last executing test programs: 1m9.326455064s ago: executing program 2 (id=259): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)='}', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000240)=""/148, 0x94, 0x10100, 0x0, 0x0) 1m8.389170162s ago: executing program 2 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2273d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4e, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m7.28332004s ago: executing program 4 (id=265): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x1}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x13, 0x8, 0x2}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x123180, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000400)=0x15) 1m6.524993273s ago: executing program 2 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000340)="32d0653cfc9498deb8de35224adfb2d8ab6a6435e2c5440238f045c0422a03df450eed193c34e38a236960f6d5369ff41e09030ba4199956b7d13ae0cff5ee0af6e9b45f20d12cd27d57642bb8264a2cd2613971c224bbc2cbf94c29059708786ffd0d1d11b949427a91ddb4aef143a8920a4a26aa35144102ab7303dbafa4a13dc9d589e1ce2f6e4f1d86234f3f8e03b107c5f30abe78cb7577014f842e539a5692fb0eba5088f595c9a583d30ee59fed0d2e92c6f1e465eb70bc92571ccc8a4b59cce1f1d1cda09d9c3673c2fbd0395ff31aad5763d849321ef739f981b65ae79e87b1b36b41f3c15bacc77c", 0xed, 0x10000008080c63) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000008000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3fffff) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1m5.992782385s ago: executing program 4 (id=267): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000400), 0x1, 0x22842) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0x6, 0x2, &(0x7f0000000000)={0x1b, "a7116004b8e589618ceb9252a7347d377e11caa4391ba1929e6785a4864a9331ab"}}) 1m2.797782416s ago: executing program 0 (id=270): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772") sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x19c}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m0.943656827s ago: executing program 2 (id=271): syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x1}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x0, 0x0, "d88570"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x80, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1000}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x2, '\x00\x00\x00\x00\x00\x00\x00'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 1m0.628041955s ago: executing program 3 (id=272): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000480)='}', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000240)=""/148, 0x94, 0x10100, 0x0, 0x0) 57.492127094s ago: executing program 4 (id=274): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 57.491594179s ago: executing program 0 (id=275): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300), 0x0, 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) fstat(r4, &(0x7f0000007900)) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) tkill(r3, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0x50}, &(0x7f0000000100), &(0x7f0000000140)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0502103, 0x0) ioctl$TIOCL_SELLOADLUT(r8, 0x541c, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x1ff, 0x5c3e5fd9}) 57.459629386s ago: executing program 3 (id=276): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 57.04795247s ago: executing program 3 (id=277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.043900112s ago: executing program 1 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x20, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x3, 0x3, 0x15, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f0000faffffff000010e200", [0xfffffffffffffffe, 0x7]}}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e9000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0xc2) r9 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$FUSE_IOCTL(r8, &(0x7f0000000100)={0x20}, 0xfdef) 56.445521071s ago: executing program 0 (id=279): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x20048980, &(0x7f0000000240)={0xa, 0x4e27, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = io_uring_setup(0x55bd, &(0x7f00000001c0)={0x0, 0xaca0, 0x10, 0x1}) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000480)=""/74, 0x4a) close_range(r1, 0xffffffffffffffff, 0x0) 54.469575595s ago: executing program 3 (id=280): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f00000046c0)={0x2020}, 0x2067) 54.344932849s ago: executing program 1 (id=281): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 54.071763062s ago: executing program 1 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1c3}, 0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xff26, 0xfff9, 0x7, 0x8}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x40001b6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 53.831145125s ago: executing program 4 (id=283): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 53.678706982s ago: executing program 2 (id=284): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x81) ioctl$HIDIOCSFEATURE(r0, 0x4004480d, 0x0) 53.65719768s ago: executing program 4 (id=285): r0 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3ce, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 53.435712006s ago: executing program 4 (id=286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf772") sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x19c}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 51.022523478s ago: executing program 0 (id=287): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) dup(r2) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000310000/0x4000)=nil, 0x4000, &(0x7f0000000280)=""/194) 50.953131601s ago: executing program 1 (id=288): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0xfffffffe, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xffffffff}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 50.911838705s ago: executing program 3 (id=289): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x41, 0x0) sendmsg$netlink(r1, &(0x7f0000000d40)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20080010) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) accept4(r2, &(0x7f00000002c0)=@isdn, &(0x7f0000000580)=0x80, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 50.511298001s ago: executing program 3 (id=290): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 50.422689817s ago: executing program 1 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, 0x0, 0x4001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 49.622223593s ago: executing program 1 (id=292): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 49.371695794s ago: executing program 0 (id=293): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) openat$tun(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) fsopen(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_io_uring_setup(0x94e, &(0x7f0000000140)={0x0, 0x4bdd, 0x10100}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e24, 0xaf6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff0001}, 0x1c) shutdown(0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) 49.212130629s ago: executing program 2 (id=294): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x200ffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x100c}], 0x1, 0x0, 0x0, 0x407006}, 0x104) 0s ago: executing program 0 (id=295): r0 = socket(0x840000000002, 0x3, 0xfa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000c80)=ANY=[@ANYRES32=r1], 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 57.706802][ T30] audit: type=1400 audit(1762134807.123:62): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.730460][ T30] audit: type=1400 audit(1762134807.143:63): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.735140][ T5798] cgroup: Unknown subsys name 'net' [ 57.759294][ T30] audit: type=1400 audit(1762134807.173:64): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.893510][ T5798] cgroup: Unknown subsys name 'cpuset' [ 57.901728][ T5798] cgroup: Unknown subsys name 'rlimit' [ 58.056676][ T30] audit: type=1400 audit(1762134807.473:65): avc: denied { setattr } for pid=5798 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.088679][ T30] audit: type=1400 audit(1762134807.473:66): avc: denied { create } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.111091][ T30] audit: type=1400 audit(1762134807.473:67): avc: denied { write } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.143795][ T30] audit: type=1400 audit(1762134807.473:68): avc: denied { read } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.159315][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.164276][ T30] audit: type=1400 audit(1762134807.473:69): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.197490][ T30] audit: type=1400 audit(1762134807.473:70): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.220764][ T30] audit: type=1400 audit(1762134807.503:71): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.129313][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.200779][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.208492][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.216780][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.224364][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.232085][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.239816][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.247794][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.256621][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.259746][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.264177][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.290491][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.298012][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.305730][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.313641][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.321084][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.328663][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.329541][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.336574][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.345923][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.351450][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.362459][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.364574][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.371418][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.384552][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.392567][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.798963][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 61.925824][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 61.935987][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 61.949741][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 61.984610][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 62.060087][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.067704][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.075184][ T5811] bridge_slave_0: entered allmulticast mode [ 62.082309][ T5811] bridge_slave_0: entered promiscuous mode [ 62.118022][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.125206][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.132394][ T5811] bridge_slave_1: entered allmulticast mode [ 62.139048][ T5811] bridge_slave_1: entered promiscuous mode [ 62.201652][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.208772][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.216355][ T5817] bridge_slave_0: entered allmulticast mode [ 62.223540][ T5817] bridge_slave_0: entered promiscuous mode [ 62.241876][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.258802][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.266513][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.274018][ T5817] bridge_slave_1: entered allmulticast mode [ 62.280609][ T5817] bridge_slave_1: entered promiscuous mode [ 62.302501][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.311969][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.319068][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.326339][ T5810] bridge_slave_0: entered allmulticast mode [ 62.333065][ T5810] bridge_slave_0: entered promiscuous mode [ 62.346635][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.354013][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.361233][ T5818] bridge_slave_0: entered allmulticast mode [ 62.367852][ T5818] bridge_slave_0: entered promiscuous mode [ 62.389705][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.396975][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.404161][ T5810] bridge_slave_1: entered allmulticast mode [ 62.410775][ T5810] bridge_slave_1: entered promiscuous mode [ 62.424580][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.431972][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.439162][ T5818] bridge_slave_1: entered allmulticast mode [ 62.445946][ T5818] bridge_slave_1: entered promiscuous mode [ 62.452622][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.459693][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.466927][ T5809] bridge_slave_0: entered allmulticast mode [ 62.473946][ T5809] bridge_slave_0: entered promiscuous mode [ 62.496498][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.513385][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.520508][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.527925][ T5809] bridge_slave_1: entered allmulticast mode [ 62.535056][ T5809] bridge_slave_1: entered promiscuous mode [ 62.551376][ T5811] team0: Port device team_slave_0 added [ 62.566679][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.592550][ T5811] team0: Port device team_slave_1 added [ 62.600153][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.612341][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.630179][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.647856][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.667686][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.685883][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.717512][ T5817] team0: Port device team_slave_0 added [ 62.725570][ T5817] team0: Port device team_slave_1 added [ 62.738188][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.745419][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.772042][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.784843][ T5809] team0: Port device team_slave_0 added [ 62.791582][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.798520][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.824545][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.862211][ T5809] team0: Port device team_slave_1 added [ 62.868947][ T5818] team0: Port device team_slave_0 added [ 62.880087][ T5810] team0: Port device team_slave_0 added [ 62.903428][ T5818] team0: Port device team_slave_1 added [ 62.926423][ T5810] team0: Port device team_slave_1 added [ 62.940158][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.947304][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.976168][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.995177][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.002301][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.028399][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.056368][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.063872][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.090152][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.108711][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.115687][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.141644][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.156118][ T5811] hsr_slave_0: entered promiscuous mode [ 63.162291][ T5811] hsr_slave_1: entered promiscuous mode [ 63.168953][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.176014][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.202470][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.217954][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.224956][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.250854][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.266323][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.273508][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.299662][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.324335][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.331462][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.357390][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.372057][ T51] Bluetooth: hci1: command tx timeout [ 63.442028][ T51] Bluetooth: hci3: command tx timeout [ 63.442073][ T5822] Bluetooth: hci2: command tx timeout [ 63.453481][ T5821] Bluetooth: hci0: command tx timeout [ 63.459175][ T5815] Bluetooth: hci4: command tx timeout [ 63.462522][ T5810] hsr_slave_0: entered promiscuous mode [ 63.470860][ T5810] hsr_slave_1: entered promiscuous mode [ 63.477868][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 63.484479][ T5810] Cannot create hsr debugfs directory [ 63.502917][ T5809] hsr_slave_0: entered promiscuous mode [ 63.509128][ T5809] hsr_slave_1: entered promiscuous mode [ 63.515165][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 63.520916][ T5809] Cannot create hsr debugfs directory [ 63.529957][ T5817] hsr_slave_0: entered promiscuous mode [ 63.536058][ T5817] hsr_slave_1: entered promiscuous mode [ 63.542061][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 63.547914][ T5817] Cannot create hsr debugfs directory [ 63.581154][ T5818] hsr_slave_0: entered promiscuous mode [ 63.587204][ T5818] hsr_slave_1: entered promiscuous mode [ 63.593536][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 63.599241][ T5818] Cannot create hsr debugfs directory [ 63.903591][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.928978][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.948237][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.957494][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.014396][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.026864][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.036344][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.048592][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.137365][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.146562][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.156749][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.166291][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.193996][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.246722][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.279636][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.286841][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.296989][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.304076][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.323518][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.333005][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.349116][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.361959][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.398827][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.447336][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.495231][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.517889][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.525005][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 64.525019][ T30] audit: type=1400 audit(1762134813.933:86): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.554723][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.567266][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.589515][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.596688][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.607075][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.614242][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.625876][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.689625][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.703441][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.765151][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.780546][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.810100][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.817266][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.844010][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.875548][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.882673][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.907581][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.914746][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.946862][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.954011][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.992422][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.065711][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.084860][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.106295][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.113423][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.132302][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.152232][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.159307][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.249092][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.267242][ T5811] veth0_vlan: entered promiscuous mode [ 65.330427][ T5811] veth1_vlan: entered promiscuous mode [ 65.424050][ T5810] veth0_vlan: entered promiscuous mode [ 65.442665][ T5815] Bluetooth: hci1: command tx timeout [ 65.447391][ T5811] veth0_macvtap: entered promiscuous mode [ 65.462586][ T5810] veth1_vlan: entered promiscuous mode [ 65.484662][ T5811] veth1_macvtap: entered promiscuous mode [ 65.504180][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.522099][ T5815] Bluetooth: hci4: command tx timeout [ 65.529653][ T5815] Bluetooth: hci2: command tx timeout [ 65.534378][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.536414][ T5822] Bluetooth: hci0: command tx timeout [ 65.542551][ T5821] Bluetooth: hci3: command tx timeout [ 65.569641][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.594206][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.605582][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.612911][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.623584][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.634857][ T5810] veth0_macvtap: entered promiscuous mode [ 65.657505][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.666421][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.679912][ T5810] veth1_macvtap: entered promiscuous mode [ 65.733930][ T5817] veth0_vlan: entered promiscuous mode [ 65.748964][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.775781][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.794699][ T5817] veth1_vlan: entered promiscuous mode [ 65.803275][ T5809] veth0_vlan: entered promiscuous mode [ 65.823784][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.833693][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.844489][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.863471][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.874163][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.875713][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.896135][ T5809] veth1_vlan: entered promiscuous mode [ 65.942888][ T5818] veth0_vlan: entered promiscuous mode [ 65.965527][ T5809] veth0_macvtap: entered promiscuous mode [ 65.974325][ T5818] veth1_vlan: entered promiscuous mode [ 65.982694][ T5809] veth1_macvtap: entered promiscuous mode [ 65.982915][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.999616][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.000725][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.026369][ T30] audit: type=1400 audit(1762134815.443:87): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.QeoBGp/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.064465][ T30] audit: type=1400 audit(1762134815.473:88): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.091999][ T30] audit: type=1400 audit(1762134815.473:89): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.QeoBGp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.118620][ T30] audit: type=1400 audit(1762134815.473:90): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.122105][ T5817] veth0_macvtap: entered promiscuous mode [ 66.147351][ T30] audit: type=1400 audit(1762134815.473:91): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.QeoBGp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.175630][ T30] audit: type=1400 audit(1762134815.473:92): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.QeoBGp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.204804][ T30] audit: type=1400 audit(1762134815.483:93): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.206315][ T5818] veth0_macvtap: entered promiscuous mode [ 66.224556][ T30] audit: type=1400 audit(1762134815.493:94): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.254352][ T30] audit: type=1400 audit(1762134815.493:95): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=8243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.256889][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.279425][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.300807][ T5817] veth1_macvtap: entered promiscuous mode [ 66.331461][ T5818] veth1_macvtap: entered promiscuous mode [ 66.362289][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.379764][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.399685][ T5920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.432719][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.443697][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.446813][ T5920] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.489758][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.501627][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.502685][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.509440][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.570988][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.595405][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.613012][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.624186][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.645571][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.658331][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.688420][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.708780][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.717964][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.721459][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.729013][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.777281][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.788894][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.800792][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.868994][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.919992][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.002230][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.031219][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.040159][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.047076][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.059583][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.178315][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.211536][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.343459][ T10] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 67.349476][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.371866][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.541192][ T5821] Bluetooth: hci1: command tx timeout [ 67.601437][ T51] Bluetooth: hci0: command tx timeout [ 67.606955][ T51] Bluetooth: hci2: command tx timeout [ 67.612832][ T5821] Bluetooth: hci3: command tx timeout [ 67.619292][ T51] Bluetooth: hci4: command tx timeout [ 67.873826][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.887084][ T10] usb 5-1: config 0 has no interface number 0 [ 67.901269][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 67.912721][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 67.925551][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.934901][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.953543][ T10] usb 5-1: config 0 descriptor?? [ 67.962710][ T5931] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 67.985355][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 69.541751][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 69.541767][ T30] audit: type=1400 audit(1762134818.953:134): avc: denied { bind } for pid=5966 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.657988][ T5822] Bluetooth: hci1: command tx timeout [ 69.671433][ T30] audit: type=1400 audit(1762134819.003:135): avc: denied { setopt } for pid=5966 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.692257][ T5822] Bluetooth: hci4: command tx timeout [ 69.697679][ T5822] Bluetooth: hci3: command tx timeout [ 69.704456][ T5822] Bluetooth: hci2: command tx timeout [ 69.709867][ T5822] Bluetooth: hci0: command tx timeout [ 69.716013][ T30] audit: type=1400 audit(1762134819.083:136): avc: denied { accept } for pid=5966 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.756739][ T30] audit: type=1400 audit(1762134819.173:137): avc: denied { read write } for pid=5971 comm="syz.1.15" name="video5" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.814489][ T889] usb 5-1: USB disconnect, device number 2 [ 69.843343][ T30] audit: type=1400 audit(1762134819.203:138): avc: denied { open } for pid=5971 comm="syz.1.15" path="/dev/video5" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.872777][ T30] audit: type=1400 audit(1762134819.213:139): avc: denied { ioctl } for pid=5971 comm="syz.1.15" path="/dev/video5" dev="devtmpfs" ino=937 ioctlcmd=0x5612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.978268][ T30] audit: type=1400 audit(1762134819.363:140): avc: denied { create } for pid=5978 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.978297][ T5800] IPVS: starting estimator thread 0... [ 70.007796][ T30] audit: type=1400 audit(1762134819.363:141): avc: denied { write } for pid=5978 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.052435][ T30] audit: type=1400 audit(1762134819.393:142): avc: denied { create } for pid=5956 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.101339][ T5983] IPVS: using max 42 ests per chain, 100800 per kthread [ 70.127256][ T30] audit: type=1400 audit(1762134819.393:143): avc: denied { setopt } for pid=5956 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.203964][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 70.222742][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.239556][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.257614][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.275355][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.978179][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.988366][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.166472][ T5998] warning: `syz.4.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.202255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.441920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 71.451834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 71.452319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.532518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.534782][ T6001] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 71.540762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.559291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.601081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 71.602036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.646247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 72.662972][ T6014] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.25'. [ 72.696315][ T6012] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.25'. [ 74.862356][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 74.864691][ T30] audit: type=1326 audit(1762134824.273:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 74.904748][ T30] audit: type=1326 audit(1762134824.273:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 74.931603][ T30] audit: type=1326 audit(1762134824.273:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 74.967658][ T30] audit: type=1326 audit(1762134824.273:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 74.991839][ T30] audit: type=1326 audit(1762134824.283:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 75.029802][ T30] audit: type=1326 audit(1762134824.283:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 75.065191][ T30] audit: type=1326 audit(1762134824.283:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 75.226973][ T30] audit: type=1326 audit(1762134824.283:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 75.288837][ T30] audit: type=1326 audit(1762134824.283:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 75.340180][ T6046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.37'. [ 75.349995][ T6046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.37'. [ 75.351701][ T30] audit: type=1326 audit(1762134824.283:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6034 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cb8efc9 code=0x7ffc0000 [ 75.394552][ T6046] Zero length message leads to an empty skb [ 76.105272][ T977] cfg80211: failed to load regulatory.db [ 76.575626][ T6075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6075 comm=syz.2.44 [ 76.668902][ T5800] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.273490][ T5800] usb 5-1: Using ep0 maxpacket: 8 [ 77.670589][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46'. [ 77.947264][ T5800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.047729][ T5800] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.057212][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.067314][ T5800] usb 5-1: config 0 descriptor?? [ 78.423133][ T5800] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 79.575810][ T79] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 80.190917][ T5868] usb 5-1: USB disconnect, device number 3 [ 80.987827][ T6132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6132 comm=syz.0.59 [ 81.424041][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 81.424081][ T30] audit: type=1400 audit(1762134830.813:201): avc: denied { bind } for pid=6126 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.710240][ T30] audit: type=1400 audit(1762134830.813:202): avc: denied { name_bind } for pid=6126 comm="syz.1.58" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.736555][ T30] audit: type=1400 audit(1762134830.813:203): avc: denied { node_bind } for pid=6126 comm="syz.1.58" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 82.160119][ T30] audit: type=1400 audit(1762134831.573:204): avc: denied { setopt } for pid=6144 comm="syz.1.64" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.029169][ T30] audit: type=1400 audit(1762134831.663:205): avc: denied { read } for pid=6144 comm="syz.1.64" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.052776][ T30] audit: type=1400 audit(1762134831.663:206): avc: denied { open } for pid=6144 comm="syz.1.64" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.077462][ T30] audit: type=1400 audit(1762134831.673:207): avc: denied { ioctl } for pid=6144 comm="syz.1.64" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.103292][ T30] audit: type=1400 audit(1762134831.673:208): avc: denied { write } for pid=6144 comm="syz.1.64" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.125271][ T30] audit: type=1400 audit(1762134831.673:209): avc: denied { append } for pid=6144 comm="syz.1.64" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.148184][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.692651][ T30] audit: type=1400 audit(1762134834.113:210): avc: denied { create } for pid=6153 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.712110][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.026984][ T6141] trusted_key: syz.4.63 sent an empty control message without MSG_MORE. [ 86.031203][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.828891][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 86.850258][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 86.882788][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.898272][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.912289][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.926133][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.951270][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.190210][ T5880] usb 5-1: GET_CAPABILITIES returned 0 [ 87.200785][ T5880] usbtmc 5-1:16.0: can't read capabilities [ 87.360995][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 87.587069][ T42] usb 5-1: USB disconnect, device number 4 [ 87.824268][ T30] audit: type=1400 audit(1762134836.773:217): avc: denied { map } for pid=6207 comm="syz.1.83" path="socket:[9442]" dev="sockfs" ino=9442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.866763][ T30] audit: type=1400 audit(1762134836.773:218): avc: denied { read write } for pid=6207 comm="syz.1.83" path="socket:[9442]" dev="sockfs" ino=9442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.890812][ T30] audit: type=1400 audit(1762134836.773:219): avc: denied { setopt } for pid=6207 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.934457][ T30] audit: type=1400 audit(1762134836.843:220): avc: denied { shutdown } for pid=6203 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.955365][ T30] audit: type=1400 audit(1762134836.843:221): avc: denied { getopt } for pid=6203 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.033034][ T30] audit: type=1326 audit(1762134837.443:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 88.068906][ T30] audit: type=1326 audit(1762134837.443:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 88.148555][ T30] audit: type=1326 audit(1762134837.443:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 88.210764][ T30] audit: type=1326 audit(1762134837.443:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 88.262715][ T30] audit: type=1326 audit(1762134837.443:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 90.551320][ T6237] netlink: 72 bytes leftover after parsing attributes in process `syz.2.91'. [ 92.811141][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.997410][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 