last executing test programs: 21.660213282s ago: executing program 1 (id=250): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.164786063s ago: executing program 1 (id=259): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000500)}) r2 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r2, 0x0, 0x0, 0x0) semop(r2, &(0x7f00000000c0)=[{}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x303a00, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x109882, 0x60) socket(0x1d, 0x2, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0) 15.454060023s ago: executing program 3 (id=262): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r7, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) creat(&(0x7f0000000040)='./bus\x00', 0xa8) 13.703100107s ago: executing program 1 (id=267): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x0, 0x7800, 0x66, 0x2, {{0x29, 0x4, 0x2, 0x6, 0xa4, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, {[@cipso={0x86, 0x2f, 0x0, [{0x1, 0x3, '\f'}, {0x6, 0x9, "e9ff38c4001d14"}, {0x7, 0x2}, {0x0, 0x5, 'TDo'}, {0x5, 0x9, "5f0624441fe491"}, {0x2, 0xb, "fba487cc294dcdbd1f"}, {0x7, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0xb, [{@multicast1, 0xffff1695}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@rand_addr=0x64010100}, {@private=0xa010100, 0x1}]}, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x6, [{@remote, 0x6}, {@multicast2}, {@broadcast, 0x5a9}, {@multicast2, 0x1}]}, @end, @ssrr={0x89, 0x13, 0xf0, [@broadcast, @loopback, @broadcast, @local]}, @timestamp_prespec={0x44, 0x4, 0x37, 0x3, 0x8}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 13.512130415s ago: executing program 3 (id=268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xbab4, 0x80, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 11.983079868s ago: executing program 1 (id=269): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.720585619s ago: executing program 3 (id=273): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, 0x0, 0x4000) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 9.391084794s ago: executing program 0 (id=277): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0xa, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x1b4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000680)=0x7e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x4c800) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) gettid() r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r9, 0x10c, 0x9, &(0x7f0000000040)=0xffff, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x30, 0x24, 0x0, 0x3}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(0xffffffffffffffff, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) socket$kcm(0x10, 0x3, 0x10) 9.365284544s ago: executing program 3 (id=278): socket(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) inotify_init() r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0xad, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, [0x0, 0x80000000]}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000070851d40cd061201183e01020301090224000100006f900904eb1002657c7d000905020240000000eb090505b2"], 0x0) 8.224362826s ago: executing program 4 (id=280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) close(0x3) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) getpriority(0x1, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 7.917496048s ago: executing program 0 (id=281): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x6a6f396b, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) creat(&(0x7f0000000040)='./bus\x00', 0xa8) 7.823630967s ago: executing program 4 (id=282): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000500)}) r2 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r2, 0x0, 0x0, 0x0) semop(r2, &(0x7f00000000c0)=[{}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x303a00, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0) 7.524681079s ago: executing program 1 (id=283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x24004050}, 0x20000044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$sequencer(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xfffffffc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f00000005c0)=@raw=[@generic={0xf6, 0x1, 0x8, 0x6a7, 0x5}], &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) r4 = dup3(r1, r0, 0x80000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fb8, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r0}}, 0x0}}], 0x0, 0x0, 0x0}) 6.756402483s ago: executing program 0 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$usbfs(0x0, 0x20a, 0x8401) syz_open_procfs(0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 6.067076308s ago: executing program 2 (id=285): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 6.023305847s ago: executing program 0 (id=286): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x2000a000000, 0xfffffffffffffffd, 0x0, 0x10, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fa, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xe, 0x80000006}, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0xffff, {0x7f, 0x11, 0x0, {0x4, 0x5, 0xfff, 0x7, 0xfc, 0x7, 0x80000000, 0xb, 0xc, 0x8000, 0x7, r1, r2, 0x132, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(0xffffffffffffffff, 0x0, 0x2) 5.943835176s ago: executing program 2 (id=287): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 5.805517454s ago: executing program 4 (id=288): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 5.779448696s ago: executing program 1 (id=289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7", 0x12, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {0x1}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000200)="08030005c7373d5b04", 0x9}}, 0x2a) close(r3) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4000006}, 0x1c) listen(r6, 0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012b50caa9d0988000015b9409b849ac00a00a5784027a6c5b068d0bf46d323452509005ad94a461cdbfee9bdb942352359a351d1ec0cffb4792cd800008000"/76, 0x4c, 0x0, 0x0, 0x0) r9 = getpid() r10 = syz_open_procfs(r9, &(0x7f00000001c0)='net/fib_triestat\x00') read$FUSE(r10, &(0x7f0000004480)={0x2020}, 0x1d12) 4.735964288s ago: executing program 4 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f000011d340)={0xfffffffffffffe27, &(0x7f000011d200)=[{0x8000001, 0x0, 0x0, 0x1, 0x7}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) 4.688229645s ago: executing program 3 (id=291): setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000002c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15}) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x100000) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) 4.635386193s ago: executing program 0 (id=292): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)}, 0xd0a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 4.631573712s ago: executing program 2 (id=293): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 3.30625736s ago: executing program 4 (id=294): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1ff, 0x80800) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214ffffffffff", 0xe) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000001080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002340)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x2, 0x4, 0x5000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0426063d032bbb006965499a03b9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r5 = socket$inet6(0x10, 0x3, 0x7) sendmsg$inet(r5, 0x0, 0x0) 3.24027526s ago: executing program 3 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000007c0), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf01}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800010073697400"], 0x40}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 2.254188741s ago: executing program 2 (id=296): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x0, 0x7800, 0x66, 0x2, {{0x33, 0x4, 0x2, 0x6, 0xcc, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, {[@cipso={0x86, 0x2f, 0x0, [{0x1, 0x3, '\f'}, {0x6, 0x9, "e9ff38c4001d14"}, {0x7, 0x2}, {0x0, 0x5, 'TDo'}, {0x5, 0x9, "5f0624441fe491"}, {0x2, 0xb, "fba487cc294dcdbd1f"}, {0x7, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0xb, [{@multicast1, 0xffff1695}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@rand_addr=0x64010100}, {@private=0xa010100, 0x1}]}, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x6, [{@remote, 0x6}, {@multicast2}, {@broadcast, 0x5a9}, {@multicast2, 0x1}]}, @end, @ssrr={0x89, 0x13, 0xf0, [@broadcast, @loopback, @broadcast, @local]}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@empty, 0x7}, {@broadcast, 0xfffffffa}, {@empty, 0x9}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0xfffffff9}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 1.179212932s ago: executing program 2 (id=297): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xbab4, 0x80, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 841.170081ms ago: executing program 4 (id=298): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x0, 0x7800, 0x66, 0x2, {{0x33, 0x4, 0x2, 0x6, 0xcc, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, {[@cipso={0x86, 0x2f, 0x0, [{0x1, 0x3, '\f'}, {0x6, 0x9, "e9ff38c4001d14"}, {0x7, 0x2}, {0x0, 0x5, 'TDo'}, {0x5, 0x9, "5f0624441fe491"}, {0x2, 0xb, "fba487cc294dcdbd1f"}, {0x7, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x93, 0x3, 0xb, [{@multicast1, 0xffff1695}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@rand_addr=0x64010100}, {@private=0xa010100, 0x1}]}, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x6, [{@remote, 0x6}, {@multicast2}, {@broadcast, 0x5a9}, {@multicast2, 0x1}]}, @end, @ssrr={0x89, 0x13, 0xf0, [@broadcast, @loopback, @broadcast, @local]}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0x8, [{@empty, 0x7}, {@broadcast, 0xfffffffa}, {@empty, 0x9}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0xfffffff9}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 189.145961ms ago: executing program 0 (id=299): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000500)}) r2 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r2, 0x0, 0x0, 0x0) semop(r2, &(0x7f00000000c0)=[{}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x303a00, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0) 0s ago: executing program 2 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) process_mrelease(0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 59.593396][ T30] audit: type=1400 audit(1760239641.759:62): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.621008][ T30] audit: type=1400 audit(1760239641.789:63): avc: denied { mount } for pid=5795 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.624641][ T5795] cgroup: Unknown subsys name 'net' [ 59.662942][ T30] audit: type=1400 audit(1760239641.829:64): avc: denied { unmount } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.782699][ T5795] cgroup: Unknown subsys name 'cpuset' [ 59.792405][ T5795] cgroup: Unknown subsys name 'rlimit' [ 59.937188][ T30] audit: type=1400 audit(1760239642.099:65): avc: denied { setattr } for pid=5795 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.967815][ T30] audit: type=1400 audit(1760239642.099:66): avc: denied { create } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.008771][ T30] audit: type=1400 audit(1760239642.099:67): avc: denied { write } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.032868][ T30] audit: type=1400 audit(1760239642.099:68): avc: denied { read } for pid=5795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.071759][ T30] audit: type=1400 audit(1760239642.139:69): avc: denied { mounton } for pid=5795 