last executing test programs: 3m21.812725098s ago: executing program 3 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) 3m6.173164701s ago: executing program 1 (id=656): fsopen(0x0, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) 3m6.05668639s ago: executing program 3 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) 3m5.110109623s ago: executing program 1 (id=658): r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x400) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) map_shadow_stack(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 3m2.824802467s ago: executing program 1 (id=668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) connect$ax25(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3m0.85287343s ago: executing program 1 (id=670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x7fffffff}, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 2m59.900892368s ago: executing program 1 (id=673): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 2m58.861659844s ago: executing program 1 (id=678): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f329191bac0000f3066b808008ed0660f38806f008ee0", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.290526062s ago: executing program 3 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) 2m43.126218799s ago: executing program 32 (id=678): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f329191bac0000f3066b808008ed0660f38806f008ee0", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m47.544122476s ago: executing program 3 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) 1m3.001041764s ago: executing program 3 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) 27.16144315s ago: executing program 0 (id=979): r0 = socket$xdp(0x2c, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/75, 0x10000, 0x1000}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) mkdir(0x0, 0x0) pipe(0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_pidfd_open(0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) 24.641090881s ago: executing program 4 (id=985): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3, 0xf46de279176c0856) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800900010068617368000000001c000980080001400000000a080003400000008f08000240000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a4a6d9304758827c2cf7de219c6d9f36410ceea73f84d363e2e18b96c9eec3683191e314fee9210f2"], 0x84}}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x28000000}}}, 0x84) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000b80), 0xfffffdea, 0xfc, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) write$nci(r4, &(0x7f0000000500)=ANY=[], 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89ef, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x4000005) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 24.200158997s ago: executing program 0 (id=987): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x4b, 0x5, 0xf003, 0x2, 0x66, 0xac, 0x7}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) lseek(r4, 0xa, 0x4) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c000000a05f1c641e45f5130000000100000000000000000900000005000006040000000b00000006000000090000000f0f00000200000001fcffff040000000600000002000000064000000b00000000000009050000000e0000000000000b000000000000"], 0x0, 0x76, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = syz_io_uring_setup(0xec6, 0x0, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x140d, 0x10a5, 0x47, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 21.289856356s ago: executing program 5 (id=989): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x90) ustat(0xb3c, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ustat(0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) iopl(0x3) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r4, 0xfffffffd) accept(r4, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x8, 0x8d3a) 21.286815301s ago: executing program 0 (id=990): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fgetxattr(r3, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x400}}, 0x14}}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) 21.259510667s ago: executing program 3 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) 21.175688837s ago: executing program 4 (id=992): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x78bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000000080)=0x1) write$tun(r8, 0x0, 0xffe) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xd0, 0x0, 0x0) close(r7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 18.926907344s ago: executing program 0 (id=993): setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_G_FMT(r3, 0xc0d05605, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="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", 0x11d}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee", 0x1b}, {&(0x7f0000000200)="057322e1", 0x4}], 0x3}}], 0x1, 0xc0) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18.923990016s ago: executing program 5 (id=994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) connect$ax25(r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 18.920795425s ago: executing program 2 (id=995): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000054000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) flock(r6, 0x1) flock(r6, 0x2) close(r5) io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x4, 0x11cb}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 18.918969019s ago: executing program 4 (id=996): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x371b, 0x0, 0x3, 0x391}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x17}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 18.448373653s ago: executing program 0 (id=997): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0x84}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001a0001000000000000000000810000000000000005000000140002"], 0x30}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) socket(0x840000000002, 0x3, 0xff) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0x4, 0x4}, 0x6) r7 = socket$kcm(0x21, 0x2, 0x2) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x1, 0x4, {0xa, 0x4e20, 0xa28, @private2, 0x7fff}}}, 0x32) setsockopt$sock_attach_bpf(r7, 0x110, 0x5, 0x0, 0x4) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r9) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, r10, 0x809, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000850}, 0x40) 17.707121257s ago: executing program 2 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYBLOB="08000200000000000600"], 0x50}}, 0x0) r4 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) epoll_create1(0x80000) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r5}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x40) socket$nl_route(0x10, 0x3, 0x0) 17.607139916s ago: executing program 5 (id=999): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x29}, 0x1, 0x0, 0x0, 0x14000801}, 0x40810) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000b22000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) socket$tipc(0x1e, 0x2, 0x0) syz_clone3(&(0x7f0000000300)={0x120100200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000003, 0x800, 0x20000}, 0x0, 0x0) 16.831267255s ago: executing program 4 (id=1000): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08001300e0000001b2d82df2bd39fce011c9870969fe618f5f7761af855e93bb6bcef4d65c5e02c17752113d2faa0fb48dcd3779b38ba3e8493246b3d96c9154a9ebc98a24831c9b76a2a6c85c44a2a3de60f24c50f38e2fdcc316e1925a5c4297657a44ed424e1977961c3cd8d0be454d8558dd6c0d5b2c726ce930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket(0x2, 0x4, 0x2011) socket(0xa, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, r1}, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2000000000000001) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x3, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0xfffffff1, 0x0, 0x2, 0x0, 0x0, 0x400}}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r8, 0x0) read$msr(r8, &(0x7f0000000040)=""/57, 0x39) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) 16.774690941s ago: executing program 0 (id=1001): keyctl$KEYCTL_WATCH_KEY(0xc, 0x0, 0xffffffffffffffff, 0xc8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0xd, 0x0, 0x0, 0xca, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x9, @local, 0x5}, 0x1c) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_usb_connect(0x0, 0x26b, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x8d, 0x6c, 0xe1, 0x10, 0x157e, 0x3013, 0x374b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x259, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0xfc, 0x4, 0x4d, 0xb0, 0x6f, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "c56c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x661, 0xff3b, 0x4, 0x9}}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "c8f91ee485f1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7d0f0318, 0x766d, 0x2, 0x4}, [@mdlm_detail={0xf6, 0x24, 0x13, 0xfb, "5499dbcae5ef192bfa313558df55bb679de48adcb6da12db1183e58916e40dc99727aab1956a9a24aa614937a72ca12443ad6771a82dc0e6a939c24e35a04e8426b1e3cf25543e61e2e3ed0d581319e5b28b319ed319c2e31a668b23825bb3986f95da027c5f336befe492cd45abe62de1a8a9e87d89ba7d8b08e2bcf534fdd1c68d362b35ab0c9a7a78dd0d86f4e3847810c25b555507f2ce43dad5f0274bd92ea6bda770888e8d24c02223bd77696f3c38194627440e8b6a72dc40094cfe0fd46487b234ce513dffa85209d537a487293ca6a40228155f7f9d26c5da1323c360393ad276ba69664d99337932a9c2048467"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xb9}, @dmm={0x7, 0x24, 0x14, 0x1a39, 0x2}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0xf, 0x0, 0x440, 0x3, 0xb, 0x9, [@generic={0x6e, 0x21, "401ca24ebefd4403428a0a8e8604b61ec7e618918d02c03b20ab1005494938a9bef7c2203eff9e0d728b67f650335341ffcad62a697146126d6d479c31386519d2f160cb9e1175c5d9d59535c65669bb1c2989a62b922b4de3a0421ab801d5289f98eff8805fd7878eb8680f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x14, 0x5, 0x6, [@generic={0x4e, 0xe, "4061ecd7998389d23143b348a4a44a87c53155a7998c45f9026640e4bb1818d589f8d2a356eb447c1e9066fc40c86ec1adbb33e3634e6a1b0a2019e40e93e3bf7f064c6f6ff60d341669b7cf"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x7}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x3, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}]}}]}}]}}]}}, 0x0) 16.648579226s ago: executing program 2 (id=1002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x4b, r6}) getrlimit(0x0, &(0x7f0000000440)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) 16.288632316s ago: executing program 5 (id=1003): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0016caeea82b3833c88277387c20ad0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x127c, 0x0) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080)=0x4, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x100010, r2, 0xd9b68000) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x1a9540, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='d)?\xed', &(0x7f00000001c0)=':,^]+*@', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) listen(r5, 0x5) getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000380), 0xfffffffffffffcbf) 15.565621808s ago: executing program 4 (id=1004): socket$netlink(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x240, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xd0, 0xffffffc5}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) connect$ax25(r5, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000540)="45ab721464a965825292cdd61982c372633cb136c4f5ba6a2df69bc3a159dd9320c787c577d3c423cb94b8d18cf34ca46e2923833626b698ba21edaefedddd42157a35dad3613e95e387f2f93351d6fef61b93a7019869c9ed97beb9d9c532d97f05b860e99938f8df84c55fc9c949ba41ed79ff2bac8c5d02a14a19c84c184f312827db4c2afdffc9cca2222f694d1a5fe91cc70b1776544c052d6806288d2f0f75f8ab6f27945004a76804f38f4f59cdbb3f5e1a11dd29bb62d27e852607c68dc83c8beecb016f0d05010424526248fe2ef099dc42770452f2ae1e266ccbe7614fd228b9450d6e08f579515c21ba44ce24cb22791f72709e06b52b291a65aa12986073a914b8eeec6faf0de0442532f6c871b160c8ff0fbbe3bda287778e8352dc483008722a6c287c4a90d5f2b6720631ceb6a375d54f1271251cb850637c54efe42d91cf45927e17a87d49bb674f7245541c71cae15a0c686085aef7cb841a094df35e0abc8998f8b389c2974932e73753b2baeec506c7eca3d635fb8d8f9a506c753b9be0f7a9d6331b6ce3adb77e86814e8f2c8561495a15a5b1b358c706ce232df071235624d83d8d8a", 0x0, &(0x7f0000001540), &(0x7f0000000100), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) 15.106434269s ago: executing program 2 (id=1005): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) socket(0x28, 0x5, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0x7041, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f00000003c0)}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x70bd28, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}]}, 0x50}, 0x1, 0xba01, 0x0, 0x100484d4}, 0x4880) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002200)={{{@in=@private, @in6=@dev}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000002300)=0xe8) 14.865647418s ago: executing program 5 (id=1006): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0xff, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) epoll_create1(0x80000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x117) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000001140)=@req={0x6f, 0x10001, 0x5, 0x8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) readv(r7, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x4, 0x2) accept4$unix(r8, 0x0, &(0x7f0000000180), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) 14.204944448s ago: executing program 4 (id=1007): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x800, 0x3, 0x3, 0x200, 0x4, 0x2, 0xff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x61) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x800) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d7264ddc2929afafc306e3a783030303030302d8a243f34303465ff01"]) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r2, 0x0, &(0x7f0000000280), 0x100000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x7, 'ipvlan1\x00', {0x4e88}, 0x4}) fcntl$lock(r3, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x90080000f, 0x2}) fcntl$lock(r3, 0x25, &(0x7f0000000180)) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) 13.794292094s ago: executing program 2 (id=1008): r0 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r0, @ANYBLOB="2442ab7e24f409973bdd3530d19f1d11b632ed68b0776afc3f9738e97f8f30dfb05a8238c899c0920539bf1db203d7e7bcdd9fc5e0f308c73c715d68fcb35c1b92fc7eaf2acc93a2842863dd3d782993e01f0548c9c187c9494e60bd8088945da5113a5dd1839866b521f869356a46b962a61af56dd293a41e847ef22112eb0b8ea7ae2812e1ef4f1d1fc2da1803e617c8738a058ebe2c02"]) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() mount$afs(&(0x7f0000000440)=ANY=[@ANYBLOB="0073797a393a73ff60a4c2b9ad9329f646a561f8797a3000"], &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2028000, &(0x7f0000000400)={[{@flock_strict}, {@flock_write}], [{@appraise_type}, {@fsname={'fsname', 0x3d, '9p\x00'}}]}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4080) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xffff, 0xf69, 0x6, 0x7, 0x7f}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x9, 0x0, @vifc_lcl_addr=@local, @multicast1=0xe0000300}, 0x10) socket$netlink(0x10, 0x3, 0x0) 12.326330488s ago: executing program 2 (id=1009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r4 = dup(r1) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) readv(r7, &(0x7f0000000200), 0x1000000000000108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f00000002c0)) mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6c05}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_clone(0x0, &(0x7f00000003c0)="66fb9a836d02f339573871f85d8e2d86f6cac4ef3ecb9d72fb71ebfa909f4365cc2401d85c9576de148293b885027a4ef5ec4f1e5c109e3775c52066c65f61f207cd70e8d7e842cd087fdbfe4b9821235081dff4a52e79b9e8b61a573c84bc11956b6708ccb8ba688acc957887ef88543d0d67a7f03560ebe02f0abc3b5043bdaea26b038efcfc3b54fb9ddcb0cf160252f2558a2bf0daeafea94d5d5c43dedd2aca2541ca2efe9f2efec7a41ac36fb703b76c783616ee070eebcd8ea15d", 