last executing test programs: 2m42.111113747s ago: executing program 0 (id=1526): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4008080, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0xfff}, {@local, 0x10000}, 0x400, "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"}, 0x418, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x80, 0x10000, 0x6, 0xc6, 0x4, 0x7, 0x3, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xb4, 0xfe, 0x2, 0xfff, 0x1, 0x1000001, 0x1000001, 0x15f}}) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, &(0x7f0000000140)={0xffffffffffffffff, 0x26, 0x3}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'TPROXY\x00'}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f00000002c0)=0x6d, 0x4) getpeername(r1, &(0x7f0000000400)=@in={0x2, 0x0, @empty}, &(0x7f0000000280)=0x80) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000200)="f1ab9fe0", 0x4}], 0x1) read(r0, &(0x7f0000000300)=""/215, 0xd7) 2m39.615132598s ago: executing program 0 (id=1531): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 2m35.744750091s ago: executing program 0 (id=1542): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x7ffe}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2m33.69310572s ago: executing program 0 (id=1548): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r0 = socket(0x1e, 0x2, 0xfffffffe) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0xf00, 0x0, 0x0, 0xfffffdcf) 2m27.093187949s ago: executing program 0 (id=1560): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) ptrace(0x4208, 0x0) ptrace(0x4207, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) memfd_secret(0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) 2m24.297009092s ago: executing program 0 (id=1568): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r8, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}, {0x8, 0xb, 0xe}, {0x6}, {0x5, 0x12, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040055}, 0x10880) ioctl$NBD_DO_IT(r0, 0xab03) 2m8.853422444s ago: executing program 32 (id=1568): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r8, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}, {0x8, 0xb, 0xe}, {0x6}, {0x5, 0x12, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040055}, 0x10880) ioctl$NBD_DO_IT(r0, 0xab03) 1m50.339239408s ago: executing program 5 (id=1601): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0xf011, 0xb77, 0x2016, 0x6, 0x2, 0x3, 0x3, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$l2tp6(0xa, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 1m26.791632886s ago: executing program 5 (id=1601): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0xf011, 0xb77, 0x2016, 0x6, 0x2, 0x3, 0x3, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$l2tp6(0xa, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 1m7.249434593s ago: executing program 5 (id=1601): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0xf011, 0xb77, 0x2016, 0x6, 0x2, 0x3, 0x3, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$l2tp6(0xa, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 48.824667574s ago: executing program 5 (id=1601): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0xf011, 0xb77, 0x2016, 0x6, 0x2, 0x3, 0x3, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$l2tp6(0xa, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 31.609574787s ago: executing program 5 (id=1601): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0xf011, 0xb77, 0x2016, 0x6, 0x2, 0x3, 0x3, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$l2tp6(0xa, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 13.995915645s ago: executing program 2 (id=1843): mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x8, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) read$midi(0xffffffffffffffff, &(0x7f0000003e00)=""/75, 0x4b) 10.114131426s ago: executing program 2 (id=1849): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000340)=@ethtool_rxnfc={0x2f, 0x10, 0x0, {0xd, @tcp_ip4_spec={@empty, @rand_addr=0x64010102, 0x4e22, 0x4e22, 0x3}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x2, 0x1, [0xad59, 0x400]}, @sctp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x4e20, 0x4e21, 0x8}, {0x0, @empty, 0x100, 0x10, [0x5, 0x9]}, 0x100000001, 0x286c}}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000001300), 0x0, 0x8}, 0x20) io_setup(0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x66fc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_macvtap\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 9.819480629s ago: executing program 5 (id=1601): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0xf011, 0xb77, 0x2016, 0x6, 0x2, 0x3, 0x3, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$l2tp6(0xa, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 8.347755587s ago: executing program 2 (id=1851): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) dup2(r3, r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.280457317s ago: executing program 3 (id=1853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0xcd, 0x0, 0x12, "100056f200"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x8, 0x0, 0x0}}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000002c0)=[{{0x80000000, 0x0}}, {{0x80000000}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000001c0)={{r8, r7, 0x1, [0x104, 0xf7df]}, {r9, r10, 0x4, [0x6, 0xfffff7ff]}, 0x2, [0x2, 0x3]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.800720505s ago: executing program 1 (id=1857): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r3, 0x0, 0x0, 0x80800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, r0, 0xbe9f5000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000004) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000100)=0x5) 6.546861005s ago: executing program 2 (id=1858): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000f43000/0x3000)=nil, 0x3000, 0x16) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x8005, 0x5, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) ioctl$COMEDI_DEVINFO(r2, 0x80b06401, &(0x7f00000000c0)) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x80000001}, 0x31) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x4b58, 0x5040, 0x1000000, 0xf7}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x50104100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0) 6.176478363s ago: executing program 3 (id=1859): syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) close(0xffffffffffffffff) getpid() syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.574963342s ago: executing program 1 (id=1860): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x7ff, 0x8001, 0x1, 0x9, 0x6}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03084003158cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 4.507441839s ago: executing program 1 (id=1861): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x1005) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82d", 0x11) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) msgget(0x3, 0x710) msgctl$IPC_RMID(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000180)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 4.124189215s ago: executing program 1 (id=1862): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 3.462670783s ago: executing program 4 (id=1863): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r2, 0x10, 0x101}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 3.09566901s ago: executing program 3 (id=1864): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) connect$unix(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) 3.095404878s ago: executing program 4 (id=1865): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000180)) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) 3.094943836s ago: executing program 1 (id=1874): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 3.094256842s ago: executing program 2 (id=1866): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000001000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) close(0x3) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006115600000000000180000000000000000000000000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fdb617c60d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dbe816b89f7cb81bff81a8b9482565856555ee923c6597385b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078290d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be0400"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.11260371s ago: executing program 4 (id=1867): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xc, 0x1, 0x56555941, 0x5, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) fanotify_init(0x40, 0x800) connect$llc(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) syz_clone3(&(0x7f0000000540)={0x80000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000180), {0x1b}, &(0x7f0000000480)=""/153, 0x99, &(0x7f0000000c80)=""/4096, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) sched_setscheduler(r4, 0x3, &(0x7f0000000300)=0x9) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) 1.917103162s ago: executing program 3 (id=1868): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x70}}, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60002, 0x0, 0x13, r2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)) syz_io_uring_setup(0x641a, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x2, 0x5) shutdown(r1, 0x0) epoll_create1(0x80000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 1.866028028s ago: executing program 4 (id=1869): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, 0x0, 0x0, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x3, 0x4, 0x0, r2, 0x3}, 0x50) semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500"], 0x64}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) getpgid(r0) 1.670809597s ago: executing program 3 (id=1870): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x3ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0xffffffff, 0x6, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @empty}}}}) syz_emit_ethernet(0x62, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, &(0x7f00000010c0)=""/4111) 1.648337118s ago: executing program 2 (id=1871): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) inotify_init1(0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000001c0)={0x3, 0x6, 0x1, {0x2, @sliced={0x802, [0x4, 0x9, 0x84c, 0xc289, 0x8, 0xfe1b, 0x6, 0x4, 0x4, 0xf, 0xf3, 0x1fc, 0x8, 0x5, 0xe2, 0x4, 0xad9, 0x6bed, 0xffff, 0x7, 0x4, 0x1, 0x3, 0x2, 0xfff8, 0x6, 0x6, 0xa, 0x5, 0x1, 0x4, 0x1, 0x5, 0xff, 0x400, 0x3, 0x0, 0x3, 0xcbe, 0xf, 0x2, 0x5e, 0x9, 0x1, 0x0, 0x8, 0x1, 0x7fff], 0xfffffddc}}, 0xfffffe01}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 1.638005893s ago: executing program 4 (id=1872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d15", 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0x11, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) shutdown(r5, 0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="64796e2c6175746f63656cffff00"]) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 331.64782ms ago: executing program 3 (id=1873): r0 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) r2 = fsopen(&(0x7f0000000100)='bdev\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x28000600) r5 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = fsmount(r5, 0x0, 0x8e) unshare(0x8000280) openat(r6, &(0x7f0000000100)='./file1\x00', 0x189042, 0x1a0) 227.966644ms ago: executing program 1 (id=1875): r0 = socket(0x10, 0x2, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a00060008061100000000000a00060008021100000000000a000600ffffffffffff0000aba7745d679651a00f5697fb397cd600005e6f7426c16ac20b48dd0351e2386f58ecd376"], 0x40}, 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = syz_io_uring_setup(0x7dc9, 0x0, &(0x7f0000000140), &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r10 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r10}, &(0x7f0000000080)) read$FUSE(r9, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) poll(&(0x7f00000000c0)=[{r9, 0x400}], 0x1, 0xfffffffa) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x40f8, 0x2cf2, 0xa5, 0x0, 0x0) 0s ago: executing program 4 (id=1876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setgroups(0x24, 0xffffffffffffffff) getsockopt$inet6_int(r3, 0x29, 0x11, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) kernel console output (not intermixed with test programs): syz.3.595'. [ 268.587029][ T29] audit: type=1400 audit(1773310987.764:507): avc: denied { getopt } for pid=8284 comm="syz.3.598" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.312209][ T29] audit: type=1400 audit(1773310988.494:508): avc: denied { bind } for pid=8289 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.353651][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 271.005729][ T29] audit: type=1400 audit(1773310990.194:509): avc: denied { write } for pid=8299 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.428406][ T29] audit: type=1400 audit(1773310994.534:510): avc: denied { bind } for pid=8335 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.497214][ T29] audit: type=1400 audit(1773310995.684:511): avc: denied { write } for pid=8330 comm="syz.2.608" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 281.022787][ T8396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.618621][ T8413] netlink: 136 bytes leftover after parsing attributes in process `syz.4.629'. [ 285.419417][ T8464] sd 0:0:1:0: device reset [ 285.602973][ T29] audit: type=1400 audit(1773311004.594:512): avc: denied { read } for pid=8460 comm="syz.1.642" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.661451][ T29] audit: type=1400 audit(1773311004.594:513): avc: denied { open } for pid=8460 comm="syz.1.642" path="/dev/sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.665412][ T8463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=8463 comm=syz.4.641 [ 285.686889][ T29] audit: type=1400 audit(1773311004.604:514): avc: denied { ioctl } for pid=8460 comm="syz.1.642" path="/dev/sg0" dev="devtmpfs" ino=783 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 287.457791][ T29] audit: type=1400 audit(1773311006.644:515): avc: denied { read write } for pid=8476 comm="syz.1.646" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.635312][ T29] audit: type=1400 audit(1773311006.664:516): avc: denied { open } for pid=8476 comm="syz.1.646" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.125147][ T29] audit: type=1400 audit(1773311007.284:517): avc: denied { map } for pid=8476 comm="syz.1.646" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.797236][ T29] audit: type=1400 audit(1773311007.284:518): avc: denied { execute } for pid=8476 comm="syz.1.646" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.859578][ T5819] Bluetooth: hci0: unexpected event for opcode 0x040e [ 293.176818][ T8546] netlink: 'syz.0.660': attribute type 13 has an invalid length. [ 294.499834][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 296.152744][ T8561] hsr_slave_1 (unregistering): left promiscuous mode [ 299.316629][ T5873] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 299.685392][ T29] audit: type=1400 audit(1773311018.814:519): avc: denied { mounton } for pid=8589 