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.120015][ T30] audit: type=1400 audit(1760239642.139:70): avc: denied { mount } for pid=5795 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.120999][ T5797] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 60.148250][ T30] audit: type=1400 audit(1760239642.139:71): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 61.121585][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.050648][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 65.050663][ T30] audit: type=1400 audit(1760239647.219:78): avc: denied { create } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.149821][ T30] audit: type=1400 audit(1760239647.249:79): avc: denied { read write } for pid=5805 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.167593][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.211016][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.230289][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.240029][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.248479][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.256510][ T30] audit: type=1400 audit(1760239647.249:80): avc: denied { open } for pid=5805 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.340187][ T30] audit: type=1400 audit(1760239647.279:81): avc: denied { ioctl } for pid=5805 comm="syz-executor" path="socket:[4037]" dev="sockfs" ino=4037 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.380198][ T30] audit: type=1400 audit(1760239647.479:82): avc: denied { read } for pid=5805 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.380227][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.408135][ T30] audit: type=1400 audit(1760239647.479:83): avc: denied { open } for pid=5805 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.450645][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.462883][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.489827][ T30] audit: type=1400 audit(1760239647.479:84): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.512497][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.520918][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.530627][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.538594][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.554439][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.579631][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.581097][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.598216][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.608481][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.612027][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.618809][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.623456][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.631328][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.637532][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.661076][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.669103][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.678226][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.680509][ T30] audit: type=1400 audit(1760239647.849:85): avc: denied { module_request } for pid=5805 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.805361][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 66.003510][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.011190][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.018488][ T5805] bridge_slave_0: entered allmulticast mode [ 66.025378][ T5805] bridge_slave_0: entered promiscuous mode [ 66.033792][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.041041][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.048258][ T5805] bridge_slave_1: entered allmulticast mode [ 66.055834][ T5805] bridge_slave_1: entered promiscuous mode [ 66.146646][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.187578][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.197191][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 66.247407][ T5805] team0: Port device team_slave_0 added [ 66.260633][ T5805] team0: Port device team_slave_1 added [ 66.312799][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 66.338493][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.345530][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.374055][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.389864][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.397011][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.424276][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.446493][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 66.501248][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.508382][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.515577][ T5812] bridge_slave_0: entered allmulticast mode [ 66.522532][ T5812] bridge_slave_0: entered promiscuous mode [ 66.558408][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.565675][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.573001][ T5812] bridge_slave_1: entered allmulticast mode [ 66.580949][ T5812] bridge_slave_1: entered promiscuous mode [ 66.644889][ T5805] hsr_slave_0: entered promiscuous mode [ 66.652062][ T5805] hsr_slave_1: entered promiscuous mode [ 66.689663][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.703624][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 66.742390][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.755102][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.762447][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.770276][ T5809] bridge_slave_0: entered allmulticast mode [ 66.777072][ T5809] bridge_slave_0: entered promiscuous mode [ 66.785137][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.792512][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.800638][ T5809] bridge_slave_1: entered allmulticast mode [ 66.807838][ T5809] bridge_slave_1: entered promiscuous mode [ 66.822024][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.829133][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.836744][ T5816] bridge_slave_0: entered allmulticast mode [ 66.843773][ T5816] bridge_slave_0: entered promiscuous mode [ 66.885656][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.892903][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.900157][ T5816] bridge_slave_1: entered allmulticast mode [ 66.907787][ T5816] bridge_slave_1: entered promiscuous mode [ 66.931366][ T5812] team0: Port device team_slave_0 added [ 66.961668][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.986473][ T5812] team0: Port device team_slave_1 added [ 66.996934][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.012688][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.059585][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.069994][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.076937][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.103695][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.123726][ T5809] team0: Port device team_slave_0 added [ 67.149245][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.156610][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.184853][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.198404][ T5809] team0: Port device team_slave_1 added [ 67.204647][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.212346][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.219444][ T5815] bridge_slave_0: entered allmulticast mode [ 67.226238][ T5815] bridge_slave_0: entered promiscuous mode [ 67.258493][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.268544][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.276897][ T5815] bridge_slave_1: entered allmulticast mode [ 67.284499][ T5815] bridge_slave_1: entered promiscuous mode [ 67.297335][ T5816] team0: Port device team_slave_0 added [ 67.325371][ T5816] team0: Port device team_slave_1 added [ 67.330533][ T52] Bluetooth: hci0: command tx timeout [ 67.351393][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.358545][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.385979][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.420413][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.427559][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.453864][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.465955][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.473724][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.503388][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.516566][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.539828][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.546773][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.577330][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.596653][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.614164][ T5812] hsr_slave_0: entered promiscuous mode [ 67.623002][ T5812] hsr_slave_1: entered promiscuous mode [ 67.630552][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 67.636502][ T5812] Cannot create hsr debugfs directory [ 67.649899][ T52] Bluetooth: hci1: command tx timeout [ 67.729908][ T52] Bluetooth: hci4: command tx timeout [ 67.729924][ T5814] Bluetooth: hci2: command tx timeout [ 67.745347][ T5809] hsr_slave_0: entered promiscuous mode [ 67.753500][ T5809] hsr_slave_1: entered promiscuous mode [ 67.759366][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 67.772662][ T5809] Cannot create hsr debugfs directory [ 67.795529][ T5815] team0: Port device team_slave_0 added [ 67.809967][ T52] Bluetooth: hci3: command tx timeout [ 67.829313][ T5816] hsr_slave_0: entered promiscuous mode [ 67.835560][ T5816] hsr_slave_1: entered promiscuous mode [ 67.841688][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 67.847518][ T5816] Cannot create hsr debugfs directory [ 67.868350][ T5815] team0: Port device team_slave_1 added [ 67.960989][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.969519][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.001334][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.018228][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.027892][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.057087][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.115434][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.145705][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.181970][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.223029][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.235439][ T5815] hsr_slave_0: entered promiscuous mode [ 68.242425][ T5815] hsr_slave_1: entered promiscuous mode [ 68.253204][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 68.258912][ T5815] Cannot create hsr debugfs directory [ 