0xbe, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000480)="aef4dbf7e5c69d834c9b342d3f68592439abf296cae2eb43d4f74d1c338ca355d2bfcf4f1dd6bfc9dbd53a8f27db6ca5aa254b8bb74dc32445ab95ba2a458315c87e419d5d011f2021b978f6486bbd626462f49020bbeca793284eb70c7538e223ea3b7fa6da31ec09cb07c72bc8ccb65a4359e4c14580118b1f1831f3c600539e7287f57afaa0") pwrite64(r5, &(0x7f0000000280)="3cbfefaefdd70262c6d16337eb77a8bb06ddf5f1ee49b12b9ca2414d93e7630dbedf2e386291c39cd8c939a40de161dcb40826af", 0x34, 0x8) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000540)="0f20e00f22e066b9390b000066b89a1528d966baec6ec4010f30f30f1ef33e0f0f71110ddeb34ab7360f01b30f000fc7aa0000f080a167009066b91a02000066b8d200000066ba000000000f300f001b", 0x50}], 0x1, 0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 12.32503713s ago: executing program 5 (id=1010): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x110) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x2c8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x28, "c9e40ceccaf2cf18c1312929801b2dbcb95e8b2725d2e3c38bc20f1acdd8"}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r3 = fsopen(&(0x7f0000000580)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x10000a006) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0x0, 0x8, 0x0, @void, @value, @void, @value}, 0x50) open_by_handle_at(r6, &(0x7f00000005c0)=@OVL_FILEID_V0={0x15, 0xfb, {0x0, 0xfb, 0x15, 0x0, 0x4, "c1a9f6a8cd30e5391c0af7dd22858be6"}}, 0x200000) syz_io_uring_setup(0x3d1a, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c03572000000440f22c0410f01c8450f01c566baf80cb827099d8aef66bafc0cec66baf80cb838229a8eef66bafc0cb808000000ef673eec2642d30248b84d9af29b560a9d140f23c00f21f83501000b000f23f80f300f01c5", 0x5c}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 33 (id=1001): keyctl$KEYCTL_WATCH_KEY(0xc, 0x0, 0xffffffffffffffff, 0xc8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0xd, 0x0, 0x0, 0xca, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x9, @local, 0x5}, 0x1c) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_usb_connect(0x0, 0x26b, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x8d, 0x6c, 0xe1, 0x10, 0x157e, 0x3013, 0x374b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x259, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0xfc, 0x4, 0x4d, 0xb0, 0x6f, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "c56c"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x661, 0xff3b, 0x4, 0x9}}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "c8f91ee485f1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7d0f0318, 0x766d, 0x2, 0x4}, [@mdlm_detail={0xf6, 0x24, 0x13, 0xfb, "5499dbcae5ef192bfa313558df55bb679de48adcb6da12db1183e58916e40dc99727aab1956a9a24aa614937a72ca12443ad6771a82dc0e6a939c24e35a04e8426b1e3cf25543e61e2e3ed0d581319e5b28b319ed319c2e31a668b23825bb3986f95da027c5f336befe492cd45abe62de1a8a9e87d89ba7d8b08e2bcf534fdd1c68d362b35ab0c9a7a78dd0d86f4e3847810c25b555507f2ce43dad5f0274bd92ea6bda770888e8d24c02223bd77696f3c38194627440e8b6a72dc40094cfe0fd46487b234ce513dffa85209d537a487293ca6a40228155f7f9d26c5da1323c360393ad276ba69664d99337932a9c2048467"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xb9}, @dmm={0x7, 0x24, 0x14, 0x1a39, 0x2}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0xf, 0x0, 0x440, 0x3, 0xb, 0x9, [@generic={0x6e, 0x21, "401ca24ebefd4403428a0a8e8604b61ec7e618918d02c03b20ab1005494938a9bef7c2203eff9e0d728b67f650335341ffcad62a697146126d6d479c31386519d2f160cb9e1175c5d9d59535c65669bb1c2989a62b922b4de3a0421ab801d5289f98eff8805fd7878eb8680f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x14, 0x5, 0x6, [@generic={0x4e, 0xe, "4061ecd7998389d23143b348a4a44a87c53155a7998c45f9026640e4bb1818d589f8d2a356eb447c1e9066fc40c86ec1adbb33e3634e6a1b0a2019e40e93e3bf7f064c6f6ff60d341669b7cf"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x7}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x3, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5}]}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): to 400 msecs. [ 288.219531][ T30] audit: type=1400 audit(1748291312.385:675): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=2911 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.231548][ T5895] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 288.256294][ T30] audit: type=1400 audit(1748291312.385:676): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2911 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.286355][ T5895] usb 2-1: USB disconnect, device number 7 [ 288.286685][ T5867] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 288.299778][ T30] audit: type=1400 audit(1748291312.385:677): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2911 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.329372][ T5867] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 288.349131][ T9] usb 3-1: USB disconnect, device number 6 [ 288.370606][ T5867] usb 4-1: USB disconnect, device number 11 [ 288.476471][ T5895] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 288.610374][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 288.797917][ T30] audit: type=1400 audit(1748291312.985:678): avc: denied { open } for pid=8010 comm="syz.1.514" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 288.924257][ T8015] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 288.973075][ T30] audit: type=1400 audit(1748291313.155:679): avc: denied { bind } for pid=8018 comm="syz.3.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.077562][ T8019] xt_CT: No such helper "snmp" [ 290.390942][ T5868] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 290.413241][ T8037] lo speed is unknown, defaulting to 1000 [ 290.531350][ T5867] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 290.561859][ T5868] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 290.572935][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.583414][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.613192][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 290.623385][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.634404][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.657167][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 290.683525][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.683633][ T5867] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.708796][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.731941][ T5867] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.744818][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 290.761724][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.770734][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 290.792284][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.802303][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.821038][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 290.831150][ T5867] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.840501][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.848984][ T5867] usb 3-1: Product: syz [ 290.853751][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.864953][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.876362][ T5867] usb 3-1: Manufacturer: syz [ 290.883759][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 290.887549][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 290.904949][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 290.910450][ T5867] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 290.917254][ T8037] lo speed is unknown, defaulting to 1000 [ 290.919207][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.935476][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.949049][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 290.959863][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.973786][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 290.985504][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 290.996527][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.007701][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.021457][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 291.035191][ T5868] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 291.060974][ T5868] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 291.069358][ T5868] usb 1-1: Product: syz [ 291.073730][ T5868] usb 1-1: Manufacturer: syz [ 291.078337][ T5868] usb 1-1: SerialNumber: syz [ 291.094033][ T5868] usb 1-1: config 0 descriptor?? [ 291.105272][ T5868] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 291.382068][ T5831] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 291.392468][ T5831] Bluetooth: hci2: Injecting HCI hardware error event [ 291.412479][ T5820] Bluetooth: hci2: hardware error 0x00 [ 292.065999][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 292.077773][ T5867] usb 1-1: USB disconnect, device number 8 [ 292.089610][ T5867] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 292.145475][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 292.145491][ T30] audit: type=1400 audit(1748291316.335:690): avc: denied { read } for pid=8073 comm="syz.1.538" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 292.176989][ T30] audit: type=1400 audit(1748291316.335:691): avc: denied { open } for pid=8073 comm="syz.1.538" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 292.207571][ T30] audit: type=1400 audit(1748291316.395:692): avc: denied { ioctl } for pid=8073 comm="syz.1.538" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 292.468081][ T24] usb 3-1: USB disconnect, device number 7 [ 292.561488][ T5895] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 292.685870][ T30] audit: type=1400 audit(1748291316.875:693): avc: denied { read } for pid=8093 comm="syz.0.546" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 292.709007][ T30] audit: type=1400 audit(1748291316.875:694): avc: denied { open } for pid=8093 comm="syz.0.546" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 292.772231][ T5895] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 292.792632][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.800724][ T30] audit: type=1400 audit(1748291316.895:695): avc: denied { ioctl } for pid=8093 comm="syz.0.546" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 292.843237][ T5895] usb 4-1: config 0 descriptor?? [ 292.913309][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 292.948552][ T30] audit: type=1400 audit(1748291317.135:696): avc: denied { ioctl } for pid=8101 comm="syz.4.550" path="socket:[15477]" dev="sockfs" ino=15477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.960730][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 292.985706][ T30] audit: type=1400 audit(1748291317.135:697): avc: denied { connect } for pid=8101 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.015157][ T30] audit: type=1400 audit(1748291317.205:698): avc: denied { write } for pid=8101 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.053088][ T5895] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 293.062345][ T5895] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 293.073224][ T5895] [drm:udl_init] *ERROR* Selecting channel failed [ 293.089506][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 293.107669][ T5895] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 293.115230][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 293.132007][ T5895] [drm] Initialized udl on minor 2 [ 293.137309][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.146998][ T971] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 293.158300][ T5895] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.168062][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.181505][ T5895] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 293.193187][ T5920] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.206807][ T5920] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 293.208138][ T8090] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 293.214494][ T5895] usb 4-1: USB disconnect, device number 12 [ 293.242224][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 293.323137][ T971] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.335605][ T971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.346514][ T971] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 293.357032][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.365878][ T971] usb 2-1: SerialNumber: syz [ 293.451438][ T5820] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 293.480266][ T5867] usb 3-1: USB disconnect, device number 8 [ 293.584954][ T971] usb 2-1: 0:2 : does not exist [ 293.605035][ T971] usb 2-1: USB disconnect, device number 8 [ 293.658974][ T7084] udevd[7084]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.659364][ T30] audit: type=1400 audit(1748291317.845:699): avc: denied { ioctl } for pid=8110 comm="syz.3.553" path="socket:[16466]" dev="sockfs" ino=16466 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 294.623256][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 294.799255][ T5867] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.808431][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.818787][ T5867] usb 3-1: Product: syz [ 294.823767][ T5867] usb 3-1: Manufacturer: syz [ 294.828362][ T5867] usb 3-1: SerialNumber: syz [ 294.839501][ T5867] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 294.884299][ T5868] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 295.322184][ T5867] usb 3-1: USB disconnect, device number 9 [ 295.481005][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 295.528121][ T8149] bridge0: port 3(syz_tun) entered blocking state [ 295.536899][ T8149] bridge0: port 3(syz_tun) entered disabled state [ 295.543961][ T8149] syz_tun: entered allmulticast mode [ 295.550056][ T8149] syz_tun: entered promiscuous mode [ 295.557031][ T8149] bridge0: port 3(syz_tun) entered blocking state [ 295.563551][ T8149] bridge0: port 3(syz_tun) entered forwarding state [ 295.643678][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 295.653366][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 295.667490][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.677737][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.690295][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.700489][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.715146][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.724582][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.870683][ T8154] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 296.024015][ T9] usb 2-1: usb_control_msg returned -32 [ 296.066685][ T9] usbtmc 2-1:16.0: can't read capabilities [ 296.181952][ T5868] usb 3-1: Service connection timeout for: 256 [ 296.182973][ T8168] overlayfs: failed to resolve './file1': -2 [ 296.235751][ T5868] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 296.265454][ T5868] ath9k_htc: Failed to initialize the device [ 296.280684][ T5867] usb 3-1: ath9k_htc: USB layer deinitialized [ 296.374467][ T8174] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 296.551659][ T5895] usb 2-1: USB disconnect, device number 9 [ 297.235398][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 297.235413][ T30] audit: type=1400 audit(1748291321.425:709): avc: denied { connect } for pid=8184 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.640190][ C1] Unknown status report in ack skb [ 297.675705][ T8195] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 298.016469][ T30] audit: type=1400 audit(1748291322.185:710): avc: denied { bind } for pid=8206 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.054563][ T8207] tipc: Failed to remove unknown binding: 66,1,1/0:4130390044/4130390046 [ 298.077551][ T8207] tipc: Failed to remove unknown binding: 66,1,1/0:4130390044/4130390046 [ 298.090227][ T8207] tipc: Failed to