comm="syz.2.672" path="/proc/516/task" dev="proc" ino=17720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 300.904220][ T5873] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 300.923681][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.934343][ T5873] usb 1-1: config 0 has no interface number 0 [ 300.963209][ T5873] usb 1-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.018318][ T5873] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 301.037769][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.055408][ T5873] usb 1-1: Product: syz [ 301.062828][ T5873] usb 1-1: Manufacturer: syz [ 301.095148][ T5873] usb 1-1: SerialNumber: syz [ 301.118642][ T5873] usb 1-1: config 0 descriptor?? [ 301.150314][ T5873] yurex 1-1:0.50: Could not find endpoints [ 302.303123][ T5873] usb 1-1: USB disconnect, device number 9 [ 304.153091][ T8632] netlink: 136 bytes leftover after parsing attributes in process `syz.4.683'. [ 305.135127][ T8658] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.689'. [ 305.823167][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 306.306719][ T29] audit: type=1400 audit(1773311025.074:520): avc: denied { write } for pid=8662 comm="syz.2.690" path="socket:[17804]" dev="sockfs" ino=17804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 306.350541][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 306.765435][ T29] audit: type=1400 audit(1773311025.764:521): avc: denied { block_suspend } for pid=8667 comm="syz.0.691" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.132355][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 308.167580][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 308.307766][ T8682] netlink: 'syz.4.695': attribute type 11 has an invalid length. [ 308.308195][ T8687] bridge0: port 1(hsr0) entered disabled state [ 308.323869][ T8682] netlink: 'syz.4.695': attribute type 13 has an invalid length. [ 308.378015][ T8687] bridge0: entered allmulticast mode [ 308.971684][ T8682] hsr0: left allmulticast mode [ 308.980394][ T8682] hsr_slave_0: left allmulticast mode [ 308.986306][ T8682] hsr0: left promiscuous mode [ 308.992473][ T8682] bridge0: port 1(hsr0) entered disabled state [ 310.630060][ T8726] fuse: Bad value for 'fd' [ 311.585503][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.656715][ T29] audit: type=1400 audit(1773311030.834:522): avc: denied { lock } for pid=8723 comm="syz.4.705" path="socket:[17019]" dev="sockfs" ino=17019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 312.629618][ T8741] ptrace attach of "./syz-executor exec"[5807] was attempted by " [ 313.259119][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 313.625280][ T29] audit: type=1400 audit(1773311032.794:523): avc: denied { read write } for pid=8733 comm="syz.2.699" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 314.616011][ T29] audit: type=1400 audit(1773311032.794:524): avc: denied { open } for pid=8733 comm="syz.2.699" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 314.965316][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 315.055248][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.669902][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 315.677536][ T9] usb 2-1: can't read configurations, error -71 [ 315.987534][ T29] audit: type=1400 audit(1773311035.174:525): avc: denied { ioctl } for pid=8760 comm="syz.0.712" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 315.987750][ T8765] binder: 8760:8765 ioctl 4018620d 0 returned -22 [ 316.253661][ T8759] syzkaller0: entered promiscuous mode [ 316.343917][ T8759] syzkaller0: entered allmulticast mode [ 316.853662][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 316.888488][ T8761] binder: 8760:8761 ioctl c0306201 0 returned -14 [ 316.895325][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 316.914633][ T8761] binder: 8760:8761 unknown command 0 [ 316.920148][ T8761] binder: 8760:8761 ioctl c0306201 200000000280 returned -22 [ 316.952655][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 317.144437][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 318.345800][ T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 318.501053][ T29] audit: type=1400 audit(1773311037.684:526): avc: denied { open } for pid=8807 comm="syz.1.722" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 318.535112][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 318.568177][ T47] usb 1-1: config 0 has no interfaces? [ 318.582428][ T47] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 318.605179][ T29] audit: type=1400 audit(1773311037.714:527): avc: denied { ioctl } for pid=8807 comm="syz.1.722" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 318.630390][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.649791][ T47] usb 1-1: Product: syz [ 318.660039][ T47] usb 1-1: Manufacturer: syz [ 318.674856][ T47] usb 1-1: SerialNumber: syz [ 318.715837][ T47] usb 1-1: config 0 descriptor?? [ 318.867191][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 318.968043][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.001077][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.059788][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 319.079110][ T9] usb 3-1: config 0 has no interfaces? [ 319.092033][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 319.139348][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 319.180184][ T792] usb 1-1: USB disconnect, device number 10 [ 319.201846][ T9] usb 3-1: Manufacturer: syz [ 319.260274][ T9] usb 3-1: config 0 descriptor?? [ 319.651960][ T792] usb 3-1: USB disconnect, device number 6 [ 319.898106][ T29] audit: type=1400 audit(1773311039.074:528): avc: denied { mount } for pid=8822 comm="syz.4.726" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 320.844267][ T29] audit: type=1400 audit(1773311039.614:529): avc: denied { connect } for pid=8825 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.725320][ T8845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=8845 comm=syz.3.731 [ 322.854871][ T8849] netlink: 'syz.1.733': attribute type 3 has an invalid length. [ 322.878415][ T8849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'. [ 322.888083][ T8849] netlink: 2 bytes leftover after parsing attributes in process `syz.1.733'. [ 325.216679][ T8882] hugetlbfs: syz.1.742 (8882): Using mlock ulimits for SHM_HUGETLB is obsolete [ 325.875150][ T29] audit: type=1400 audit(1773311044.884:530): avc: denied { bind } for pid=8886 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.283006][ T29] audit: type=1400 audit(1773311044.884:531): avc: denied { name_bind } for pid=8886 comm="syz.3.745" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 326.875302][ T29] audit: type=1400 audit(1773311044.884:532): avc: denied { node_bind } for pid=8886 comm="syz.3.745" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 327.035773][ T8905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65007 sclass=netlink_route_socket pid=8905 comm=syz.3.748 [ 327.125144][ T29] audit: type=1326 audit(1773311046.184:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 327.214867][ T29] audit: type=1326 audit(1773311046.184:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 327.698685][ T29] audit: type=1326 audit(1773311046.184:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 327.725046][ T29] audit: type=1326 audit(1773311046.184:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 327.877477][ T29] audit: type=1326 audit(1773311046.184:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 327.966973][ T29] audit: type=1326 audit(1773311046.184:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 328.056878][ T29] audit: type=1326 audit(1773311046.184:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9c999c502 code=0x7ffc0000 [ 329.518511][ T8923] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 329.746725][ T8927] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 329.754577][ T8927] netlink: 'syz.3.755': attribute type 2 has an invalid length. [ 330.437085][ T8939] lo speed is unknown, defaulting to 1000 [ 330.475658][ T8939] lo speed is unknown, defaulting to 1000 [ 330.483260][ T8939] lo speed is unknown, defaulting to 1000 [ 330.552858][ T8939] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 330.604759][ T8939] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 330.890624][ T8939] lo speed is unknown, defaulting to 1000 [ 330.911906][ T8939] lo speed is unknown, defaulting to 1000 [ 330.938891][ T8939] lo speed is unknown, defaulting to 1000 [ 330.956362][ T8939] lo speed is unknown, defaulting to 1000 [ 330.975050][ T8939] lo speed is unknown, defaulting to 1000 [ 332.575234][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 332.965156][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 332.974744][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.000610][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.079874][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 333.103612][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.129427][ T9] usb 3-1: config 0 descriptor?? [ 333.155174][ T5865] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 333.181876][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 333.347443][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 333.472606][ T5865] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 333.491837][ T5865] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 333.508544][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 334.006045][ T9] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 334.015968][ T5865] usb 2-1: Product: syz [ 334.028487][ T5865] usb 2-1: Manufacturer: syz [ 334.039428][ T5865] usb 2-1: SerialNumber: syz [ 334.039520][ T9] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 334.067398][ T5865] usb 2-1: config 0 descriptor?? [ 334.085238][ T8967] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 334.257971][ T9] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 334.450840][ T9] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 334.593395][ T5873] usb 2-1: USB disconnect, device number 9 [ 334.658881][ T9] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 334.955530][ T8963] ft260 0003:0403:6030.0004: ft260_i2c_read: failed with -38 [ 334.969207][ T47] usb 3-1: USB disconnect, device number 7 [ 335.399358][ T9007] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 336.076810][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 336.100734][ T9020] hsr_slave_1 (unregistering): left promiscuous mode [ 336.931465][ T9028] random: crng reseeded on system resumption [ 337.027232][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 337.027248][ T29] audit: type=1400 audit(1773311056.114:573): avc: denied { write } for pid=9024 comm="syz.1.780" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 338.815479][ T29] audit: type=1400 audit(1773311056.114:574): avc: denied { open } for pid=9024 comm="syz.1.780" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 339.603774][ T9051] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 341.096191][ T29] audit: type=1400 audit(1773311060.284:575): avc: denied { connect } for pid=9047 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 341.303302][ T9047] delete_channel: no stack [ 342.375881][ T29] audit: type=1400 audit(1773311061.554:576): avc: denied { map } for pid=9053 comm="syz.1.788" path="/proc/503/task/504/oom_adj" dev="proc" ino=18198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 342.666235][ T29] audit: type=1400 audit(1773311061.554:577): avc: denied { execute } for pid=9053 comm="syz.1.788" path="/proc/503/task/504/oom_adj" dev="proc" ino=18198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 343.298972][ T29] audit: type=1400 audit(1773311062.094:578): avc: denied { accept } for pid=9081 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.427187][ T9090] netlink: 'syz.0.793': attribute type 6 has an invalid length. [ 346.668845][ T29] audit: type=1400 audit(1773311065.474:579): avc: denied { connect } for pid=9112 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 348.741631][ T29] audit: type=1400 audit(1773311067.894:580): avc: denied { bind } for pid=9133 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 349.543046][ T9151] syzkaller0: entered promiscuous mode [ 349.635532][ T9151] syzkaller0: entered allmulticast mode [ 353.169797][ T9199] capability: warning: `syz.3.820' uses deprecated v2 capabilities in a way that may be insecure [ 353.686075][ T29] audit: type=1400 audit(1773311072.874:581): avc: denied { ioctl } for pid=9202 comm="syz.0.821" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 353.915666][ T9207] tipc: Started in network mode [ 353.920570][ T9207] tipc: Node identity 12e8a1d8bd05, cluster identity 4711 [ 353.955624][ T9207] tipc: Enabled bearer , priority 0 [ 353.972661][ T9212] syzkaller0: entered promiscuous mode [ 353.982643][ T9212] syzkaller0: entered allmulticast mode [ 354.436953][ T9214] tipc: Resetting bearer [ 354.448049][ T9206] tipc: Resetting bearer [ 354.470172][ T9206] tipc: Disabling bearer [ 354.635133][ T5865] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 355.317029][ T5865] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 355.326531][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.362135][ T5865] usb 3-1: config 0 descriptor?? [ 355.383615][ T5865] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 355.400120][ T9228] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 355.442818][ T9228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.573098][ T9228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.586475][ T9228] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 355.600919][ T9228] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 355.727643][ T9233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 355.785986][ T9230] gretap1: entered promiscuous mode [ 355.797080][ T9230] bond3: (slave gretap1): making interface the new active one [ 356.331165][ T9230] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 356.365332][ T9233] bond3: entered promiscuous mode [ 356.386969][ T9233] bond3: entered allmulticast mode [ 356.408009][ T9233] gretap1: entered allmulticast mode [ 356.426946][ T9233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 356.572560][ T5865] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 357.937596][ T29] audit: type=1400 audit(1773311077.124:582): avc: denied { read } for pid=9252 comm="syz.0.834" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 358.084503][ T29] audit: type=1400 audit(1773311077.124:583): avc: denied { open } for pid=9252 comm="syz.0.834" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 358.293943][ T29] audit: type=1400 audit(1773311077.454:584): avc: denied { ioctl } for pid=9252 comm="syz.0.834" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 358.494230][ T9259] tipc: Enabling of bearer rejected, failed to enable media [ 359.117959][ T5865] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 359.443374][ T5865] usb 3-1: USB disconnect, device number 8 [ 359.464237][ T9275] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 360.162651][ T9295] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.842'. [ 360.958592][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 362.639807][ T9322] overlayfs: failed to clone lowerpath [ 362.955341][ T29] audit: type=1400 