: 0xfdffffff(slab) [ 266.015633][ C0] raw: 00fff00000000040 ffff888015841dc0 ffffea0001a93200 dead000000000003 [ 266.024190][ C0] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 266.032833][ C0] head: 00fff00000000040 ffff888015841dc0 ffffea0001a93200 dead000000000003 [ 266.041493][ C0] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 266.050402][ C0] head: 00fff00000000003 ffffea0001aae001 ffffffffffffffff 0000000000000000 [ 266.059854][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 266.069030][ C0] page dumped because: kasan: bad access detected [ 266.076251][ C0] page_owner tracks the page as allocated [ 266.082503][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5235, tgid 5235 (syz-executor), ts 77209516974, free_ts 26485371980 [ 266.105185][ C0] post_alloc_hook+0x2d1/0x350 [ 266.109941][ C0] get_page_from_freelist+0x1351/0x2e50 [ 266.115509][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 266.120775][ C0] alloc_slab_page+0x4e/0xf0 [ 266.125611][ C0] new_slab+0x84/0x260 [ 266.129956][ C0] ___slab_alloc+0xdac/0x1870 [ 266.135309][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 266.141216][ C0] __kmalloc_cache_noprof+0x2b4/0x300 [ 266.147295][ C0] afs_alloc_call+0x4f/0x390 [ 266.152071][ C0] afs_charge_preallocation+0xff/0x330 [ 266.157603][ C0] afs_open_socket+0x2b3/0x380 [ 266.162623][ C0] afs_net_init+0x95d/0xc60 [ 266.167133][ C0] ops_init+0xb9/0x650 [ 266.171187][ C0] setup_net+0x435/0xb40 [ 266.175405][ C0] copy_net_ns+0x2f0/0x670 [ 266.179799][ C0] create_new_namespaces+0x3ea/0xb10 [ 266.185067][ C0] page last free pid 1 tgid 1 stack trace: [ 266.190848][ C0] free_unref_page+0x64a/0xe40 [ 266.195591][ C0] free_contig_range+0xb6/0x1a0 [ 266.200422][ C0] destroy_args+0xa42/0xe10 [ 266.204902][ C0] debug_vm_pgtable+0x1705/0x3280 [ 266.209904][ C0] do_one_initcall+0x128/0x700 [ 266.214650][ C0] kernel_init_freeable+0x69d/0xca0 [ 266.219826][ C0] kernel_init+0x1c/0x2b0 [ 266.224138][ C0] ret_from_fork+0x45/0x80 [ 266.228538][ C0] ret_from_fork_asm+0x1a/0x30 [ 266.233282][ C0] [ 266.235583][ C0] Memory state around the buggy address: [ 266.241186][ C0] ffff88806ab85f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.249232][ C0] ffff88806ab86000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.257269][ C0] >ffff88806ab86080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.265306][ C0] ^ [ 266.269886][ C0] ffff88806ab86100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.277921][ C0] ffff88806ab86180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.285956][ C0] ================================================================== [ 266.293991][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.301158][ C0] CPU: 0 UID: 0 PID: 6665 Comm: syz.1.241 Not tainted 6.11.0-rc3-syzkaller-00036-g9d5906799f7d #0 [ 266.311717][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 266.321746][ C0] Call Trace: [ 266.325007][ C0] [ 266.327829][ C0] dump_stack_lvl+0x3d/0x1f0 [ 266.332402][ C0] panic+0x6f5/0x7a0 [ 266.336277][ C0] ? __pfx_panic+0x10/0x10 [ 266.340674][ C0] ? rcu_is_watching+0x12/0xc0 [ 266.345424][ C0] ? __pfx_lock_release+0x10/0x10 [ 266.350431][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 266.355913][ C0] check_panic_on_warn+0xab/0xb0 [ 266.361244][ C0] end_report+0x117/0x180 [ 266.365576][ C0] kasan_report+0xe9/0x110 [ 266.369995][ C0] ? register_lock_class+0x101f/0x1230 [ 266.375544][ C0] ? register_lock_class+0x101f/0x1230 [ 266.380998][ C0] register_lock_class+0x101f/0x1230 [ 266.386276][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 266.391901][ C0] ? __wake_up_klogd.part.0+0x99/0xf0 [ 266.397259][ C0] __lock_acquire+0x135/0x3cb0 [ 266.402007][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 266.407190][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 266.412378][ C0] lock_acquire+0x1b1/0x560 [ 266.416863][ C0] ? __wake_up+0x1c/0x60 [ 266.421153][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 266.426173][ C0] ? find_held_lock+0x2d/0x110 [ 266.430928][ C0] ? __usb_hcd_giveback_urb+0x466/0x6e0 [ 266.436459][ C0] ? __pfx_lock_release+0x10/0x10 [ 266.441470][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 266.446659][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 266.451933][ C0] ? __wake_up+0x1c/0x60 [ 266.456168][ C0] __wake_up+0x1c/0x60 [ 266.460308][ C0] usb_anchor_resume_wakeups+0xc2/0xe0 [ 266.465770][ C0] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 266.471575][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 