remove unknown binding: 66,1,1/0:4130390044/4130390046 [ 298.661670][ T5895] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 298.676833][ T30] audit: type=1400 audit(1748291322.865:711): avc: denied { bind } for pid=8210 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.821508][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 298.857594][ T5895] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 298.877435][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.888997][ T5895] usb 1-1: Product: syz [ 298.895582][ T5895] usb 1-1: Manufacturer: syz [ 298.900360][ T5895] usb 1-1: SerialNumber: syz [ 299.007097][ T5895] usb 1-1: config 0 descriptor?? [ 299.050653][ T5810] bridge0: port 3(syz_tun) entered disabled state [ 299.051574][ T30] audit: type=1400 audit(1748291323.245:712): avc: denied { mount } for pid=8215 comm="syz.2.593" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 299.121615][ T30] audit: type=1400 audit(1748291323.315:713): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 299.494498][ T5895] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 299.505677][ T5810] syz_tun (unregistering): left allmulticast mode [ 299.507579][ T5895] usb 1-1: Detected FT232H [ 299.518126][ T5810] syz_tun (unregistering): left promiscuous mode [ 299.525306][ T5895] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 299.527930][ T5810] bridge0: port 3(syz_tun) entered disabled state [ 299.551382][ T971] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 299.700174][ T5820] block nbd2: Receive control failed (result -107) [ 299.711627][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 299.794744][ T8227] bio_check_eod: 14 callbacks suppressed [ 299.794762][ T8227] syz.2.596: attempt to access beyond end of device [ 299.794762][ T8227] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 299.818554][ T971] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 299.827282][ T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.838071][ T971] usb 2-1: config 0 has no interface number 0 [ 299.849532][ T8227] syz.2.596: attempt to access beyond end of device [ 299.849532][ T8227] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 299.864088][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 299.874827][ T8227] syz.2.596: attempt to access beyond end of device [ 299.874827][ T8227] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 299.877664][ T8225] nbd2: detected capacity change from 0 to 12 [ 299.888513][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 299.905611][ T971] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 299.916123][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.925912][ T971] usb 2-1: Product: syz [ 299.930072][ T971] usb 2-1: Manufacturer: syz [ 299.936123][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 299.953475][ T971] usb 2-1: SerialNumber: syz [ 299.987049][ T5895] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 300.000587][ T971] usb 2-1: config 0 descriptor?? [ 300.018579][ T7104] block nbd2: Dead connection, failed to find a fallback [ 300.041507][ T7104] block nbd2: shutting down sockets [ 300.047349][ T7104] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.069086][ T8227] I/O error, dev nbd2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.082413][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2, location=2 [ 300.093880][ T7104] Buffer I/O error on dev nbd2, logical block 0, async page read [ 300.119774][ T7104] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.144432][ T7104] Buffer I/O error on dev nbd2, logical block 1, async page read [ 300.151221][ T974] usb 1-1: USB disconnect, device number 9 [ 300.155266][ T7104] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.173592][ T7104] Buffer I/O error on dev nbd2, logical block 0, async page read [ 300.184542][ T974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 300.189014][ T7104] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.204254][ T7104] Buffer I/O error on dev nbd2, logical block 1, async page read [ 300.207997][ T974] ftdi_sio 1-1:0.0: device disconnected [ 300.217687][ T8227] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.230397][ T7104] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.249613][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.249842][ T7104] Buffer I/O error on dev nbd2, logical block 0, async page read [ 300.265890][ T971] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 300.266543][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.273291][ T971] usb 2-1: No valid video chain found. [ 300.286676][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.292450][ T7104] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.305552][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.308944][ T971] usb 2-1: USB disconnect, device number 10 [ 300.319377][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.339525][ T30] audit: type=1400 audit(1748291324.525:714): avc: denied { mounton } for pid=8231 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 300.362229][ T7104] Buffer I/O error on dev nbd2, logical block 1, async page read [ 300.372490][ T7104] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.381677][ T7104] Buffer I/O error on dev nbd2, logical block 0, async page read [ 300.389640][ T7104] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 300.399865][ T7104] Buffer I/O error on dev nbd2, logical block 1, async page read [ 300.408828][ T7104] Buffer I/O error on dev nbd2, logical block 0, async page read [ 300.419039][ T7104] Buffer I/O error on dev nbd2, logical block 1, async page read [ 300.421697][ T8231] lo speed is unknown, defaulting to 1000 [ 300.431254][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 300.444104][ T7104] ldm_validate_partition_table(): Disk read failed. [ 300.451764][ T7104] Dev nbd2: unable to read RDB block 0 [ 300.457457][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 300.470506][ T7104] nbd2: unable to read partition table [ 300.476629][ T7104] nbd2: partition table beyond EOD, truncated [ 300.483429][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 300.497623][ T7104] ldm_validate_partition_table(): Disk read failed. [ 300.505669][ T7104] Dev nbd2: unable to read RDB block 0 [ 300.511429][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 300.526277][ T7104] nbd2: unable to read partition table [ 300.532965][ T7104] nbd2: partition table beyond EOD, truncated [ 300.550050][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 300.560356][ T8227] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 300.579668][ T8227] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 300.800424][ T8231] lo speed is unknown, defaulting to 1000 [ 301.189982][ T8241] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 302.303965][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 302.419215][ T5820] Bluetooth: hci0: command tx timeout [ 304.491034][ T5820] Bluetooth: hci0: command tx timeout [ 305.901600][ T971] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 306.061745][ T971] usb 3-1: device descriptor read/64, error -71 [ 306.156127][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.167284][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.201361][ T8231] bridge_slave_0: entered allmulticast mode [ 306.208723][ T8231] bridge_slave_0: entered promiscuous mode [ 306.257811][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.275162][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.289003][ T8231] bridge_slave_1: entered allmulticast mode [ 306.305878][ T8231] bridge_slave_1: entered promiscuous mode [ 306.311360][ T971] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 306.424379][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.461515][ T971] usb 3-1: device descriptor read/64, error -71 [ 306.464563][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.560276][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 306.561156][ T30] audit: type=1400 audit(1748291330.745:715): avc: denied { setopt } for pid=8306 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.581600][ T971] usb usb3-port1: attempt power cycle [ 306.605973][ T5820] Bluetooth: hci0: command tx timeout [ 306.693580][ T8231] team0: Port device team_slave_0 added [ 306.704830][ T8231] team0: Port device team_slave_1 added [ 306.767460][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.776549][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.807567][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.829665][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.836845][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.863601][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.917172][ T8231] hsr_slave_0: entered promiscuous mode [ 306.926160][ T8231] hsr_slave_1: entered promiscuous mode [ 306.931471][ T971] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 306.932618][ T8231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.948658][ T8231] Cannot create hsr debugfs directory [ 306.980431][ T971] usb 3-1: device descriptor read/8, error -71 [ 307.721514][ T971] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 307.765804][ T8231] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.932849][ T8231] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.962669][ T971] usb 3-1: device not accepting address 13, error -71 [ 307.983111][ T971] usb usb3-port1: unable to enumerate USB device [ 308.006703][ T30] audit: type=1400 audit(1748291332.195:716): avc: denied { map } for pid=8331 comm="syz.0.626" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.089044][ T8231] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.185152][ T8231] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.209301][ T8338] netlink: 'syz.0.628': attribute type 4 has an invalid length. [ 308.224502][ T24] lo speed is unknown, defaulting to 1000 [ 308.230427][ T24] syz0: Port: 1 Link DOWN [ 308.238348][ T8338] netlink: 'syz.0.628': attribute type 4 has an invalid length. [ 308.249973][ T24] lo speed is unknown, defaulting to 1000 [ 308.269675][ T24] syz0: Port: 1 Link ACTIVE [ 308.281772][ T971] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 308.443928][ T971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.447043][ T8231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.456463][ T971] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 308.470816][ T971] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.488660][ T8231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.488976][ T971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 308.509114][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.518992][ T971] usb 3-1: Product: syz [ 308.526931][ T971] usb 3-1: Manufacturer: syz [ 308.532847][ T971] usb 3-1: SerialNumber: syz [ 308.543580][ T8231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.564519][ T8231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.651494][ T5820] Bluetooth: hci0: command tx timeout [ 308.661550][ T5920] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 308.740992][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.777603][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.784827][ T971] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 308.827832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.835036][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.837502][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 308.856301][ T5920] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 308.869021][ T5920] usb 1-1: config 1 has no interface number 0 [ 308.880399][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.883627][ T5920] usb 1-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 308.887559][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.909000][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.917860][ T5920] usb 1-1: Product: syz [ 308.923477][ T5920] usb 1-1: Manufacturer: syz [ 308.928094][ T5920] usb 1-1: SerialNumber: syz [ 308.943890][ T5920] hub 1-1:1.121: bad descriptor, ignoring hub [ 308.950017][ T5920] hub 1-1:1.121: probe with driver hub failed with error -5 [ 308.978579][ T30] audit: type=1400 audit(1748291333.165:717): avc: denied { read write } for pid=8327 comm="syz.2.625" name="lp0" dev="devtmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 309.015050][ T30] audit: type=1400 audit(1748291333.165:718): avc: denied { open } for pid=8327 comm="syz.2.625" path="/dev/usb/lp0" dev="devtmpfs" ino=2970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 309.071673][ T8329] usblp0:failed reading printer status (-71) [ 309.073270][ T24] usb 3-1: USB disconnect, device number 14 [ 309.110407][ T30] audit: type=1400 audit(1748291333.165:719): avc: denied { ioctl } for pid=8327 comm="syz.2.625" path="/dev/usb/lp0" dev="devtmpfs" ino=2970 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 309.138976][ T24] usblp0: removed [ 309.177266][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.234168][ T8231] veth0_vlan: entered promiscuous mode [ 309.245687][ T8231] veth1_vlan: entered promiscuous mode [ 309.270630][ T8231] veth0_macvtap: entered promiscuous mode [ 309.280132][ T8231] veth1_macvtap: entered promiscuous mode [ 309.296521][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.310775][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.322577][ T5920] usb 1-1: USB disconnect, device number 10 [ 309.334824][ T8231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.348291][ T8231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.358665][ T8231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.369265][ T8231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.459760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.477545][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.518606][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.535058][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.554738][ T30] audit: type=1400 audit(1748291333.745:720): avc: denied { mounton } for pid=8231 comm="syz-executor" path="/root/syzkaller.veMpvJ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 309.583340][ T30] audit: type=1400 audit(1748291333.745:721): avc: denied { mount } for pid=8231 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 309.606004][ T30] audit: type=1400 audit(1748291333.745:722): avc: denied { mounton } for pid=8231 comm="syz-executor" path="/root/syzkaller.veMpvJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 309.647979][ T30] audit: type=1400 audit(1748291333.745:723): avc: denied { mounton } for pid=8231 comm="syz-executor" path="/root/syzkaller.veMpvJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 309.713796][ T30] audit: type=1400 audit(1748291333.775:724): avc: denied { mounton } for pid=8231 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 311.556167][ T8383] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 311.795654][ T8386] netlink: 'syz.0.640': attribute type 13 has an invalid length. [ 313.774912][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 313.774925][ T30] audit: type=1400 audit(1748291337.965:727): avc: denied { write } for pid=8407 comm="syz.2.644" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.893438][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.910485][ T30] audit: type=1400 audit(1748291337.975:728): avc: denied { map } for pid=8407 comm="syz.2.644" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.916243][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.067796][ T30] audit: type=1400 audit(1748291337.975:729): avc: denied { call } for pid=8407 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 314.190740][ T8386] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.241987][ T8386] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.254434][ T8386] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.263434][ T8386] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.385186][ T974] lo speed is unknown, defaulting to 1000 [ 314.412043][ T974] syz0: Port: 1 Link DOWN [ 314.447603][ T30] audit: type=1400 audit(1748291338.485:730): avc: denied { write } for pid=8422 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.772067][ T8432] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 315.354632][ T8439] kvm: pic: non byte write [ 315.364787][ T8439] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 315.381048][ T8439] kvm: pic: non byte write [ 315.753441][ T30] audit: type=1400 audit(1748291339.855:731): avc: denied { setopt } for pid=8445 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 316.064139][ T30] audit: type=1400 audit(1748291339.915:732): avc: denied { shutdown } for pid=8443 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.116319][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.429021][ T8456] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 316.607855][ T30] audit: type=1400 audit(1748291340.795:733): avc: denied { write } for pid=8452 comm="syz.2.659" path="socket:[17599]" dev="sockfs" ino=17599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.673786][ T5864] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 316.771245][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.800992][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.808742][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.926135][ T5864] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 316.971652][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.998032][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.037142][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 317.058559][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.067925][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.084270][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.093719][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.108172][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.116182][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 317.128807][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.153764][ T5864] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 317.217529][ T5864] usb 2-1: Manufacturer: syz [ 317.252318][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.263797][ T5864] usb 2-1: config 0 descriptor?? [ 317.330389][ T8465] lo speed is unknown, defaulting to 1000 [ 317.646646][ T13] bridge_slave_1: left allmulticast mode [ 317.666775][ T13] bridge_slave_1: left promiscuous mode [ 317.693661][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.475675][ T5864] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 318.484922][ T5864] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 318.500400][ T5864] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 318.530335][ T5864] usb 2-1: USB disconnect, device number 11 [ 318.552599][ T13] bridge_slave_0: left allmulticast mode [ 318.558348][ T13] bridge_slave_0: left promiscuous mode [ 318.735961][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.246919][ T5820] Bluetooth: hci0: command tx timeout [ 320.315417][ T8485] fido_id[8485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 321.159759][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.170720][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.182617][ T13] bond0 (unregistering): Released all slaves [ 321.264117][ T8465] lo speed is unknown, defaulting to 1000 [ 321.292385][ T5820] Bluetooth: hci0: command tx timeout [ 321.402704][ T30] audit: type=1400 audit(1748291345.565:734): avc: denied { read } for pid=8504 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 321.677007][ T30] audit: type=1400 audit(1748291345.845:735): avc: denied { mounton } for pid=8509 comm="syz.1.673" path="/139/file1/file0" dev="autofs" ino=18629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 321.819617][ T30] audit: type=1400 audit(1748291345.895:736): avc: denied { create } for pid=8513 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 322.245803][ T8465] chnl_net:caif_netlink_parms(): no params data found [ 322.649997][ T8538] SELinux: Context system_u:object is not valid (left unmapped). [ 322.679176][ T30] audit: type=1400 audit(1748291346.855:737): avc: denied { relabelto } for pid=8519 comm="syz.0.674" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 322.835542][ T30] audit: type=1400 audit(1748291347.025:738): avc: denied { associate } for pid=8519 comm="syz.0.674" name="cgroup.procs" dev="cgroup" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 323.427722][ T5820] Bluetooth: hci0: command tx timeout [ 323.598829][ T30] audit: type=1400 audit(1748291347.755:739): avc: denied { write } for pid=8527 comm="syz.2.677" path="socket:[18672]" dev="sockfs" ino=18672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 323.669041][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.679902][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.697096][ T8465] bridge_slave_0: entered allmulticast mode [ 323.722963][ T8465] bridge_slave_0: entered promiscuous mode [ 323.806695][ T8548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.956230][ T13] hsr_slave_0: left promiscuous mode [ 323.987472][ T13] hsr_slave_1: left promiscuous mode [ 324.085574][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.099059][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.120173][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.127924][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.680433][ T13] veth1_macvtap: left promiscuous mode [ 324.700199][ T13] veth0_macvtap: left promiscuous mode [ 324.716009][ T13] veth1_vlan: left promiscuous mode [ 324.727348][ T13] veth0_vlan: left promiscuous mode [ 325.430293][ T30] audit: type=1400 audit(1748291349.615:740): avc: denied { create } for pid=8573 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 325.452827][ T5820] Bluetooth: hci0: command tx timeout [ 325.544787][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 325.559150][ T30] audit: type=1400 audit(1748291349.715:741): avc: denied { create } for pid=8573 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 325.886509][ T13] team0 (unregistering): Port device team_slave_1 removed [ 325.938396][ T13] team0 (unregistering): Port device team_slave_0 removed [ 326.234394][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.241819][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.249045][ T8465] bridge_slave_1: entered allmulticast mode [ 326.256841][ T8465] bridge_slave_1: entered promiscuous mode [ 326.477504][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.638457][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.980191][ T5868] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 327.131958][ T8465] team0: Port device team_slave_0 added [ 327.174759][ T5868] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 327.225206][ T8465] team0: Port device team_slave_1 added [ 327.242240][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.458013][ T5868] usb 1-1: config 0 descriptor?? [ 327.499395][ T5868] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 327.547101][ T5868] dw2102: su3000_power_ctrl: 1, initialized 0 [ 327.577461][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.577753][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 327.595088][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.633795][ T8465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.649737][ T5868] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 328.178292][ T30] audit: type=1400 audit(1748291351.935:742): avc: denied { connect } for pid=8578 comm="syz.0.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 328.232317][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.232349][ T5868] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 328.264518][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.292172][ T8465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.436959][ T8465] hsr_slave_0: entered promiscuous mode [ 328.453673][ T8465] hsr_slave_1: entered promiscuous mode [ 328.464774][ T8465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.487184][ T8465] Cannot create hsr debugfs directory [ 328.829067][ T5868] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 329.001123][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 329.033524][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.057061][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 329.079473][ T5868] usb 3-1: can't read configurations, error -71 [ 329.553663][ T5864] usb 1-1: USB disconnect, device number 11 [ 329.720444][ T30] audit: type=1400 audit(1748291353.905:743): avc: denied { write } for pid=8633 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 329.880700][ T8465] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.914669][ T8465] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.987797][ T30] audit: type=1400 audit(1748291354.175:744): avc: denied { connect } for pid=8637 comm="syz.2.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 330.046495][ T8465] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.196961][ T8465] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.780183][ T30] audit: type=1400 audit(1748291354.225:745): avc: denied { write } for pid=8637 comm="syz.2.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 330.906429][ T30] audit: type=1400 audit(1748291355.095:746): avc: denied { append } for pid=8631 comm="syz.0.691" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 330.910601][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.970011][ T8465] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.000711][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.007919][ T6769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.065666][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.072837][ T6142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.270250][ T30] audit: type=1400 audit(1748291356.455:747): avc: denied { bind } for pid=8656 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.300573][ T30] audit: type=1400 audit(1748291356.455:748): avc: denied { listen } for pid=8656 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.371369][ T30] audit: type=1400 audit(1748291356.455:749): avc: denied { connect } for pid=8656 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 333.276968][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.489426][ T8465] veth0_vlan: entered promiscuous mode [ 333.507230][ T8465] veth1_vlan: entered promiscuous mode [ 333.539412][ T8465] veth0_macvtap: entered promiscuous mode [ 333.606884][ T8465] veth1_macvtap: entered promiscuous mode [ 333.811410][ T30] audit: type=1400 audit(1748291357.935:750): avc: denied { mount } for pid=8686 comm="syz.2.703" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 333.812441][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.031647][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.100459][ T8465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.110716][ T8465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.120158][ T8465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.129209][ T8465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.198327][ T30] audit: type=1400 audit(1748291358.385:751): avc: denied { ioctl } for pid=8692 comm="syz.4.704" path="socket:[17923]" dev="sockfs" ino=17923 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 334.756231][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.789483][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.893116][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.922203][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.482010][ T5868] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 335.701992][ T5868] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.750786][ T5868] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 335.751711][ T30] audit: type=1400 audit(1748291359.945:752): avc: denied { setopt } for pid=8712 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 335.787941][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.795803][ T8718] overlayfs: failed to clone upperpath [ 335.832213][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 335.857703][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 335.899355][ T5868] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.910375][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.920725][ T5868] usb 3-1: Product: syz [ 335.928979][ T5868] usb 3-1: Manufacturer: syz [ 335.954702][ T5868] cdc_wdm 3-1:1.0: skipping garbage [ 335.962272][ T5868] cdc_wdm 3-1:1.0: skipping garbage [ 335.976492][ T5868] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 335.988611][ T5868] cdc_wdm 3-1:1.0: Unknown control protocol [ 336.803850][ T6275] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.165734][ T6275] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.312723][ T6275] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.427505][ T5867] usb 3-1: USB disconnect, device number 17 [ 337.524714][ T6275] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.644462][ T6275] bridge_slave_1: left allmulticast mode [ 338.679445][ T6275] bridge_slave_1: left promiscuous mode [ 338.707022][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.924415][ T6275] bridge_slave_0: left allmulticast mode [ 338.964344][ T6275] bridge_slave_0: left promiscuous mode [ 338.972238][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.997563][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 339.666173][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.680114][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.689611][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.769366][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.791688][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.964780][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.991612][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.023211][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.287852][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.295579][ T8772] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 340.302444][ T8772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 340.316458][ T8772] vhci_hcd vhci_hcd.0: Device attached [ 340.371504][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.437958][ T8773] vhci_hcd: connection closed [ 340.461016][ T6142] vhci_hcd: stop threads [ 340.512925][ T6142] vhci_hcd: release socket [ 340.518552][ T6142] vhci_hcd: disconnect device [ 341.874925][ T5867] usb usb38-port1: attempt power cycle [ 341.935236][ T5820] Bluetooth: hci0: command tx timeout [ 342.680699][ T5820] Bluetooth: hci5: command tx timeout [ 342.934431][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.957466][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.972935][ T5867] usb usb38-port1: unable to enumerate USB device [ 343.009936][ T6275] bond0 (unregistering): Released all slaves [ 343.323189][ T8814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.656266][ T5811] syz_tun (unregistering): left allmulticast mode [ 344.117224][ T8822] xt_hashlimit: size too large, truncated to 1048576 [ 344.395651][ T5820] Bluetooth: hci0: command tx timeout [ 344.890821][ T8768] lo speed is unknown, defaulting to 1000 [ 344.901021][ T5820] Bluetooth: hci5: command tx timeout [ 345.181681][ T8762] lo speed is unknown, defaulting to 1000 [ 345.203030][ T30] audit: type=1400 audit(1748291369.395:753): avc: denied { create } for pid=8828 comm="syz.4.