audit(1773311081.804:585): avc: denied { mount } for pid=9319 comm="syz.3.849" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 365.628651][ T9341] : entered promiscuous mode [ 366.650957][ T29] audit: type=1400 audit(1773311085.824:586): avc: denied { getopt } for pid=9339 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.740934][ T9344] netlink: set zone limit has 4 unknown bytes [ 368.307340][ T29] audit: type=1400 audit(1773311087.494:587): avc: denied { create } for pid=9357 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 368.408391][ T29] audit: type=1400 audit(1773311087.514:588): avc: denied { bind } for pid=9357 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 368.555161][ T29] audit: type=1400 audit(1773311087.524:589): avc: denied { connect } for pid=9357 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 368.626487][ T29] audit: type=1400 audit(1773311087.534:590): avc: denied { write } for pid=9357 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 370.073952][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.858'. [ 370.155977][ T29] audit: type=1400 audit(1773311089.274:591): avc: denied { read } for pid=9365 comm="syz.1.858" path="socket:[19513]" dev="sockfs" ino=19513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.170875][ T9382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.707798][ T9390] : entered promiscuous mode [ 372.100093][ T9397] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.869'. [ 372.459222][ T9398] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.869'. [ 373.016964][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.251668][ T9407] team_slave_0: entered promiscuous mode [ 373.257580][ T9407] team_slave_1: entered promiscuous mode [ 373.264093][ T9407] macvtap1: entered promiscuous mode [ 373.269623][ T9407] team0: entered promiscuous mode [ 373.287043][ T9407] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 373.295605][ T9407] team0: Device macvtap1 is already an upper device of the team interface [ 373.581472][ T9407] team0: left promiscuous mode [ 373.593461][ T9407] team_slave_0: left promiscuous mode [ 373.598978][ T9407] team_slave_1: left promiscuous mode [ 373.913409][ T9418] vivid-001: disconnect [ 374.909064][ T9415] vivid-001: reconnect [ 375.989347][ T29] audit: type=1400 audit(1773311095.174:592): avc: denied { listen } for pid=9431 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 376.049177][ T9437] overlayfs: missing 'lowerdir' [ 376.068994][ T9437] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 376.172493][ T9437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.272741][ T9443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.313935][ T9443] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 376.353205][ T9443] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 377.240529][ T29] audit: type=1400 audit(1773311095.934:593): avc: denied { bind } for pid=9452 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 377.516361][ T9457] netlink: 'syz.1.876': attribute type 4 has an invalid length. [ 377.953387][ T29] audit: type=1400 audit(1773311097.134:594): avc: denied { ioctl } for pid=9461 comm="syz.0.884" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xaea4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 379.122269][ T5819] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 380.093390][ T9497] xt_SECMARK: invalid mode: 2 [ 381.865536][ T5819] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 382.599070][ T9513] syz.1.895 (9513) used greatest stack depth: 17912 bytes left [ 385.746381][ T29] audit: type=1400 audit(1773311104.564:595): avc: denied { ioctl } for pid=9524 comm="syz.4.901" path="socket:[20952]" dev="sockfs" ino=20952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.807634][ T9558] kAFS: unable to lookup cell 'Ţ({^ú@' [ 389.425259][ T9559] netlink: 13 bytes leftover after parsing attributes in process `syz.1.907'. [ 390.361519][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 390.661916][ T9575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.951413][ T29] audit: type=1400 audit(1773311111.134:596): avc: denied { name_bind } for pid=9590 comm="syz.3.917" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 392.439611][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.919'. [ 394.593338][ T29] audit: type=1400 audit(1773311113.744:597): avc: denied { append } for pid=9612 comm="syz.0.923" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 394.627115][ T29] audit: type=1400 audit(1773311113.814:598): avc: denied { setopt } for pid=9620 comm="syz.3.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.673698][ T9622] netlink: 'syz.3.925': attribute type 3 has an invalid length. [ 394.673723][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'. [ 394.685934][ T29] audit: type=1400 audit(1773311113.874:599): avc: denied { accept } for pid=9612 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 394.694231][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.926'. [ 395.445983][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 395.595146][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 395.608641][ T5872] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 395.618052][ T5872] usb 3-1: config 1 has no interface number 0 [ 395.669073][ T5872] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 395.696232][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.898344][ T5872] usb 3-1: Product: syz [ 395.902564][ T5872] usb 3-1: Manufacturer: syz [ 395.924375][ T5872] usb 3-1: SerialNumber: syz [ 396.425603][ T29] audit: type=1400 audit(1773311115.604:600): avc: denied { getopt } for pid=9636 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 397.508741][ T5872] usb 3-1: can't set config #1, error -71 [ 397.530619][ T5872] usb 3-1: USB disconnect, device number 9 [ 397.921551][ T9661] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 397.929597][ T9661] netlink: 280 bytes leftover after parsing attributes in process `syz.1.935'. [ 400.157313][ T9685] syzkaller0: entered promiscuous mode [ 400.175517][ T9685] syzkaller0: entered allmulticast mode [ 400.340621][ T29] audit: type=1400 audit(1773311119.444:601): avc: denied { write } for pid=9680 comm="syz.3.941" name="file0" dev="tmpfs" ino=1196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.614603][ T29] audit: type=1400 audit(1773311119.444:602): avc: denied { open } for pid=9680 comm="syz.3.941" path="/227/file0" dev="tmpfs" ino=1196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.703474][ T29] audit: type=1400 audit(1773311119.454:603): avc: denied { ioctl } for pid=9680 comm="syz.3.941" path="/227/file0" dev="tmpfs" ino=1196 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 401.075110][ T29] audit: type=1400 audit(1773311120.254:604): avc: denied { kexec_image_load } for pid=9690 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 404.656199][ T9737] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 405.120968][ T9740] bond2: entered promiscuous mode [ 405.153845][ T9740] bond2: entered allmulticast mode [ 405.177173][ T9740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.827829][ T29] audit: type=1400 audit(1773311125.014:605): avc: denied { append } for pid=9749 comm="syz.0.956" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 405.971347][ T9754] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 406.879466][ T5873] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 407.716082][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 407.793709][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 407.802513][ T9780] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 407.829976][ T29] audit: type=1400 audit(1773311126.974:606): avc: denied { write } for pid=9774 comm="syz.1.962" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 407.863954][ T5873] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 407.883887][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.922608][ T5873] usb 3-1: config 0 has no interface number 0 [ 407.933618][ T5873] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.951826][ T5873] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 408.120015][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.136428][ T5873] usb 3-1: Product: syz [ 408.140654][ T5873] usb 3-1: Manufacturer: syz [ 408.148519][ T5873] usb 3-1: SerialNumber: syz [ 408.496885][ T5873] usb 3-1: config 0 descriptor?? [ 408.509371][ T5873] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 408.737740][ T9764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.815370][ T9764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.855176][ T5873] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 408.883255][ T5873] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 409.142909][ T9764] netlink: 'syz.2.959': attribute type 4 has an invalid length. [ 409.283418][ T5873] lo speed is unknown, defaulting to 1000 [ 409.361108][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'. [ 409.683376][ T5873] syz2: Port: 1 Link DOWN [ 409.833572][ T5872] usb 3-1: USB disconnect, device number 10 [ 410.672162][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.980'. [ 410.902644][ T29] audit: type=1400 audit(1773311129.954:607): avc: denied { map } for pid=9806 comm="syz.0.971" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 411.226746][ T29] audit: type=1400 audit(1773311129.954:608): avc: denied { execute } for pid=9806 comm="syz.0.971" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 415.379957][ T9844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=9844 comm=syz.0.977 [ 415.627477][ T9847] 9pnet: Found fid 0 not clunked [ 416.078012][ T792] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 416.280987][ T792] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 416.376506][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.384519][ T792] usb 2-1: Product: syz [ 416.433983][ T792] usb 2-1: Manufacturer: syz [ 416.554776][ T792] usb 2-1: SerialNumber: syz [ 416.576716][ T792] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 416.657493][ T9866] netlink: 180 bytes leftover after parsing attributes in process `syz.3.983'. [ 416.674091][ T9866] overlayfs: failed to clone upperpath [ 416.988300][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 418.337514][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 418.726798][ T24] ath9k_htc: Failed to initialize the device [ 418.863696][ T47] usb 2-1: USB disconnect, device number 10 [ 418.872005][ T29] audit: type=1400 audit(1773311137.994:609): avc: denied { setopt } for pid=9877 comm="syz.2.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 419.059628][ T47] usb 2-1: ath9k_htc: USB layer deinitialized [ 420.336253][ T9897] IPv6: Can't replace route, no match found [ 420.342916][ T9897] IPv6: Can't replace route, no match found [ 421.529108][ T9921] tipc: Enabling of bearer rejected, failed to enable media [ 421.591985][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 421.848228][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 421.863375][ T9926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.912401][ T47] usb 2-1: config 9 has an invalid interface number: 6 but max is 0 [ 421.922440][ T9930] tipc: Enabling of bearer rejected, failed to enable media [ 421.927540][ T47] usb 2-1: config 9 has no interface number 0 [ 421.951277][ T47] usb 2-1: config 9 interface 6 has no altsetting 0 [ 421.970045][ T47] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=c3.be [ 421.992282][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.011034][ T47] usb 2-1: Product: syz [ 422.021135][ T47] usb 2-1: Manufacturer: syz [ 422.045077][ T47] usb 2-1: SerialNumber: syz [ 422.054619][ T9930] netlink: 44 bytes leftover after parsing attributes in process `syz.3.999'. [ 422.784509][ T9948] new mount options do not match the existing superblock, will be ignored [ 424.270753][ T47] radio-usb-si4713 2-1:9.6: Si4713 development board discovered: (10C4:8244) [ 424.337054][ T47] radio-usb-si4713 2-1:9.6: probe with driver radio-usb-si4713 failed with error -71 [ 424.350321][ T9972] netlink: 'syz.2.1008': attribute type 10 has an invalid length. [ 424.371450][ T47] usbhid 2-1:9.6: couldn't find an input interrupt endpoint [ 424.383397][ T9972] syz_tun: entered promiscuous mode [ 424.511314][ T29] audit: type=1400 audit(1773311143.694:610): avc: denied { ioctl } for pid=9975 comm="syz.0.1010" path="socket:[20171]" dev="sockfs" ino=20171 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 424.688418][ T47] usb 2-1: USB disconnect, device number 11 [ 424.710111][ T9972] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 424.754712][ T29] audit: type=1400 audit(1773311143.754:611): avc: denied { write } for pid=9975 comm="syz.0.1010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 424.783195][ T29] audit: type=1400 audit(1773311143.884:612): avc: denied { write } for pid=9975 comm="syz.0.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 424.935721][ T9992] loop5: detected capacity change from 0 to 7 [ 424.964382][ T9992] Dev loop5: unable to read RDB block 7 [ 424.970277][ T9992] loop5: AHDI p1 p2 p3 [ 424.974540][ T9992] loop5: partition table partially beyond EOD, truncated [ 424.984588][ T9992] loop5: p1 start 1601398130 is beyond EOD, truncated [ 424.991621][ T9992] loop5: p2 start 1702059890 is beyond EOD, truncated [ 425.306832][ T29] audit: type=1400 audit(1773311144.494:613): avc: denied { write } for pid=9999 comm="syz.0.1013" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 425.345829][ T29] audit: type=1400 audit(1773311144.514:614): avc: denied { ioctl } for pid=9999 comm="syz.0.1013" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 425.626382][ T29] audit: type=1400 audit(1773311144.804:615): avc: denied { mount } for pid=10005 comm="syz.4.1014" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 425.674493][T10006] lo: entered allmulticast mode [ 425.786275][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 426.413106][T10010] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 426.754446][T10005] lo: left allmulticast mode [ 427.904254][ T29] audit: type=1804 audit(1773311147.084:616): pid=10018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1017" name="bus" dev="ramfs" ino=21761 res=1 errno=0 [ 428.594762][ T29] audit: type=1804 audit(1773311147.084:617): pid=10018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1017" name="bus" dev="ramfs" ino=21761 res=1 errno=0 [ 429.115357][ T29] audit: type=1400 audit(1773311148.294:618): avc: denied { set_context_mgr } for pid=10031 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 429.749962][T10045] netlink: 'syz.0.1026': attribute type 2 has an invalid length. [ 429.757751][T10045] netlink: 'syz.0.1026': attribute type 1 has an invalid length. [ 432.152121][ T29] audit: type=1400 audit(1773311151.334:619): avc: denied { ioctl } for pid=10067 comm="syz.3.1032" path="socket:[21838]" dev="sockfs" ino=21838 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 433.381428][T10072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.768359][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 433.781827][ T29] audit: type=1400 audit(1773311152.964:620): avc: denied { getopt } for pid=10089 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 433.803774][T10091] bridge0: port 3(syz_tun) entered blocking state [ 434.299635][T10091] bridge0: port 3(syz_tun) entered disabled state [ 434.319341][T10091] syz_tun: entered allmulticast mode [ 434.325565][T10091] syz_tun: entered promiscuous mode [ 434.331173][T10091] bridge0: port 3(syz_tun) entered blocking state [ 434.337640][T10091] bridge0: port 3(syz_tun) entered forwarding state [ 434.438485][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.477652][T10129] netlink: 'syz.3.1056': attribute type 2 has an invalid length. [ 437.485411][T10129] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 441.204351][T10169] misc userio: Invalid payload size [ 442.625312][ T29] audit: type=1400 audit(1773311161.784:621): avc: denied { getopt } for pid=10167 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 446.770315][ T29] audit: type=1400 audit(1773311165.724:622): avc: denied { mounton } for pid=10208 comm="syz.2.1063" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 448.205243][ T29] audit: type=1400 audit(1773311167.364:623): avc: denied { ioctl } for pid=10223 comm="syz.2.1065" path="socket:[22004]" dev="sockfs" ino=22004 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 448.439905][T10227] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 449.621183][ T29] audit: type=1400 audit(1773311168.804:624): avc: denied { read } for pid=10234 comm="syz.3.1068" lport=52610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.720584][T10235] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 450.257335][T10249] program syz.1.1067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.997306][ T29] audit: type=1400 audit(1773311170.804:625): avc: denied { watch watch_reads } for pid=10264 comm="syz.1.1074" path="pipe:[3985]" dev="pipefs" ino=3985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 453.296616][T10285] tipc: Enabling of bearer rejected, failed to enable media [ 453.319180][ T29] audit: type=1400 audit(1773311172.244:626): avc: denied { read } for pid=10283 comm="syz.1.