93.008783][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.020662][ T5922] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.030370][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.116868][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 93.116897][ T30] audit: type=1326 audit(1762134842.523:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 93.490080][ T30] audit: type=1326 audit(1762134842.523:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 93.516797][ T5922] usb 2-1: config 0 descriptor?? [ 93.574215][ T30] audit: type=1326 audit(1762134842.523:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 93.656267][ T30] audit: type=1326 audit(1762134842.523:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 93.747343][ T30] audit: type=1326 audit(1762134842.523:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 93.786364][ T30] audit: type=1326 audit(1762134842.533:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 94.140603][ T30] audit: type=1326 audit(1762134842.533:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 94.168272][ T5922] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 94.866628][ T30] audit: type=1326 audit(1762134842.533:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 94.902247][ T30] audit: type=1326 audit(1762134842.533:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 94.969271][ T30] audit: type=1326 audit(1762134842.533:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bb8b8efc9 code=0x7ffc0000 [ 95.030808][ T6292] netlink: 240 bytes leftover after parsing attributes in process `syz.0.101'. [ 95.042976][ T6277] capability: warning: `syz.0.101' uses deprecated v2 capabilities in a way that may be insecure [ 95.631511][ T5922] usb 2-1: USB disconnect, device number 2 [ 96.716535][ T6315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.037763][ T5880] IPVS: starting estimator thread 0... [ 97.141227][ T6323] IPVS: using max 38 ests per chain, 91200 per kthread [ 97.221855][ T6325] netlink: 48 bytes leftover after parsing attributes in process `syz.4.116'. [ 97.242119][ T6325] netlink: 48 bytes leftover after parsing attributes in process `syz.4.116'. [ 98.456280][ T6346] fuse: Bad value for 'fd' [ 98.906009][ T6358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.010742][ T6358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.129'. [ 99.146682][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.261081][ T6346] orangefs_mount: mount request failed with -4 [ 99.307402][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 99.354090][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 99.378986][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.831391][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 99.851091][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.859111][ T10] usb 5-1: Product: syz [ 99.870784][ T10] usb 5-1: Manufacturer: syz [ 99.875727][ T10] usb 5-1: SerialNumber: syz [ 99.883269][ T10] usb 5-1: config 0 descriptor?? [ 99.891561][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 99.900791][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 100.221380][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 100.221396][ T30] audit: type=1326 audit(1762134849.633:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.361721][ T30] audit: type=1326 audit(1762134849.633:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.385093][ T30] audit: type=1326 audit(1762134849.633:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.412155][ T30] audit: type=1326 audit(1762134849.633:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.437022][ T30] audit: type=1326 audit(1762134849.633:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.569611][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 100.635556][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 100.670572][ T30] audit: type=1326 audit(1762134849.633:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.774707][ T30] audit: type=1326 audit(1762134849.633:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.797984][ T30] audit: type=1326 audit(1762134849.633:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.854804][ T30] audit: type=1326 audit(1762134849.643:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 100.901218][ T30] audit: type=1326 audit(1762134849.643:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b7d8efc9 code=0x7ffc0000 [ 101.261191][ T5880] IPVS: starting estimator thread 0... [ 101.361168][ T6390] IPVS: using max 41 ests per chain, 98400 per kthread [ 101.434867][ T10] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 101.489282][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 101.587478][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 101.686715][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 101.732296][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 102.234653][ T6409] loop6: detected capacity change from 0 to 2640 [ 102.471142][ T977] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.498953][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.577271][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.960529][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.994398][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.002700][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.010784][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.020574][ T977] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 103.111971][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.119980][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.128003][ T5829] ldm_validate_partition_table(): Disk read failed. [ 103.139708][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.140760][ T977] usb 1-1: config 0 has no interface number 0 [ 103.152350][ T5829] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.162294][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 103.173004][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 103.181381][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 103.685628][ T5829] Dev loop6: unable to read RDB block 0 [ 103.691285][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 103.699769][ T10] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 103.707378][ T5829] loop6: unable to read partition table [ 103.722453][ T10] usb 5-1: USB disconnect, device number 5 [ 103.751165][ T977] usb 1-1: Dual-Role OTG device on HNP port [ 103.759272][ T977] usb 1-1: New USB device found, idVendor=157e, idProduct=3204, bcdDevice=ea.6f [ 103.793104][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.835668][ T977] usb 1-1: config 0 descriptor?? [ 103.857475][ T977] hub 1-1:0.176: bad descriptor, ignoring hub [ 103.881645][ T977] hub 1-1:0.176: probe with driver hub failed with error -5 [ 104.212338][ T5868] usb 1-1: USB disconnect, device number 2 [ 105.687514][ T6441] netlink: 72 bytes leftover after parsing attributes in process `syz.3.149'. [ 105.822650][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 105.822665][ T30] audit: type=1400 audit(1762134855.243:286): avc: denied { map } for pid=6444 comm="syz.2.153" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.141171][ T30] audit: type=1400 audit(1762134855.443:287): avc: denied { mounton } for pid=6444 comm="syz.2.153" path="/30/bus" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.238481][ T30] audit: type=1400 audit(1762134855.653:288): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.377644][ T6465] syz.3.159 uses obsolete (PF_INET,SOCK_PACKET) [ 107.397201][ T30] audit: type=1400 audit(1762134856.813:289): avc: denied { ioctl } for pid=6464 comm="syz.3.159" path="socket:[9844]" dev="sockfs" ino=9844 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.425590][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 107.559861][ T30] audit: type=1400 audit(1762134856.973:290): avc: denied { write } for pid=6460 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.602601][ T30] audit: type=1400 audit(1762134858.023:291): avc: denied { connect } for pid=6479 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.783603][ T79] tipc: Subscription rejected, illegal request [ 109.566410][ T977] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.585392][ T977] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.538307][ T6506] netlink: 72 bytes leftover after parsing attributes in process `syz.1.169'. [ 111.963065][ T6530] Bluetooth: MGMT ver 1.23 [ 111.968490][ T30] audit: type=1400 audit(1762134861.383:292): avc: denied { bind } for pid=6529 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.025019][ T6530] Bluetooth: hci3: unsupported parameter 18793 [ 112.031057][ T30] audit: type=1400 audit(1762134861.383:293): avc: denied { write } for pid=6529 comm="syz.3.177" path="socket:[10912]" dev="sockfs" ino=10912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.111301][ T6530] Bluetooth: hci3: unsupported parameter 18793 [ 112.381186][ T977] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.541180][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 112.548006][ T977] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 112.566531][ T977] usb 1-1: config 0 has no interface number 0 [ 112.617794][ T977] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=2f.8f [ 112.631732][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.639842][ T977] usb 1-1: Product: syz [ 112.644472][ T977] usb 1-1: Manufacturer: syz [ 112.668469][ T977] usb 1-1: SerialNumber: syz [ 113.452508][ T977] usb 1-1: config 0 descriptor?? [ 113.461977][ T977] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 113.470965][ T977] usb 1-1: setting power ON [ 113.476934][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 113.492778][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.515292][ T977] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware) [ 113.567836][ T977] usb 1-1: media controller created [ 113.635327][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 113.669235][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.682066][ T5922] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.702955][ T30] audit: type=1400 audit(1762134863.123:294): avc: denied { execute } for pid=6557 comm="syz.3.189" path="/44/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.760415][ T977] cxusb: set interface failed [ 113.769716][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 113.789945][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 113.800075][ T977] usb 1-1: bluebird_gpio_write failed. [ 113.820889][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 113.831985][ T977] usb 1-1: bluebird_gpio_write failed. [ 113.875577][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 113.885090][ T977] usb 1-1: bluebird_gpio_write failed. [ 113.897334][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 113.907423][ T977] usb 1-1: bluebird_gpio_write failed. [ 114.042606][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 114.622459][ T977] usb 1-1: bluebird_gpio_write failed. [ 114.636578][ T30] audit: type=1400 audit(1762134864.053:295): avc: denied { mount } for pid=6563 comm="syz.1.191" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.682500][ T977] dvb-usb: bulk message failed: -22 (5/0) [ 114.794341][ C1] sd 0:0:1:0: [sda] tag#4948 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 114.804808][ C1] sd 0:0:1:0: [sda] tag#4948 CDB: Read(6) 08 00 0c 6a 08 48 [ 114.822671][ T977] zl10353_read_register: readreg error (reg=127, ret==-121) [ 114.830353][ T30] audit: type=1400 audit(1762134864.213:296): avc: denied { ioctl } for pid=6574 comm="syz.4.194" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.886613][ T6582] netlink: 72 bytes leftover after parsing attributes in process `syz.1.191'. [ 115.063674][ T977] DVB: Unable to find symbol mt352_attach() [ 115.071292][ T30] audit: type=1400 audit(1762134864.273:297): avc: denied { kexec_image_load } for pid=6576 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 115.099803][ T977] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' [ 115.172733][ T30] audit: type=1400 audit(1762134864.403:298): avc: denied { create } for pid=6585 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.303352][ T6591] netlink: 48 bytes leftover after parsing attributes in process `syz.2.198'. [ 115.373463][ T6591] netlink: 48 bytes leftover after parsing attributes in process `syz.2.198'. [ 115.943673][ T977] rc_core: IR keymap rc-dvico-portable not found [ 115.950127][ T977] Registered IR keymap rc-empty [ 116.010449][ T977] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 116.170809][ T977] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 116.782822][ T30] audit: type=1400 audit(1762134866.203:299): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=2820 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.871288][ T977] dvb-usb: schedule remote query interval to 100 msecs. [ 116.878303][ T977] usb 1-1: setting