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 346.411492][ T5820] Bluetooth: hci0: command tx timeout [ 347.044173][ T5820] Bluetooth: hci5: command tx timeout [ 349.169572][ T5820] Bluetooth: hci0: command tx timeout [ 349.176241][ T5820] Bluetooth: hci5: command tx timeout [ 349.604937][ T8768] lo speed is unknown, defaulting to 1000 [ 351.231116][ T8762] lo speed is unknown, defaulting to 1000 [ 351.861547][ T30] audit: type=1400 audit(1748291376.015:754): avc: denied { write } for pid=8904 comm="syz.0.741" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 352.080053][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 352.393250][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 352.411993][ T6275] hsr_slave_0: left promiscuous mode [ 352.418321][ T6275] hsr_slave_1: left promiscuous mode [ 352.425152][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.933572][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.953063][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.970667][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.025613][ T6275] veth1_macvtap: left promiscuous mode [ 353.046697][ T6275] veth0_macvtap: left promiscuous mode [ 353.063775][ T6275] veth1_vlan: left promiscuous mode [ 353.076475][ T6275] veth0_vlan: left promiscuous mode [ 353.547203][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 353.585104][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 353.978396][ T8916] macvtap1: entered promiscuous mode [ 353.985516][ T8916] dummy0: entered promiscuous mode [ 353.991930][ T8916] macvtap1: entered allmulticast mode [ 353.997299][ T8916] dummy0: entered allmulticast mode [ 354.084891][ T8924] dummy0: left allmulticast mode [ 354.090006][ T8924] dummy0: left promiscuous mode [ 354.115386][ T8931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.362016][ T30] audit: type=1400 audit(1748291378.515:755): avc: denied { bind } for pid=8940 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 354.720652][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.732686][ T30] audit: type=1400 audit(1748291378.525:756): avc: denied { listen } for pid=8940 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 354.893361][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.910523][ T8768] bridge_slave_0: entered allmulticast mode [ 354.918908][ T8768] bridge_slave_0: entered promiscuous mode [ 354.933623][ T8762] chnl_net:caif_netlink_parms(): no params data found [ 355.006645][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.018531][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.027114][ T8768] bridge_slave_1: entered allmulticast mode [ 355.036218][ T8768] bridge_slave_1: entered promiscuous mode [ 355.574594][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.600658][ T8958] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.750'. [ 355.668472][ T8957] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.750'. [ 355.683231][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.823317][ T30] audit: type=1400 audit(1748291380.015:757): avc: denied { mount } for pid=8964 comm="syz.4.751" name="/" dev="configfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 355.891040][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.898296][ T30] audit: type=1400 audit(1748291380.045:758): avc: denied { search } for pid=8964 comm="syz.4.751" name="/" dev="configfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 355.920605][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.921720][ T8762] bridge_slave_0: entered allmulticast mode [ 355.992418][ T8762] bridge_slave_0: entered promiscuous mode [ 356.022752][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.117843][ T30] audit: type=1400 audit(1748291380.045:759): avc: denied { read } for pid=8964 comm="syz.4.751" name="/" dev="configfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.140897][ T30] audit: type=1400 audit(1748291380.045:760): avc: denied { open } for pid=8964 comm="syz.4.751" path="/" dev="configfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 356.163786][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.211830][ T8762] bridge_slave_1: entered allmulticast mode [ 356.437729][ T8762] bridge_slave_1: entered promiscuous mode [ 356.651893][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'. [ 357.086569][ T6275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.852322][ T30] audit: type=1400 audit(1748291382.045:761): avc: denied { read } for pid=8986 comm="syz.4.757" path="socket:[20568]" dev="sockfs" ino=20568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.977243][ T8768] team0: Port device team_slave_0 added [ 358.024209][ T8768] team0: Port device team_slave_1 added [ 358.245134][ T6275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.268333][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.713956][ T9015] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 359.722446][ T9015] netlink: 'syz.4.762': attribute type 2 has an invalid length. [ 360.026963][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.071878][ T6275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.111813][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.118892][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.252350][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.281861][ T30] audit: type=1400 audit(1748291384.455:762): avc: denied { ioctl } for pid=9018 comm="syz.2.764" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 360.312745][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.920985][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.948738][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.085837][ T6275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.334620][ T9032] syz.0.766 (9032): /proc/9029/oom_adj is deprecated, please use /proc/9029/oom_score_adj instead. [ 361.814568][ T8762] team0: Port device team_slave_0 added [ 361.845231][ T8768] hsr_slave_0: entered promiscuous mode [ 361.864396][ T8768] hsr_slave_1: entered promiscuous mode [ 361.880544][ T8768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.899321][ T8768] Cannot create hsr debugfs directory [ 362.003090][ T8762] team0: Port device team_slave_1 added [ 362.469125][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.479257][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.584929][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.687837][ T30] audit: type=1400 audit(1748291386.875:763): avc: denied { lock } for pid=9045 comm="syz.4.769" path="socket:[20640]" dev="sockfs" ino=20640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 362.797039][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.817271][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.929084][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.167826][ T30] audit: type=1400 audit(1748291388.225:764): avc: denied { map } for pid=9060 comm="syz.4.772" path="socket:[20654]" dev="sockfs" ino=20654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 364.424643][ T30] audit: type=1400 audit(1748291388.345:765): avc: denied { bind } for pid=9067 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 364.474126][ T30] audit: type=1400 audit(1748291388.345:766): avc: denied { listen } for pid=9067 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 364.528740][ T8762] hsr_slave_0: entered promiscuous mode [ 364.529144][ T30] audit: type=1400 audit(1748291388.355:767): avc: denied { accept } for pid=9067 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 364.578685][ T8762] hsr_slave_1: entered promiscuous mode [ 364.606714][ T8762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.629234][ T30] audit: type=1400 audit(1748291388.815:768): avc: denied { create } for pid=9075 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 364.629785][ T8762] Cannot create hsr debugfs directory [ 364.660501][ T30] audit: type=1400 audit(1748291388.845:769): avc: denied { setopt } for pid=9075 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 364.681078][ T30] audit: type=1400 audit(1748291388.845:770): avc: denied { getopt } for pid=9075 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 364.968949][ T9074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.988262][ T6275] bridge_slave_1: left allmulticast mode [ 365.109574][ T6275] bridge_slave_1: left promiscuous mode [ 365.144358][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.311486][ T30] audit: type=1400 audit(1748291389.405:771): avc: denied { read } for pid=9079 comm="syz.0.777" path="socket:[19971]" dev="sockfs" ino=19971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.469476][ T6275] bridge_slave_0: left allmulticast mode [ 365.494226][ T6275] bridge_slave_0: left promiscuous mode [ 365.499905][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.440723][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.481200][ T9096] 9pnet_virtio: no channels available for device 127.0.0.1 [ 366.667885][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.790063][ T6275] bond0 (unregistering): Released all slaves [ 368.237155][ T30] audit: type=1400 audit(1748291392.425:772): avc: denied { bind } for pid=9106 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.702215][ T8768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 369.778441][ T8768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 370.835300][ T9138] /dev/nullb0: Can't open blockdev [ 371.351502][ T8768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 371.662054][ T8768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.358472][ T9161] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 373.497492][ T6275] hsr_slave_0: left promiscuous mode [ 373.517801][ T6275] hsr_slave_1: left promiscuous mode [ 373.623073][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.631507][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.639812][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.648485][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.713102][ T6275] veth1_macvtap: left promiscuous mode [ 373.718700][ T6275] veth0_macvtap: left promiscuous mode [ 373.724611][ T6275] veth1_vlan: left promiscuous mode [ 373.730822][ T6275] veth0_vlan: left promiscuous mode [ 374.411333][ T9176] netlink: 44 bytes leftover after parsing attributes in process `syz.2.798'. [ 375.581286][ T5868] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 376.780502][ T5868] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 376.797885][ T5868] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 376.826842][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 376.837142][ T5868] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 376.952745][ T5868] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 376.966456][ T5868] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 376.990941][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 376.999090][ T5868] usb 1-1: Product: syz [ 377.003435][ T5868] usb 1-1: Manufacturer: syz [ 377.459368][ T5868] cdc_wdm 1-1:1.0: skipping garbage [ 377.464885][ T5868] cdc_wdm 1-1:1.0: skipping garbage [ 377.476164][ T5868] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 377.577438][ T971] usb 1-1: USB disconnect, device number 12 [ 378.287910][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.337385][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.385951][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 378.420456][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 380.510993][ T5867] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 381.171122][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 381.202090][ T5867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.252232][ T5867] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 381.271446][ T5867] usb 1-1: config 1 has no interface number 1 [ 381.289991][ T5867] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 381.346275][ T5867] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.485138][ T5867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.501658][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.612659][ T5867] usb 1-1: Product: syz [ 381.627745][ T5867] usb 1-1: Manufacturer: syz [ 381.636534][ T30] audit: type=1400 audit(1748291405.835:773): avc: denied { write } for pid=9226 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 381.661056][ T5867] usb 1-1: SerialNumber: syz [ 381.665305][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.829613][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.039330][ T30] audit: type=1400 audit(1748291406.225:774): avc: denied { read write } for pid=9209 comm="syz.0.807" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 382.220747][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.227927][ T6769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.477541][ T30] audit: type=1400 audit(1748291406.225:775): avc: denied { open } for pid=9209 comm="syz.0.807" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 382.508168][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.515372][ T6769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.600744][ T5867] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 382.623277][ T5867] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 382.634290][ T5867] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 382.666165][ T5867] usb 1-1: USB disconnect, device number 13 [ 383.149265][ T6275] IPVS: stop unused estimator thread 0... [ 383.349114][ T8768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.372839][ T8768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.396117][ T7084] udevd[7084]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.674134][ T8762] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.726146][ T8762] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.811496][ T8762] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.841003][ T8762] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.010650][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.090605][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.226631][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.359642][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.366766][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.378870][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.386010][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.899141][ T9287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.818'. [ 386.044310][ T8762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.058088][ T8762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.841495][ T30] audit: type=1400 audit(1748291410.615:776): avc: denied { create } for pid=9288 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 387.174053][ T30] audit: type=1400 audit(1748291410.615:777): avc: denied { ioctl } for pid=9288 comm="syz.4.821" path="socket:[21233]" dev="sockfs" ino=21233 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 387.198604][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.284687][ T30] audit: type=1400 audit(1748291411.265:778): avc: denied { write } for pid=9289 comm="syz.2.822" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 387.350568][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.783281][ T8762] veth0_vlan: entered promiscuous mode [ 387.837484][ T8762] veth1_vlan: entered promiscuous mode [ 387.877780][ T8768] veth0_vlan: entered promiscuous mode [ 387.928986][ T8768] veth1_vlan: entered promiscuous mode [ 387.999248][ T8762] veth0_macvtap: entered promiscuous mode [ 388.044456][ T8762] veth1_macvtap: entered promiscuous mode [ 388.120324][ T8768] veth0_macvtap: entered promiscuous mode [ 388.282933][ T8768] veth1_macvtap: entered promiscuous mode [ 388.761131][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.077322][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.133526][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.150152][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.274389][ T9342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 389.558694][ T8762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.592147][ T8762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.602512][ T8762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.613431][ T8762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.946350][ T8768] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.990383][ T8768] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.024023][ T8768] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.043263][ T8768] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.195001][ T9350] overlayfs: failed to clone upperpath [ 391.177179][ T9358] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 391.767724][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.797847][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.816431][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.832909][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.235224][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.321039][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.497241][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.561208][ T9381] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.587117][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.621481][ T9370] netlink: 'syz.0.835': attribute type 33 has an invalid length. [ 392.629246][ T9370] netlink: 152 bytes leftover after parsing attributes in process `syz.0.835'. [ 393.091545][ T974] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 393.821918][ T30] audit: type=1400 audit(1748291417.275:779): avc: denied { getopt } for pid=9389 comm="syz.5.