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 454.315289][ T29] audit: type=1400 audit(1773311173.454:627): avc: denied { write } for pid=10295 comm="syz.4.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 456.964149][T10322] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 457.607522][T10311] netlink: 'syz.4.1083': attribute type 11 has an invalid length. [ 457.981644][T10343] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1089'. [ 458.305118][T10311] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1083'. [ 458.625725][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.682981][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 459.386739][T10361] netlink: 676 bytes leftover after parsing attributes in process `syz.3.1091'. [ 459.615124][ T5872] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 459.845094][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 462.081558][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 462.175887][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 462.183520][ T5872] usb 2-1: can't read configurations, error -71 [ 462.379006][T10392] vcan1: entered promiscuous mode [ 462.928555][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1098'. [ 463.512669][T10399] siw: device registration error -23 [ 463.965502][T10400] fuse: Bad value for 'fd' [ 464.045924][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 466.576989][ T29] audit: type=1400 audit(1773311185.394:628): avc: denied { getopt } for pid=10422 comm="syz.3.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 467.176817][ T29] audit: type=1400 audit(1773311186.354:629): avc: denied { write } for pid=10428 comm="syz.0.1108" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 468.209598][T10446] FAT-fs (nbd0): unable to read boot sector [ 468.335180][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 468.348067][T10447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10447 comm=syz.3.1112 [ 468.517957][ T9] usb 2-1: config 0 has no interfaces? [ 468.523999][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 468.563761][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.606512][ T9] usb 2-1: config 0 descriptor?? [ 468.833864][T10451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.219590][T10440] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1110'. [ 470.282128][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 471.654482][ T5865] usb 2-1: USB disconnect, device number 14 [ 472.011840][ T29] audit: type=1400 audit(1773311191.194:630): avc: denied { watch } for pid=10481 comm="syz.3.1124" path="/273/file1" dev="tmpfs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 475.608202][T10508] siw: device registration error -23 [ 475.715322][T10511] ±˙: renamed from lo [ 476.420832][T10517] random: crng reseeded on system resumption [ 477.241809][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 477.958401][T10526] bridge0: port 3(syz_tun) entered disabled state [ 478.016685][T10526] syz_tun (unregistering): left allmulticast mode [ 478.036314][T10526] syz_tun (unregistering): left promiscuous mode [ 478.043073][T10526] bridge0: port 3(syz_tun) entered disabled state [ 478.057031][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 479.535310][T10544] overlayfs: failed to clone upperpath [ 479.982002][T10555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1142'. [ 480.936407][T10563] netlink: 'syz.3.1143': attribute type 39 has an invalid length. [ 481.214553][T10568] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1144'. [ 481.269098][T10568] syzkaller1: entered promiscuous mode [ 481.274741][T10568] syzkaller1: entered allmulticast mode [ 483.490537][ T29] audit: type=1400 audit(1773311202.574:631): avc: denied { read } for pid=10576 comm="syz.0.1148" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 483.945325][ T29] audit: type=1400 audit(1773311202.574:632): avc: denied { open } for pid=10576 comm="syz.0.1148" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 483.970749][ T29] audit: type=1400 audit(1773311202.574:633): avc: denied { ioctl } for pid=10576 comm="syz.0.1148" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 484.183488][ T5873] IPVS: starting estimator thread 0... [ 484.238322][ T29] audit: type=1400 audit(1773311203.044:634): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 484.295278][T10596] IPVS: using max 44 ests per chain, 105600 per kthread [ 486.681209][T10622] netlink: 'syz.0.1155': attribute type 27 has an invalid length. [ 487.365094][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 487.517792][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 487.527015][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.546693][ T5865] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 487.557036][ T24] usb 3-1: Product: syz [ 487.570794][ T24] usb 3-1: Manufacturer: syz [ 487.609267][ T24] usb 3-1: SerialNumber: syz [ 487.735716][ T5865] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 487.779360][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 487.935191][ T5865] usb 2-1: Product: syz [ 487.939760][ T5865] usb 2-1: Manufacturer: syz [ 488.007646][ T5865] usb 2-1: SerialNumber: syz [ 488.027519][ T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 488.049689][ T5865] usb 2-1: config 0 descriptor?? [ 488.059166][ T24] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 488.124830][ T24] usb 3-1: found format II with max.bitrate = 0, frame size=9 [ 488.169858][ T24] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 488.300193][ T29] audit: type=1400 audit(1773311207.474:635): avc: denied { read write } for pid=10636 comm="syz.1.1160" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 488.775696][ T24] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 488.795972][ T24] usb 3-1: found format II with max.bitrate = 0, frame size=9 [ 488.806359][ T47] usb 2-1: USB disconnect, device number 15 [ 488.846957][ T24] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 488.861355][ T6654] udevd[6654]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 488.881869][ T29] audit: type=1400 audit(1773311207.474:636): avc: denied { open } for pid=10636 comm="syz.1.1160" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 488.884287][ T24] usb 3-1: unit 5 not found! [ 489.058664][ T24] usb 3-1: unit 2 not found! [ 489.161420][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 489.712044][ T24] usb 3-1: USB disconnect, device number 11 [ 491.974313][T10662] Invalid ELF header magic: != ELF [ 492.031296][ T29] audit: type=1400 audit(1773311211.144:637): avc: denied { module_load } for pid=10659 comm="syz.3.1167" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=23693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 493.355292][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 493.515334][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 493.525686][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 493.554020][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 494.546447][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 494.556102][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.566019][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 494.575947][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 494.590094][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 495.068816][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.081489][ T24] usb 3-1: config 0 descriptor?? [ 495.332235][T10698] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1178'. [ 496.075442][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.306769][T10693] bridge3: entered promiscuous mode [ 496.311982][T10693] bridge3: entered allmulticast mode [ 496.327163][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 497.267827][ T24] usb 3-1: USB disconnect, device number 12 [ 497.293779][T10711] overlayfs: unescaped trailing colons in lowerdir mount option. [ 497.316001][T10713] misc userio: The device must be registered before sending interrupts [ 497.326845][ T24] usblp0: removed [ 497.795097][ T29] audit: type=1400 audit(1773311216.774:638): avc: denied { getopt } for pid=10712 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 498.118676][T10719] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 500.231324][ T29] audit: type=1400 audit(1773311219.414:639): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 500.606677][T10754] overlayfs: overlapping lowerdir path [ 500.908761][T10752] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 500.918092][T10752] overlayfs: missing 'lowerdir' [ 501.504144][ T29] audit: type=1400 audit(1773311219.634:640): avc: denied { create } for pid=10744 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 501.659725][ T29] audit: type=1400 audit(1773311219.644:641): avc: denied { write } for pid=10744 comm="syz.4.1190" path="socket:[23814]" dev="sockfs" ino=23814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 502.055940][ T29] audit: type=1400 audit(1773311220.424:642): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.164507][ T29] audit: type=1400 audit(1773311220.424:643): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.295119][ T29] audit: type=1400 audit(1773311220.424:644): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.425870][ T29] audit: type=1400 audit(1773311220.424:645): avc: denied { read } for pid=5473 comm="dhcpcd" name="n100" dev="tmpfs" ino=5278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 502.595918][ T29] audit: type=1400 audit(1773311220.424:646): avc: denied { open } for pid=5473 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=5278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 503.095102][ T29] audit: type=1400 audit(1773311220.424:647): avc: denied { getattr } for pid=5473 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=5278 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 503.477796][ T29] audit: type=1326 audit(1773311220.664:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa679c799 code=0x7ffc0000 [ 503.701608][ T29] audit: type=1326 audit(1773311220.674:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10730 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa679c799 code=0x7ffc0000 [ 504.394969][ T29] audit: type=1400 audit(1773311220.674:650): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 504.625035][ T29] audit: type=1326 audit(1773311220.744:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.3.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x0 [ 504.758790][ T29] audit: type=1400 audit(1773311221.434:652): avc: denied { read open } for pid=10770 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.885569][ T29] audit: type=1400 audit(1773311221.464:653): avc: denied { getattr } for pid=10770 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.095394][ T29] audit: type=1400 audit(1773311222.874:654): avc: denied { add_name } for pid=10769 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.243456][ T29] audit: type=1400 audit(1773311222.874:655): avc: denied { create } for pid=10769 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 505.425793][T10812] fuse: Bad value for 'fd' [ 505.468342][ T29] audit: type=1400 audit(1773311222.884:656): avc: denied { write } for pid=10769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=5297 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 506.762005][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1203'. [ 507.205293][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 507.442668][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.513009][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 507.654759][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.133853][T10838] syzkaller0: entered promiscuous mode [ 508.188136][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.191196][T10838] syzkaller0: entered allmulticast mode [ 508.290551][T10824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.412288][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.426381][T10849] tmpfs: Bad value for 'nr_inodes' [ 510.437238][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 510.437256][ T29] audit: type=1400 audit(1773311229.604:661): avc: denied { getopt } for pid=10864 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 511.509561][T10824] veth0: entered promiscuous mode [ 511.514910][T10824] vlan2: entered promiscuous mode [ 513.131965][ T5872] usb 2-1: USB disconnect, device number 16 [ 513.197203][ T29] audit: type=1400 audit(1773311232.364:662): avc: denied { bind } for pid=10890 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 513.246387][T10894] block device autoloading is deprecated and will be removed. [ 514.006397][ T29] audit: type=1326 audit(1773311232.544:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 514.117852][ T29] audit: type=1326 audit(1773311232.544:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 514.317523][ T29] audit: type=1326 audit(1773311232.554:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 515.796924][ T29] audit: type=1326 audit(1773311232.554:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 515.952618][ T29] audit: type=1326 audit(1773311232.554:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 516.819481][ T29] audit: type=1326 audit(1773311232.574:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 