last executing test programs: 914.540849ms ago: executing program 1 (id=2): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r2, @ANYBLOB="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"], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000003c0)={&(0x7f0000000380)=[{0x80, 0xc911, 0x86, &(0x7f0000000080)="20d8af97cbb6d2137e656e811880d5c74703f286af4fb600d67188765f54e34fe8abe97369c7f716ec0d14aa7fd9e2e03de351f37efc0c3460953ca8c4c3325693453545e852d0035eeb8d5aaebc7dc93ce00b1e78ca16a632acf170c1869e6ea312957192b5fba84a8ef4bd64c4884ac002acfc6ee8e1222d2da3f5e10e6254863f5416b8f7"}, {0x5, 0xa00, 0x33, &(0x7f0000000140)="f556602912594d1b91e9b2ee391c92d1ef11862262f8855b064e82d7749f53a2100f499c62993147621711aba9c3005a078f2b"}, {0x4, 0x2411, 0xb7, &(0x7f0000000180)="27f269be6ef7c293ebccd5c9cad750e7731d98c39703c7f12f54c9fa8fd245bf42974ac76d5aead198146bf6377447d1e1572b2855a084f6fc6f97c2a4ebde5c0bfed719f3ffcc187ad88114a4880b9870a836ea8c82a67d5288132822acd0212018ca0218be2e084a6bf94bdc8290dc2f759597ae209129171b8e34dea24c0f7e0c346a6c5243804807bc7da443d8c7865c09c4c5a5a7fc898ca44f94e1fb315706c2107ebb994294f8a821b2837d6ac9bfd282de8e6c"}, {0x101, 0x4001, 0xb0, &(0x7f00000002c0)="c3ff83fee16deb19d4196bb8ed135067e99a0d37402026d10a40d03179844b1e131ab440975cdbde81e471a71a1a7fc77adeb2b19035380af73f4c2b8950e9dc423d74a5d92dc7761617de3fcdaccd7e935ad3232e919c7423191c6e1e659652d1784934cdeb91aa48838e70411d94182ca3a468d2196eb82ddd47210523868a41d9dd346cb67d343b0237482ae934319e8bf94e7e1a47364b306b00e6925cae0048bb5667bcc596ae8b056c1a06fbfc"}], 0x4}) r3 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0xc3, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "9ee54763f3"}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c1a000800"/20, @ANYRES32=0x0, @ANYBLOB="00800000084400001c0012800b00010067656e65766500000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) 708.890122ms ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 639.770874ms ago: executing program 2 (id=3): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40086806, 0x21) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xbc, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:fsadm_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x4040804) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000740)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0xe, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x11, 0xf989, "0770efd53fd16110a5cb1d4771"}, @generic={0x4, 0xc, "d6aa3a2fb28d58fe4fd3"}, @sack={0x5, 0xe, [0xfffffffb, 0x4, 0x0]}, @md5sig={0x13, 0x12, "e696c0c27e03719465289a404c32c40a"}]}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x6801, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/118, 0x76}], 0x3, 0xd6840391, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 583.27822ms ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r2, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/182, 0xb6}], 0x37, 0xd6c40391, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x24, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) write(r7, &(0x7f0000000140)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000211419435ed74f4dda649a2146fcf170b7465678a1df63649bd64768eb6601b4f093e3e71fb6b15b6dd3111b641665afa6e0bf90c89f3d9d533da1cf670816", 0x63) 506.456745ms ago: executing program 1 (id=5): r0 = memfd_create(&(0x7f0000000040)='security.selinux\x00\xab', 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x80000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRES32, @ANYRES16], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000800) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$PPPOEIOCDFWD(r1, 0x5411, 0xf0ff1f00000000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x6, 0xffff, 0x0, 0x8, 0x8, 0x82, 0xde, 0xfd, 0x3, 0x0, 0x46, 0x0, 0x2}, {0x3746, 0x400, 0x2, 0x1, 0x0, 0x61, 0x1, 0x0, 0x0, 0x0, 0x42, 0xfd, 0xffffeffffffffffe}, {0x200003, 0x2, 0xe0, 0x80, 0x9, 0x4, 0x5d, 0x40, 0x42, 0x2, 0x3, 0x40, 0x3ae1}], 0x1ffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x0, r3}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x3ff, 0x8, 0x4, 0x3c5b, 0x9, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x2, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8080, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0xfffffffd, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x100007], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x8, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x6, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0xc, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x6, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x3ff, 0x3, 0x7f, 0xac1e, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r7, 0x8301}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) 409.73493ms ago: executing program 2 (id=6): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000500)={0x53, 0xffffffffffffffff, 0x0, 0x20, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x7, 