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 393.951358][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 393.980553][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.038653][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.141473][ T30] audit: type=1400 audit(1748291418.305:780): avc: denied { execute } for pid=9395 comm="syz.5.840" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 394.451358][ T974] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 394.610349][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.685388][ T974] usb 1-1: config 0 descriptor?? [ 394.787348][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.971166][ T30] audit: type=1400 audit(1748291419.155:781): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 394.997502][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.128613][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.171720][ T974] aquacomputer_d5next 0003:0C70:F00A.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.0-1/input0 [ 395.283920][ T9406] binder: BINDER_SET_CONTEXT_MGR already set [ 395.317930][ T9406] binder: 9404:9406 ioctl 4018620d 200000000040 returned -16 [ 395.536407][ T9412] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 395.620953][ T974] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 395.724010][ T9412] netlink: 'syz.0.839': attribute type 2 has an invalid length. [ 395.770548][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.897817][ T974] usb 6-1: Using ep0 maxpacket: 16 [ 395.926384][ T974] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.954800][ T974] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 395.993111][ T974] usb 6-1: config 1 has no interface number 1 [ 396.015971][ T974] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 396.055503][ T58] usb 1-1: USB disconnect, device number 14 [ 396.068558][ T974] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 396.135283][ T974] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.169040][ T974] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 396.229511][ T974] usb 6-1: Product: syz [ 396.259207][ T974] usb 6-1: Manufacturer: syz [ 396.300421][ T974] usb 6-1: SerialNumber: syz [ 396.843084][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 396.861677][ T52] bridge_slave_1: left allmulticast mode [ 396.867364][ T52] bridge_slave_1: left promiscuous mode [ 396.896089][ T974] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 396.907771][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.917031][ T974] usb 6-1: 2:1 : format type 23 is not supported yet [ 396.975919][ T974] usb 6-1: USB disconnect, device number 2 [ 397.082922][ T52] bridge_slave_0: left allmulticast mode [ 397.094828][ T7084] udevd[7084]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.115916][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.127026][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.147173][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.165953][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.168218][ T52] bridge_slave_0: left promiscuous mode [ 397.186381][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 397.341212][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.843672][ T9444] netlink: 'syz.5.846': attribute type 10 has an invalid length. [ 399.159662][ T30] audit: type=1400 audit(1748291423.345:782): avc: denied { connect } for pid=9448 comm="syz.2.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 399.518763][ T5820] Bluetooth: hci0: command tx timeout [ 401.531329][ T5820] Bluetooth: hci0: command tx timeout [ 402.110956][ T974] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 402.279242][ T30] audit: type=1400 audit(1748291426.465:783): avc: denied { mount } for pid=9457 comm="syz.2.850" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 402.559632][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.570950][ T974] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 402.579977][ T974] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 402.590648][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.599258][ T974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 402.609763][ T52] bond0 (unregistering): Released all slaves [ 403.141415][ T974] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.389677][ T974] usb 1-1: string descriptor 0 read error: -71 [ 403.414003][ T974] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.447367][ T974] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.649883][ T974] usb 1-1: can't set config #1, error -71 [ 403.936384][ T5820] Bluetooth: hci0: command tx timeout [ 404.060625][ T9444] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 404.070461][ T974] usb 1-1: USB disconnect, device number 15 [ 404.372527][ T9450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.421795][ T9471] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 404.429438][ T9471] netlink: 224 bytes leftover after parsing attributes in process `syz.0.853'. [ 404.492979][ T9428] lo speed is unknown, defaulting to 1000 [ 404.811520][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 404.972458][ T9428] lo speed is unknown, defaulting to 1000 [ 405.001475][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 405.025050][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.061459][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.089717][ T58] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 405.125354][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.153582][ T58] usb 6-1: config 0 descriptor?? [ 406.010952][ T5820] Bluetooth: hci0: command tx timeout [ 406.152006][ T58] aquacomputer_d5next 0003:0C70:F00A.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.5-1/input0 [ 406.261147][ T9476] netlink: 'syz.5.855': attribute type 1 has an invalid length. [ 406.268816][ T9476] netlink: 'syz.5.855': attribute type 2 has an invalid length. [ 406.551017][ T974] usb 6-1: USB disconnect, device number 3 [ 407.097976][ T52] hsr_slave_0: left promiscuous mode [ 407.122124][ T52] hsr_slave_1: left promiscuous mode [ 407.128489][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.145263][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.328331][ T9504] fido_id[9504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 407.330563][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.447269][ T30] audit: type=1400 audit(1748291431.615:784): avc: denied { create } for pid=9506 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 407.823587][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.905900][ T52] veth1_macvtap: left promiscuous mode [ 407.919324][ T52] veth0_macvtap: left promiscuous mode [ 407.925873][ T52] veth1_vlan: left promiscuous mode [ 407.933845][ T52] veth0_vlan: left promiscuous mode [ 408.107680][ T6275] Bluetooth: hci1: Frame reassembly failed (-84) [ 408.269960][ T30] audit: type=1400 audit(1748291432.455:785): avc: denied { getopt } for pid=9514 comm="syz.5.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 408.511615][ T5920] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 408.710939][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 409.181940][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.196258][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 409.209932][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 409.233144][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.251863][ T5920] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 409.264080][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.273784][ T5920] usb 6-1: Product: syz [ 409.278194][ T5920] usb 6-1: Manufacturer: syz [ 409.283619][ T5920] usb 6-1: SerialNumber: syz [ 409.300255][ T5920] usb 6-1: config 0 descriptor?? [ 409.546681][ T5920] rc_core: IR keymap rc-xbox-dvd not found [ 409.555469][ T5920] Registered IR keymap rc-empty [ 409.569959][ T5920] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 409.582599][ T5920] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 410.035696][ T52] team0 (unregistering): Port device team_slave_1 removed [ 410.092075][ T5831] Bluetooth: hci1: command 0x1003 tx timeout [ 410.098441][ T5820] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 410.178122][ T52] team0 (unregistering): Port device team_slave_0 removed [ 410.424099][ T30] audit: type=1400 audit(1748291434.605:786): avc: denied { wake_alarm } for pid=9533 comm="syz.4.867" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 411.769023][ T9511] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 411.770325][ T9515] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 411.873041][ T9543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 411.966925][ T9544] openvswitch: netlink: Message has 4 unknown bytes. [ 412.309509][ T974] usb 6-1: USB disconnect, device number 4 [ 412.309562][ C1] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 414.133968][ T9428] chnl_net:caif_netlink_parms(): no params data found [ 416.279576][ T30] audit: type=1400 audit(1748291440.425:787): avc: denied { block_suspend } for pid=9563 comm="syz.4.874" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 416.741694][ T5831] Bluetooth: hci0: command 0x0405 tx timeout [ 419.047724][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.060683][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.076392][ T9428] bridge_slave_0: entered allmulticast mode [ 419.491579][ T9428] bridge_slave_0: entered promiscuous mode [ 419.504269][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.512356][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.519540][ T9428] bridge_slave_1: entered allmulticast mode [ 419.539683][ T9428] bridge_slave_1: entered promiscuous mode [ 419.684866][ T9428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.805803][ T9428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.869847][ T9428] team0: Port device team_slave_0 added [ 420.368835][ T9428] team0: Port device team_slave_1 added [ 420.437232][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.444552][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.510937][ T9428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.638135][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.301661][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.355013][ T30] audit: type=1800 audit(1748291445.535:788): pid=9612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.879" name="bus" dev="ramfs" ino=23059 res=0 errno=0 [ 421.375908][ T9428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.508654][ T30] audit: type=1400 audit(1748291445.695:789): avc: denied { write } for pid=9620 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 421.570927][ T30] audit: type=1400 audit(1748291445.695:790): avc: denied { read } for pid=9620 comm="syz.0.881" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 421.720427][ T9428] hsr_slave_0: entered promiscuous mode [ 421.737531][ T9428] hsr_slave_1: entered promiscuous mode [ 421.767586][ T9428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.790424][ T9428] Cannot create hsr debugfs directory [ 422.724849][ T30] audit: type=1400 audit(1748291446.915:791): avc: denied { kexec_image_load } for pid=9627 comm="syz.5.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 423.471000][ T30] audit: type=1400 audit(1748291447.645:792): avc: denied { create } for pid=9641 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 424.531074][ T30] audit: type=1400 audit(1748291448.625:793): avc: denied { getopt } for pid=9652 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 426.510935][ T9362] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 427.334821][ T9428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.360925][ T9362] usb 1-1: Using ep0 maxpacket: 16 [ 427.555065][ T9428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.556449][ T9362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.575889][ T9428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.595528][ T9428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.637639][ T9362] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.892853][ T9362] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 428.011496][ T9362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.043832][ T9362] usb 1-1: config 0 descriptor?? [ 428.454175][ T9428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.518874][ T9428] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.545447][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.552618][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.585652][ T9362] aquacomputer_d5next 0003:0C70:F00A.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.0-1/input0 [ 428.985266][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.992459][ T6769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.129374][ T5867] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 431.681451][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 431.997118][ T9428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.015777][ T9428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.497189][ T5868] usb 1-1: USB disconnect, device number 16 [ 434.292285][ T9428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.467539][ T9428] veth0_vlan: entered promiscuous mode [ 434.543505][ T9428] veth1_vlan: entered promiscuous mode [ 434.700648][ T9428] veth0_macvtap: entered promiscuous mode [ 434.716751][ T9428] veth1_macvtap: entered promiscuous mode [ 434.897069][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.904'. [ 435.248458][ T9753] batadv_slave_0: entered promiscuous mode [ 435.257497][ T9753] macvtap1: entered allmulticast mode [ 435.262967][ T9753] batadv_slave_0: entered allmulticast mode [ 435.294151][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.366773][ T9749] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 435.474857][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.652742][ T30] audit: type=1400 audit(1748291459.765:794): avc: denied { read } for pid=9758 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 436.806358][ T9428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.871101][ T9428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.879847][ T9428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.905389][ T9428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.158649][ T6275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.180118][ T6275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.386870][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.395921][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.964639][ T30] audit: type=1400 audit(1748291462.155:795): avc: denied { listen } for pid=9775 comm="syz.0.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.584021][ T30] audit: type=1400 audit(1748291462.765:796): avc: denied { accept } for pid=9775 comm="syz.0.