517.062244][T10928] Device name cannot be null; rc = [-22] [ 517.927610][ T29] audit: type=1326 audit(1773311232.574:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 517.965094][ T29] audit: type=1326 audit(1773311232.574:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 518.072840][ T29] audit: type=1326 audit(1773311232.574:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 518.295125][ T29] audit: type=1326 audit(1773311232.574:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5022d9c502 code=0x7ffc0000 [ 518.318812][ T29] audit: type=1326 audit(1773311232.574:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5022d9c502 code=0x7ffc0000 [ 518.342674][T10933] random: crng reseeded on system resumption [ 518.354351][T10933] openvswitch: netlink: IP tunnel dst address not specified [ 518.885062][ T29] audit: type=1326 audit(1773311232.574:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 519.166597][ T29] audit: type=1326 audit(1773311232.574:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 520.965600][T10963] overlayfs: failed to clone lowerpath [ 521.008355][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 521.008386][ T29] audit: type=1400 audit(1773311240.144:711): avc: denied { mount } for pid=10960 comm="syz.3.1238" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 522.360018][T10969] bridge1: entered promiscuous mode [ 522.723666][ T29] audit: type=1400 audit(1773311241.894:712): avc: denied { write } for pid=10972 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 523.685263][ T29] audit: type=1400 audit(1773311242.874:713): avc: denied { ioctl } for pid=10985 comm="syz.0.1246" path="socket:[24699]" dev="sockfs" ino=24699 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 524.979023][ T47] IPVS: starting estimator thread 0... [ 525.176647][T10995] IPVS: using max 49 ests per chain, 117600 per kthread [ 534.486272][ T29] audit: type=1326 audit(1773311253.664:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effa679c799 code=0x7fc00000 [ 534.614351][T11073] sctp: [Deprecated]: syz.3.1266 (pid 11073) Use of int in max_burst socket option. [ 534.614351][T11073] Use struct sctp_assoc_value instead [ 535.534916][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 535.876330][ T29] audit: type=1326 audit(1773311255.044:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effa6796517 code=0x7fc00000 [ 537.215135][ T29] audit: type=1400 audit(1773311255.544:716): avc: denied { connect } for pid=11084 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 537.265134][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 537.689489][ T29] audit: type=1400 audit(1773311255.624:717): avc: denied { write } for pid=11084 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 537.975843][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 537.982951][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 537.991947][ T47] usb 3-1: config 8 has an invalid interface number: 255 but max is 8 [ 538.007866][ T47] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 9 [ 538.025045][ T47] usb 3-1: config 8 has no interface number 0 [ 538.031148][ T47] usb 3-1: config 8 interface 255 has no altsetting 0 [ 538.046849][ T47] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 538.158595][ T29] audit: type=1400 audit(1773311257.304:718): avc: denied { mount } for pid=11096 comm="syz.0.1273" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 538.485208][ T47] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 538.499458][ T47] usb 3-1: Product: syz [ 538.503636][ T47] usb 3-1: Manufacturer: syz [ 538.510735][ T29] audit: type=1400 audit(1773311257.324:719): avc: denied { remount } for pid=11096 comm="syz.0.1273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 538.530597][ T47] usb 3-1: SerialNumber: syz [ 538.675885][ T29] audit: type=1400 audit(1773311257.854:720): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 538.763992][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'. [ 538.772979][T11106] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1268'. [ 538.795177][ T47] catc 3-1:8.255: Can't set altsetting 1. [ 538.800952][ T47] catc 3-1:8.255: probe with driver catc failed with error -5 [ 538.827211][ T47] usb 3-1: USB disconnect, device number 13 [ 539.080746][ T29] audit: type=1400 audit(1773311258.264:721): avc: denied { write } for pid=11110 comm="syz.0.1276" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 539.088115][T11118] @˙: renamed from veth0_vlan (while UP) [ 539.164691][T11119] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 539.538497][ T29] audit: type=1400 audit(1773311258.724:722): avc: denied { write } for pid=11124 comm="syz.2.1279" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 539.582533][T11126] input: syz1 as /devices/virtual/input/input11 [ 539.815790][ T29] audit: type=1400 audit(1773311258.754:723): avc: denied { ioctl } for pid=11124 comm="syz.2.1279" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 540.013475][ T29] audit: type=1326 audit(1773311259.114:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11127 comm="syz.4.1280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff98ff9c799 code=0x0 [ 540.078958][T11135] trusted_key: syz.3.1281 sent an empty control message without MSG_MORE. [ 540.106121][ T29] audit: type=1400 audit(1773311259.294:725): avc: denied { create } for pid=11136 comm="syz.2.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 541.524457][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 541.689965][T11158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.345706][ T29] audit: type=1400 audit(1773311261.524:726): avc: denied { getattr } for pid=11163 comm="syz.4.1290" name="/" dev="iomem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 542.659844][T11168] xt_socket: unknown flags 0xc [ 545.946408][ T29] audit: type=1800 audit(2000000002.060:727): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1297" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 546.402068][T11201] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 546.470060][T11208] No control pipe specified [ 547.148416][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 547.157860][T11208] hsr_slave_0: left promiscuous mode [ 547.163958][T11208] hsr_slave_1: left promiscuous mode [ 547.630124][ T29] audit: type=1400 audit(2000000003.750:728): avc: denied { ioctl } for pid=11229 comm="syz.4.1307" path="socket:[25825]" dev="sockfs" ino=25825 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 547.661801][T11230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1307'. [ 547.981981][T11239] openvswitch: netlink: Flow actions attr not present in new flow. [ 555.155851][T11294] PKCS8: Unsupported PKCS#8 version [ 555.335802][T11298] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1325'. [ 555.699968][T11300] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 555.712606][T11300] exFAT-fs (nullb0): invalid boot record signature [ 555.719825][T11300] exFAT-fs (nullb0): failed to read boot sector [ 555.726181][T11300] exFAT-fs (nullb0): failed to recognize exfat type [ 557.367825][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.664770][ T29] audit: type=1400 audit(2000000013.710:729): avc: denied { bind } for pid=11314 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 557.702426][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 559.910810][T11335] overlayfs: failed to clone lowerpath [ 561.751591][T11340] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 561.997404][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 562.033830][ T29] audit: type=1400 audit(2000000018.080:730): avc: denied { ioctl } for pid=11345 comm="syz.2.1336" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 562.235375][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 562.929647][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 562.958014][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.995114][ T24] usb 2-1: config 0 has no interface number 0 [ 563.015923][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 563.047182][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.203118][ T24] usb 2-1: Product: syz [ 563.225206][ T24] usb 2-1: Manufacturer: syz [ 563.364275][ T24] usb 2-1: SerialNumber: syz [ 563.483835][ T24] usb 2-1: config 0 descriptor?? [ 563.498385][ T24] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 563.523683][ T24] uvcvideo 2-1:0.105: No valid video chain found. [ 564.002065][ T29] audit: type=1400 audit(2000000019.710:731): avc: denied { getopt } for pid=11360 comm="syz.4.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 564.104551][ T9] usb 2-1: USB disconnect, device number 17 [ 565.258336][T11384] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.1346'. [ 565.908939][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055cd1400: rx timeout, send abort [ 565.919170][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055cd1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 566.066523][ T29] audit: type=1400 audit(2000000022.160:732): avc: denied { read } for pid=5159 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 566.208331][ T29] audit: type=1400 audit(2000000022.160:733): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.280051][ T29] audit: type=1400 audit(2000000022.160:734): avc: denied { search } for pid=5159 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.419911][ T29] audit: type=1400 audit(2000000022.160:735): avc: denied { add_name } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.850518][ T29] audit: type=1400 audit(2000000022.160:736): avc: denied { create } for pid=5159 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.975109][ T29] audit: type=1400 audit(2000000022.170:737): avc: denied { append open } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 567.182228][ T29] audit: type=1400 audit(2000000022.170:738): avc: denied { getattr } for pid=5159 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 569.111091][T11424] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 570.386913][T11429] 9p: Bad value for 'wfdno' [ 570.719425][T11433] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1359'. [ 573.241167][T11466] netlink: 'syz.3.1365': attribute type 1 has an invalid length. [ 573.268058][T11459] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 573.312664][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 573.328438][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 574.158669][ T29] audit: type=1400 audit(2000000030.280:739): avc: denied { append } for pid=11475 comm="syz.1.1368" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 575.128475][T11484] ksmbd: Unknown IPC event: 4, ignore. [ 575.853956][T11489] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1370'. [ 579.596884][T11507] openvswitch: netlink: Flow key attr not present in new flow. [ 580.624447][T11525] infiniband syz2: set active [ 580.629313][T11525] infiniband syz2: added bridge_slave_1 [ 580.658069][T11525] RDS/IB: syz2: added [ 580.662466][T11525] smc: adding ib device syz2 with port count 1 [ 580.668717][T11525] smc: ib device syz2 port 1 has no pnetid [ 581.884222][T11540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.960156][T11545] overlayfs: failed to clone upperpath [ 582.001881][T11547] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1383'. [ 583.315775][T11564] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1387'. [ 584.026686][T11569] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11569 comm=syz.3.1389 [ 585.875105][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 594.883747][T11607] nbd0: detected capacity change from 0 to 63 [ 595.179348][T11623] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1401'. [ 599.184448][ T5819] block nbd0: Receive control failed (result -104) [ 600.358615][ T47] libceph: connect (1)[c::]:6789 error -101 [ 600.368898][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 600.482429][T11655] ceph: No mds server is up or the cluster is laggy [ 600.703432][ T47] libceph: connect (1)[c::]:6789 error -101 [ 600.955313][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 601.610564][ T47] libceph: connect (1)[c::]:6789 error -101 [ 601.635174][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 604.396082][T11692] netlink: 'syz.0.1420': attribute type 10 has an invalid length. [ 604.417680][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 604.443249][T11672] PKCS8: Unsupported PKCS#8 version [ 604.450470][T11692] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 610.010184][ T47] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 611.716254][ T47] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 611.725196][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.737912][ T47] usb 3-1: config 0 has no interface number 0 [ 611.744031][ T47] usb 3-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 611.763169][ T47] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 611.791892][ T29] audit: type=1400 audit(2000000067.910:740): avc: denied { connect } for pid=11765 comm="syz.4.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 611.817526][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.855048][ T47] usb 3-1: Product: syz [ 611.864712][ T47] usb 3-1: Manufacturer: syz [ 611.884769][ T47] usb 3-1: SerialNumber: syz [ 611.890063][ T29] audit: type=1400 audit(2000000067.930:741): avc: denied { write } for pid=11765 comm="syz.4.1438" laddr=fe80::11 lport=10715 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 611.921174][ T47] usb 3-1: config 0 descriptor?? [ 611.929714][ T47] usb 3-1: can't set config #0, error -71 [ 611.938499][ T47] usb 3-1: USB disconnect, device number 14 [ 612.462503][T11788] sd 0:0:1:0: device reset [ 612.597435][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 612.606464][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 616.544288][T11819] syz2: rxe_newlink: already configured on bridge_slave_1 [ 617.204465][ T29] audit: type=1400 audit(2000000073.250:742): avc: denied { nlmsg_read } for pid=11820 comm="syz.1.