0x7fff0000}]}) socket$packet(0x11, 0x2, 0x300) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={'\x00', 0x7, 0x1, 0xfff, 0x0, 0x4, 0x0}) prlimit64(r3, 0xc, &(0x7f0000000100), 0x0) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) rt_sigqueueinfo(r5, 0x26, &(0x7f0000000080)={0x35, 0x20a, 0xfffffff3}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40040001, 0x0, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xd82}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local, 0xfffffffc}, {0xa, 0xffff, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x3}, 0xffffffffffffffff, 0x9}}, 0x48) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x80002, 0x0) write(r6, &(0x7f0000000960)='1', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xf, 0x5, 0x0, 0xe}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 284.989735ms ago: executing program 1 (id=7): syz_open_dev$video4linux(&(0x7f00000002c0), 0x1, 0xc82) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xc8) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write(r0, &(0x7f0000000140)='1', 0x1) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r0, 0xc0106440, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)}) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f00000000c0)={0x2, 0xff}) 106.123025ms ago: executing program 1 (id=8): r0 = memfd_create(&(0x7f0000000040)='security.selinux\x00\xab', 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x80000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRES32, @ANYRES16, @ANYRES8=r1], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000800) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$PPPOEIOCDFWD(r1, 0x5411, 0xf0ff1f00000000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x6, 0xffff, 0x0, 0x8, 0x8, 0x82, 0xde, 0xfd, 0x3, 0x0, 0x46, 0x0, 0x2}, {0x3746, 0x400, 0x2, 0x1, 0x0, 0x61, 0x1, 0x0, 0x0, 0x0, 0x42, 0xfd, 0xffffeffffffffffe}, {0x200003, 0x2, 0xe0, 0x80, 0x9, 0x4, 0x5d, 0x40, 0x42, 0x2, 0x3, 0x40, 0x3ae1}], 0x1ffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r4, &(0x7f0000000000)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x0, r3}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x3ff, 0x8, 0x4, 0x3c5b, 0x9, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x2, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8080, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0xfffffffd, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x100007], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x8, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x6, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0xc, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x6, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x3ff, 0x3, 0x7f, 0xac1e, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r7, 0x8301}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) 0s ago: executing program 2 (id=9): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40086806, 0x21) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000740)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0xe, 0x0, 0xe7, {[@exp_fastopen={0xfe, 0x11, 0xf989, "0770efd53fd16110a5cb1d4771"}, @generic={0x4, 0xc, "d6aa3a2fb28d58fe4fd3"}, @sack={0x5, 0xe, [0xfffffffb, 0x4, 0x0]}, @md5sig={0x13, 0x12, "e696c0c27e03719465289a404c32c40a"}]}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x6801, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/118, 0x76}], 0x2, 0xd6840391, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:7938' (ED25519) to the list of known hosts. [ 40.415547][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.415561][ T43] audit: type=1400 audit(1790079359.096:138): avc: denied { name_bind } for pid=5716 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.451828][ T43] audit: type=1400 audit(1790079359.136:139): avc: denied { execute } for pid=5717 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.452408][ T43] audit: type=1400 audit(1790079359.136:140): avc: denied { execute_no_trans } for pid=5717 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.896425][ T43] audit: type=1400 audit(1790079361.576:141): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.899820][ T43] audit: type=1400 audit(1790079361.586:142): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.902734][ T5717] cgroup: Unknown subsys name 'net' [ 42.904695][ T43] audit: type=1400 audit(1790079361.586:143): avc: denied { unmount } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.079392][ T5717] cgroup: Unknown subsys name 'cpuset' [ 43.082633][ T5717] cgroup: Unknown subsys name 'rlimit' [ 43.238754][ T43] audit: type=1400 audit(1790079361.926:144): avc: denied { setattr } for pid=5717 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.239114][ T43] audit: type=1400 audit(1790079361.926:145): avc: denied { create } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.239389][ T43] audit: type=1400 audit(1790079361.926:146): avc: denied { write } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.239665][ T43] audit: type=1400 audit(1790079361.926:147): avc: denied { read } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.301082][ T5722] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.022883][ T5717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.735224][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 47.735241][ T43] audit: type=1400 audit(1790079366.416:158): avc: denied { execmem } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.996374][ T43] audit: type=1400 audit(1790079366.676:159): avc: denied { create } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.996407][ T43] audit: type=1400 audit(1790079366.676:160): avc: denied { read write } for pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.996614][ T43] audit: type=1400 audit(1790079366.676:161): avc: denied { open } for pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.003530][ T43] audit: type=1400 audit(1790079366.686:162): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="socket:[7265]" dev="sockfs" ino=7265 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.014255][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.015378][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.016950][ T5731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.017479][ T5731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.017555][ T5731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.017863][ T5731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.018963][ T5731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.019110][ T5731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.019746][ T5731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.020275][ T5731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.022366][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.029042][ T43] audit: type=1400 audit(1790079366.706:163): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.029068][ T43] audit: type=1400 audit(1790079366.706:164): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.029087][ T43] audit: type=1400 audit(1790079366.716:165): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.038304][ T43] audit: type=1400 audit(1790079366.716:166): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.041257][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.041530][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.041995][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.042469][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.042830][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.043109][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.044036][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.049017][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.051607][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.083017][ T43] audit: type=1400 audit(1790079366.766:167): avc: denied { sys_module } for pid=5738 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.741805][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.741891][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.741997][ T5728] bridge_slave_0: entered allmulticast mode [ 48.743337][ T5728] bridge_slave_0: entered promiscuous mode [ 48.782328][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.782402][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.782669][ T5728] bridge_slave_1: entered allmulticast mode [ 48.783938][ T5728] bridge_slave_1: entered promiscuous mode [ 48.855667][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.899993][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.912606][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.912756][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.913480][ T5729] bridge_slave_0: entered allmulticast mode [ 48.914488][ T5729] bridge_slave_0: entered promiscuous mode [ 48.922231][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.922272][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.922323][ T5738] bridge_slave_0: entered allmulticast mode [ 48.923104][ T5738] bridge_slave_0: entered promiscuous mode [ 48.924276][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.924314][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.924948][ T5738] bridge_slave_1: entered allmulticast mode [ 48.926776][ T5738] bridge_slave_1: entered promiscuous mode [ 48.943654][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.943804][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.944123][ T5729] bridge_slave_1: entered allmulticast mode [ 48.945474][ T5729] bridge_slave_1: entered promiscuous mode [ 48.954729][ T5728] team0: Port device team_slave_0 added [ 48.983559][ T5728] team0: Port device team_slave_1 added [ 48.984901][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.991371][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.991412][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.991620][ T5730] bridge_slave_0: entered