power OFF [ 116.883358][ T977] dvb-usb: bulk message failed: -22 (2/0) [ 116.889081][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 116.911124][ T977] usb 1-1: bluebird_gpio_write failed. [ 116.924200][ T30] audit: type=1400 audit(1762134866.203:300): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2820 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.928615][ T977] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected. [ 116.991372][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 117.104862][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 117.108572][ T30] audit: type=1400 audit(1762134866.203:301): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2820 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.185574][ T977] usb 1-1: USB disconnect, device number 3 [ 117.288070][ T977] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmwa successfully deinitialized and disconnected. [ 117.421064][ T5880] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.501072][ T5868] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.666989][ T5880] usb 3-1: config 127 has an invalid interface number: 3 but max is 0 [ 117.681328][ T5880] usb 3-1: config 127 has no interface number 0 [ 117.688106][ T5880] usb 3-1: config 127 interface 3 has no altsetting 0 [ 117.708922][ T5868] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.722854][ T5880] usb 3-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=24.24 [ 117.739388][ T5868] usb 5-1: config 252 has an invalid interface number: 35 but max is 0 [ 117.761111][ T5868] usb 5-1: config 252 has no interface number 0 [ 117.767579][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.776266][ T5868] usb 5-1: config 252 interface 35 has no altsetting 0 [ 117.794709][ T5868] usb 5-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=80.1c [ 117.807643][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.821348][ T5868] usb 5-1: Product: syz [ 117.827016][ T5868] usb 5-1: Manufacturer: syz [ 117.851145][ T5868] usb 5-1: SerialNumber: syz [ 117.886760][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 117.897888][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.938686][ T30] audit: type=1400 audit(1762134867.353:302): avc: denied { listen } for pid=6627 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.989999][ T6631] ======================================================= [ 117.989999][ T6631] WARNING: The mand mount option has been deprecated and [ 117.989999][ T6631] and is ignored by this kernel. Remove the mand [ 117.989999][ T6631] option from the mount to silence this warning. [ 117.989999][ T6631] ======================================================= [ 118.039698][ T6628] fido_id[6628]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.039737][ T5880] usb 3-1: string descriptor 0 read error: -71 [ 118.069954][ T30] audit: type=1400 audit(1762134867.403:303): avc: denied { mounton } for pid=6630 comm="syz.1.210" path="/proc/130/task" dev="proc" ino=11084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 118.096490][ T5880] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 118.110796][ T5880] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 118.131971][ T5868] usb 5-1: USB disconnect, device number 6 [ 118.147816][ T5880] usb 3-1: USB disconnect, device number 2 [ 118.522206][ T889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.766917][ T889] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 118.803215][ T889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.845221][ T889] usb 2-1: config 0 descriptor?? [ 118.875316][ T889] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 119.220256][ T5880] usb 2-1: USB disconnect, device number 3 [ 119.241093][ T977] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.478785][ T30] audit: type=1400 audit(1762134869.893:304): avc: denied { mounton } for pid=6652 comm="syz.4.217" path="/43/bus" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 120.551059][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 120.559509][ T977] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.574125][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.582408][ T977] usb 3-1: Product: syz [ 120.586569][ T977] usb 3-1: Manufacturer: syz [ 120.591324][ T977] usb 3-1: SerialNumber: syz [ 120.667972][ T5880] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.701273][ T5880] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.816572][ T977] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 120.851091][ T6667] @: renamed from vlan0 (while UP) [ 120.851560][ T30] audit: type=1400 audit(1762134870.263:305): avc: denied { create } for pid=6666 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.099690][ T889] usb 3-1: USB disconnect, device number 3 [ 121.326704][ T30] audit: type=1400 audit(1762134870.263:306): avc: denied { ioctl } for pid=6666 comm="syz.1.223" path="socket:[11135]" dev="sockfs" ino=11135 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.333111][ T889] usblp0: removed [ 121.373423][ T6664] fido_id[6664]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.632503][ T5880] IPVS: starting estimator thread 0... [ 122.803491][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6684 comm=syz.0.224 [ 122.902430][ T6683] IPVS: using max 51 ests per chain, 122400 per kthread [ 123.450199][ T30] audit: type=1400 audit(1762134872.343:307): avc: denied { sys_module } for pid=6677 comm="syz.1.227" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 123.513996][ T30] audit: type=1400 audit(1762134872.343:308): avc: denied { sys_module } for pid=6677 comm="syz.1.227" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 123.865478][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 124.017824][ T5879] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 124.036209][ T5879] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.180061][ T6705] fido_id[6705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 124.491857][ T30] audit: type=1400 audit(1762134873.883:309): avc: denied { ioctl } for pid=6700 comm="syz.4.233" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10145 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.618453][ T6717] loop6: detected capacity change from 0 to 2640 [ 124.644047][ T5802] buffer_io_error: 11 callbacks suppressed [ 124.644061][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.692156][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.719920][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.776511][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.828500][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.862700][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.901158][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.954989][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.007111][ T5802] ldm_validate_partition_table(): Disk read failed. [ 125.051988][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.095230][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.136660][ T5802] Dev loop6: unable to read RDB block 0 [ 125.143598][ T889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.193388][ T5802] loop6: unable to read partition table [ 125.220134][ T6717] ldm_validate_partition_table(): Disk read failed. [ 125.229992][ T6717] Dev loop6: unable to read RDB block 0 [ 125.250645][ T6717] loop6: unable to read partition table [ 125.262963][ T6717] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 125.311162][ T889] usb 4-1: Using ep0 maxpacket: 8 [ 125.328616][ T889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 125.374023][ T889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.416112][ T889] usb 4-1: Product: syz [ 125.451088][ T889] usb 4-1: Manufacturer: syz [ 125.486162][ T889] usb 4-1: SerialNumber: syz [ 125.875251][ T30] audit: type=1326 audit(1762134875.283:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d94f8efc9 code=0x7ffc0000 [ 125.954350][ T889] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 126.058932][ T30] audit: type=1326 audit(1762134875.283:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d94f8efc9 code=0x7ffc0000 [ 126.227479][ T889] usb 4-1: USB disconnect, device number 2 [ 126.262207][ T889] usblp0: removed [ 126.291467][ T30] audit: type=1326 audit(1762134875.283:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f5d94f8efc9 code=0x7ffc0000 [ 126.370812][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 126.446016][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 126.489098][ T30] audit: type=1326 audit(1762134875.283:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d94f8efc9 code=0x7ffc0000 [ 126.589295][ T30] audit: type=1326 audit(1762134875.283:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d94f8efc9 code=0x7ffc0000 [ 126.673272][ T30] audit: type=1326 audit(1762134875.313:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f5d94f8efc9 code=0x7ffc0000 [ 126.748278][ T30] audit: type=1326 audit(1762134875.313:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d94f8efc9 code=0x7ffc0000 [ 126.890237][ T6738] bridge_slave_1: left allmulticast mode [ 126.909045][ T6738] bridge_slave_1: left promiscuous mode [ 126.927961][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.983688][ T5879] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.105047][ T6738] bridge_slave_0: left allmulticast mode [ 127.137776][ T6738] bridge_slave_0: left promiscuous mode [ 127.171296][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.385551][ T5880] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 127.421935][ T5880] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.686909][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 128.001296][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.066337][ T5879] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 128.083168][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.126778][ T5879] usb 5-1: Product: syz [ 128.130943][ T5879] usb 5-1: Manufacturer: syz [ 128.150205][ T5879] usb 5-1: SerialNumber: syz [ 128.161285][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 128.194529][ T5879] usb 5-1: config 0 descriptor?? [ 128.225145][ T5879] gspca_main: se401-2.14.0 probing 047d:5003 [ 128.278024][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 128.396189][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.423338][ T9] usb 1-1: config 0 descriptor?? [ 128.725713][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 128.738330][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.760779][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 128.771934][ T9] usb 1-1: media controller created [ 128.802050][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.120204][ T5879] gspca_se401: Wrong descriptor type [ 129.653794][ T6759] netlink: 168 bytes leftover after parsing attributes in process `syz.2.251'. [ 129.821457][ T9] az6027: usb out operation failed. (-71) [ 129.910636][ T9] stb0899_attach: Driver disabled by Kconfig [ 131.913583][ T9] az6027: no front-end attached [ 131.913583][ T9] [ 131.922161][ T9] az6027: usb out operation failed. (-71) [ 131.927900][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 131.941701][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 132.178641][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 132.512347][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.518736][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.553123][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 132.633095][ T5880] usb 5-1: USB disconnect, device number 7 [ 132.699104][ T9] usb 1-1: USB disconnect, device number 4 [ 132.772940][ T6781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.780374][ T6781] IPv6: NLM_F_CREATE should be set when creating new route [ 132.787738][ T6781] IPv6: NLM_F_CREATE should be set when creating new route [ 132.794972][ T6781] IPv6: NLM_F_CREATE should be set when creating new route [ 133.331085][ T5880] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.491114][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 133.499658][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.518138][ T5880] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.539625][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.561890][ T5880] usb 4-1: config 0 descriptor?? [ 133.571488][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 133.571503][ T30] audit: type=1400 audit(1762134882.983:328): avc: denied { create } for pid=6798 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.614484][ T30] audit: type=1400 audit(1762134882.983:329): avc: denied { ioctl } for pid=6798 comm="syz.1.261" path="socket:[11606]" dev="sockfs" ino=11606 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.642310][ T30] audit: type=1400 audit(1762134883.023:330): avc: denied { bind } for pid=6798 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.666708][ T6800] netlink: 'syz.1.261': attribute type 