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 618.002607][ T29] audit: type=1400 audit(2000000074.120:743): avc: denied { read } for pid=11830 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 618.812702][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.146681][T11851] sd 0:0:1:0: device reset [ 620.279920][T11858] fuse: Bad value for 'fd' [ 620.607483][ T29] audit: type=1400 audit(2000000076.730:744): avc: denied { append } for pid=11861 comm="syz.2.1460" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 622.208107][T11878] netlink: set zone limit has 4 unknown bytes [ 622.374711][ T29] audit: type=1400 audit(2000000078.460:745): avc: denied { mount } for pid=11861 comm="syz.2.1460" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 623.009026][ T29] audit: type=1400 audit(2000000079.120:746): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 624.635093][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 624.745132][T11892] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1469'. [ 625.224952][ T5193] block nbd0: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 30 seconds [ 625.239167][ T5193] block nbd0: Possible stuck request ffff888027270200: control (read@1024,1024B). Runtime 30 seconds [ 625.310338][ T5193] block nbd0: Possible stuck request ffff888027270400: control (read@2048,1024B). Runtime 30 seconds [ 625.321253][ T5193] block nbd0: Possible stuck request ffff888027270600: control (read@3072,1024B). Runtime 30 seconds [ 625.993407][T11920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.791533][T11920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.237867][T11920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.734868][T11920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.089303][T11980] netlink: 'syz.1.1487': attribute type 1 has an invalid length. [ 631.346132][ T1161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.496716][ T1161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.506686][ T6455] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.684749][ T6455] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.139340][T11991] random: crng reseeded on system resumption [ 632.160153][T11991] FAT-fs (nbd2): unable to read boot sector [ 632.503874][T12003] xt_TCPMSS: Only works on TCP SYN packets [ 635.306295][ T29] audit: type=1400 audit(2000000090.800:747): avc: denied { ioctl } for pid=12020 comm="syz.4.1498" path="socket:[28019]" dev="sockfs" ino=28019 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 640.761367][ T29] audit: type=1400 audit(2000000096.880:748): avc: denied { append } for pid=12069 comm="syz.1.1510" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 640.868202][ T29] audit: type=1400 audit(2000000096.980:749): avc: denied { mounton } for pid=12069 comm="syz.1.1510" path="/252/file0" dev="tmpfs" ino=1331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 640.895104][T12072] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12072 comm=syz.0.1509 [ 642.367341][ T29] audit: type=1400 audit(2000000098.200:750): avc: denied { create } for pid=12078 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 642.407380][ T29] audit: type=1400 audit(2000000098.230:751): avc: denied { bind } for pid=12078 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 643.879003][T12099] No such timeout policy "syz0" [ 647.177583][T12128] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 648.361125][T12134] xt_CT: No such helper "pptp" [ 649.183744][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 650.320517][ T29] audit: type=1400 audit(2000000106.440:752): avc: denied { create } for pid=12158 comm="syz.0.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 654.010731][ T29] audit: type=1400 audit(2000000110.090:753): avc: denied { bind } for pid=12201 comm="syz.4.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 655.013089][ T29] audit: type=1400 audit(2000000111.130:754): avc: denied { setopt } for pid=12212 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 655.308303][T12226] blktrace: Concurrent blktraces are not allowed on loop6 [ 655.866174][ T5193] block nbd0: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 60 seconds [ 655.877216][ T5193] block nbd0: Possible stuck request ffff888027270200: control (read@1024,1024B). Runtime 60 seconds [ 655.888179][ T5193] block nbd0: Possible stuck request ffff888027270400: control (read@2048,1024B). Runtime 60 seconds [ 655.899122][ T5193] block nbd0: Possible stuck request ffff888027270600: control (read@3072,1024B). Runtime 60 seconds [ 657.219210][T12251] hfs: can't find a HFS filesystem on dev nullb0 [ 662.327138][ T29] audit: type=1400 audit(2000000118.440:755): avc: denied { listen } for pid=12282 comm="syz.4.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 665.644216][T12319] loop5: detected capacity change from 0 to 7 [ 665.658352][T12319] Dev loop5: unable to read RDB block 7 [ 665.664008][T12319] loop5: AHDI p1 [ 665.667999][T12319] loop5: partition table partially beyond EOD, truncated [ 665.756429][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 666.165954][T12319] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.297262][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 666.385731][T12321] ceph: No mds server is up or the cluster is laggy [ 666.825165][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 666.948902][T12319] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.043840][T12341] veth0: entered promiscuous mode [ 667.062402][T12340] veth0: left promiscuous mode [ 667.115545][T12319] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.314586][T12319] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.427786][ T6161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.472730][ T6161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.554191][ T1161] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.571405][ T1161] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.358905][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 669.018169][T12361] overlayfs: failed to clone upperpath [ 669.051623][T12362] /dev/nullb0: Can't open blockdev [ 669.514030][ T29] audit: type=1326 audit(2000000381.602:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.3.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 669.569648][ T29] audit: type=1326 audit(2000000381.612:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.3.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 669.641941][ T29] audit: type=1326 audit(2000000381.732:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.3.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 669.724635][ T29] audit: type=1326 audit(2000000381.732:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.3.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 669.816333][ T29] audit: type=1326 audit(2000000381.732:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12363 comm="syz.3.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c999c799 code=0x7ffc0000 [ 670.587219][ T29] audit: type=1400 audit(2000000382.703:761): avc: denied { mounton } for pid=12372 comm="syz.1.1579" path="/263/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 678.330276][T12446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12446 comm=syz.2.1596 [ 679.652603][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 679.856922][T12454] ceph: No mds server is up or the cluster is laggy [ 680.180596][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.443376][T12466] overlayfs: failed to clone upperpath [ 681.327287][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1602'. [ 681.336577][T12478] netlink: 30 bytes leftover after parsing attributes in process `syz.2.1602'. [ 681.345681][T12478] tipc: Invalid UDP bearer configuration [ 681.345876][T12478] tipc: Enabling of bearer rejected, failed to enable media [ 681.672077][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 681.681379][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 681.692769][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.704045][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 681.714544][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.733162][ T29] audit: type=1400 audit(2000000393.848:762): avc: denied { mounton } for pid=12480 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 681.763075][T12480] Failed to initialize the IGMP autojoin socket (err -2) [ 682.148813][ T29] audit: type=1400 audit(2000000394.279:763): avc: denied { read } for pid=12489 comm="syz.2.1605" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 682.246063][ T29] audit: type=1400 audit(2000000394.279:764): avc: denied { open } for pid=12489 comm="syz.2.1605" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 682.316800][T12480] chnl_net:caif_netlink_parms(): no params data found [ 682.358463][ T29] audit: type=1400 audit(2000000394.299:765): avc: denied { ioctl } for pid=12489 comm="syz.2.1605" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 682.441386][T12500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'. [ 683.177548][ T5873] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 683.363925][T12480] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.866067][ T5821] Bluetooth: hci5: command tx timeout [ 683.907809][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.917896][ T5873] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 683.926370][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.936636][T12480] bridge_slave_0: entered allmulticast mode [ 683.938942][ T5873] usb 3-1: config 0 has no interfaces? [ 683.959225][T12480] bridge_slave_0: entered promiscuous mode [ 683.977474][ T5873] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 683.978438][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.004670][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.022794][T12480] bridge_slave_1: entered allmulticast mode [ 684.049630][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.060049][T12480] bridge_slave_1: entered promiscuous mode [ 684.113044][ T5873] usb 3-1: config 0 descriptor?? [ 684.393537][T12480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.412515][T12480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.578435][T12536] overlayfs: failed to clone upperpath [ 685.808734][T12480] team0: Port device team_slave_0 added [ 685.935618][ T5821] Bluetooth: hci5: command tx timeout [ 686.294761][ T5193] block nbd0: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 90 seconds [ 686.305445][ T5193] block nbd0: Possible stuck request ffff888027270200: control (read@1024,1024B). Runtime 90 seconds [ 686.316321][ T5193] block nbd0: Possible stuck request ffff888027270400: control (read@2048,1024B). Runtime 90 seconds [ 686.327188][ T5193] block nbd0: Possible stuck request ffff888027270600: control (read@3072,1024B). Runtime 90 seconds [ 686.353043][T12480] team0: Port device team_slave_1 added [ 686.383228][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 686.464030][T12480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.479919][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.506446][T12480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.577980][T12480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.584970][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.615267][T12480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.957628][ T29] audit: type=1400 audit(2000000399.081:766): avc: denied { ioctl } for pid=12547 comm="syz.1.1616" path="socket:[29851]" dev="sockfs" ino=29851 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 687.300393][T12552] can0: slcan on ttyS3. [ 687.352906][T12480] hsr_slave_0: entered promiscuous mode [ 687.377062][ T5873] usb 3-1: USB disconnect, device number 15 [ 687.397973][T12480] hsr_slave_1: entered promiscuous mode [ 687.404032][T12480] debugfs: 'hsr0' already exists in 'hsr' [ 687.433767][T12480] Cannot create hsr debugfs directory [ 688.024562][ T5821] Bluetooth: hci5: command tx timeout [ 688.174886][T12547] can0 (unregistered): slcan off ttyS3. [ 688.282925][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.354197][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.362029][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.369757][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.377490][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.385217][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.392923][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.400645][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.408359][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 688.416264][T12563] netlink: 'syz.4.1614': attribute type 3 has an invalid length. [ 690.091357][T12480] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 690.104340][ T5821] Bluetooth: hci5: command tx timeout [ 690.112887][T12480] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 690.151172][T12480] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 690.219054][T12480] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 690.225500][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1624'. [ 691.643273][T12598] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1627'. [ 692.137299][T12480] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.615853][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.623041][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.723417][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.730577][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.319212][ T5821] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 694.319501][ T5821] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 694.328445][ T5821] Bluetooth: hci3: Malformed LE Event: 0x02 [ 694.344344][ T29] audit: type=1400 audit(2000000406.415:767): avc: denied { ioctl } for pid=12628 comm="syz.1.1626" path="socket:[30254]" dev="sockfs" ino=30254 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 695.029404][T12480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.542508][T12640] i2c i2c-0: dtv_property_process_set: SET cmd 0x00008002 undefined [ 696.310324][ T29] audit: type=1400 audit(2000000408.316:768): avc: denied { shutdown } for pid=12635 comm="syz.4.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 696.613780][T12480] veth0_vlan: entered promiscuous mode [ 696.640587][T12480] veth1_vlan: entered promiscuous mode [ 696.855453][T12480] veth0_macvtap: entered promiscuous mode [ 696.904842][T12480] veth1_macvtap: entered promiscuous mode [ 696.982242][ T29] audit: type=1400 audit(2000000409.096:769): avc: denied { read } for pid=12662 comm="syz.2.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 697.031892][T12480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.185052][T12480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.742205][ T29] audit: type=1400 audit(2000000409.406:770): avc: denied { read } for pid=12665 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 697.922295][T12480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 698.486288][T12480] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 698.532601][T12480] wireguard: wg0: Could not create IPv4 socket [ 698.584433][T12480] wireguard: wg1: Could not create IPv4 socket [ 698.613529][T12480] wireguard: wg2: Could not create IPv4 socket [ 698.821340][T12681] binder: 12678:12681 ioctl 4018620d 0 returned -22 [ 698.832247][T12681] binder: 12678:12681 ioctl c0306201 0 returned -14 [ 699.995699][ T29] audit: type=1400 audit(2000000412.128:771): avc: denied { read } for pid=12691 comm="syz.4.