allmulticast mode [ 48.992567][ T5730] bridge_slave_0: entered promiscuous mode [ 48.994279][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.994364][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.994418][ T5730] bridge_slave_1: entered allmulticast mode [ 48.995278][ T5730] bridge_slave_1: entered promiscuous mode [ 49.004861][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.005948][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.020876][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.020887][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.020899][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.030262][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.050664][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.051618][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.051630][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.051649][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.053303][ T5738] team0: Port device team_slave_0 added [ 49.054842][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.056118][ T5738] team0: Port device team_slave_1 added [ 49.091495][ T5729] team0: Port device team_slave_0 added [ 49.100444][ T5730] team0: Port device team_slave_0 added [ 49.101824][ T5730] team0: Port device team_slave_1 added [ 49.102685][ T5729] team0: Port device team_slave_1 added [ 49.110627][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.110638][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.110655][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.112019][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.112033][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.112048][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.140923][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.140937][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.140954][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.161378][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.161388][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.161400][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.169845][ T5728] hsr_slave_0: entered promiscuous mode [ 49.170366][ T5728] hsr_slave_1: entered promiscuous mode [ 49.171266][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.171274][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.171286][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.181568][ T5738] hsr_slave_0: entered promiscuous mode [ 49.182043][ T5738] hsr_slave_1: entered promiscuous mode [ 49.182342][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 49.182391][ T5738] Cannot create hsr debugfs directory [ 49.183084][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.183093][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.183105][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.221300][ T5730] hsr_slave_0: entered promiscuous mode [ 49.221881][ T5730] hsr_slave_1: entered promiscuous mode [ 49.222209][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 49.222226][ T5730] Cannot create hsr debugfs directory [ 49.281154][ T5729] hsr_slave_0: entered promiscuous mode [ 49.281770][ T5729] hsr_slave_1: entered promiscuous mode [ 49.282047][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 49.282059][ T5729] Cannot create hsr debugfs directory [ 49.539807][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.548283][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.549052][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.553478][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.554304][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.558106][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.565491][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.567439][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.625324][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.630214][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.631141][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.634745][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.641101][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.648143][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.648776][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.651929][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.694962][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.697358][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.697820][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.700481][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.703937][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.710052][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.714966][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.717236][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.736175][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.774031][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.775777][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