68.376470][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.406429][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.422380][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.452584][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.519128][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.544254][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.555502][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.566920][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.640449][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.653321][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.663230][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.692773][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.735991][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.766950][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.777304][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.792372][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.805829][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.841030][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.877027][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.904950][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.912550][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.923652][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.930800][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.970577][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.007350][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.016624][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.024102][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.033193][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.040270][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.087300][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.104539][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.124305][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.135924][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.164923][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.173470][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.185409][ T30] audit: type=1400 audit(1760239651.349:86): avc: denied { sys_module } for pid=5805 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.231985][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.239115][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.271788][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.295566][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.323781][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.336406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.365897][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.374115][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.410481][ T52] Bluetooth: hci0: command tx timeout [ 69.432366][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.457352][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.464561][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.495422][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.511849][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.520405][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.567404][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.697211][ T5805] veth0_vlan: entered promiscuous mode [ 69.727001][ T5812] veth0_vlan: entered promiscuous mode [ 69.731064][ T52] Bluetooth: hci1: command tx timeout [ 69.747078][ T5805] veth1_vlan: entered promiscuous mode [ 69.778296][ T5812] veth1_vlan: entered promiscuous mode [ 69.798842][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.814354][ T52] Bluetooth: hci2: command tx timeout [ 69.814363][ T5814] Bluetooth: hci4: command tx timeout [ 69.863524][ T5812] veth0_macvtap: entered promiscuous mode [ 69.890132][ T52] Bluetooth: hci3: command tx timeout [ 69.905399][ T5812] veth1_macvtap: entered promiscuous mode [ 69.928893][ T5805] veth0_macvtap: entered promiscuous mode [ 69.956360][ T5805] veth1_macvtap: entered promiscuous mode [ 69.977698][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.013517][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.024604][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.052129][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.071505][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.095839][ T1152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.108723][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.133858][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.143546][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.163150][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.188667][ T2999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.220713][ T2999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.230252][ T2999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.248900][ T2999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.315713][ T5815] veth0_vlan: entered promiscuous mode [ 70.337790][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.351288][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.353641][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.371887][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.384166][ T5815] veth1_vlan: entered promiscuous mode [ 70.419071][ T5809] veth0_vlan: entered promiscuous mode [ 70.420201][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.434896][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.467013][ T5816] veth0_vlan: entered promiscuous mode [ 70.480303][ T5809] veth1_vlan: entered promiscuous mode [ 70.500210][ T30] audit: type=1400 audit(1760239652.639:87): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.R90pGb/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.534073][ T30] audit: type=1400 audit(1760239652.649:88): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.552252][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.557224][ T30] audit: type=1400 audit(1760239652.649:89): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.R90pGb/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.597516][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.609132][ T30] audit: type=1400 audit(1760239652.649:90): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.636536][ T5816] veth1_vlan: entered promiscuous mode [ 70.652905][ T5805] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.671454][ T5809] veth0_macvtap: entered promiscuous mode [ 70.686510][ T30] audit: type=1400 audit(1760239652.669:91): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.R90pGb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.692039][ T5815] veth0_macvtap: entered promiscuous mode [ 70.740495][ T30] audit: type=1400 audit(1760239652.669:92): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/root/syzkaller.R90pGb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.777562][ T5809] veth1_macvtap: entered promiscuous mode [ 70.805525][ T5815] veth1_macvtap: entered promiscuous mode [ 70.824298][ T30] audit: type=1400 audit(1760239652.669:93): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.833749][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.864769][ T5816] veth0_macvtap: entered promiscuous mode [ 70.897329][ T30] audit: type=1400 audit(1760239652.699:94): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.901564][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.962424][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.971471][ T30] audit: type=1400 audit(1760239652.699:95): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="gadgetfs" ino=8233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.015013][ T30] audit: type=1400 audit(1760239652.699:96): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.016716][ T5816] veth1_macvtap: entered promiscuous mode [ 71.182583][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.189587][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.288496][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.296994][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.307828][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.423023][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.430788][ T5926] binder: 5923:5926 ioctl c0306201 0 returned -14 [ 71.439209][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.469207][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.490377][ T52] Bluetooth: hci0: command tx timeout [ 71.552664][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.578234][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.632031][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.663333][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.688533][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.711075][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.744061][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.770788][ T5920] lec:lec_atm_close: lec0: Shut down! [ 71.791776][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.806290][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.810813][ T52] Bluetooth: hci1: command tx timeout [ 71.824174][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.836402][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.889503][ T5933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.899972][ T52] Bluetooth: hci2: command tx timeout [ 71.900260][ T5814] Bluetooth: hci4: command tx timeout [ 71.906462][ T5933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.969292][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.977558][ T5814] Bluetooth: hci3: command tx timeout [ 71.987176][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.141368][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.171977][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.190323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.325058][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.350065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.358858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.368014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.376690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.636849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.739206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.834192][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.899390][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.918256][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.250875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.262157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.763502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.009710][ T52] Bluetooth: hci0: command tx timeout [ 74.015137][ T5808] Bluetooth: hci1: command tx timeout [ 74.015719][ T52] Bluetooth: hci2: command tx timeout [ 74.021500][ T5823] Bluetooth: hci4: command tx timeout [ 74.059615][ T5821] Bluetooth: hci3: command tx timeout [ 74.533153][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.557186][ T5963] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 74.673082][ T5969] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.949934][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 75.949966][ T30] audit: type=1400 audit(1760239657.989:146): avc: denied { read write } for pid=5982 comm="syz.4.12" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.263497][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 76.300213][ T30] audit: type=1400 audit(1760239657.989:147): avc: denied { open } for pid=5982 comm="syz.4.12" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.326416][ T50] lec:lec_start_xmit: lec0:No lecd attached [ 76.450452][ T30] audit: type=1400 audit(1760239657.999:148): avc: denied { mounton } for pid=5982 comm="syz.4.12" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.473021][ T30] audit: type=1400 audit(1760239658.599:149): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 76.496389][ T30] audit: type=1400 audit(1760239658.629:150): avc: denied { append } for pid=5980 comm="syz.0.11" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.819074][ T6001] binder: 5992:6001 ioctl c0306201 0 returned -14 [ 76.992488][ T30] audit: type=1400 audit(1760239658.699:151): avc: denied { map_create } for pid=5998 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.123329][ T30] audit: type=1400 audit(1760239658.699:152): avc: denied { read write } for pid=5980 comm="syz.0.11" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 77.227809][ T30] audit: type=1400 audit(1760239658.699:153): avc: denied { open } for pid=5980 comm="syz.0.11" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 77.255685][ T30] audit: type=1400 audit(1760239659.349:154): avc: denied { create } for pid=6002 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 77.719073][ T30] audit: type=1400 audit(1760239659.879:155): avc: denied { write } for pid=6013 comm="syz.2.17" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.016227][ T6023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.19'. [ 78.181408][ T5869] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.526874][ T5869] usb 3-1: config index 0 descriptor too short (expected 36, got 15) [ 78.606819][ T5869] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 78.655141][ T5869] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.706799][ T5869] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 78.952754][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.575304][ T5869] usb 3-1: config 0 descriptor?? [ 80.674177][ T6060] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.107723][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 81.107742][ T30] audit: type=1400 audit(1760239663.269:175): avc: denied { read } for pid=6018 comm="syz.2.