27 has an invalid length. [ 133.674850][ T30] audit: type=1400 audit(1762134883.023:331): avc: denied { write } for pid=6798 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.695893][ T30] audit: type=1400 audit(1762134883.023:332): avc: denied { setopt } for pid=6798 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.718821][ T30] audit: type=1400 audit(1762134883.023:333): avc: denied { create } for pid=6798 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.770736][ T30] audit: type=1400 audit(1762134883.033:334): avc: denied { listen } for pid=6798 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 133.826719][ T5880] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 134.511575][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 134.649572][ T5868] usb 4-1: USB disconnect, device number 3 [ 134.700485][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.708951][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.181976][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 135.242743][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.257569][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.342921][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.360481][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 135.374856][ T10] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 135.384373][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.397116][ T10] usb 1-1: config 0 descriptor?? [ 135.701983][ T3489] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.289528][ T10] holtek 0003:1241:5015.0008: unknown main item tag 0x3 [ 136.300901][ T3489] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.312692][ T10] holtek 0003:1241:5015.0008: item fetching failed at offset 3/5 [ 138.901792][ T10] holtek 0003:1241:5015.0008: parse failed [ 138.907685][ T10] holtek 0003:1241:5015.0008: probe with driver holtek failed with error -22 [ 138.998667][ T3489] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.311403][ T10] usb 1-1: USB disconnect, device number 5 [ 139.338498][ T3489] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.651129][ T5880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.675962][ T6833] netlink: 'syz.1.269': attribute type 4 has an invalid length. [ 139.704975][ T6833] netlink: 64 bytes leftover after parsing attributes in process `syz.1.269'. [ 139.724718][ T6833] block nbd0: not configured, cannot reconfigure [ 139.852078][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 141.494774][ T5880] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 141.555851][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.863329][ T5880] pvrusb2: Hardware description: Terratec Grabster AV400 [ 142.795479][ T5880] pvrusb2: ********** [ 142.799487][ T5880] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 142.973165][ T5880] pvrusb2: Important functionality might not be entirely working. [ 143.037375][ T5880] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 144.474490][ T5880] pvrusb2: ********** [ 144.616545][ T2332] pvrusb2: Invalid write control endpoint [ 144.633715][ T5880] usb 5-1: USB disconnect, device number 8 [ 144.819062][ T30] audit: type=1326 audit(1762134894.233:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.0.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7cb8efc9 code=0x0 [ 144.849054][ T2332] pvrusb2: Invalid write control endpoint [ 144.880722][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 144.912472][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 145.003285][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 145.021075][ T2332] pvrusb2: Device being rendered inoperable [ 145.030228][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 145.037899][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 145.047168][ T2332] pvrusb2: Attached sub-driver cx25840 [ 145.095663][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 145.136081][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 145.629864][ T5880] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 145.738407][ T6853] kvm: pic: non byte write [ 145.956597][ T5880] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 145.985816][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.017069][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.061097][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.203680][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.355502][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.383339][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.431205][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.440385][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.471089][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.478723][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.493345][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.506526][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.531055][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.542996][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.552345][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.601223][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.617836][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.627391][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.641639][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 146.686247][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.697958][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.704659][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.732158][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.755302][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.766925][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.781417][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.810437][ T9] usb 1-1: config 0 descriptor?? [ 146.816251][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.826249][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.854250][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.863600][ T5880] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 146.873245][ T5880] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.881931][ T5880] usb 5-1: Product: syz [ 146.886406][ T5880] usb 5-1: Manufacturer: syz [ 146.891428][ T5880] usb 5-1: SerialNumber: syz [ 146.912797][ T5880] usb 5-1: config 0 descriptor?? [ 146.925564][ T5880] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 146.981141][ T5920] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.056363][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 147.134158][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.152938][ T5920] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.165709][ T5920] usb 3-1: config 1 has no interface number 1 [ 147.183448][ T5920] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.203593][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.221978][ T5920] usb 3-1: Product: syz [ 147.237098][ T5920] usb 3-1: Manufacturer: syz [ 147.262229][ T5920] usb 3-1: SerialNumber: syz [ 147.295507][ T9] usb 5-1: USB disconnect, device number 9 [ 147.303928][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 147.492310][ T5880] usb 1-1: USB disconnect, device number 6 [ 147.562544][ T5920] usb 3-1: 2:1 : unknown format tag 0x1000 is detected. processed as MPEG. [ 147.591110][ T5920] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 147.606322][ T5920] usb 3-1: 2:1: All rates were zero [ 147.651271][ T5920] usb 3-1: USB disconnect, device number 4 [ 147.916833][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.479017][ T6888] loop6: detected capacity change from 0 to 2640 [ 151.508589][ T5802] buffer_io_error: 27 callbacks suppressed [ 151.508604][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.705156][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.747279][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 151.997047][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.311336][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.319925][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.328261][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.336413][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.346443][ T5802] ldm_validate_partition_table(): Disk read failed. [ 152.353317][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.361484][ T5802] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.369507][ T5802] Dev loop6: unable to read RDB block 0 [ 152.384435][ T5802] loop6: unable to read partition table [ 152.465413][ T6889] netlink: 72 bytes leftover after parsing attributes in process `syz.4.286'. [ 153.020622][ T30] audit: type=1400 audit(1762134902.433:336): avc: denied { connect } for pid=6906 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.501218][ T30] audit: type=1400 audit(1762134902.473:337): avc: denied { read append } for pid=6906 comm="syz.0.293" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.262714][ T30] audit: type=1400 audit(1762134902.473:338): avc: denied { open } for pid=6906 comm="syz.0.293" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.645970][ T30] audit: type=1400 audit(1762134902.473:339): avc: denied { ioctl } for pid=6906 comm="syz.0.293" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.595486][ C0] sched: DL replenish lagged too much [ 185.827729][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 185.847399][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 185.866413][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 185.884866][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 185.925812][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 193.972227][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.989354][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.402386][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.419935][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.880939][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 312.887896][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5809/1:b..l P5817/1:b..l P3489/1:b..l P5185/1:b..l P6908/1:b..l P13/1:b..l [ 312.901542][ C0] rcu: (detected by 0, t=10504 jiffies, g=12341, q=1663259 ncpus=2) [ 312.909620][ C0] task:kworker/u8:1 state:R running task stack:25480 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 312.923953][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 312.930236][ C0] Call Trace: [ 312.933513][ C0] [ 312.936444][ C0] __schedule+0x1190/0x5de0 [ 312.940963][ C0] ? __ieee80211_tx+0x170/0x5b0 [ 312.945838][ C0] ? __pfx_ieee80211_tx+0x10/0x10 [ 312.950866][ C0] ? __pfx___schedule+0x10/0x10 [ 312.955724][ C0] ? __build_skb_around+0x278/0x3b0 [ 312.960929][ C0] ? ieee80211_skb_resize+0x22a/0x630 [ 312.966302][ C0] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 312.971681][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 312.977239][ C0] preempt_schedule_common+0x44/0xc0 [ 312.982524][ C0] preempt_schedule_thunk+0x16/0x30 [ 312.987702][ C0] ? __ieee80211_tx_skb_tid_band+0x2dc/0x720 [ 312.993660][ C0] __local_bh_enable_ip+0x107/0x120 [ 312.998860][ C0] ieee80211_tx_skb_tid+0x1c1/0x550 [ 313.004060][ C0] ieee80211_send_deauth_disassoc+0x355/0x410 [ 313.010137][ C0] ieee80211_ibss_work+0x6d0/0x1480 [ 313.015336][ C0] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 313.020952][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 313.025897][ C0] ? rcu_is_watching+0x12/0xc0 [ 313.030669][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 313.035698][ C0] ? find_held_lock+0x2b/0x80 [ 313.040380][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 313.046176][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.051382][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 313.057190][ C0] ieee80211_iface_work+0xe6d/0x1360 [ 313.062813][ C0] ? rcu_is_watching+0x12/0xc0 [ 313.067582][ C0] cfg80211_wiphy_work+0x2c7/0x580 [ 313.072698][ C0] process_one_work+0x9cf/0x1b70 [ 313.077644][ C0] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 313.083809][ C0] ? __pfx_process_one_work+0x10/0x10 [ 313.089167][ C0] ? assign_work+0x1a0/0x250 [ 313.093744][ C0] worker_thread+0x6c8/0xf10 [ 313.098365][ C0] ? __pfx_worker_thread+0x10/0x10 [ 313.103498][ C0] kthread+0x3c5/0x780 [ 313.107586][ C0] ? __pfx_kthread+0x10/0x10 [ 313.112185][ C0] ? rcu_is_watching+0x12/0xc0 [ 313.116975][ C0] ? __pfx_kthread+0x10/0x10 [ 313.121563][ C0] ret_from_fork+0x675/0x7d0 [ 313.126150][ C0] ? __pfx_kthread+0x10/0x10 [ 313.130714][ C0] ret_from_fork_asm+0x1a/0x30 [ 313.135479][ C0] [ 313.138494][ C0] task:syz.2.294 state:R running task stack:25944 pid:6908 tgid:6908 ppid:5818 task_flags:0x40044c flags:0x00080003 [ 313.151991][ C0] Call Trace: [ 313.155254][ C0] [ 313.158176][ C0] __schedule+0x1190/0x5de0 [ 313.162670][ C0] ? irqentry_exit+0x3b/0x90 [ 313.167280][ C0] ? __pfx___schedule+0x10/0x10 [ 313.172133][ C0] ? lock_acquire+0x179/0x350 [ 313.176831][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 