.776642][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.781065][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.781987][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.785790][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.789571][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.791840][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.795097][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.811228][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.811310][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.827973][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.828022][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.866009][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.907980][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.923549][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.923595][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.930913][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.930993][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.959669][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.974225][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.981216][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.991771][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.991820][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.004519][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.009453][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.009536][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.014536][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.014655][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.027386][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.027430][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.077826][ T5735] Bluetooth: hci3: command tx timeout [ 50.078000][ T5735] Bluetooth: hci2: command tx timeout [ 50.078084][ T5735] Bluetooth: hci0: command tx timeout [ 50.078168][ T5735] Bluetooth: hci1: command tx timeout [ 50.187503][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.229778][ T5728] veth0_vlan: entered promiscuous mode [ 50.239091][ T5728] veth1_vlan: entered promiscuous mode [ 50.259439][ T5728] veth0_macvtap: entered promiscuous mode [ 50.262008][ T5728] veth1_macvtap: entered promiscuous mode [ 50.264899][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.284787][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.299145][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.317241][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.322552][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.338066][ T5738] veth0_vlan: entered promiscuous mode [ 50.366791][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.375400][ T5738] veth1_vlan: entered promiscuous mode [ 50.411661][ T5730] veth0_vlan: entered promiscuous mode [ 50.416076][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.416091][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.440928][ T5729] veth0_vlan: entered promiscuous mode [ 50.447139][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.447158][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.451245][ T5730] veth1_vlan: entered promiscuous mode [ 50.466534][ T5729] veth1_vlan: entered promiscuous mode [ 50.479787][ T5738] veth0_macvtap: entered promiscuous mode [ 50.484542][ T5738] veth1_macvtap: entered promiscuous mode [ 50.498778][ T5730] veth0_macvtap: entered promiscuous mode [ 50.506173][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.509858][ T5730] veth1_macvtap: entered promiscuous mode [ 50.517478][ T5728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.518236][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.540065][ T5729] veth0_macvtap: entered promiscuous mode [ 50.545676][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.548888][ T5729] veth1_macvtap: entered promiscuous mode [ 50.561481][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.576528][ T5805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.576554][ T5805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.576572][ T5805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.576589][ T5805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.576607][ T5805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.576625][ T5805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.576643][ T5805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.598884][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.621653][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.623930][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.623944][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.659064][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.659077][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.691682][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.691702][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.742539][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.742557][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.754042][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.754062][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.803601][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.803620][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.818700][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.819037][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.819071][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.819102][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.819132][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.819161][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.819189][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.819219][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.985771][ T5889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5'. [ 51.011729][ T5889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5'. [ 51.012593][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 51.013791][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 51.013968][ T5887] bridge_slave_1: left allmulticast mode [ 51.013989][ T5887] bridge_slave_1: left promiscuous mode [ 51.014570][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.029467][ T5887] bridge_slave_0: left allmulticast mode [ 51.029491][ T5887] bridge_slave_0: left promiscuous mode [ 51.029782][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.035369][ T5889] Zero length message leads to an empty skb [ 51.073187][ T5889] ovs-dp0: entered promiscuous mode [ 51.106480][ T5880] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.205224][ T5902] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 51.256705][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 51.258712][ T5880] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.258918][ T5894] usb 1-1: USB disconnect, device number 2 [ 51.261076][ T5880] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 51.261101][ T5880] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.261112][ T5880] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.261124][ T5880] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.261135][ T5880] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.261154][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.345137][ T5894] hub 1-0:1.0: USB hub found [ 51.345498][ T5894] hub 1-0:1.0: 6 ports detected [ 51.377767][ T5912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 51.410918][ T5912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 51.443101][ T5916] ovs-dp0: entered promiscuous mode [ 51.498584][ T5880] usb 8-1: usb_control_msg returned -32 [ 51.498608][ T5880] usbtmc 8-1:16.0: can't read capabilities [ 51.506927][ T9] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 51.523573][ T5919] ------------[ cut here ]------------ [ 51.523586][ T5919] do not call blocking ops when !TASK_RUNNING; state=1 set at [] hpet_read+0x21b/0x6a0 [ 51.523622][ T5919] WARNING: kernel/sched/core.c:9187 at __might_sleep+0x94/0xc0, CPU#1: syz.2.9/5919 [ 51.534610][ T5919] Modules linked in: [ 51.536209][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.2.9 Tainted: G L syzkaller #0 PREEMPT(full) [ 51.540922][ T5919] Tainted: [L]=SOFTLOCKUP [ 51.542615][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.546705][ T5919] RIP: 0010:__might_sleep+0x97/0xc0 [ 51.548741][ T5919] Code: 8b 94 24 a8 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d dc 41 71 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 2d 64 a8 00 eb 9f 89 74 24 04 e8 52 64 a8 [ 51.557504][ T5919] RSP: 0018:ffffc90004ef7af0 EFLAGS: 00010286 [ 51.559889][ T5919] RAX: dffffc0000000000 RBX: ffffffff8c7539a0 RCX: ffffffff85b6d1eb [ 51.562926][ T5919] RDX: ffffffff85b6d1eb RSI: 0000000000000001 RDI: ffffffff914843d0 [ 51.566036][ T5919] RBP: 0000000000000135 R08: 0000000000000005 R09: 0000000000000000 [ 51.580689][ T5919] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028c20000 [ 51.583778][ T5919] R13: 0000000000000000 R14: ffff888038068380 R15: ffffed1005184315 [ 51.593706][ T5919] FS: 00007f8bb30186c0(0000) GS:ffff8880d5c53000(0000) knlGS:0000000000000000 [ 51.597361][ T5919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.600011][ T5919] CR2: 00007f05af4aaff8 CR3: 0000000055f4a000 CR4: 0000000000352ef0 [ 51.603156][ T5919] Call Trace: [ 51.604559][ T5919] [ 51.605768][ T5919] __might_fault+0x8b/0x140 [ 51.607754][ T5919] hpet_read+0x56f/0x6a0 [ 51.609436][ T5919] ? __pfx_hpet_read+0x10/0x10 [ 51.611325][ T5919] ? avc_policy_seqno+0x9/0x20 [ 51.613316][ T5919] ? selinux_file_permission+0x8f/0x6d0 [ 51.615495][ T5919] ? __pfx_default_wake_function+0x10/0x10 [ 51.617891][ T5919] ? bpf_lsm_file_permission+0x9/0x10 [ 51.620236][ T5919] ? security_file_permission+0x76/0x210 [ 51.622394][ T5919] ? rw_verify_area+0xce/0x6d0 [ 51.624361][ T5919] ? __pfx_hpet_read+0x10/0x10 [ 51.626339][ T5919] vfs_readv+0x5d8/0x8d0 [ 51.627980][ T5919] ? __pfx_vfs_readv+0x10/0x10 [ 51.629833][ T5919] ? lock_acquire+0x1d1/0x380 [ 51.631745][ T5919] ? __fget_files+0x34/0x3d0 [ 51.633913][ T5919] ? __fget_files+0x21f/0x3d0 [ 51.635802][ T5919] ? do_preadv+0x1ac/0x270 [ 51.637882][ T5919] do_preadv+0x1ac/0x270 [ 51.640039][ T5919] ? __pfx_do_preadv+0x10/0x10 [ 51.641932][ T5919] do_syscall_64+0x123/0x790 [ 51.643742][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.646078][ T5919] RIP: 0033:0x7f8bb219e159 [ 51.648076][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.655656][ T5919] RSP: 002b:00007f8bb3018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 51.659183][ T5919] RAX: ffffffffffffffda RBX: 00007f8bb2425fa0 RCX: 00007f8bb219e159 [ 51.662350][ T5919] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 51.665439][ T5919] RBP: 00007f8bb223506b R08: 0000000000000000 R09: 0000000000000000 [ 51.668634][ T5919] R10: 00000000d6840391 R11: 0000000000000246 R12: 0000000000000000 [ 51.671599][ T5919] R13: 00007f8bb2426038 R14: 00007f8bb2425fa0 R15: 00007fff8d231058 [ 51.674461][ T5919] [ 51.675405][ T5919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.677652][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.2.9 Tainted: G L syzkaller #0 PREEMPT(full) [ 51.680830][ T5919] Tainted: [L]=SOFTLOCKUP [ 51.682170][ T5919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.685924][ T5919] Call Trace: [ 51.687101][ T5919] [ 51.688055][ T5919] dump_stack_lvl+0x100/0x190 [ 51.689566][ T5919] vpanic+0x553/0x970 [ 51.690799][ T5919] ? __pfx_vpanic+0x10/0x10 [ 51.692245][ T5919] panic+0xd1/0xe0 [ 51.693473][ T5919] ? __pfx_panic+0x10/0x10 [ 51.694928][ T5919] check_panic_on_warn.cold+0x19/0x34 [ 51.696627][ T5919] ? __might_sleep+0x94/0xc0 [ 51.698078][ T5919] __warn.cold+0x191/0x318 [ 51.699470][ T5919] __report_bug+0x30f/0x440 [ 51.700902][ T5919] ? __might_sleep+0x94/0xc0 [ 51.702383][ T5919] ? __pfx___report_bug+0x10/0x10 [ 51.704002][ T5919] ? rcu_is_watching+0x13/0xc0 [ 51.705551][ T5919] ? hpet_read+0x21b/0x6a0 [ 51.707119][ T5919] ? hpet_read+0x21b/0x6a0 [ 51.708541][ T5919] ? rcu_is_watching+0x13/0xc0 [ 51.710236][ T5919] report_bug_entry+0xe2/0x290 [ 51.711816][ T5919] ? __might_sleep+0x97/0xc0 [ 51.713225][ T5919] handle_bug+0x1cd/0x2a0 [ 51.714766][ T5919] exc_invalid_op+0x17/0x50 [ 51.716273][ T5919] asm_exc_invalid_op+0x1a/0x20 [ 51.717818][ T5919] RIP: 0010:__might_sleep+0x97/0xc0 [ 51.719530][ T5919] Code: 8b 94 24 a8 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d dc 41 71 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 2d 64 a8 00 eb 9f 89 74 24 04 e8 52 64 a8 [ 51.725702][ T5919] RSP: 0018:ffffc90004ef7af0 EFLAGS: 00010286 [ 51.727568][ T5919] RAX: dffffc0000000000 RBX: ffffffff8c7539a0 RCX: ffffffff85b6d1eb [ 51.730127][ T5919] RDX: ffffffff85b6d1eb RSI: 0000000000000001 RDI: ffffffff914843d0 [ 51.732687][ T5919] RBP: 0000000000000135 R08: 0000000000000005 R09: 0000000000000000 [ 51.735351][ T5919] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028c20000 [ 51.737878][ T5919] R13: 0000000000000000 R14: ffff888038068380 R15: ffffed1005184315 [ 51.740355][ T5919] ? hpet_read+0x21b/0x6a0 [ 51.741812][ T5919] ? hpet_read+0x21b/0x6a0 [ 51.743259][ T5919] __might_fault+0x8b/0x140 [ 51.744828][ T5919] hpet_read+0x56f/0x6a0 [ 51.746237][ T5919] ? __pfx_hpet_read+0x10/0x10 [ 51.747829][ T5919] ? avc_policy_seqno+0x9/0x20 [ 51.749358][ T5919] ? selinux_file_permission+0x8f/0x6d0 [ 51.751170][ T5919] ? __pfx_default_wake_function+0x10/0x10 [ 51.753816][ T5919] ? bpf_lsm_file_permission+0x9/0x10 [ 51.756540][ T5919] ? security_file_permission+0x76/0x210 [ 51.758381][ T5919] ? rw_verify_area+0xce/0x6d0 [ 51.760036][ T5919] ? __pfx_hpet_read+0x10/0x10 [ 51.762039][ T5919] vfs_readv+0x5d8/0x8d0 [ 51.763774][ T5919] ? __pfx_vfs_readv+0x10/0x10 [ 51.765657][ T5919] ? lock_acquire+0x1d1/0x380 [ 51.767548][ T5919] ? __fget_files+0x34/0x3d0 [ 51.769392][ T5919] ? __fget_files+0x21f/0x3d0 [ 51.771273][ T5919] ? do_preadv+0x1ac/0x270 [ 51.773061][ T5919] do_preadv+0x1ac/0x270 [ 51.774624][ T5919] ? __pfx_do_preadv+0x10/0x10 [ 51.776259][ T5919] do_syscall_64+0x123/0x790 [ 51.778163][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.780480][ T5919] RIP: 0033:0x7f8bb219e159 [ 51.782245][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.789187][ T5919] RSP: 002b:00007f8bb3018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 51.792406][ T5919] RAX: ffffffffffffffda RBX: 00007f8bb2425fa0 RCX: 00007f8bb219e159 [ 51.795478][ T5919] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004 [ 51.798256][ T5919] RBP: 00007f8bb223506b R08: 0000000000000000 R09: 0000000000000000 [ 51.801195][ T5919] R10: 00000000d6840391 R11: 0000000000000246 R12: 0000000000000000 [ 51.804245][ T5919] R13: 00007f8bb2426038 R14: 00007f8bb2425fa0 R15: 00007fff8d231058 [ 51.806990][ T5919] [ 51.808992][ T5919] Kernel Offset: disabled [ 51.810733][ T5919] Rebooting in 86400 seconds..