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.649755][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 81.659141][ C0] lec:lec_tx_timeout: lec0 [ 81.663926][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 81.788350][ T1206] cfg80211: failed to load regulatory.db [ 81.817115][ T6060] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 81.845219][ T30] audit: type=1400 audit(1760239663.299:176): avc: denied { open } for pid=6018 comm="syz.2.18" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.134924][ T6068] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 82.622974][ T6075] netlink: 52 bytes leftover after parsing attributes in process `syz.1.32'. [ 83.045432][ T30] audit: type=1400 audit(1760239665.209:177): avc: denied { setopt } for pid=6082 comm="syz.4.33" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.075119][ T1206] usb 3-1: USB disconnect, device number 2 [ 83.093998][ T30] audit: type=1400 audit(1760239665.259:178): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.136026][ T30] audit: type=1400 audit(1760239665.299:179): avc: denied { read } for pid=6084 comm="syz.2.34" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.243453][ T30] audit: type=1400 audit(1760239665.389:180): avc: denied { open } for pid=6084 comm="syz.2.34" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.278444][ T30] audit: type=1400 audit(1760239665.389:181): avc: denied { create } for pid=6084 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.420236][ T5946] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.429994][ T30] audit: type=1400 audit(1760239665.389:182): avc: denied { create } for pid=6084 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.729832][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 83.804170][ T5946] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 83.846572][ T5946] usb 1-1: config 0 has no interface number 0 [ 83.885080][ T5946] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 84.144840][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.297350][ T5946] usb 1-1: Product: syz [ 84.316916][ T5946] usb 1-1: Manufacturer: syz [ 84.331684][ T30] audit: type=1400 audit(1760239666.479:183): avc: denied { connect } for pid=6096 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.358110][ T5946] usb 1-1: SerialNumber: syz [ 85.256522][ T30] audit: type=1400 audit(1760239666.479:184): avc: denied { name_connect } for pid=6096 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 85.296491][ T5946] usb 1-1: config 0 descriptor?? [ 85.304418][ T5946] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 85.688488][ T5946] usb 1-1: qt2_attach - failed to power on unit: -71 [ 85.699060][ T5946] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 86.004886][ T6109] binder: 6107:6109 ioctl c0306201 0 returned -14 [ 86.300103][ T5946] usb 1-1: USB disconnect, device number 2 [ 86.689798][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 86.699075][ C0] lec:lec_tx_timeout: lec0 [ 86.709896][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 87.716106][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 87.716120][ T30] audit: type=1400 audit(1760239669.879:191): avc: denied { create } for pid=6120 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.206617][ T30] audit: type=1400 audit(1760239669.879:192): avc: denied { write } for pid=6120 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.348349][ T30] audit: type=1400 audit(1760239669.879:193): avc: denied { nlmsg_write } for pid=6120 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.814216][ T30] audit: type=1400 audit(1760239670.679:194): avc: denied { ioctl } for pid=6120 comm="syz.0.44" path="socket:[9050]" dev="sockfs" ino=9050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.946256][ T30] audit: type=1400 audit(1760239671.109:195): avc: denied { getattr } for pid=6131 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.033957][ T6133] syzkaller0: entered promiscuous mode [ 89.039584][ T6133] syzkaller0: entered allmulticast mode [ 89.060921][ T30] audit: type=1400 audit(1760239671.169:196): avc: denied { create } for pid=6125 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.215736][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 89.256634][ T30] audit: type=1400 audit(1760239671.369:197): avc: denied { bind } for pid=6125 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.341377][ T6147] binder: 6139:6147 ioctl c0306201 0 returned -14 [ 89.611609][ T6149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46354 sclass=netlink_tcpdiag_socket pid=6149 comm=syz.2.45 [ 89.707582][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.730320][ T30] audit: type=1400 audit(1760239671.379:198): avc: denied { write } for pid=6125 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.882328][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.354059][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.369986][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.379865][ T30] audit: type=1400 audit(1760239671.409:199): avc: denied { read } for pid=6135 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.389296][ T5918] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.429831][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.446593][ T5918] usb 1-1: config 0 descriptor?? [ 90.460666][ T30] audit: type=1400 audit(1760239671.409:200): avc: denied { open } for pid=6135 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.968297][ T5918] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 91.057924][ T5918] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 91.266892][ T5918] usb 1-1: USB disconnect, device number 3 [ 91.518695][ T6164] fido_id[6164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 91.572724][ T6168] syzkaller0: entered promiscuous mode [ 91.578410][ T6168] syzkaller0: entered allmulticast mode [ 91.719762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 91.731972][ C0] lec:lec_tx_timeout: lec0 [ 91.739826][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 95.139337][ T6202] ptrace attach of "./syz-executor exec"[6203] was attempted by "./syz-executor exec"[6202] [ 95.161222][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 95.161245][ T30] audit: type=1400 audit(1760239677.319:208): avc: denied { mount } for pid=6200 comm="syz.3.60" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.984770][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'. [ 96.749760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 96.760004][ C0] lec:lec_tx_timeout: lec0 [ 96.764798][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 96.817021][ T30] audit: type=1400 audit(1760239678.219:209): avc: denied { firmware_load } for pid=6204 comm="syz.2.61" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 96.848123][ T6214] syz.2.61 (6214) used greatest stack depth: 19224 bytes left [ 97.160316][ T5876] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.282565][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 98.302082][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 98.392495][ T5876] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 98.436954][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.474368][ T5876] usb 1-1: Product: syz [ 98.529037][ T5876] usb 1-1: Manufacturer: syz [ 98.537087][ T5876] usb 1-1: SerialNumber: syz [ 98.625283][ T30] audit: type=1400 audit(1760239680.789:210): avc: denied { bind } for pid=6245 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.715311][ T30] audit: type=1400 audit(1760239680.809:211): avc: denied { setopt } for pid=6245 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.847871][ T5876] usb 1-1: config 0 descriptor?? [ 99.997391][ T30] audit: type=1400 audit(1760239682.159:212): avc: denied { create } for pid=6245 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.227694][ T5876] usb 1-1: can't set config #0, error -71 [ 100.256844][ T30] audit: type=1400 audit(1760239682.159:213): avc: denied { setopt } for pid=6245 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.752194][ T5876] usb 1-1: USB disconnect, device number 4 [ 100.777937][ T30] audit: type=1400 audit(1760239682.509:214): avc: denied { create } for pid=6259 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.919814][ T30] audit: type=1400 audit(1760239682.519:215): avc: denied { write } for pid=6259 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 101.414342][ T30] audit: type=1400 audit(1760239683.569:216): avc: denied { write } for pid=6271 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.779761][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 101.788162][ C0] lec:lec_tx_timeout: lec0 [ 101.792948][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 102.197218][ T6294] netlink: 68 bytes leftover after parsing attributes in process `syz.1.78'. [ 102.576674][ T30] audit: type=1400 audit(1760239684.729:217): avc: denied { shutdown } for pid=6301 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.634855][ T6302] tipc: Started in network mode [ 102.645632][ T6302] tipc: Node identity 7e22f99e77f5, cluster identity 4711 [ 102.672773][ T6302] tipc: Enabled bearer , priority 0 [ 102.699414][ T6306] syzkaller0: entered promiscuous mode [ 102.748050][ T6306] syzkaller0: entered allmulticast mode [ 102.798752][ T30] audit: type=1400 audit(1760239684.729:218): avc: denied { getopt } for pid=6301 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.870064][ T6301] tipc: Resetting bearer [ 103.440661][ T6301] tipc: Disabling bearer [ 103.710005][ T3092] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.906627][ T3092] usb 3-1: config index 0 descriptor too short (expected 36, got 15) [ 104.308737][ T3092] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 104.323596][ T3092] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.333535][ T3092] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 104.343397][ T3092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.444562][ T3092] usb 3-1: config 0 descriptor?? [ 106.590696][ T6349] netlink: 136 bytes leftover after parsing attributes in process `syz.1.89'. [ 106.809755][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 106.818148][ C0] lec:lec_tx_timeout: lec0 [ 106.823439][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 106.960373][ T6350] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.534069][ T6350] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 108.385904][ T1206] usb 3-1: USB disconnect, device number 3 [ 108.542032][ T30] audit: type=1400 audit(1760239690.669:219): avc: denied { bind } for pid=6361 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.589238][ T30] audit: type=1400 