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 700.474222][T12697] overlayfs: failed to clone upperpath [ 702.299242][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 702.321714][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 702.333478][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 702.342613][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 702.351000][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 702.713165][T12729] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 703.032931][T12722] Failed to initialize the IGMP autojoin socket (err -2) [ 704.965980][ T5821] Bluetooth: hci5: command tx timeout [ 707.325988][ T5821] Bluetooth: hci5: command tx timeout [ 709.398378][ T5821] Bluetooth: hci5: command tx timeout [ 710.511401][T12722] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 710.537923][T12803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12803 comm=syz.1.1665 [ 710.606081][T12722] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 711.234742][T12722] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 711.249647][T12722] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 711.293802][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 711.489467][ T5821] Bluetooth: hci5: command tx timeout [ 711.502787][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 711.533562][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.544102][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 711.555830][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.743708][ T24] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 711.772324][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.812966][ T24] usb 3-1: Product: syz [ 711.817161][ T24] usb 3-1: Manufacturer: syz [ 711.821722][ T24] usb 3-1: SerialNumber: syz [ 711.873259][ T24] usb 3-1: config 0 descriptor?? [ 711.896262][ T24] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 712.141799][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.166403][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.740658][T12838] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 712.748671][T12838] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 712.759509][T12838] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 712.767318][T12838] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 713.099138][ T9] usb 3-1: USB disconnect, device number 16 [ 713.343365][T12851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.516560][T12722] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 713.565038][T12722] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 713.610680][T12722] wireguard: wg0: Could not create IPv4 socket [ 713.626710][T12722] wireguard: wg1: Could not create IPv4 socket [ 713.650758][T12722] wireguard: wg2: Could not create IPv4 socket [ 716.646963][ T5193] block nbd0: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 120 seconds [ 716.657884][ T5193] block nbd0: Possible stuck request ffff888027270200: control (read@1024,1024B). Runtime 120 seconds [ 716.669502][ T5193] block nbd0: Possible stuck request ffff888027270400: control (read@2048,1024B). Runtime 120 seconds [ 716.680564][ T5193] block nbd0: Possible stuck request ffff888027270600: control (read@3072,1024B). Runtime 120 seconds [ 718.998155][ T5177] udevd[5177]: worker [11038] /devices/virtual/block/nbd0 is taking a long time [ 722.641365][T12979] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 724.564291][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 724.574900][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 724.592637][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 724.600594][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 724.608444][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 724.645590][T13009] Failed to initialize the IGMP autojoin socket (err -2) [ 726.635873][ T5819] Bluetooth: hci5: command tx timeout [ 726.677822][T13009] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 726.702554][T13009] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 726.812211][T13009] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 726.833619][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1707'. [ 726.889006][T13009] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 727.566061][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 728.208143][T13086] validate_nla: 37 callbacks suppressed [ 728.208175][T13086] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 728.221604][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 728.731855][ T5819] Bluetooth: hci5: command tx timeout [ 730.863034][ T5819] Bluetooth: hci5: command tx timeout [ 732.800936][T13009] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 732.880076][T13009] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 732.972038][ T5819] Bluetooth: hci5: command tx timeout [ 733.467661][T13009] wireguard: wg0: Could not create IPv4 socket [ 733.545845][T13142] input: syz1 as /devices/virtual/input/input12 [ 733.774995][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 735.532505][T13009] wireguard: wg1: Could not create IPv4 socket [ 735.541264][T13009] wireguard: wg2: Could not create IPv4 socket [ 735.754070][T13154] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1722'. [ 737.340009][ T29] audit: type=1400 audit(2000000449.486:772): avc: denied { mount } for pid=13184 comm="syz.1.1726" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 738.086864][T13188] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 738.544594][ T29] audit: type=1400 audit(2000000449.786:773): avc: denied { watch_sb } for pid=13184 comm="syz.1.1726" path="/296/file0" dev="tmpfs" ino=1562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 741.591995][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.124982][ T29] audit: type=1400 audit(2000000455.889:774): avc: denied { append } for pid=13237 comm="syz.2.1735" name="sg0" dev="devtmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 745.583498][T13265] overlayfs: conflicting lowerdir path [ 745.617825][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 745.627436][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 745.641024][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 745.649951][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 745.657627][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 745.735330][T13260] Failed to initialize the IGMP autojoin socket (err -2) [ 746.705315][ T5193] block nbd0: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 150 seconds [ 746.716233][ T5193] block nbd0: Possible stuck request ffff888027270200: control (read@1024,1024B). Runtime 150 seconds [ 746.727223][ T5193] block nbd0: Possible stuck request ffff888027270400: control (read@2048,1024B). Runtime 150 seconds [ 746.738405][ T5193] block nbd0: Possible stuck request ffff888027270600: control (read@3072,1024B). Runtime 150 seconds [ 747.075190][ T29] audit: type=1400 audit(2000000459.161:775): avc: denied { create } for pid=13287 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 747.679155][ T29] audit: type=1400 audit(2000000459.831:776): avc: denied { audit_write } for pid=13298 comm="syz.4.1746" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 747.798363][ T5821] Bluetooth: hci5: command tx timeout [ 749.825222][ T5821] Bluetooth: hci5: command tx timeout [ 750.031811][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 750.080645][T13260] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 750.233657][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 750.242656][T13328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.600804][T13260] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 750.662084][T13260] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 750.790730][T13260] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 752.372297][ T5821] Bluetooth: hci5: command tx timeout [ 754.389624][ T5819] Bluetooth: hci5: command tx timeout [ 755.480357][ T29] audit: type=1326 audit(2000000467.635:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13358 comm="syz.1.1756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x0 [ 756.994414][T13394] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 758.911192][T13260] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 759.009966][T13260] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 759.028604][T13260] wireguard: wg0: Could not create IPv4 socket [ 759.037502][T13260] wireguard: wg1: Could not create IPv4 socket [ 759.126470][T13260] wireguard: wg2: Could not create IPv4 socket [ 765.835220][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 765.844819][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 765.852823][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 765.860548][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 765.868193][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 765.936171][T13516] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 766.855215][T13505] Failed to initialize the IGMP autojoin socket (err -2) [ 767.121128][ T29] audit: type=1400 audit(2000000479.281:778): avc: denied { ioctl } for pid=13526 comm="syz.4.1780" path="socket:[34503]" dev="sockfs" ino=34503 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 768.782395][ T5821] Bluetooth: hci5: command tx timeout [ 769.637967][T13505] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 769.697285][T13505] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 769.763786][T13505] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 770.367205][T13505] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 770.697970][T13570] o2cb: This node has not been configured. [ 770.704708][T13570] o2cb: Cluster check failed. Fix errors before retrying. [ 770.711943][T13570] (syz.3.1787,13570,1):user_dlm_register:674 ERROR: status = -22 [ 770.719867][T13570] (syz.3.1787,13570,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 770.733752][T13570] o2cb: This node has not been configured. [ 770.739594][T13570] o2cb: Cluster check failed. Fix errors before retrying. [ 770.746987][T13570] (syz.3.1787,13570,1):user_dlm_register:674 ERROR: status = -22 [ 770.754880][T13570] (syz.3.1787,13570,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 770.779403][ T29] audit: type=1400 audit(2000000482.853:779): avc: denied { add_name } for pid=13566 comm="syz.3.1787" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.929520][ T5821] Bluetooth: hci5: command tx timeout [ 770.936578][ T29] audit: type=1400 audit(2000000482.863:780): avc: denied { create } for pid=13566 comm="syz.3.1787" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 770.960066][ T29] audit: type=1400 audit(2000000482.863:781): avc: denied { associate } for pid=13566 comm="syz.3.1787" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 771.263280][T13581] Failed to initialize the IGMP autojoin socket (err -2) [ 771.647332][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 772.514405][T13606] syzkaller0: entered promiscuous mode [ 772.562280][T13606] syzkaller0: entered allmulticast mode [ 772.592748][T13505] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 772.766766][T13505] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 772.810312][T13505] wireguard: wg0: Could not create IPv4 socket [ 772.842219][T13505] wireguard: wg1: Could not create IPv4 socket [ 772.865694][T13505] wireguard: wg2: Could not create IPv4 socket [ 773.060169][ T5821] Bluetooth: hci5: command tx timeout [ 776.770176][ T5193] block nbd0: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 180 seconds [ 776.781013][ T5193] block nbd0: Possible stuck request ffff888027270200: control (read@1024,1024B). Runtime 180 seconds [ 776.792251][ T5193] block nbd0: Possible stuck request ffff888027270400: control (read@2048,1024B). Runtime 180 seconds [ 776.803353][ T5193] block nbd0: Possible stuck request ffff888027270600: control (read@3072,1024B). Runtime 180 seconds [ 777.145757][T13674] netlink: 'syz.4.1807': attribute type 12 has an invalid length. [ 778.382463][T13688] program syz.1.1809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.133193][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 780.144943][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 780.211225][T13707] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 780.263925][ T29] audit: type=1400 audit(2000000492.398:782): avc: denied { relabelto } for pid=13702 comm="syz.3.1811" name="438" dev="tmpfs" ino=2313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 780.544866][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 780.553553][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 780.561084][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 780.607459][T13705] Failed to initialize the IGMP autojoin socket (err -2) [ 780.628256][ T29] audit: type=1400 audit(2000000492.398:783): avc: denied { associate } for pid=13702 comm="syz.3.1811" name="438" dev="tmpfs" ino=2313 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 781.127877][ T29] audit: type=1400 audit(2000000492.408:784): avc: denied { add_name } for pid=13702 comm="syz.3.1811" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 781.604956][ T29] audit: type=1400 audit(2000000492.408:785): avc: denied { associate } for pid=13702 comm="syz.3.1811" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 781.676194][ T29] audit: type=1400 audit(2000000493.078:786): avc: denied { remove_name } for pid=5803 comm="syz-executor" name="bus" dev="tmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 781.705223][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1814'. [ 782.727540][ T5819] Bluetooth: hci5: command tx timeout [ 783.116887][ T29] audit: type=1400 audit(2000000493.078:787): avc: denied { rmdir } for pid=5803 comm="syz-executor" name="bus" dev="tmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 783.150231][ T29] audit: type=1400 audit(2000000493.078:788): avc: denied { rmdir } for pid=5803 comm="syz-executor" name="438" dev="tmpfs" ino=2313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 783.681525][ T29] audit: type=1326 audit(2000000495.859:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 784.300272][ T29] audit: type=1326 audit(2000000495.859:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 784.439434][ T29] audit: type=1326 audit(2000000495.859:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.1.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5022d9c799 code=0x7ffc0000 [ 784.769017][ T5819] Bluetooth: hci5: command tx timeout [ 785.057103][T13768] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 785.620681][T13769] netlink: 'syz.2.1819': attribute type 6 has an invalid length. [ 786.070026][T13766] netlink: 'syz.2.1819': attribute type 6 has an invalid length. [ 786.862246][ T5819] Bluetooth: hci5: command tx timeout [ 787.054896][ T47] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 787.703327][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.713458][ T47] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.767673][ T47] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 787.820187][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.840534][ T47] usb 3-1: Product: syz [ 787.856081][ T47] usb 3-1: Manufacturer: syz [ 787.882390][ T47] usb 3-1: SerialNumber: syz [ 787.913308][ T47] usb 3-1: config 0 descriptor?? [ 787.984752][ T47] usb 3-1: can't set config #0, error -71 [ 788.014651][ T47] usb 3-1: USB disconnect, device number 17 [ 788.750497][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 788.750536][ T29] audit: type=1400 audit(2000000500.502:814): avc: denied { connect } for pid=13800 comm="syz.2.