266.476753][ C0] dummy_timer+0x17c3/0x38d0 [ 266.481416][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 266.486953][ C0] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 266.492752][ C0] ? __pfx_lock_release+0x10/0x10 [ 266.497845][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 266.502761][ C0] ? timerqueue_del+0x83/0x150 [ 266.507939][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 266.512863][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 266.518045][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 266.523749][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 266.529795][ C0] hrtimer_interrupt+0x31b/0x800 [ 266.534717][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 266.540686][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 266.546304][ C0] [ 266.549229][ C0] [ 266.552146][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.558114][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 266.563902][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 aa 75 53 f6 48 89 df e8 c2 f2 53 f6 e8 9d d5 7c f6 fb bf 01 00 00 00 62 66 45 f6 65 8b 05 43 e4 ee 74 85 c0 74 06 5b c3 cc cc cc cc [ 266.583487][ C0] RSP: 0018:ffffc90003b7f4e8 EFLAGS: 00000202 [ 266.589544][ C0] RAX: 00000000000046e9 RBX: ffff88807bc50a30 RCX: 1ffffffff28c8d28 [ 266.598552][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc4c0 RDI: 0000000000000001 [ 266.607393][ C0] RBP: 0000000000000cc0 R08: 0000000000000001 R09: fffffbfff28c60df [ 266.615525][ C0] R10: ffffffff946306ff R11: 0000000000000000 R12: ffffc90003b7f558 [ 266.623475][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 266.631433][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.636616][ C0] shmem_add_to_page_cache+0x611/0xaf0 [ 266.642179][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 266.648422][ C0] shmem_alloc_and_add_folio+0x36c/0xce0 [ 266.654071][ C0] ? filemap_get_entry+0x1b2/0x3c0 [ 266.659182][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 266.664920][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 266.671150][ C0] ? shmem_allowable_huge_orders+0x2c9/0x340 [ 266.677503][ C0] shmem_get_folio_gfp+0xa62/0x15e0 [ 266.683159][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 266.689368][ C0] ? filemap_map_pages+0xeb6/0x1440 [ 266.694562][ C0] shmem_fault+0x205/0xaf0 [ 266.698972][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 266.703978][ C0] ? __handle_mm_fault+0x370b/0x5660 [ 266.709256][ C0] ? __pfx_lock_release+0x10/0x10 [ 266.714266][ C0] __do_fault+0x10a/0x490 [ 266.718582][ C0] __handle_mm_fault+0x37c4/0x5660 [ 266.723765][ C0] ? no_page_table+0xc7/0x230 [ 266.728420][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 266.733861][ C0] ? follow_page_pte+0x3dc/0x1cf0 [ 266.738867][ C0] ? vma_pgtable_walk_end+0x3d/0x70 [ 266.744048][ C0] handle_mm_fault+0x44e/0x7b0 [ 266.748810][ C0] __get_user_pages+0x475/0x15c0 [ 266.753734][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 266.759097][ C0] populate_vma_page_range+0x27f/0x3a0 [ 266.765414][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 266.771562][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 266.778242][ C0] ? vm_mmap_pgoff+0x25b/0x360 [ 266.783360][ C0] __mm_populate+0x1d6/0x380 [ 266.787948][ C0] ? __pfx___mm_populate+0x10/0x10 [ 266.793044][ C0] ? up_write+0x1b2/0x520 [ 266.797358][ C0] vm_mmap_pgoff+0x293/0x360 [ 266.802048][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.807160][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 266.812086][ C0] ? __x64_sys_futex+0x1ea/0x4c0 [ 266.817001][ C0] ksys_mmap_pgoff+0x7d/0x5d0 [ 266.821683][ C0] __x64_sys_mmap+0x125/0x190 [ 266.826601][ C0] do_syscall_64+0xcd/0x250 [ 266.831268][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.837236][ C0] RIP: 0033:0x7f8adb9799b9 [ 266.841716][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.861688][ C0] RSP: 002b:00007f8adc7a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.870096][ C0] RAX: ffffffffffffffda RBX: 00007f8adbb15f80 RCX: 00007f8adb9799b9 [ 266.878044][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 266.886082][ C0] RBP: 00007f8adb9e78d8 R08: ffffffffffffffff R09: 0000000000000000 [ 266.894118][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 266.902414][ C0] R13: 0000000000000000 R14: 00007f8adbb15f80 R15: 00007fff95b9eed8 [ 266.910364][ C0] [ 267.990877][ C0] Shutting down cpus with NMI [ 267.995862][ C0] Kernel Offset: disabled [ 268.000172][ C0] Rebooting in 86400 seconds..