audit(1760239690.669:220): avc: denied { accept } for pid=6361 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.610075][ T30] audit: type=1400 audit(1760239690.669:221): avc: denied { setopt } for pid=6361 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.696706][ T30] audit: type=1400 audit(1760239690.669:222): avc: denied { write } for pid=6361 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.828378][ T30] audit: type=1400 audit(1760239690.989:223): avc: denied { read } for pid=6378 comm="syz.1.96" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.930536][ T3092] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 109.179889][ T1206] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.182430][ T30] audit: type=1400 audit(1760239690.989:224): avc: denied { open } for pid=6378 comm="syz.1.96" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.243115][ T3092] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 109.263877][ T3092] usb 4-1: can't read configurations, error -61 [ 109.399788][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 109.406749][ T1206] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 109.415154][ T1206] usb 3-1: config 0 has no interface number 0 [ 109.421520][ T3092] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 109.423097][ T1206] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 109.438534][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.495527][ T1206] usb 3-1: Product: syz [ 109.519675][ T1206] usb 3-1: Manufacturer: syz [ 109.535579][ T1206] usb 3-1: SerialNumber: syz [ 109.619744][ T1206] usb 3-1: config 0 descriptor?? [ 109.642434][ T3092] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 109.650466][ T3092] usb 4-1: can't read configurations, error -61 [ 109.680335][ T3092] usb usb4-port1: attempt power cycle [ 109.683876][ T1206] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 109.985880][ T1206] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 110.287901][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'. [ 110.322706][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 110.444577][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.94'. [ 110.579887][ T1206] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 110.860413][ T3092] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 110.943999][ T6401] netlink: 156 bytes leftover after parsing attributes in process `syz.4.99'. [ 111.355206][ T3092] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 111.498718][ T3092] usb 4-1: can't read configurations, error -61 [ 111.577231][ T30] audit: type=1400 audit(1760239693.739:225): avc: denied { ioctl } for pid=6409 comm="syz.4.101" path="socket:[10930]" dev="sockfs" ino=10930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.592094][ T6410] netlink: 988 bytes leftover after parsing attributes in process `syz.4.101'. [ 111.849762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 111.858346][ C0] lec:lec_tx_timeout: lec0 [ 111.862021][ T3092] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 111.866787][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 111.882594][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 111.908697][ T1206] usb 3-1: USB disconnect, device number 4 [ 111.992771][ T1206] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 112.059183][ T1206] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 112.121617][ T1206] quatech2 3-1:0.51: device disconnected [ 112.139995][ T3092] usb 4-1: device not accepting address 5, error -71 [ 112.254104][ T3092] usb usb4-port1: unable to enumerate USB device [ 113.245709][ T3092] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.316735][ T30] audit: type=1400 audit(1760239695.479:226): avc: denied { bind } for pid=6417 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.491698][ T3092] usb 1-1: config index 0 descriptor too short (expected 36, got 15) [ 113.550981][ T3092] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 113.637748][ T3092] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.718159][ T3092] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 113.770712][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.884515][ T3092] usb 1-1: config 0 descriptor?? [ 114.524942][ T6456] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.489941][ T6456] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 115.678039][ T6445] binder: 6444:6445 ioctl c0306201 0 returned -14 [ 115.819384][ T6464] netlink: 68 bytes leftover after parsing attributes in process `syz.3.109'. [ 116.319849][ T3092] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 116.942627][ T3092] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 116.969967][ T3092] usb 2-1: can't read configurations, error -61 [ 117.482487][ T3092] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 117.649754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 117.658929][ C0] lec:lec_tx_timeout: lec0 [ 117.664421][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 118.086420][ T5876] usb 1-1: USB disconnect, device number 5 [ 118.291716][ T3092] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 118.299704][ T3092] usb 2-1: can't read configurations, error -61 [ 118.342770][ T3092] usb usb2-port1: attempt power cycle [ 118.347233][ T30] audit: type=1400 audit(1760239700.509:227): avc: denied { mounton } for pid=6504 comm="syz.0.119" path="/16/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.679987][ T3092] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.234057][ T3092] usb 2-1: device descriptor read/8, error -71 [ 119.926598][ T6527] debugfs: 'ttyS3' already exists in 'caif_serial' [ 121.084988][ T6542] netlink: 68 bytes leftover after parsing attributes in process `syz.2.124'. [ 122.689775][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 122.700877][ C0] lec:lec_tx_timeout: lec0 [ 122.706169][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 123.400555][ T5890] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 124.181315][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.191596][ T5890] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.204869][ T5890] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 124.216455][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.224802][ T5890] usb 5-1: Product: syz [ 124.229054][ T5890] usb 5-1: Manufacturer: syz [ 124.233667][ T5890] usb 5-1: SerialNumber: syz [ 124.241657][ T5890] usb 5-1: config 0 descriptor?? [ 124.515417][ T3092] usb 5-1: USB disconnect, device number 2 [ 124.693871][ T6621] netlink: 'syz.0.135': attribute type 72 has an invalid length. [ 124.702247][ T6621] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 124.709997][ T6621] netlink: 44 bytes leftover after parsing attributes in process `syz.0.135'. [ 126.088871][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 126.140754][ T6635] team0: entered promiscuous mode [ 126.190954][ T6635] team_slave_0: entered promiscuous mode [ 126.250035][ T6635] team_slave_1: entered promiscuous mode [ 126.327478][ T6635] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.460035][ T5869] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.710674][ T5869] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 127.729741][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 127.738031][ C0] lec:lec_tx_timeout: lec0 [ 127.743243][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 127.765108][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.815275][ T5869] usb 3-1: config 0 descriptor?? [ 128.220989][ T6651] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.141' sets config #-1 [ 128.650123][ T5869] usb 3-1: Cannot read MAC address [ 128.665450][ T5869] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 128.718859][ T5869] usb 3-1: USB disconnect, device number 5 [ 129.534805][ T6700] netlink: 'syz.0.150': attribute type 72 has an invalid length. [ 129.542625][ T6700] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 129.551523][ T6700] netlink: 44 bytes leftover after parsing attributes in process `syz.0.150'. [ 131.769835][ T1206] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.964286][ T1206] usb 1-1: config index 0 descriptor too short (expected 36, got 15) [ 132.009953][ T1206] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 132.383997][ T1206] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.424603][ T1206] usb 1-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 132.456709][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.486007][ T1206] usb 1-1: config 0 descriptor?? [ 132.623237][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.629541][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.639819][ T5869] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.769734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 132.777963][ C0] lec:lec_tx_timeout: lec0 [ 132.783058][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 132.809866][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 132.923754][ T6747] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.447196][ T6747] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 133.471060][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.643164][ T5869] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.676772][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.698551][ T5869] usb 3-1: Product: syz [ 133.709190][ T5869] usb 3-1: Manufacturer: syz [ 133.723085][ T5869] usb 3-1: SerialNumber: syz [ 134.369335][ T5869] usb 3-1: config 0 descriptor?? [ 134.416295][ T5869] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 134.548246][ T5869] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 134.560775][ T30] audit: type=1400 audit(1760239716.729:228): avc: denied { name_bind } for pid=6759 comm="syz.4.162" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 135.033214][ T5869] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 136.164229][ T5869] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 136.194560][ T5890] usb 1-1: USB disconnect, device number 6 [ 136.206168][ T5869] em28xx 3-1:0.0: board has no eeprom [ 136.447645][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.168'. [ 136.893494][ T5869] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 136.902334][ T5869] em28xx 3-1:0.0: dvb set to bulk mode. [ 136.909344][ T5918] em28xx 3-1:0.0: Binding DVB extension [ 136.927135][ T5869] usb 3-1: USB disconnect, device number 6 [ 136.940874][ T5869] em28xx 3-1:0.0: Disconnecting em28xx [ 137.168781][ T6794] binder: BINDER_SET_CONTEXT_MGR already set [ 137.175055][ T6794] binder: 6787:6794 ioctl 4018620d 2000000002c0 returned -16 [ 137.209867][ T6794] binder: 6787:6794 ioctl c0306201 0 returned -14 [ 137.411707][ T5918] em28xx 3-1:0.0: Registering input extension [ 137.418525][ T5869] em28xx 3-1:0.0: Closing input extension [ 137.474912][ T5869] em28xx 3-1:0.0: Freeing device [ 137.599795][ T5890] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.789737][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 137.798971][ C0] lec:lec_tx_timeout: lec0 [ 137.809785][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 138.200491][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 138.554246][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 138.598930][ T5890] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.619444][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.653748][ T5890] usb 1-1: Product: syz [ 138.658935][ T5890] usb 1-1: Manufacturer: syz [ 138.686041][ T5890] usb 1-1: SerialNumber: syz [ 139.437036][ T5890] usb 1-1: config 0 descriptor?? [ 139.454272][ T5890] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 139.509848][ T5890] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 140.145647][ T30] audit: type=1400 audit(1760239722.279:229): avc: denied { read write } for pid=6820 comm="syz.2.174" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.925850][ T5890] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 140.949772][ T30] audit: type=1400 audit(1760239722.279:230): avc: denied { open } for pid=6820 comm="syz.2.174" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 141.082463][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 141.206642][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 141.231124][ T6836] bridge0: entered promiscuous mode [ 141.643991][ T5890] em28xx 1-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 141.655971][ T5869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.701575][ T5890] em28xx 1-1:0.0: board has no eeprom [ 141.811515][ T5869] usb 2-1: config index 0 descriptor too short (expected 36, got 15) [ 141.839467][ T5869] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 142.007765][ T5890] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 142.035149][ T5890] em28xx 1-1:0.0: dvb set to bulk mode. [ 142.058226][ T5862] em28xx 1-1:0.0: Binding DVB extension [ 142.111395][ T5869] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.532059][ T5890] usb 1-1: USB disconnect, device number 7 [ 142.547230][ T5890] em28xx 1-1:0.0: Disconnecting em28xx [ 142.577814][ T5862] em28xx 1-1:0.0: Registering input extension [ 142.603733][ T5890] em28xx 1-1:0.0: Closing input extension [ 142.623673][ T5890] em28xx 1-1:0.0: Freeing device [ 142.653700][ T6853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.181'. [ 142.819771][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 142.830211][ C0] lec:lec_tx_timeout: lec0 [ 142.834906][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 142.859966][ T5869] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 142.869464][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.920658][ T5869] usb 2-1: config 0 descriptor?? [ 143.159963][ T5918] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.375040][ T5946] usb 2-1: USB disconnect, device number 6 [ 143.422643][ T5918] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 143.572650][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.221672][ T5918] usb 4-1: config 0 descriptor?? [ 145.123302][ T6861] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.183' sets config #-1 [ 146.015654][ T5918] usb 4-1: Cannot read MAC address [ 146.021990][ T5918] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 146.038300][ T5918] usb 4-1: USB disconnect, device number 6 [ 146.107530][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 146.122917][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 146.186881][ T6890] bridge0: entered promiscuous mode [ 146.335609][ T6898] netlink: 68 bytes leftover after parsing attributes in process `syz.2.191'. [ 146.519851][ T5890] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.243978][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 147.296309][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 147.319433][ T5890] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 147.358667][ T6910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46354 sclass=netlink_tcpdiag_socket pid=6910 comm=syz.4.193 [ 147.386233][ T5890] usb 2-1: config 0 has no interface number 0 [ 147.459362][ T5890] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 147.626795][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.694351][ T5890] usb 2-1: Product: syz [ 147.771301][ T5890] usb 2-1: Manufacturer: syz [ 147.817389][ T5890] usb 2-1: SerialNumber: syz [ 147.849756][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 147.858138][ C0] lec:lec_tx_timeout: lec0 [ 147.863367][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 148.281399][ T5890] usb 2-1: config 0 descriptor?? [ 148.337992][ T5890] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 148.501462][ T5876] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.523144][ T5890] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 148.541254][ T5890] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 148.661649][ T5876] usb 4-1: config index 0 descriptor too short (expected 36, got 15) [ 148.670746][ T5876] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 148.801842][ T5876] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.818911][ T5876] usb 4-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 149.018872][ T6893] Zero length message leads to an empty skb [ 149.025331][ T6893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 149.036764][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 149.558281][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.571472][ T5876] usb 4-1: config 0 descriptor?? [ 149.579890][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.192'. [ 149.892435][ T6935] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.913105][ T6935] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 150.952447][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 150.954131][ T5869] usb 2-1: USB disconnect, device number 7 [ 151.670968][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 151.739629][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 151.878294][ T5869] quatech2 2-1:0.51: device disconnected [ 152.634775][ T5918] usb 4-1: USB disconnect, device number 7 [ 152.830603][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 152.869887][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 153.649725][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 153.658571][ C0] lec:lec_tx_timeout: lec0 [ 153.663240][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 154.220481][ T6972] fuse: Bad value for 'fd' [ 156.395115][ T6997] netlink: 68 bytes leftover after parsing attributes in process `syz.1.212'. [ 158.689734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 158.697806][ C0] lec:lec_tx_timeout: lec0 [ 158.702522][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 158.771262][ T30] audit: type=1400 audit(1760239740.929:231): avc: denied { mount } for pid=7012 comm="syz.0.216" name="/" dev="ramfs" ino=12882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 158.794399][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.035816][ T30] audit: type=1400 audit(1760239741.159:232): avc: denied { sys_module } for pid=7021 comm="syz.2.218" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 159.062611][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.102129][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 159.248907][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 159.267779][ T7031] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46354 sclass=netlink_tcpdiag_socket pid=7031 comm=syz.2.218 [ 159.520385][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.531987][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.584271][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.603432][ T5876] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.632764][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.829657][ T5876] usb 2-1: config 0 descriptor?? [ 161.477105][ T5876] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 161.539512][ T5876] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 162.357700][ T5876] usb 2-1: USB disconnect, device number 8 [ 162.472836][ T7055] fido_id[7055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 162.497826][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.815474][ T30] audit: type=1400 audit(1760239744.959:233): avc: denied { create } for pid=7061 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.207295][ T30] audit: type=1400 audit(1760239745.039:234): avc: denied { setopt } for pid=7061 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.207715][ T7064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.224'. [ 163.230921][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.709733][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 163.718537][ C0] lec:lec_tx_timeout: lec0 [ 163.729853][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 164.073949][ T7076] netlink: 68 bytes leftover after parsing attributes in process `syz.1.226'. [ 164.518803][ T30] audit: type=1400 audit(1760239746.679:235): avc: denied { name_connect } for pid=7080 comm="syz.0.228" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 164.524419][ T30] audit: type=1400 audit(1760239746.689:236): avc: denied { getopt } for pid=7080 comm="syz.0.228" lport=55448 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 164.585027][ T7081] tipc: Started in network mode [ 164.585044][ T7081] tipc: Node identity da9954a8b598, cluster identity 4711 [ 164.585136][ T7081] tipc: Enabled bearer , priority 0 [ 164.585822][ T7081] syzkaller0: entered promiscuous mode [ 164.585834][ T7081] syzkaller0: entered allmulticast mode [ 164.636924][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.638290][ T7080] tipc: Resetting bearer [ 164.650903][ T7080] tipc: Disabling bearer [ 164.760052][ T5862] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 164.909884][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.911909][ T5862] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 164.911937][ T5862] usb 5-1: config 0 has no interface number 0 [ 164.914073][ T5862] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 164.914093][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.914106][ T5862] usb 5-1: Product: syz [ 164.914115][ T5862] usb 5-1: Manufacturer: syz [ 164.914125][ T5862] usb 5-1: SerialNumber: syz [ 164.915521][ T5862] usb 5-1: config 0 descriptor?? [ 164.916656][ T5862] hub 5-1:0.132: bad descriptor, ignoring hub [ 164.916670][ T5862] hub 5-1:0.132: probe with driver hub failed with error -5 [ 164.917496][ T5862] usbhid 5-1:0.132: couldn't find an input interrupt endpoint [ 165.072941][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.126174][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.137448][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.152143][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.174816][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.205302][ T24] usb 2-1: config 0 descriptor?? [ 165.231185][ T5862] usb 5-1: USB disconnect, device number 3 [ 166.526100][ T7114] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.233'. [ 166.553813][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 166.579822][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 166.636564][ T24] usb 2-1: USB disconnect, device number 9 [ 168.739745][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 168.749278][ C0] lec:lec_tx_timeout: lec0 [ 168.754202][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 170.143598][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 170.216936][ T7164] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46354 sclass=netlink_tcpdiag_socket pid=7164 comm=syz.3.243 [ 171.067722][ T5814] block nbd0: Receive control failed (result -32) [ 171.165854][ T7165] block nbd0: shutting down sockets [ 172.560824][ T5862] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 172.789771][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 172.800979][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 173.363452][ T5862] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 173.379588][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.420168][ T5862] usb 2-1: Product: syz [ 173.427602][ T5862] usb 2-1: Manufacturer: syz [ 173.484014][ T5862] usb 2-1: SerialNumber: syz [ 173.706505][ T5862] usb 2-1: config 0 descriptor?? [ 173.742391][ T5862] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 173.769745][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 173.779166][ C0] lec:lec_tx_timeout: lec0 [ 173.784211][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 173.949277][ T5862] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 174.045188][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 174.227848][ T7226] binder: BINDER_SET_CONTEXT_MGR already set [ 174.235138][ T7226] binder: 7224:7226 ioctl 4018620d 2000000002c0 returned -16 [ 174.270387][ T5890] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.282385][ T7226] binder: 7224:7226 ioctl c0306201 0 returned -14 [ 174.463987][ T7210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46354 sclass=netlink_tcpdiag_socket pid=7210 comm=syz.2.254 [ 174.611693][ T5890] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 174.625117][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.641293][ T5890] usb 4-1: config 0 descriptor?? [ 174.679499][ T5862] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 175.070874][ T7219] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.255' sets config #-1 [ 175.288364][ T30] audit: type=1400 audit(1760239757.319:237): avc: denied { read write } for pid=7229 comm="syz.0.257" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.679780][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 175.717013][ T30] audit: type=1400 audit(1760239757.319:238): avc: denied { open } for pid=7229 comm="syz.0.257" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.836584][ T5862] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 175.849017][ T5862] em28xx 2-1:0.0: board has no eeprom [ 175.866282][ T24] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 175.892542][ T24] usb 1-1: config 0 has no interface number 0 [ 175.927872][ T24] usb 1-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.968912][ T24] usb 1-1: config 0 interface 235 has no altsetting 0 [ 175.969866][ T5862] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 175.994386][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 176.019935][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.038554][ T5862] em28xx 2-1:0.0: dvb set to bulk mode. [ 176.046011][ T24] usb 1-1: Product: syz [ 176.046090][ T1206] em28xx 2-1:0.0: Binding DVB extension [ 176.082236][ T24] usb 1-1: Manufacturer: syz [ 176.087443][ T24] usb 1-1: SerialNumber: syz [ 176.089245][ T5862] usb 2-1: USB disconnect, device number 10 [ 176.114341][ T5862] em28xx 2-1:0.0: Disconnecting em28xx [ 176.201705][ T24] usb 1-1: config 0 descriptor?? [ 176.245972][ T24] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 176.266334][ T24] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 176.278468][ T24] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 176.325893][ T24] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 176.336659][ T1206] em28xx 2-1:0.0: Registering input extension [ 176.346481][ T24] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 176.350814][ T5862] em28xx 2-1:0.0: Closing input extension [ 176.516824][ T24] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 176.543111][ T5862] em28xx 2-1:0.0: Freeing device [ 177.060857][ T24] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 177.099927][ T5890] usb 4-1: Cannot read MAC address [ 177.106643][ T5890] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 177.166661][ T5890] usb 4-1: USB disconnect, device number 8 [ 178.070586][ T24] usb 1-1: USB disconnect, device number 8 [ 178.654226][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 178.686526][ T24] keyspan 1-1:0.235: device disconnected [ 178.799787][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 178.808875][ C0] lec:lec_tx_timeout: lec0 [ 178.818979][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 180.057924][ T7280] syzkaller0: entered promiscuous mode [ 180.202555][ T7280] syzkaller0: entered allmulticast mode [ 182.129830][ T5862] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.236124][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 182.385074][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 182.430102][ T5918] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.900199][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.900232][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.900255][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.900295][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.900319][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.916773][ T5918] usb 5-1: config 0 descriptor?? [ 183.062870][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 183.070514][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 183.083304][ T5862] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 183.083337][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.083358][ T5862] usb 2-1: Product: syz [ 183.083375][ T5862] usb 2-1: Manufacturer: syz [ 183.083391][ T5862] usb 2-1: SerialNumber: syz [ 183.113117][ T5862] usb 2-1: config 0 descriptor?? [ 183.118625][ T5862] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 183.227757][ T5862] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 183.425670][ T5918] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 183.596870][ T5918] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 183.829730][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 183.838093][ C0] lec:lec_tx_timeout: lec0 [ 183.842629][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 184.261401][ T5862] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 184.298237][ T5918] usb 5-1: USB disconnect, device number 4 [ 184.390031][ T30] audit: type=1400 audit(1760239766.539:239): avc: denied { connect } for pid=7321 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.413009][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.491219][ T30] audit: type=1400 audit(1760239766.539:240): avc: denied { bind } for pid=7321 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.510974][ T30] audit: type=1400 audit(1760239766.539:241): avc: denied { write } for pid=7321 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.448933][ T5862] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 185.462819][ T5862] em28xx 2-1:0.0: board has no eeprom [ 185.509830][ T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 185.589783][ T5862] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 185.598759][ T5862] em28xx 2-1:0.0: dvb set to bulk mode. [ 185.620216][ T1206] em28xx 2-1:0.0: Binding DVB extension [ 185.664778][ T5862] usb 2-1: USB disconnect, device number 11 [ 185.680521][ T24] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 185.730871][ T5862] em28xx 2-1:0.0: Disconnecting em28xx [ 185.799769][ T24] usb 4-1: config 0 has no interface number 0 [ 185.826303][ T1206] em28xx 2-1:0.0: Registering input extension [ 185.861084][ T24] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.870767][ T5862] em28xx 2-1:0.0: Closing input extension [ 185.969502][ T24] usb 4-1: config 0 interface 235 has no altsetting 0 [ 185.979034][ T5862] em28xx 2-1:0.0: Freeing device [ 186.168516][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 186.213827][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.717665][ T24] usb 4-1: Product: syz [ 186.729773][ T24] usb 4-1: Manufacturer: syz [ 186.739098][ T24] usb 4-1: SerialNumber: syz [ 186.749605][ T24] usb 4-1: config 0 descriptor?? [ 186.765492][ T24] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 186.967732][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 187.228923][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 187.446711][ T7373] binder: BINDER_SET_CONTEXT_MGR already set [ 187.454214][ T7373] binder: 7366:7373 ioctl 4018620d 2000000002c0 returned -16 [ 187.503208][ T7373] binder: 7366:7373 ioctl c0306201 0 returned -14 [ 187.660362][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 187.687426][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 187.745923][ T24] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 187.790128][ T24] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 187.880142][ T7381] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.287'. [ 188.067157][ T24] usb 4-1: USB disconnect, device number 9 [ 188.859795][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 188.868014][ C0] lec:lec_tx_timeout: lec0 [ 188.873085][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 188.909754][ T30] audit: type=1400 audit(2000000000.010:242): avc: denied { ioctl } for pid=7383 comm="syz.4.288" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13282 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 188.954687][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 189.001844][ T24] keyspan 4-1:0.235: device disconnected [ 190.478616][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 190.553801][ T7408] netlink: 32 bytes leftover after parsing attributes in process `syz.3.295'. [ 191.178526][ T30] audit: type=1400 audit(2000000002.740:243): avc: denied { ioctl } for pid=7395 comm="syz.2.293" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 191.179509][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 191.209124][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 191.216962][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 191.225654][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 191.231850][ T5821] Bluetooth: hci3: command 0x0405 tx timeout [ 191.749142][ T7417] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46354 sclass=netlink_tcpdiag_socket pid=7417 comm=syz.1.289 [ 194.282140][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.290793][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.689743][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 194.697861][ C0] lec:lec_tx_timeout: lec0 [ 194.709824][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 199.719724][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 199.729312][ C0] lec:lec_tx_timeout: lec0 [ 199.739790][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 204.749751][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 204.757968][ C0] lec:lec_tx_timeout: lec0 [ 204.769799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 209.779831][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 209.797179][ C0] lec:lec_tx_timeout: lec0 [ 209.809812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 214.819743][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 214.827860][ C0] lec:lec_tx_timeout: lec0 [ 214.839812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 219.849744][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 219.857855][ C0] lec:lec_tx_timeout: lec0 [ 219.869834][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 225.649738][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 225.659905][ C0] lec:lec_tx_timeout: lec0 [ 225.669799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 230.689745][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 230.698214][ C0] lec:lec_tx_timeout: lec0 [ 230.710268][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 235.719733][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 235.728798][ C0] lec:lec_tx_timeout: lec0 [ 235.739770][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 240.749732][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 240.757926][ C0] lec:lec_tx_timeout: lec0 [ 240.769795][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 245.779734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 245.788368][ C0] lec:lec_tx_timeout: lec0 [ 245.794658][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 250.820063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 250.832977][ C0] lec:lec_tx_timeout: lec0 [ 250.839771][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 255.859726][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 255.868876][ C0] lec:lec_tx_timeout: lec0 [ 255.879776][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 261.889788][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6010 ms [ 261.899298][ C0] lec:lec_tx_timeout: lec0 [ 261.909772][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 267.649721][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 267.658492][ C0] lec:lec_tx_timeout: lec0 [ 267.669789][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 272.689734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 272.701607][ C0] lec:lec_tx_timeout: lec0 [ 272.709762][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 277.719725][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 277.729151][ C0] lec:lec_tx_timeout: lec0 [ 277.739756][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 282.749731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 282.759490][ C0] lec:lec_tx_timeout: lec0 [ 282.769776][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 287.789734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 287.800076][ C0] lec:lec_tx_timeout: lec0 [ 298.699667][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 298.707088][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7393/1:b..l [ 298.716739][ C1] rcu: (detected by 1, t=10502 jiffies, g=14885, q=1080 ncpus=2) [ 298.726927][ C1] task:syz.1.289 state:R running task stack:26440 pid:7393 tgid:7387 ppid:5805 task_flags:0x400040 flags:0x00080003 [ 298.743551][ C1] Call Trace: [ 298.748497][ C1] [ 298.751596][ C1] __schedule+0x1190/0x5de0 [ 298.756441][ C1] ? __pfx___schedule+0x10/0x10 [ 298.765198][ C1] ? __lock_acquire+0x622/0x1c90 [ 298.773454][ C1] ? mark_held_locks+0x49/0x80 [ 298.779269][ C1] preempt_schedule_irq+0x51/0x90 [ 298.785124][ C1] irqentry_exit+0x36/0x90 [ 298.789711][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.797679][ C1] RIP: 0010:unwind_next_frame+0xfe7/0x20a0 [ 298.803910][ C1] Code: 85 80 0c 00 00 49 89 6d 40 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 56 10 00 00 <41> 39 5d 00 0f 84 10 06 00 00 bd 01 00 00 00 e9 de f3 ff ff 48 b8 [ 298.830195][ C1] RSP: 0018:ffffc9001c4eecd0 EFLAGS: 00000246 [ 298.837473][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffc9001c4f0000 [ 298.845776][ C1] RDX: 1ffff9200389dda8 RSI: ffffc9001c4ef470 RDI: ffffc9001c4eed80 [ 298.853731][ C1] RBP: 1ffff9200389de93 R08: 0000000000000001 R09: 0000000000000000 [ 298.862290][ C1] R10: 0000000000000000 R11: 00000000000122c7 R12: ffffc9001c4eed90 [ 298.870564][ C1] R13: ffffc9001c4eed40 R14: ffffc9001c4ef498 R15: ffffc9001c4eed74 [ 298.879066][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 298.885038][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.894215][ C1] arch_stack_walk+0x94/0x100 [ 298.899586][ C1] ? vma_alloc_folio_noprof+0xed/0x1e0 [ 298.905769][ C1] stack_trace_save+0x8e/0xc0 [ 298.912204][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 298.918470][ C1] ? __lock_acquire+0x622/0x1c90 [ 298.924030][ C1] save_stack+0x160/0x1f0 [ 298.928351][ C1] ? __pfx_save_stack+0x10/0x10 [ 298.933887][ C1] ? post_alloc_hook+0x1c0/0x230 [ 298.939676][ C1] ? get_page_from_freelist+0x10a3/0x3a30 [ 298.946931][ C1] ? __alloc_frozen_pages_noprof+0x25f/0x2470 [ 298.954550][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 298.959643][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 298.966130][ C1] ? __lock_acquire+0x622/0x1c90 [ 298.972818][ C1] __set_page_owner+0x91/0x550 [ 298.977571][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 298.982931][ C1] ? bad_range+0x261/0x4c0 [ 298.987332][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.993473][ C1] post_alloc_hook+0x1c0/0x230 [ 298.998228][ C1] get_page_from_freelist+0x10a3/0x3a30 [ 299.005209][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 299.010478][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.015923][ C1] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 299.022409][ C1] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 299.029437][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.036206][ C1] ? trace_sched_exit_tp+0xd1/0x120 [ 299.042791][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.051196][ C1] ? smp_call_function_many_cond+0x1239/0x1600 [ 299.059340][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.065298][ C1] ? smp_call_function_many_cond+0x457/0x1600 [ 299.072806][ C1] ? __lock_acquire+0x622/0x1c90 [ 299.079986][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 299.087503][ C1] ? policy_nodemask+0xea/0x4e0 [ 299.093226][ C1] alloc_pages_mpol+0x1fb/0x550 [ 299.098260][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 299.104248][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 299.111094][ C1] vma_alloc_folio_noprof+0xed/0x1e0 [ 299.117066][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 299.123293][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 299.129498][ C1] do_wp_page+0x11d8/0x52b0 [ 299.134263][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 299.139203][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.144952][ C1] ? ___pte_offset_map+0x2ad/0x4f0 [ 299.150961][ C1] __handle_mm_fault+0x1ae3/0x2aa0 [ 299.156081][ C1] ? mt_find+0x3e2/0xa20 [ 299.160878][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 299.166511][ C1] ? __pfx_mt_find+0x10/0x10 [ 299.171108][ C1] ? find_vma+0xbf/0x140 [ 299.175349][ C1] ? __pfx_find_vma+0x10/0x10 [ 299.180275][ C1] handle_mm_fault+0x589/0xd10 [ 299.186048][ C1] ? __pkru_allows_pkey+0x11/0xb0 [ 299.192148][ C1] do_user_addr_fault+0x7a6/0x1370 [ 299.198817][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.205926][ C1] exc_page_fault+0x64/0xc0 [ 299.211554][ C1] asm_exc_page_fault+0x26/0x30 [ 299.218744][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 299.224882][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d1 82 03 00 90 90 90 90 90 90 90 90 90 90 [ 299.248337][ C1] RSP: 0018:ffffc9001c4ef9e8 EFLAGS: 00050246 [ 299.256883][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000f1030 [ 299.269965][ C1] RDX: 0000000000080000 RSI: ffffffff892df3a3 RDI: 0000000000000005 [ 299.279343][ C1] RBP: ffffc9001c4efd88 R08: 0000000000000005 R09: 0000000000000000 [ 299.288865][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 299.298069][ C1] R13: 00002000000f1000 R14: ffffc9001c4efdcc R15: 0000000000000002 [ 299.314750][ C1] ? ____sys_recvmsg+0x2e3/0x6b0 [ 299.320288][ C1] ____sys_recvmsg+0x2ee/0x6b0 [ 299.326302][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 299.332631][ C1] ? kfree+0x252/0x6d0 [ 299.337487][ C1] ___sys_recvmsg+0x114/0x1a0 [ 299.342851][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 299.348560][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.355575][ C1] ? __pfx___might_resched+0x10/0x10 [ 299.361107][ C1] do_recvmmsg+0x2fe/0x750 [ 299.365945][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 299.371032][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 299.377814][ C1] ? find_held_lock+0x2b/0x80 [ 299.382470][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 299.390109][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 299.396808][ C1] do_syscall_64+0xcd/0xfa0 [ 299.402170][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.408754][ C1] RIP: 0033:0x7f44af58eec9 [ 299.413239][ C1] RSP: 002b:00007f44b03a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 299.422063][ C1] RAX: ffffffffffffffda RBX: 00007f44af7e6090 RCX: 00007f44af58eec9 [ 299.430106][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 299.438070][ C1] RBP: 00007f44af611f91 R08: 0000000000000000 R09: 0000000000000000 [ 299.448708][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 299.456845][ C1] R13: 00007f44af7e6128 R14: 00007f44af7e6090 R15: 00007ffe23d1c7e8 [ 299.466712][ C1] [ 299.469876][ C1] rcu: rcu_preempt kthread starved for 9132 jiffies! g14885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 299.480983][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 299.492804][ C1] rcu: RCU grace-period kthread stack dump: [ 299.500357][ C1] task:rcu_preempt state:R running task stack:28360 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 299.514131][ C1] Call Trace: [ 299.517560][ C1] [ 299.520467][ C1] __schedule+0x1190/0x5de0 [ 299.525266][ C1] ? __lock_acquire+0x622/0x1c90 [ 299.531632][ C1] ? __pfx___schedule+0x10/0x10 [ 299.536639][ C1] ? find_held_lock+0x2b/0x80 [ 299.541291][ C1] ? schedule+0x2d7/0x3a0 [ 299.546577][ C1] schedule+0xe7/0x3a0 [ 299.551084][ C1] schedule_timeout+0x123/0x290 [ 299.555934][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 299.561291][ C1] ? __pfx_process_timeout+0x10/0x10 [ 299.566775][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 299.574070][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 299.579550][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 299.585453][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 299.590865][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 299.598596][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.603609][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 299.609485][ C1] rcu_gp_kthread+0x26d/0x380 [ 299.615903][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.626121][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.631226][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.636473][ C1] ? __kthread_parkme+0x19e/0x250 [ 299.642052][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.648288][ C1] kthread+0x3c5/0x780 [ 299.652438][ C1] ? __pfx_kthread+0x10/0x10 [ 299.657126][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.662195][ C1] ? __pfx_kthread+0x10/0x10 [ 299.666798][ C1] ret_from_fork+0x675/0x7d0 [ 299.671374][ C1] ? __pfx_kthread+0x10/0x10 [ 299.676129][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.680883][ C1] [ 299.683884][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 299.691882][ C1] Sending NMI from CPU 1 to CPUs 0: [ 299.697130][ C0] NMI backtrace for cpu 0 [ 299.697143][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 299.697159][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.697167][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 299.697188][ C0] Code: f7 74 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 05 24 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 299.697201][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 299.697213][ C0] RAX: 0000000000aadf31 RBX: 0000000000000000 RCX: ffffffff8b6622a9 [ 299.697222][ C0] RDX: 0000000000000000 RSI: ffffffff8db032ec RDI: ffffffff8bf1e3c0 [ 299.697230][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 299.697238][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 299.697246][ C0] R13: ffffffff8e097a00 R14: ffffffff90832dd0 R15: 0000000000000000 [ 299.697255][ C0] FS: 0000000000000000(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 299.697269][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.697278][ C0] CR2: 0000556409021be0 CR3: 000000005c884000 CR4: 00000000003526f0 [ 299.697286][ C0] Call Trace: [ 299.697293][ C0] [ 299.697301][ C0] default_idle+0x13/0x20 [ 299.697318][ C0] default_idle_call+0x6c/0xb0 [ 299.697335][ C0] do_idle+0x38d/0x500 [ 299.697351][ C0] ? __pfx_do_idle+0x10/0x10 [ 299.697363][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 299.697385][ C0] cpu_startup_entry+0x4f/0x60 [ 299.697397][ C0] rest_init+0x16b/0x2b0 [ 299.697414][ C0] ? acpi_subsystem_init+0x133/0x180 [ 299.697429][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 299.697446][ C0] start_kernel+0x3f6/0x4e0 [ 299.697461][ C0] x86_64_start_reservations+0x18/0x30 [ 299.697476][ C0] x86_64_start_kernel+0x130/0x190 [ 299.697491][ C0] common_startup_64+0x13e/0x148 [ 299.697516][ C0] [ 299.906264][ C1] vkms_vblank_simulate: vblank timer overrun