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.636373][ T9792] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 438.644418][ T9792] netlink: 'syz.4.911': attribute type 2 has an invalid length. [ 439.330430][ T30] audit: type=1400 audit(1748291463.035:797): avc: denied { accept } for pid=9786 comm="syz.5.910" lport=33475 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 439.353347][ T30] audit: type=1400 audit(1748291463.045:798): avc: denied { setopt } for pid=9786 comm="syz.5.910" lport=33475 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 439.427943][ T30] audit: type=1400 audit(1748291463.045:799): avc: denied { write } for pid=9786 comm="syz.5.910" lport=33475 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 439.565299][ T6099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.614556][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.624369][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.715764][ T6099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.970135][ T6099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.073058][ T6099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.642036][ T5867] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 442.057103][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 442.190939][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 442.217196][ T6099] bridge_slave_1: left allmulticast mode [ 442.250165][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.279669][ T6099] bridge_slave_1: left promiscuous mode [ 442.293641][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.297171][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.321501][ T9838] netlink: 56 bytes leftover after parsing attributes in process `syz.4.916'. [ 442.342928][ T30] audit: type=1400 audit(1748291466.505:800): avc: denied { create } for pid=9837 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 442.377039][ T6099] bridge_slave_0: left allmulticast mode [ 442.390931][ T6099] bridge_slave_0: left promiscuous mode [ 442.396747][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.401019][ T5867] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 442.532310][ T30] audit: type=1400 audit(1748291466.515:801): avc: denied { write } for pid=9837 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 442.533589][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.654630][ T30] audit: type=1400 audit(1748291466.825:802): avc: denied { mount } for pid=9839 comm="syz.0.917" name="/" dev="rpc_pipefs" ino=23525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 442.978696][ T5867] usb 6-1: config 0 descriptor?? [ 443.122955][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.328248][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 443.375745][ T30] audit: type=1400 audit(1748291467.475:803): avc: denied { setopt } for pid=9842 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 443.614892][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 443.643657][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.652414][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 443.679094][ T5867] usbhid 6-1:0.0: can't add hid device: -71 [ 443.686915][ T5867] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 443.725506][ T5867] usb 6-1: USB disconnect, device number 6 [ 444.028031][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 444.654721][ T9861] rdma_rxe: rxe_newlink: failed to add lo [ 445.709273][ T5820] Bluetooth: hci0: command tx timeout [ 445.805515][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.824965][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.842850][ T6099] bond0 (unregistering): Released all slaves [ 446.532464][ T9846] lo speed is unknown, defaulting to 1000 [ 446.557415][ T2955] Bluetooth: hci1: Frame reassembly failed (-84) [ 447.055374][ T9880] syz.5.923: attempt to access beyond end of device [ 447.055374][ T9880] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 447.069069][ T9880] FAT-fs (loop11): unable to read boot sector [ 447.109948][ T30] audit: type=1400 audit(1748291471.225:804): avc: denied { create } for pid=9870 comm="syz.5.923" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 447.333956][ T30] audit: type=1400 audit(1748291471.235:805): avc: denied { mounton } for pid=9870 comm="syz.5.923" path="/22/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 447.475390][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.923'. [ 447.549465][ T9846] lo speed is unknown, defaulting to 1000 [ 447.582882][ T30] audit: type=1400 audit(1748291471.755:806): avc: denied { unlink } for pid=8768 comm="syz-executor" name="file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 447.783290][ T5822] Bluetooth: hci0: command tx timeout [ 447.791154][ T9893] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 448.333755][ T9900] 9pnet_virtio: no channels available for device syz [ 448.434327][ T5822] Bluetooth: hci1: command 0x1003 tx timeout [ 448.440764][ T5820] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 449.401279][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.929'. [ 449.869956][ T5820] Bluetooth: hci0: command tx timeout [ 450.150495][ T6099] hsr_slave_0: left promiscuous mode [ 450.166976][ T6099] hsr_slave_1: left promiscuous mode [ 450.176261][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.184739][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.193476][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.202228][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.236055][ T6099] veth1_macvtap: left promiscuous mode [ 450.242889][ T6099] veth0_macvtap: left promiscuous mode [ 450.256684][ T6099] veth1_vlan: left promiscuous mode [ 450.262859][ T6099] veth0_vlan: left promiscuous mode [ 451.940876][ T5820] Bluetooth: hci0: command tx timeout [ 453.277411][ T30] audit: type=1400 audit(1748291477.465:807): avc: denied { write } for pid=9953 comm="syz.4.938" name="file0" dev="tmpfs" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 453.328455][ T30] audit: type=1400 audit(1748291477.465:808): avc: denied { open } for pid=9953 comm="syz.4.938" path="/271/file0" dev="tmpfs" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 453.780619][ T30] audit: type=1400 audit(1748291477.845:809): avc: denied { ioctl } for pid=9953 comm="syz.4.938" path="/271/file0" dev="tmpfs" ino=1465 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 454.457326][ T30] audit: type=1400 audit(1748291478.645:810): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 455.377921][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 455.417695][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 456.228066][ T9930] lo: entered allmulticast mode [ 456.233253][ T9930] tunl0: entered allmulticast mode [ 456.238589][ T9930] gre0: entered allmulticast mode [ 456.263237][ T9930] gretap0: entered allmulticast mode [ 456.269395][ T9930] erspan0: entered allmulticast mode [ 456.276869][ T9930] ip_vti0: entered allmulticast mode [ 456.283848][ T9930] ip6_vti0: entered allmulticast mode [ 456.290128][ T9930] sit0: entered allmulticast mode [ 456.324615][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 456.460362][ T30] audit: type=1400 audit(1748291480.505:811): avc: denied { setopt } for pid=9976 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 456.482733][ T9930] ip6tnl0: entered allmulticast mode [ 456.523503][ T9930] ip6gre0: entered allmulticast mode [ 456.550641][ T9930] syz_tun: entered allmulticast mode [ 456.611153][ T9930] ip6gretap0: entered allmulticast mode [ 456.627977][ T9930] vcan0: entered allmulticast mode [ 456.633380][ T9930] bond0: entered allmulticast mode [ 456.638587][ T9930] bond_slave_0: entered allmulticast mode [ 456.645242][ T9930] bond_slave_1: entered allmulticast mode [ 456.651836][ T9930] team0: entered allmulticast mode [ 456.657010][ T9930] team_slave_0: entered allmulticast mode [ 456.663332][ T9930] team_slave_1: entered allmulticast mode [ 456.669057][ T9930] geneve0: entered allmulticast mode [ 456.674658][ T9930] dummy0: entered allmulticast mode [ 456.679945][ T9930] nlmon0: entered allmulticast mode [ 456.686251][ T9930] caif0: entered allmulticast mode [ 456.691575][ T9930] batadv0: entered allmulticast mode [ 456.696981][ T9930] vxcan0: entered allmulticast mode [ 456.702317][ T9930] vxcan1: entered allmulticast mode [ 456.707753][ T9930] veth0: entered allmulticast mode [ 456.713164][ T9930] veth1: entered allmulticast mode [ 456.718342][ T9930] wg0: entered allmulticast mode [ 456.723441][ T9930] wg1: entered allmulticast mode [ 456.728528][ T9930] wg2: entered allmulticast mode [ 456.733777][ T9930] veth0_to_bridge: entered allmulticast mode [ 456.739902][ T9930] bridge_slave_0: entered allmulticast mode [ 456.745972][ T9930] veth1_to_bridge: entered allmulticast mode [ 456.752134][ T9930] bridge_slave_1: entered allmulticast mode [ 456.758122][ T9930] veth0_to_bond: entered allmulticast mode [ 456.764240][ T9930] veth1_to_bond: entered allmulticast mode [ 456.770183][ T9930] veth0_to_team: entered allmulticast mode [ 456.776294][ T9930] veth1_to_team: entered allmulticast mode [ 456.782305][ T9930] veth0_to_batadv: entered allmulticast mode [ 456.789206][ T9930] batadv_slave_0: entered allmulticast mode [ 456.795504][ T9930] veth1_to_batadv: entered allmulticast mode [ 456.801612][ T9930] batadv_slave_1: entered allmulticast mode [ 456.807607][ T9930] xfrm0: entered allmulticast mode [ 456.812903][ T9930] veth0_to_hsr: entered allmulticast mode [ 456.818807][ T9930] hsr_slave_0: entered allmulticast mode [ 456.824732][ T9930] veth1_to_hsr: entered allmulticast mode [ 456.830614][ T9930] hsr_slave_1: entered allmulticast mode [ 456.836453][ T9930] hsr0: entered allmulticast mode [ 456.841646][ T9930] veth1_virt_wifi: entered allmulticast mode [ 456.847803][ T9930] veth0_virt_wifi: entered allmulticast mode [ 456.854048][ T9930] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 456.861531][ T9930] veth1_macvtap: entered allmulticast mode [ 456.884251][ T9930] veth0_macvtap: entered allmulticast mode [ 456.893497][ T9930] macvtap0: entered allmulticast mode [ 456.899105][ T9930] macsec0: entered allmulticast mode [ 456.908074][ T9930] geneve1: entered allmulticast mode [ 456.915203][ T9930] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 456.927874][ T9930] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 456.937523][ T9930] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 456.948574][ T9930] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 456.958241][ T9930] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 456.968941][ T9930] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 456.994301][ T9930] : entered allmulticast mode [ 456.999244][ T9930] macvtap1: left promiscuous mode [ 457.043394][ T9846] chnl_net:caif_netlink_parms(): no params data found [ 457.461061][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 457.570095][ T30] audit: type=1400 audit(1748291481.755:812): avc: denied { connect } for pid=9982 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 457.596788][ T9997] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 457.640223][ T9846] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.682585][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.695337][ T9846] bridge_slave_0: entered allmulticast mode [ 457.729495][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 457.734543][ T9846] bridge_slave_0: entered promiscuous mode [ 458.073325][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.084326][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.095230][ T9846] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.106522][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.113658][ T5867] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 458.113686][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.116814][ T5867] usb 6-1: config 0 descriptor?? [ 458.124780][ T9846] bridge_slave_1: entered allmulticast mode [ 458.149095][ T9846] bridge_slave_1: entered promiscuous mode [ 458.447334][ T9846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.478842][ T9846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.684008][ T9846] team0: Port device team_slave_0 added [ 458.691752][ T5867] aquacomputer_d5next 0003:0C70:F00A.0008: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.5-1/input0 [ 458.708845][ T9846] team0: Port device team_slave_1 added [ 459.111540][ T58] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 459.269177][T10010] netlink: 'syz.5.945': attribute type 1 has an invalid length. [ 459.277083][T10010] netlink: 'syz.5.945': attribute type 2 has an invalid length. [ 459.321745][ T58] usb 1-1: device descriptor read/64, error -71 [ 459.677737][ T9846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.691582][ T58] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 459.715080][ T9846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.745486][ T9846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.768421][ T971] usb 6-1: USB disconnect, device number 7 [ 459.769059][ T9846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.783325][ T9846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.812945][ T9846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.831864][ T58] usb 1-1: device descriptor read/64, error -71 [ 459.866241][ T30] audit: type=1400 audit(1748291484.055:813): avc: denied { bind } for pid=10013 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 459.951846][ T58] usb usb1-port1: attempt power cycle [ 459.984691][ T9846] hsr_slave_0: entered promiscuous mode [ 459.993969][ T9846] hsr_slave_1: entered promiscuous mode [ 460.000764][ T9846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.016724][ T9846] Cannot create hsr debugfs directory [ 460.303976][ T58] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 460.341607][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 460.398588][ T58] usb 1-1: device descriptor read/8, error -71 [ 461.282926][ T58] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 461.406313][ T58] usb 1-1: device descriptor read/8, error -71 [ 461.646696][ T58] usb usb1-port1: unable to enumerate USB device [ 461.653737][ T30] audit: type=1400 audit(1748291485.805:814): avc: denied { create } for pid=10044 comm="syz.5.