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 788.988665][ T5819] Bluetooth: hci5: command tx timeout [ 789.016898][T13705] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 789.100877][T13705] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 789.270982][T13705] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 789.298811][T13705] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 789.798285][T13806] syzkaller0: entered promiscuous mode [ 789.819323][T13806] syzkaller0: entered allmulticast mode [ 792.946512][T13705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 792.985108][T13705] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 793.569623][T13705] wireguard: wg0: Could not create IPv4 socket [ 793.598028][T13705] wireguard: wg1: Could not create IPv4 socket [ 793.606383][T13705] wireguard: wg2: Could not create IPv4 socket [ 793.972749][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'. [ 794.289528][T13896] netlink: 'syz.3.1838': attribute type 7 has an invalid length. [ 794.298426][T13896] netlink: 'syz.3.1838': attribute type 8 has an invalid length. [ 795.585230][ T5819] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 797.659974][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 798.028386][T13906] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 798.136820][T13906] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 799.937831][T13906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 800.400756][T13906] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 800.545167][T13906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 800.610911][T13906] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 801.785945][T14015] kAFS: unable to lookup cell '˙' [ 802.207121][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.220993][ T29] audit: type=1400 audit(2000000514.409:815): avc: denied { module_load } for pid=14025 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 802.472850][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.558814][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.566593][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.575369][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 802.650355][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.658723][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.666348][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.684524][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.697710][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 802.741844][T14024] Failed to initialize the IGMP autojoin socket (err -2) [ 803.019342][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.006204][T14048] SELinux: failed to load policy [ 804.555657][T14024] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 804.587635][T14024] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 804.611694][T14024] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 804.809495][ T5819] Bluetooth: hci5: command tx timeout [ 805.209525][T14024] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 806.893594][ T5819] Bluetooth: hci5: command tx timeout [ 806.895123][ T5193] block nbd0: Possible stuck request ffff888027270000: control (read@0,1024B). Runtime 210 seconds [ 806.916243][ T5193] block nbd0: Possible stuck request ffff888027270200: control (read@1024,1024B). Runtime 210 seconds [ 806.927533][ T5193] block nbd0: Possible stuck request ffff888027270400: control (read@2048,1024B). Runtime 210 seconds [ 806.938740][ T5193] block nbd0: Possible stuck request ffff888027270600: control (read@3072,1024B). Runtime 210 seconds [ 807.530541][T14117] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 807.538529][T14117] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1866'. [ 808.855215][ T29] audit: type=1400 audit(2000000520.932:816): avc: denied { ioctl } for pid=14138 comm="syz.3.1870" path="socket:[36483]" dev="sockfs" ino=36483 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 808.983602][ T5819] Bluetooth: hci5: command tx timeout [ 808.997847][T14024] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 809.091228][T14149] afs: Unknown parameter 'autocel˙˙' [ 809.548771][T14024] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 809.566991][T14024] wireguard: wg0: Could not create IPv4 socket [ 809.580278][T14024] wireguard: wg1: Could not create IPv4 socket [ 809.591256][T14024] wireguard: wg2: Could not create IPv4 socket [ 809.838073][ T29] audit: type=1400 audit(2000000521.882:817): avc: denied { connect } for pid=14152 comm="syz.1.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 810.675207][ T30] INFO: task syz.0.1568:12318 blocked for more than 144 seconds. [ 810.696933][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 810.763469][ T29] audit: type=1400 audit(2000000522.943:818): avc: denied { write } for pid=5788 comm="syz-executor" path="pipe:[4833]" dev="pipefs" ino=4833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 810.787563][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.833219][ T30] task:syz.0.1568 state:D stack:28792 pid:12318 tgid:12317 ppid:5804 task_flags:0x400040 flags:0x00080002 [ 810.897307][ T30] Call Trace: [ 810.900629][ T30] [ 810.982919][ T30] __schedule+0xfee/0x6120 [ 810.993422][ T5819] Bluetooth: hci5: command tx timeout [ 811.013401][ T30] ? __lock_acquire+0x4a5/0x2630 [ 811.018391][ T30] ? __pfx___schedule+0x10/0x10 [ 811.086071][ T30] ? find_held_lock+0x2b/0x80 [ 811.091327][ T30] ? schedule+0x2bf/0x390 [ 811.097125][ T30] schedule+0xdd/0x390 [ 811.101210][ T30] schedule_preempt_disabled+0x13/0x30 [ 811.123173][ T30] __mutex_lock+0xc9a/0x1b90 [ 811.127797][ T30] ? bdev_open+0x41a/0xe40 [ 811.143465][ T30] ? find_held_lock+0x2b/0x80 [ 811.148180][ T30] ? find_inode_fast+0x5e3/0x910 [ 811.162891][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 811.167941][ T30] ? find_inode_fast+0x1fa/0x910 [ 811.182883][ T30] ? bdev_open+0x41a/0xe40 [ 811.187325][ T30] bdev_open+0x41a/0xe40 [ 811.191564][ T30] ? iput+0x3a/0x40 [ 811.212279][ T30] blkdev_open+0x34e/0x4f0 [ 811.219793][ T30] do_dentry_open+0x6d8/0x1660 [ 811.231497][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 811.242857][ T30] vfs_open+0x82/0x3f0 [ 811.246948][ T30] path_openat+0x208c/0x31a0 [ 811.251548][ T30] ? __pfx_path_openat+0x10/0x10 [ 811.272765][ T30] do_file_open+0x20e/0x430 [ 811.277308][ T30] ? __pfx_do_file_open+0x10/0x10 [ 811.282353][ T30] ? alloc_fd+0x476/0x790 [ 811.292750][ T30] ? do_getname+0x191/0x390 [ 811.297285][ T30] do_sys_openat2+0x10d/0x1e0 [ 811.301965][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 811.325970][ T30] __x64_sys_openat+0x12d/0x210 [ 811.330862][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 811.343917][ T30] ? do_user_addr_fault+0x8d6/0x12f0 [ 811.349240][ T30] do_syscall_64+0x106/0xf80 [ 811.353948][ T30] ? clear_bhb_loop+0x40/0x90 [ 811.358633][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.364638][ T30] RIP: 0033:0x7ff779d5cfce [ 811.369048][ T30] RSP: 002b:00007ff77abebb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 811.377932][ T30] RAX: ffffffffffffffda RBX: 00007ff77abec6c0 RCX: 00007ff779d5cfce [ 811.386069][ T30] RDX: 0000000000008000 RSI: 00007ff77abebc00 RDI: ffffffffffffff9c [ 811.397433][ T30] RBP: 00007ff77abebc00 R08: 0000000000000000 R09: 0000000000000000 [ 811.405564][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 811.414275][ T30] R13: 00007ff77a016038 R14: 00007ff77a015fa0 R15: 00007fffda933048 [ 811.422272][ T30] [ 811.425426][ T30] [ 811.425426][ T30] Showing all locks held in the system: [ 811.572658][ T30] 3 locks held by kworker/0:0/9: [ 811.577643][ T30] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 811.636894][ T30] #1: ffffc900000e7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 811.692603][ T30] #2: ffffffff8e7f3238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 811.722659][ T30] 1 lock held by khungtaskd/30: [ 811.727520][ T30] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 811.792609][ T30] 3 locks held by kworker/1:1/47: [ 811.797660][ T30] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 811.862573][ T30] #1: ffffc90000b77d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 811.891298][ T30] #2: ffff888056c12240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 811.901800][ T30] 1 lock held by klogd/5166: [ 811.906421][ T30] 2 locks held by getty/5567: [ 811.914830][ T30] #0: ffff888036a430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 811.941349][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 811.957201][ T30] 1 lock held by syz-executor/5803: [ 811.964132][ T30] #0: ffffffff90610828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 811.976605][ T30] 3 locks held by kworker/u8:10/6161: [ 811.981972][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 811.998373][ T30] #1: ffffc90005ff7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 812.008936][ T30] #2: ffffffff90610828 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 812.018250][ T30] 1 lock held by udevd/11038: [ 812.023089][ T30] #0: ffff888027132358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 812.033025][ T30] 1 lock held by syz.0.1568/12318: [ 812.039352][ T30] #0: ffff888027132358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 812.052056][ T30] 1 lock held by syz-executor/14024: [ 812.057441][ T30] #0: ffffffff90610828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 812.066454][ T30] 1 lock held by syz.2.1871/14147: [ 812.071560][ T30] #0: ffffffff90610828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 812.082265][ T30] 1 lock held by syz.1.1875/14160: [ 812.087433][ T30] #0: ffffffff90610828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 812.096607][ T30] 1 lock held by syz.4.1877/14166: [ 812.101711][ T30] #0: ffffffff90610828 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 812.115509][ T30] [ 812.120903][ T30] ============================================= [ 812.120903][ T30] [ 812.136934][ T30] NMI backtrace for cpu 1 [ 812.136951][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 812.136972][ T30] Tainted: [L]=SOFTLOCKUP [ 812.136977][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 812.136985][ T30] Call Trace: [ 812.136991][ T30] [ 812.136997][ T30] dump_stack_lvl+0x100/0x190 [ 812.137030][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 812.137050][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 812.137078][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 812.137103][ T30] sys_info+0x141/0x190 [ 812.137120][ T30] watchdog+0xd25/0x1050 [ 812.137146][ T30] ? __pfx_watchdog+0x10/0x10 [ 812.137166][ T30] ? __kthread_parkme+0x18c/0x230 [ 812.137189][ T30] ? kthread+0x13a/0x450 [ 812.137202][ T30] ? __pfx_watchdog+0x10/0x10 [ 812.137221][ T30] kthread+0x370/0x450 [ 812.137235][ T30] ? __pfx_kthread+0x10/0x10 [ 812.137252][ T30] ret_from_fork+0x754/0xd80 [ 812.137271][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 812.137290][ T30] ? __switch_to+0x7b4/0x1120 [ 812.137311][ T30] ? __pfx_kthread+0x10/0x10 [ 812.137328][ T30] ret_from_fork_asm+0x1a/0x30 [ 812.137361][ T30] [ 812.137367][ T30] Sending NMI from CPU 1 to CPUs 0: [ 812.263384][ C0] NMI backtrace for cpu 0 [ 812.263400][ C0] CPU: 0 UID: 0 PID: 14184 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 812.263420][ C0] Tainted: [L]=SOFTLOCKUP [ 812.263425][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 812.263432][ C0] RIP: 0010:kasan_check_range+0x159/0x1e0 [ 812.263452][ C0] Code: 90 48 83 c0 01 49 89 d3 48 39 d0 74 0f 80 38 00 74 ef 4e 8d 5c 25 00 48 85 c0 75 9d 48 89 da 4c 89 d8 4c 29 da e9 32 ff ff ff <48> 85 d2 74 98 48 01 ea eb 1a 66 66 2e 0f 1f 84 00 00 00 00 00 66 [ 812.263466][ C0] RSP: 0018:ffffc90003caf550 EFLAGS: 00000283 [ 812.263478][ C0] RAX: fffff940002c5a66 RBX: fffff940002c5a67 RCX: ffffffff8271b03e [ 812.263487][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea000162d334 [ 812.263495][ C0] RBP: fffff940002c5a66 R08: 0000000000000000 R09: fffff940002c5a66 [ 812.263504][ C0] R10: ffffea000162d337 R11: 0000000000000000 R12: 0000000000000000 [ 812.263513][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000043 [ 812.263521][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 812.263536][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.263545][ C0] CR2: 00007fcf95c69ff8 CR3: 000000008d8a1000 CR4: 00000000003526f0 [ 812.263555][ C0] Call Trace: [ 812.263559][ C0] [ 812.263564][ C0] alloc_pages_noprof+0x1ae/0x390 [ 812.263579][ C0] get_free_pages_noprof+0x10/0xb0 [ 812.263600][ C0] tlb_remove_table+0x361/0xa60 [ 812.263617][ C0] free_pgd_range+0xc0e/0x11f0 [ 812.263635][ C0] relocate_vma_down+0x33e/0x4d0 [ 812.263655][ C0] ? __pfx_relocate_vma_down+0x10/0x10 [ 812.263685][ C0] ? mprotect_fixup+0x55f/0xb70 [ 812.263704][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 812.263722][ C0] ? tlb_finish_mmu+0x2bf/0x810 [ 812.263739][ C0] setup_arg_pages+0x539/0xb30 [ 812.263759][ C0] ? __pfx_setup_arg_pages+0x10/0x10 [ 812.263781][ C0] ? get_random_u64+0x575/0x7c0 [ 812.263805][ C0] load_elf_binary+0xb68/0x51b0 [ 812.263825][ C0] ? lock_acquire+0x1cf/0x380 [ 812.263845][ C0] ? find_held_lock+0x2b/0x80 [ 812.263860][ C0] ? load_misc_binary+0x95e/0xd20 [ 812.263878][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 812.263895][ C0] ? find_held_lock+0x2b/0x80 [ 812.263911][ C0] ? bprm_execve+0x8d9/0x1680 [ 812.263928][ C0] ? bprm_execve+0x8d9/0x1680 [ 812.263947][ C0] bprm_execve+0x8fb/0x1680 [ 812.263967][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 812.263984][ C0] ? copy_strings.isra.0+0x4b2/0x9b0 [ 812.264005][ C0] do_execveat_common.isra.0+0x4a5/0x580 [ 812.264026][ C0] __x64_sys_execve+0x93/0xd0 [ 812.264046][ C0] do_syscall_64+0x106/0xf80 [ 812.264065][ C0] ? clear_bhb_loop+0x40/0x90 [ 812.264080][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.264094][ C0] RIP: 0033:0x7fcf95e00107 [ 812.264109][ C0] Code: Unable to access opcode bytes at 0x7fcf95e000dd. [ 812.264115][ C0] RSP: 002b:00007fcf95c69e68 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 812.264127][ C0] RAX: ffffffffffffffda RBX: 00007ffd3e79cd30 RCX: 00007fcf95e00107 [ 812.264135][ C0] RDX: 000055faeb132690 RSI: 00007ffd3e79cf20 RDI: 000055fad23ad6bd [ 812.264144][ C0] RBP: 00007fcf95c69ff0 R08: 0000000000000000 R09: 0000000000000000 [ 812.264152][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: 0000000000000001 [ 812.264161][ C0] R13: 00007ffd3e79ca10 R14: 00007fcf95c69f20 R15: 0000000000000040 [ 812.264174][ C0] [ 812.616724][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 812.623586][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 812.634255][ T30] Tainted: [L]=SOFTLOCKUP [ 812.638559][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 812.648597][ T30] Call Trace: [ 812.651857][ T30] [ 812.654770][ T30] dump_stack_lvl+0x100/0x190 [ 812.659438][ T30] vpanic+0x552/0x970 [ 812.663399][ T30] ? __pfx_vpanic+0x10/0x10 [ 812.667883][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 812.674026][ T30] panic+0xd1/0xe0 [ 812.677728][ T30] ? __pfx_panic+0x10/0x10 [ 812.682132][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 812.688281][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 812.694425][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 812.700572][ T30] ? watchdog.cold+0x198/0x1ca [ 812.705319][ T30] ? watchdog+0xd35/0x1050 [ 812.709727][ T30] watchdog.cold+0x1a9/0x1ca [ 812.714320][ T30] ? __pfx_watchdog+0x10/0x10 [ 812.718984][ T30] ? __kthread_parkme+0x18c/0x230 [ 812.723997][ T30] ? kthread+0x13a/0x450 [ 812.728220][ T30] ? __pfx_watchdog+0x10/0x10 [ 812.732884][ T30] kthread+0x370/0x450 [ 812.736938][ T30] ? __pfx_kthread+0x10/0x10 [ 812.741513][ T30] ret_from_fork+0x754/0xd80 [ 812.746086][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 812.751182][ T30] ? __switch_to+0x7b4/0x1120 [ 812.755843][ T30] ? __pfx_kthread+0x10/0x10 [ 812.760415][ T30] ret_from_fork_asm+0x1a/0x30 [ 812.765171][ T30] [ 812.768373][ T30] Kernel Offset: disabled [ 812.772670][ T30] Rebooting in 86400 seconds..