313.181860][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 313.187235][ C0] preempt_schedule_common+0x44/0xc0 [ 313.192532][ C0] preempt_schedule_thunk+0x16/0x30 [ 313.197716][ C0] _raw_spin_unlock+0x3e/0x50 [ 313.202372][ C0] unmap_page_range+0xf71/0x41b0 [ 313.207329][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 313.212698][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 313.217634][ C0] ? uprobe_munmap+0x20/0x600 [ 313.222300][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 313.228179][ C0] unmap_vmas+0x218/0x470 [ 313.232487][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 313.237354][ C0] exit_mmap+0x1b2/0xb90 [ 313.241598][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 313.246377][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 313.251922][ C0] __mmput+0x12a/0x410 [ 313.255989][ C0] mmput+0x62/0x70 [ 313.259705][ C0] do_exit+0x7c7/0x2bf0 [ 313.263855][ C0] ? __pfx___might_resched+0x10/0x10 [ 313.269116][ C0] ? __pfx_do_exit+0x10/0x10 [ 313.273689][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 313.278712][ C0] ? find_held_lock+0x2b/0x80 [ 313.283394][ C0] do_group_exit+0xd3/0x2a0 [ 313.287904][ C0] get_signal+0x2671/0x26d0 [ 313.292422][ C0] ? __pfx_get_signal+0x10/0x10 [ 313.297243][ C0] ? vm_mmap_pgoff+0x103/0x470 [ 313.301991][ C0] arch_do_signal_or_restart+0x8f/0x7c0 [ 313.307537][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 313.313692][ C0] ? xfd_validate_state+0x61/0x180 [ 313.318817][ C0] exit_to_user_mode_loop+0x85/0x130 [ 313.324099][ C0] do_syscall_64+0x426/0xfa0 [ 313.328691][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.334572][ C0] RIP: 0033:0x7f5d94f8f087 [ 313.338973][ C0] RSP: 002b:00007ffc4185c358 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 313.347374][ C0] RAX: 0000000000000000 RBX: 00007f5d95db26c0 RCX: 00007f5d94f8f087 [ 313.355339][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5d95d93000 [ 313.363300][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 313.371251][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffc4185c4b0 [ 313.379219][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 313.387202][ C0] [ 313.390211][ C0] task:udevd state:R running task stack:24728 pid:5185 tgid:5185 ppid:1 task_flags:0x400140 flags:0x00080001 [ 313.403675][ C0] Call Trace: [ 313.406942][ C0] [ 313.409848][ C0] __schedule+0x1190/0x5de0 [ 313.414343][ C0] ? __lock_acquire+0x622/0x1c90 [ 313.419291][ C0] ? __pfx___schedule+0x10/0x10 [ 313.424146][ C0] ? __lock_acquire+0x622/0x1c90 [ 313.429089][ C0] ? mark_held_locks+0x49/0x80 [ 313.433849][ C0] preempt_schedule_irq+0x51/0x90 [ 313.438854][ C0] irqentry_exit+0x36/0x90 [ 313.443250][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.449226][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 313.454416][ C0] Code: 94 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 18 e9 0e 0f 82 74 02 00 00 8b 35 8a 48 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 94 08 12 0f 85 c7 02 00 00 48 83 c4 [ 313.474017][ C0] RSP: 0018:ffffc9000396f518 EFLAGS: 00000206 [ 313.480065][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4720 RCX: 0000000078594ac8 [ 313.488013][ C0] RDX: 0000000000000000 RSI: ffffffff8da056e0 RDI: ffffffff8bf07040 [ 313.495981][ C0] RBP: 0000000000000002 R08: 717a1a6157079f08 R09: 0000000000000000 [ 313.503953][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 313.511905][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.519898][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 313.525104][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.531262][ C0] unwind_next_frame+0xd1/0x20a0 [ 313.536196][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 313.541302][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 313.546670][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.552811][ C0] arch_stack_walk+0x94/0x100 [ 313.557488][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 313.562864][ C0] stack_trace_save+0x8e/0xc0 [ 313.567543][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 313.572909][ C0] ? __lock_acquire+0x622/0x1c90 [ 313.577826][ C0] save_stack+0x160/0x1f0 [ 313.582139][ C0] ? __pfx_save_stack+0x10/0x10 [ 313.587001][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 313.592388][ C0] ? page_ext_put+0x3e/0xd0 [ 313.596907][ C0] __reset_page_owner+0x84/0x1a0 [ 313.601864][ C0] __free_frozen_pages+0x7df/0x1160 [ 313.607068][ C0] qlist_free_all+0x4d/0x120 [ 313.611654][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 313.617116][ C0] __kasan_slab_alloc+0x69/0x90 [ 313.621950][ C0] __kmalloc_noprof+0x2e8/0x880 [ 313.626884][ C0] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.632588][ C0] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.638302][ C0] tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.643840][ C0] ? tomoyo_profile+0x47/0x60 [ 313.648494][ C0] tomoyo_path_perm+0x274/0x460 [ 313.653319][ C0] ? tomoyo_path_perm+0x260/0x460 [ 313.658336][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 313.663732][ C0] ? find_held_lock+0x2b/0x80 [ 313.668403][ C0] ? __might_fault+0xe3/0x190 [ 313.673078][ C0] ? __might_fault+0xe3/0x190 [ 313.677753][ C0] ? __might_fault+0x13b/0x190 [ 313.682519][ C0] security_inode_getattr+0x116/0x290 [ 313.687877][ C0] vfs_statx+0x121/0x3f0 [ 313.692101][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 313.696858][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 313.702232][ C0] vfs_fstatat+0x7b/0xf0 [ 313.706474][ C0] __do_sys_newfstatat+0x97/0x120 [ 313.711489][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 313.717106][ C0] ? xfd_validate_state+0x61/0x180 [ 313.722207][ C0] do_syscall_64+0xcd/0xfa0 [ 313.726714][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.732774][ C0] RIP: 0033:0x7f88e8311b0a [ 313.737200][ C0] RSP: 002b:00007fffc936fff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 313.745612][ C0] RAX: ffffffffffffffda RBX: 0000562d59851418 RCX: 00007f88e8311b0a [ 313.753575][ C0] RDX: 00007fffc9370000 RSI: 0000562d5983fef3 RDI: 00000000ffffff9c [ 313.761525][ C0] RBP: 0000562d9008e668 R08: 000642a6f8e54452 R09: 00007f88e8b3b000 [ 313.769488][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.777458][ C0] R13: 00007fffc9370000 R14: 0000000000000000 R15: 000642a6f8e54452 [ 313.785441][ C0] [ 313.788438][ C0] task:kworker/u8:8 state:R running task stack:21880 pid:3489 tgid:3489 ppid:2 task_flags:0x24248160 flags:0x00080000 [ 313.802064][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 313.808061][ C0] Call Trace: [ 313.811331][ C0] [ 313.814256][ C0] __schedule+0x1190/0x5de0 [ 313.818781][ C0] ? __update_page_owner_handle+0x395/0x550 [ 313.824682][ C0] ? find_held_lock+0x2b/0x80 [ 313.829366][ C0] ? __pfx___schedule+0x10/0x10 [ 313.834212][ C0] ? __lock_acquire+0x622/0x1c90 [ 313.839130][ C0] ? mark_held_locks+0x49/0x80 [ 313.843877][ C0] preempt_schedule_irq+0x51/0x90 [ 313.848990][ C0] irqentry_exit+0x36/0x90 [ 313.853401][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.859353][ C0] RIP: 0010:unwind_next_frame+0x516/0x20a0 [ 313.865137][ C0] Code: c0 0f 84 05 fe ff ff 48 b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 <84> c0 0f 85 63 15 00 00 0f b6 41 05 83 e0 07 0f 84 53 fe ff ff 3c [ 313.884827][ C0] RSP: 0018:ffffc9000c24e780 EFLAGS: 00000293 [ 313.890894][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff912af690 [ 313.898855][ C0] RDX: 0000000000000005 RSI: 0000000000000000 RDI: ffffffff90a0f730 [ 313.906856][ C0] RBP: ffffc9000c24e838 R08: ffffffff912af696 R09: 0000000000000000 [ 313.914856][ C0] R10: 0000000000000000 R11: 000000000001771e R12: ffffc9000c24e840 [ 313.922823][ C0] R13: ffffc9000c24e7f0 R14: ffffc9000c24e825 R15: ffffffff912af695 [ 313.930795][ C0] ? ext4_ext_map_blocks+0x1cc0/0x5fe0 [ 313.936270][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.942410][ C0] arch_stack_walk+0x94/0x100 [ 313.947110][ C0] ? ext4_ext_map_blocks+0x1cc0/0x5fe0 [ 313.952583][ C0] stack_trace_save+0x8e/0xc0 [ 313.957264][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 313.962632][ C0] ? __lock_acquire+0x622/0x1c90 [ 313.967550][ C0] save_stack+0x160/0x1f0 [ 313.971860][ C0] ? __pfx_save_stack+0x10/0x10 [ 313.976715][ C0] ? __free_frozen_pages+0x7df/0x1160 [ 313.982103][ C0] ? __put_partials+0x130/0x170 [ 313.986953][ C0] ? qlist_free_all+0x4d/0x120 [ 313.991700][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 313.997300][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 314.002303][ C0] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 314.007934][ C0] ? ext4_mb_new_blocks+0x977/0x4f70 [ 314.013218][ C0] ? ext4_ext_map_blocks+0x1cc0/0x5fe0 [ 314.018696][ C0] ? page_ext_put+0x3e/0xd0 [ 314.023220][ C0] __reset_page_owner+0x84/0x1a0 [ 314.028163][ C0] __free_frozen_pages+0x7df/0x1160 [ 314.033361][ C0] ? mark_held_locks+0x49/0x80 [ 314.038106][ C0] __put_partials+0x130/0x170 [ 314.042776][ C0] qlist_free_all+0x4d/0x120 [ 314.047381][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 314.053018][ C0] __kasan_slab_alloc+0x69/0x90 [ 314.057876][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 314.063351][ C0] ? ext4_mb_new_blocks+0x977/0x4f70 [ 314.068615][ C0] ? ext4_mb_new_blocks+0x977/0x4f70 [ 314.073879][ C0] ext4_mb_new_blocks+0x977/0x4f70 [ 314.079000][ C0] ? rcu_is_watching+0x12/0xc0 [ 314.083764][ C0] ? trace_kmalloc+0x2b/0xd0 [ 314.088351][ C0] ? __kmalloc_noprof+0x34f/0x880 [ 314.093378][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 314.098570][ C0] ? ext4_find_extent+0x844/0xa70 [ 314.103599][ C0] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 314.109119][ C0] ? ext4_ext_search_right+0x2c7/0xba0 [ 314.114565][ C0] ext4_ext_map_blocks+0x1cc0/0x5fe0 [ 314.119874][ C0] ? stack_trace_save+0x8e/0xc0 [ 314.124725][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 314.130114][ C0] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 314.135745][ C0] ? do_writepages+0x27a/0x600 [ 314.140501][ C0] ? __pfx___might_resched+0x10/0x10 [ 314.145779][ C0] ? __pfx_down_write+0x10/0x10 [ 314.150641][ C0] ? ext4_es_lookup_extent+0xc7/0xc50 [ 314.156018][ C0] ext4_map_blocks+0x570/0x1400 [ 314.160871][ C0] ? __pfx_ext4_map_blocks+0x10/0x10 [ 314.166241][ C0] ? trace_kmem_cache_alloc+0x28/0xc0 [ 314.171628][ C0] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 314.177271][ C0] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 314.182628][ C0] ? ext4_ext_index_trans_blocks+0x159/0x190 [ 314.188618][ C0] ? __ext4_journal_ensure_credits+0x25e/0x2f0 [ 314.194780][ C0] ext4_do_writepages+0x1ffa/0x3cf0 [ 314.200002][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 314.205549][ C0] ? ext4_writepages+0x37a/0x7d0 [ 314.210464][ C0] ext4_writepages+0x37a/0x7d0 [ 314.215213][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 314.220501][ C0] ? wb_update_bandwidth+0xa0/0xe0 [ 314.225626][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 314.230565][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 314.235844][ C0] do_writepages+0x27a/0x600 [ 314.240448][ C0] ? __pfx_do_writepages+0x10/0x10 [ 314.245551][ C0] ? reacquire_held_locks+0xcd/0x1f0 [ 314.250808][ C0] ? writeback_sb_inodes+0x3b0/0xfa0 [ 314.256097][ C0] __writeback_single_inode+0x160/0xfb0 [ 314.261655][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 314.267728][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 314.272937][ C0] writeback_sb_inodes+0x60d/0xfa0 [ 314.278031][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 314.283685][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 314.288892][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 314.294712][ C0] wb_writeback+0x7f3/0xb70 [ 314.299216][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 314.304232][ C0] ? get_nr_dirty_inodes+0x170/0x1e0 [ 314.309527][ C0] wb_workfn+0x8ca/0xbe0 [ 314.313771][ C0] ? try_to_wake_up+0x160/0x1870 [ 314.318700][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 314.323457][ C0] ? rcu_is_watching+0x12/0xc0 [ 314.328232][ C0] process_one_work+0x9cf/0x1b70 [ 314.333199][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 314.338831][ C0] ? __pfx_process_one_work+0x10/0x10 [ 314.344200][ C0] ? assign_work+0x1a0/0x250 [ 314.348764][ C0] worker_thread+0x6c8/0xf10 [ 314.353346][ C0] ? __pfx_worker_thread+0x10/0x10 [ 314.358453][ C0] kthread+0x3c5/0x780 [ 314.362521][ C0] ? __pfx_kthread+0x10/0x10 [ 314.367113][ C0] ? rcu_is_watching+0x12/0xc0 [ 314.371885][ C0] ? __pfx_kthread+0x10/0x10 [ 314.376479][ C0] ret_from_fork+0x675/0x7d0 [ 314.381065][ C0] ? __pfx_kthread+0x10/0x10 [ 314.385646][ C0] ret_from_fork_asm+0x1a/0x30 [ 314.390390][ C0] [ 314.393388][ C0] task:syz-executor state:R running task stack:23880 pid:5817 tgid:5817 ppid:5805 task_flags:0x400140 flags:0x00080000 [ 314.406879][ C0] Call Trace: [ 314.410153][ C0] [ 314.413075][ C0] __schedule+0x1190/0x5de0 [ 314.417567][ C0] ? __pfx___schedule+0x10/0x10 [ 314.422413][ C0] ? mark_held_locks+0x49/0x80 [ 314.427181][ C0] preempt_schedule_irq+0x51/0x90 [ 314.432207][ C0] irqentry_exit+0x36/0x90 [ 314.436622][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.442596][ C0] RIP: 0010:__reset_page_owner+0x5f/0x1a0 [ 314.448310][ C0] Code: 89 c3 e8 54 55 8d ff 4c 8b 3d 8d fc 2b 0c 48 b8 00 00 00 00 00 fc ff df 49 01 df 49 8d 7f 08 48 89 fa 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 2a 01 00 00 48 89 df 45 8b 7f 08 0f b7 dd [ 314.467923][ C0] RSP: 0018:ffffc90004f4fb00 EFLAGS: 00000a06 [ 314.473996][ C0] RAX: 0000000000000000 RBX: ffff88801d9b3a00 RCX: ffffffff82312b8b [ 314.481976][ C0] RDX: 1ffff11003b36742 RSI: ffffffff822fb84c RDI: ffff88801d9b3a10 [ 314.489924][ C0] RBP: 0000000000000003 R08: 0000000000000007 R09: 0000000000000000 [ 314.497873][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffea000135c800 [ 314.505853][ C0] R13: 0000002e8e016cec R14: 0000000000000003 R15: ffff88801d9b3a08 [ 314.513837][ C0] ? lookup_page_ext+0x13b/0x1d0 [ 314.518796][ C0] ? __reset_page_owner+0x3c/0x1a0 [ 314.523903][ C0] __free_frozen_pages+0x7df/0x1160 [ 314.529083][ C0] __put_partials+0x130/0x170 [ 314.533751][ C0] qlist_free_all+0x4d/0x120 [ 314.538338][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 314.543800][ C0] __kasan_slab_alloc+0x69/0x90 [ 314.548655][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 314.554115][ C0] ? getname_flags.part.0+0x4c/0x550 [ 314.559378][ C0] ? getname_flags.part.0+0x4c/0x550 [ 314.564649][ C0] getname_flags.part.0+0x4c/0x550 [ 314.569776][ C0] getname_flags+0x93/0xf0 [ 314.574199][ C0] vfs_fstatat+0xe1/0xf0 [ 314.578536][ C0] __do_sys_newfstatat+0x97/0x120 [ 314.583562][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 314.589216][ C0] ? __x64_sys_umount+0x124/0x1a0 [ 314.594236][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 314.599583][ C0] ? do_user_addr_fault+0x843/0x1370 [ 314.604856][ C0] do_syscall_64+0xcd/0xfa0 [ 314.609371][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.615267][ C0] RIP: 0033:0x7f38b7d8d6ba [ 314.619677][ C0] RSP: 002b:00007ffc020d4fc8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 314.628085][ C0] RAX: ffffffffffffffda RBX: 00007f38b7e11d7d RCX: 00007f38b7d8d6ba [ 314.636040][ C0] RDX: 00007ffc020d4ff0 RSI: 00007ffc020d5080 RDI: 00000000ffffff9c [ 314.644014][ C0] RBP: 00007ffc020d5080 R08: 0000000000000000 R09: 0000000000000000 [ 314.652076][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffc020d6110 [ 314.660056][ C0] R13: 00007f38b7e11d7d R14: 0000000000025616 R15: 00007ffc020d6150 [ 314.668036][ C0] [ 314.671039][ C0] task:syz-executor state:R running task stack:23736 pid:5809 tgid:5809 ppid:5804 task_flags:0x400140 flags:0x00080001 [ 314.684530][ C0] Call Trace: [ 314.687816][ C0] [ 314.690747][ C0] __schedule+0x1190/0x5de0 [ 314.695427][ C0] ? find_held_lock+0x2b/0x80 [ 314.700083][ C0] ? __pfx___schedule+0x10/0x10 [ 314.704922][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 314.710125][ C0] ? kernel_text_address+0x8d/0x100 [ 314.715324][ C0] ? __kernel_text_address+0xd/0x40 [ 314.720519][ C0] ? mark_held_locks+0x49/0x80 [ 314.725272][ C0] preempt_schedule_irq+0x51/0x90 [ 314.730304][ C0] irqentry_exit+0x36/0x90 [ 314.734720][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.740674][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 314.745883][ C0] Code: 94 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 18 e9 0e 0f 82 74 02 00 00 8b 35 8a 48 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 94 08 12 0f 85 c7 02 00 00 48 83 c4 [ 314.765489][ C0] RSP: 0018:ffffc90004f0fa00 EFLAGS: 00000206 [ 314.771539][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4720 RCX: 00000000fd57315f [ 314.779504][ C0] RDX: 0000000000000000 RSI: ffffffff8da056e0 RDI: ffffffff8bf07040 [ 314.787474][ C0] RBP: 0000000000000002 R08: 13af9f48ce65b07e R09: 0000000000000000 [ 314.795448][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 314.803432][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.811401][ C0] ? find_held_lock+0x2b/0x80 [ 314.816086][ C0] __page_table_check_zero+0x13d/0x5d0 [ 314.821558][ C0] ? __page_table_check_zero+0x12c/0x5d0 [ 314.827289][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 314.833272][ C0] ? __reset_page_owner+0x137/0x1a0 [ 314.838446][ C0] __free_frozen_pages+0x7d0/0x1160 [ 314.843644][ C0] ? mark_held_locks+0x49/0x80 [ 314.848417][ C0] __put_partials+0x130/0x170 [ 314.853109][ C0] qlist_free_all+0x4d/0x120 [ 314.857698][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 314.863154][ C0] __kasan_slab_alloc+0x69/0x90 [ 314.868010][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 314.873488][ C0] ? getname_flags.part.0+0x4c/0x550 [ 314.878771][ C0] ? getname_flags.part.0+0x4c/0x550 [ 314.884051][ C0] getname_flags.part.0+0x4c/0x550 [ 314.889176][ C0] getname_flags+0x93/0xf0 [ 314.893592][ C0] vfs_fstatat+0xe1/0xf0 [ 314.897859][ C0] __do_sys_newfstatat+0x97/0x120 [ 314.902877][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 314.908492][ C0] ? __x64_sys_umount+0x124/0x1a0 [ 314.913497][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 314.918874][ C0] do_syscall_64+0xcd/0xfa0 [ 314.923386][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.929269][ C0] RIP: 0033:0x7f4c7cb8d6ba [ 314.933667][ C0] RSP: 002b:00007ffcd89231a8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 314.942082][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c7cb8d6ba [ 314.950056][ C0] RDX: 00007ffcd89231d0 RSI: 00007ffcd8923260 RDI: 00000000ffffff9c [ 314.958020][ C0] RBP: 00007ffcd8923260 R08: 0000000000000000 R09: 0000000000000000 [ 314.965977][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffcd89242f0 [ 314.973942][ C0] R13: 00007f4c7cc11d7d R14: 00000000000259fa R15: 00007ffcd8924330 [ 314.981912][ C0] [ 314.984927][ C0] rcu: rcu_preempt kthread starved for 10406 jiffies! g12341 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 314.996115][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 315.006080][ C0] rcu: RCU grace-period kthread stack dump: [ 315.011969][ C0] task:rcu_preempt state:R running task stack:28448 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 315.025461][ C0] Call Trace: [ 315.028738][ C0] [ 315.031665][ C0] __schedule+0x1190/0x5de0 [ 315.036191][ C0] ? __pfx___schedule+0x10/0x10 [ 315.041054][ C0] ? find_held_lock+0x2b/0x80 [ 315.045723][ C0] ? schedule+0x2d7/0x3a0 [ 315.050029][ C0] schedule+0xe7/0x3a0 [ 315.054105][ C0] schedule_timeout+0x123/0x290 [ 315.058954][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 315.064327][ C0] ? __pfx_process_timeout+0x10/0x10 [ 315.069614][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 315.075408][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 315.080882][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 315.085642][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 315.090904][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.096098][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 315.101119][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 315.105979][ C0] rcu_gp_kthread+0x26d/0x380 [ 315.110654][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 315.115855][ C0] ? rcu_is_watching+0x12/0xc0 [ 315.120620][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.125815][ C0] ? __kthread_parkme+0x19e/0x250 [ 315.130861][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 315.136065][ C0] kthread+0x3c5/0x780 [ 315.140128][ C0] ? __pfx_kthread+0x10/0x10 [ 315.144701][ C0] ? rcu_is_watching+0x12/0xc0 [ 315.149464][ C0] ? __pfx_kthread+0x10/0x10 [ 315.154049][ C0] ret_from_fork+0x675/0x7d0 [ 315.158632][ C0] ? __pfx_kthread+0x10/0x10 [ 315.163212][ C0] ret_from_fork_asm+0x1a/0x30 [ 315.167960][ C0] [ 315.170953][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 315.177260][ C0] Sending NMI from CPU 0 to CPUs 1: [ 315.182459][ C1] NMI backtrace for cpu 1 [ 315.182472][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 315.182489][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.182498][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 315.182524][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 76 8d 21 05 85 c0 74 20 8b 05 00 bd 21 05 85 c0 74 16 65 48 8b 05 b8 08 41 08 <8b> 80 2c 0b 00 00 85 c0 0f 94 c0 0f b6 c0 c3 cc cc cc cc 66 2e 0f [ 315.182538][ C1] RSP: 0018:ffffc90000a08528 EFLAGS: 00000002 [ 315.182552][ C1] RAX: ffff88801d6e2480 RBX: ffff8880b853b340 RCX: ffffffff81c50c8f [ 315.182562][ C1] RDX: 1ffffffff1b9a9dd RSI: ffffffff8bf06fc0 RDI: ffffffff8dcd4ee8 [ 315.182572][ C1] RBP: ffff8881a5005550 R08: 0000000000000000 R09: fffffbfff210407a [ 315.182581][ C1] R10: ffffffff908203d7 R11: 0000000000005da4 R12: 0000000000000001 [ 315.182591][ C1] R13: 0000000000000200 R14: ffff8881a5004dc0 R15: ffffc90000a08660 [ 315.182600][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 315.182615][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.182625][ C1] CR2: 00002000001b2030 CR3: 000000000e182000 CR4: 00000000003526f0 [ 315.182634][ C1] Call Trace: [ 315.182639][ C1] [ 315.182644][ C1] __call_rcu_common.constprop.0+0xfe/0xa10 [ 315.182661][ C1] ? percpu_counter_add_batch+0xca/0x200 [ 315.182679][ C1] dst_release+0x266/0x340 [ 315.182696][ C1] skb_release_head_state+0x234/0x290 [ 315.182715][ C1] consume_skb+0x85/0x100 [ 315.182733][ C1] nft_synproxy_do_eval+0xa6b/0xd80 [ 315.182750][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 315.182764][ C1] ? ip_vs_conn_out_get+0x67f/0xb20 [ 315.182781][ C1] ? ip_vs_service_find+0x19d/0x1020 [ 315.182798][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 315.182813][ C1] nft_do_chain+0x2e9/0x1920 [ 315.182828][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 315.182842][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.182863][ C1] ? ip_vs_in_hook+0x9e1/0x2730 [ 315.182879][ C1] ? ip_vs_in_hook+0xd91/0x2730 [ 315.182903][ C1] nft_do_chain_inet+0x18a/0x340 [ 315.182924][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 315.182946][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 315.182963][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 315.182982][ C1] nf_hook_slow+0xbe/0x200 [ 315.183001][ C1] nf_hook.constprop.0+0x424/0x750 [ 315.183019][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 315.183037][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 315.183054][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 315.183071][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 315.183092][ C1] ip_local_deliver+0x169/0x1f0 [ 315.183110][ C1] ip_rcv+0x2e0/0x600 [ 315.183131][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 315.183147][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 315.183164][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 315.183181][ C1] ? lock_acquire+0x179/0x350 [ 315.183196][ C1] ? process_backlog+0x3e7/0x15e0 [ 315.183211][ C1] __netif_receive_skb+0x1d/0x160 [ 315.183227][ C1] process_backlog+0x439/0x15e0 [ 315.183244][ C1] __napi_poll.constprop.0+0xba/0x550 [ 315.183260][ C1] ? skb_defer_free_flush+0x149/0x280 [ 315.183279][ C1] net_rx_action+0x97f/0xef0 [ 315.183297][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 315.183313][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.183330][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.183350][ C1] ? tmigr_handle_remote+0x132/0x380 [ 315.183371][ C1] ? run_timer_base+0x121/0x190 [ 315.183385][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 315.183398][ C1] handle_softirqs+0x219/0x8e0 [ 315.183418][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 315.183436][ C1] __irq_exit_rcu+0x109/0x170 [ 315.183451][ C1] irq_exit_rcu+0x9/0x30 [ 315.183466][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 315.183486][ C1] [ 315.183491][ C1] [ 315.183496][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.183511][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 315.183531][ C1] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 315.183544][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 315.183555][ C1] RAX: 000000000103c473 RBX: 0000000000000001 RCX: ffffffff8b6082a9 [ 315.183564][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b0a2 RDI: ffffffff8bf07040 [ 315.183573][ C1] RBP: ffffed1003adc490 R08: 0000000000000001 R09: ffffed10170a6655 [ 315.183582][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 315.183591][ C1] R13: ffff88801d6e2480 R14: ffffffff908203d0 R15: 0000000000000000 [ 315.183603][ C1] ? ct_kernel_exit+0x139/0x190 [ 315.183617][ C1] default_idle+0x13/0x20 [ 315.183631][ C1] default_idle_call+0x6c/0xb0 [ 315.183645][ C1] do_idle+0x38d/0x500 [ 315.183661][ C1] ? __pfx_do_idle+0x10/0x10 [ 315.183678][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 315.183694][ C1] cpu_startup_entry+0x4f/0x60 [ 315.183711][ C1] start_secondary+0x21d/0x2b0 [ 315.183730][ C1] ? __pfx_start_secondary+0x10/0x10 [ 315.183750][ C1] common_startup_64+0x13e/0x148 [ 315.183769][ C1]