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 462.221786][ T30] audit: type=1400 audit(1748291486.405:815): avc: denied { read } for pid=10046 comm="syz.4.956" lport=38733 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 463.146999][T10060] xt_TPROXY: Can be used only with -p tcp or -p udp [ 463.400035][ T9846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 463.505861][ T30] audit: type=1400 audit(1748291487.685:816): avc: denied { read } for pid=10062 comm="syz.5.958" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 463.581688][ T9846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 463.635738][T10068] netlink: 'syz.5.958': attribute type 2 has an invalid length. [ 463.698987][ T9846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.855361][ T5868] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 463.886709][ T9846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 464.091410][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 464.268468][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.293174][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.463362][ T5868] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 464.502170][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.725507][ T5868] usb 1-1: config 0 descriptor?? [ 464.988916][ T9846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.008774][ T9846] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.042796][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.049938][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.025375][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.032526][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.581458][T10098] overlayfs: failed to clone upperpath [ 467.181232][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 467.188926][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 467.211995][ T5868] usb 1-1: USB disconnect, device number 21 [ 467.426263][ T30] audit: type=1400 audit(1748291491.605:817): avc: denied { create } for pid=10101 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 467.461248][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 467.732456][T10115] 9pnet_fd: Insufficient options for proto=fd [ 468.121471][T10112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10112 comm=syz.2.967 [ 468.150982][T10112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 468.759457][ T30] audit: type=1400 audit(1748291492.918:818): avc: denied { write } for pid=10104 comm="syz.4.966" path="socket:[25893]" dev="sockfs" ino=25893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 468.827365][T10118] block nbd5: shutting down sockets [ 469.034121][ T5820] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 469.857432][ T9846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.451480][T10138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.504137][T10138] input: syz1 as /devices/virtual/input/input13 [ 470.974778][ T30] audit: type=1400 audit(1748291494.555:819): avc: denied { ioctl } for pid=10128 comm="syz.5.970" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 471.152580][ T9846] veth0_vlan: entered promiscuous mode [ 471.485875][T10147] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 471.936655][ T9846] veth1_vlan: entered promiscuous mode [ 471.975267][ T9846] veth0_macvtap: entered promiscuous mode [ 472.410814][ T9846] veth1_macvtap: entered promiscuous mode [ 473.108177][ T9846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.142545][ T30] audit: type=1400 audit(1748291497.015:820): avc: denied { write } for pid=10151 comm="syz.0.976" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 473.236567][T10161] netlink: 'syz.0.976': attribute type 4 has an invalid length. [ 473.241181][ T9846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.367344][ T5820] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 473.430390][ T5820] Bluetooth: hci3: Injecting HCI hardware error event [ 473.441112][ T5820] Bluetooth: hci3: hardware error 0x00 [ 473.693524][ T9846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.724539][ T9846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.197100][ T9846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.206804][ T9846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.082710][ T30] audit: type=1400 audit(1748291498.848:821): avc: denied { read } for pid=10178 comm="syz.4.980" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 475.111151][ T6769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.172296][ T6769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.284890][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.323956][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.387028][ T5822] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 476.545779][ T5820] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 478.980527][ T30] audit: type=1400 audit(1748291501.074:822): avc: denied { read } for pid=10228 comm="syz.0.987" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 479.005565][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.069589][ T30] audit: type=1400 audit(1748291501.074:823): avc: denied { open } for pid=10228 comm="syz.0.987" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 479.096355][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.597509][ T30] audit: type=1400 audit(1748291504.002:824): avc: denied { bind } for pid=10243 comm="syz.2.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 480.858810][ T30] audit: type=1400 audit(1748291504.012:825): avc: denied { getopt } for pid=10243 comm="syz.2.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 481.867338][ T2955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.011331][T10246] bridge0: port 5(gretap0) entered blocking state [ 482.039238][T10246] bridge0: port 5(gretap0) entered disabled state [ 482.089602][T10246] gretap0: entered allmulticast mode [ 482.100550][T10246] gretap0: entered promiscuous mode [ 482.113052][T10246] bridge0: port 5(gretap0) entered blocking state [ 482.119597][T10246] bridge0: port 5(gretap0) entered forwarding state [ 482.193377][ T2955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.260960][ T2955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.364170][ T2955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.499878][ T2955] bridge_slave_1: left allmulticast mode [ 482.505564][ T2955] bridge_slave_1: left promiscuous mode [ 482.530515][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.583851][ T2955] bridge_slave_0: left allmulticast mode [ 482.600451][ T2955] bridge_slave_0: left promiscuous mode [ 482.618257][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.655390][T10296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 483.854359][T10300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.998'. [ 483.925819][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 483.957079][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.006695][T10308] siw: device registration error -23 [ 484.047095][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.054207][ T30] audit: type=1400 audit(1748291507.239:826): avc: denied { read } for pid=10299 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 484.286273][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.294302][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.537636][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.548902][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.559159][ T2955] bond0 (unregistering): Released all slaves [ 484.649174][T10302] lo speed is unknown, defaulting to 1000 [ 484.728903][T10315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 485.404819][T10184] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 486.035620][T10184] usb 1-1: Using ep0 maxpacket: 16 [ 486.187670][T10184] usb 1-1: config 8 has an invalid interface number: 145 but max is 0 [ 486.283721][T10184] usb 1-1: config 8 has no interface number 0 [ 486.289865][T10184] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xF has invalid maxpacket 1088, setting to 64 [ 486.387171][T10184] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 486.436577][ T30] audit: type=1400 audit(1748291509.465:827): avc: denied { map } for pid=10331 comm="syz.5.1003" path="socket:[26645]" dev="sockfs" ino=26645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 486.471693][T10184] usb 1-1: config 8 interface 145 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 486.493913][T10184] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 486.604755][ T30] audit: type=1400 audit(1748291509.465:828): avc: denied { read append } for pid=10331 comm="syz.5.1003" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 486.649775][T10184] usb 1-1: config 8 interface 145 has no altsetting 0 [ 486.658165][ T5822] Bluetooth: hci0: command tx timeout [ 486.712764][T10302] lo speed is unknown, defaulting to 1000 [ 486.898836][T10184] usb 1-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=37.4b [ 486.912988][ T30] audit: type=1400 audit(1748291509.465:829): avc: denied { listen } for pid=10331 comm="syz.5.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 487.026800][T10184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.035004][T10184] usb 1-1: Product: syz [ 487.039248][T10184] usb 1-1: Manufacturer: syz [ 487.043935][T10184] usb 1-1: SerialNumber: syz [ 487.251997][ T30] audit: type=1400 audit(1748291509.558:830): avc: denied { ioctl } for pid=10344 comm="syz.2.1005" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 488.172179][T10358] 9pnet: Could not find request transport: rdÝÂ’šúü0n:x000000-Š$?404eÿ [ 488.200497][T10184] usb 1-1: USB disconnect, device number 22 [ 488.713061][T10371] dvmrp8: entered allmulticast mode [ 488.847203][ T5822] Bluetooth: hci0: command tx timeout [ 488.873908][ T2955] hsr_slave_0: left promiscuous mode [ 488.902080][ T2955] hsr_slave_1: left promiscuous mode [ 488.908024][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.931934][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.940764][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.948846][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.968990][ T2955] veth1_macvtap: left promiscuous mode [ 489.037376][ T2955] veth0_macvtap: left promiscuous mode [ 489.043856][ T2955] veth1_vlan: left promiscuous mode [ 489.050635][ T2955] veth0_vlan: left promiscuous mode [ 489.057763][T10378] Invalid source name [ 491.070832][ T5822] Bluetooth: hci0: command tx timeout [ 493.294463][ T5822] Bluetooth: hci0: command tx timeout [ 503.451149][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.457441][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.987071][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.993352][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.152136][ T31] sched: DL replenish lagged too much [ 602.392042][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 602.399011][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10320/1:b..l P5867/1:b..l [ 602.408561][ C1] rcu: (detected by 1, t=10502 jiffies, g=31745, q=1217 ncpus=2) [ 602.416338][ C1] task:kworker/0:4 state:R running task stack:22376 pid:5867 tgid:5867 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 602.430421][ C1] Workqueue: events free_obj_work [ 602.435451][ C1] Call Trace: [ 602.438709][ C1] [ 602.441620][ C1] __schedule+0x116f/0x5de0 [ 602.446117][ C1] ? __pfx___schedule+0x10/0x10 [ 602.450960][ C1] ? mark_held_locks+0x49/0x80 [ 602.455721][ C1] preempt_schedule_irq+0x51/0x90 [ 602.460726][ C1] irqentry_exit+0x36/0x90 [ 602.465120][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 602.471079][ C1] RIP: 0010:unwind_next_frame+0xa36/0x20a0 [ 602.476864][ C1] Code: 65 0c 00 0f 84 6d f9 ff ff 80 3d 44 9f 40 12 00 0f 85 60 f9 ff ff 4c 89 ef c6 05 34 9f 40 12 01 e8 cf f0 ff ff e9 4c f9 ff ff 65 0c 37 00 84 c0 0f 85 9c f6 ff ff e8 e8 52 03 0a 85 c0 0f 84 [ 602.496457][ C1] RSP: 0018:ffffc9000b15f6c8 EFLAGS: 00000202 [ 602.502516][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 00000000969a51c3 [ 602.510464][ C1] RDX: ffffffff8169da1d RSI: ffffffff8dbbee3b RDI: ffffffff8bf4a4a0 [ 602.518411][ C1] RBP: ffffc9000b15f7d0 R08: 6cf1d145b5a2467e R09: 0000000000000000 [ 602.526357][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: fffff5200162bef3 [ 602.534304][ C1] R13: ffffc9000b15f788 R14: ffffc9000b15f788 R15: ffffc9000b15f790 [ 602.542255][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 602.547352][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 602.552448][ C1] ? arch_stack_walk+0x73/0x100 [ 602.557292][ C1] __unwind_start+0x45f/0x7f0 [ 602.561950][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 602.568085][ C1] arch_stack_walk+0x73/0x100 [ 602.572740][ C1] ? arch_stack_walk+0x73/0x100 [ 602.577571][ C1] stack_trace_save+0x8e/0xc0 [ 602.582227][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 602.587579][ C1] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 602.593192][ C1] kasan_save_stack+0x33/0x60 [ 602.597865][ C1] kasan_save_track+0x14/0x30 [ 602.602515][ C1] kasan_save_free_info+0x3b/0x60 [ 602.607518][ C1] __kasan_slab_free+0x51/0x70 [ 602.612271][ C1] kmem_cache_free+0x2d4/0x4d0 [ 602.617024][ C1] ? free_object_list.isra.0+0xf8/0x2a0 [ 602.622548][ C1] free_object_list.isra.0+0xf8/0x2a0 [ 602.627895][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 602.633680][ C1] free_obj_work+0x18c/0x390 [ 602.638246][ C1] ? __pfx_free_obj_work+0x10/0x10 [ 602.643332][ C1] ? rcu_is_watching+0x12/0xc0 [ 602.648075][ C1] process_one_work+0x9cf/0x1b70 [ 602.652993][ C1] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 602.659474][ C1] ? __pfx_process_one_work+0x10/0x10 [ 602.664825][ C1] ? assign_work+0x1a0/0x250 [ 602.669393][ C1] worker_thread+0x6c8/0xf10 [ 602.673965][ C1] ? __kthread_parkme+0x19e/0x250 [ 602.678971][ C1] ? __pfx_worker_thread+0x10/0x10 [ 602.684061][ C1] kthread+0x3c2/0x780 [ 602.688106][ C1] ? __pfx_kthread+0x10/0x10 [ 602.692669][ C1] ? __pfx_kthread+0x10/0x10 [ 602.697233][ C1] ? __pfx_kthread+0x10/0x10 [ 602.701796][ C1] ? __pfx_kthread+0x10/0x10 [ 602.706362][ C1] ? rcu_is_watching+0x12/0xc0 [ 602.711118][ C1] ? __pfx_kthread+0x10/0x10 [ 602.715683][ C1] ret_from_fork+0x45/0x80 [ 602.720073][ C1] ? __pfx_kthread+0x10/0x10 [ 602.724638][ C1] ret_from_fork_asm+0x1a/0x30 [ 602.729388][ C1] [ 602.732386][ C1] task:syz.0.1001 state:R running task stack:28072 pid:10320 tgid:10316 ppid:5816 task_flags:0x40054c flags:0x00004000 [ 602.745830][ C1] Call Trace: [ 602.749086][ C1] [ 602.752009][ C1] __schedule+0x116f/0x5de0 [ 602.756494][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 602.761683][ C1] ? write_profile+0xb0/0x150 [ 602.766343][ C1] ? __pfx___schedule+0x10/0x10 [ 602.771176][ C1] ? mark_held_locks+0x49/0x80 [ 602.775937][ C1] preempt_schedule_irq+0x51/0x90 [ 602.780963][ C1] irqentry_exit+0x36/0x90 [ 602.785360][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 602.790797][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 602.796837][ C1] Code: 06 60 55 00 48 89 df 5b e9 8d bc 5a 00 be 03 00 00 00 5b e9 12 fa 15 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 18 1a e9 11 65 8b 05 29 1a e9 [ 602.816419][ C1] RSP: 0018:ffffc90004fb7918 EFLAGS: 00000206 [ 602.822461][ C1] RAX: 0000000000000000 RBX: ffff88801e494430 RCX: ffffffff822ab2c3 [ 602.830408][ C1] RDX: ffff88802c218000 RSI: 0000000000000000 RDI: 0000000000000005 [ 602.838353][ C1] RBP: 0000000000000007 R08: 0000000000000005 R09: 0000000000000000 [ 602.846318][ C1] R10: 0000000001e602d4 R11: 0000000000000000 R12: 0000000001e602d4 [ 602.854275][ C1] R13: 0000000000000008 R14: ffff88801e494438 R15: 0000000000000003 [ 602.862239][ C1] ? __update_page_owner_free_handle.constprop.0+0x153/0x470 [ 602.869617][ C1] __update_page_owner_free_handle.constprop.0+0x15d/0x470 [ 602.876794][ C1] __reset_page_owner+0x93/0x1a0 [ 602.881710][ C1] __free_frozen_pages+0x69d/0xff0 [ 602.886815][ C1] qlist_free_all+0x4e/0x120 [ 602.891394][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 602.896838][ C1] __kasan_slab_alloc+0x69/0x90 [ 602.901668][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 602.907111][ C1] ? __pfx_acct_collect+0x10/0x10 [ 602.912110][ C1] ? taskstats_exit+0x654/0xbe0 [ 602.916937][ C1] taskstats_exit+0x654/0xbe0 [ 602.921590][ C1] ? __pfx_taskstats_exit+0x10/0x10 [ 602.926767][ C1] do_exit+0x85f/0x2c30 [ 602.930902][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 602.936170][ C1] ? __pfx_do_exit+0x10/0x10 [ 602.940744][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 602.945743][ C1] ? find_held_lock+0x2b/0x80 [ 602.950399][ C1] do_group_exit+0xd3/0x2a0 [ 602.954882][ C1] get_signal+0x2673/0x26d0 [ 602.959370][ C1] ? __pfx_get_signal+0x10/0x10 [ 602.964199][ C1] ? do_futex+0x122/0x350 [ 602.968508][ C1] ? __pfx_do_futex+0x10/0x10 [ 602.973164][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 602.978689][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 602.984827][ C1] ? rcu_is_watching+0x12/0xc0 [ 602.989571][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 602.995185][ C1] do_syscall_64+0xda/0x260 [ 602.999673][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.005543][ C1] RIP: 0033:0x7f494d18e969 [ 603.009948][ C1] RSP: 002b:00007f494df210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 603.018334][ C1] RAX: fffffffffffffe00 RBX: 00007f494d3b6088 RCX: 00007f494d18e969 [ 603.026283][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f494d3b6088 [ 603.034353][ C1] RBP: 00007f494d3b6080 R08: 0000000000000000 R09: 0000000000000000 [ 603.042317][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f494d3b608c [ 603.050271][ C1] R13: 0000000000000000 R14: 00007ffec4eca000 R15: 00007ffec4eca0e8 [ 603.058238][ C1]