last executing test programs: 11m36.928616808s ago: executing program 2 (id=1370): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r0, 0x0, &(0x7f0000001000/0x1000)=nil, 0x1000, 0x6}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = io_uring_setup(0x355b, &(0x7f0000000140)={0x0, 0xe24b, 0x10, 0x5, 0x4000020}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc}) close_range(r2, 0xffffffffffffffff, 0x0) 11m34.85789573s ago: executing program 2 (id=1374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) 11m32.226609055s ago: executing program 2 (id=1380): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x4000810) 11m32.102839099s ago: executing program 2 (id=1383): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x20) fcntl$setlease(r4, 0x400, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) close(0x3) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002b0000010000000008000300040001000c0001800600000088480000c7abbf4d31e9c0b815dbaa51959d67cab4fecd78de6ac0ab6181fbb62c200000000000000000"], 0x28}}, 0x8000) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000003c0)={0x2, 0x1, @multicast1}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x2, 0x840) 11m30.633833027s ago: executing program 2 (id=1386): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0xfffffffc, @loopback}, 0x1c) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r5, 0x10000, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r6, &(0x7f0000000400)=[{0x0}], 0x1) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000140)) recvfrom(r0, &(0x7f00000000c0)=""/12, 0xc, 0x2020, &(0x7f0000000100)=@sco, 0x80) socket$inet_sctp(0x2, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 11m29.448643071s ago: executing program 2 (id=1388): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000fe8000000000000000000000000000bb00"/54, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000300000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000200000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000400000000000000480002006563622863697068"], 0x138}, 0x1, 0xe}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80980, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffe7ffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3ff, 0x0, 0x0, 0x0, 0x20}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffff}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r5, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="607788c1a9caf145ec7f0f3b179cb01000a7bc21a87bf81c282477bea6c78bd73f80e3d41f697b1c2a454757241d39bf0559a66a32a93a858002dacbbba4287e49b8bf3448789cc951", 0x49}, {&(0x7f0000000440)="b77f194ecef3d4cabafc5af5a16dc6ea923253944984a055658a12f6ab77148e9acbe0df83e817ec4af5abbd75da5cb933ee8dc844854d08fa4a43fba912c1b74a0de7e310cf92a73d9eec55575470", 0x4f}], 0x2, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@end, @noop, @ssrr={0x89, 0x1f, 0x2f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xa3, 0x1, 0x1, [{@private=0xa010101}, {@empty, 0x3ff}, {@local, 0x1}, {@multicast2, 0x9}, {@private=0xa010101, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xca, [@multicast1]}, @cipso={0x86, 0x17, 0x1, [{0x6, 0x11, "d62e21454a2974b7c66941fe45ccd5"}]}, @timestamp_prespec={0x44, 0x4c, 0x81, 0x3, 0x9, [{@loopback, 0x5}, {@broadcast, 0x7dc}, {@broadcast, 0x101}, {@remote, 0x40}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@empty, 0x7f}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x45, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x4, [{@multicast1, 0x6}, {@local, 0x2}, {@multicast2, 0xc}]}, @rr={0x7, 0x7, 0x8e, [@loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}], 0x1c0}, 0x8010) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="80020000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="a6133b0ee13d8561ec7059af709ed0a71e5106d38737d3f2d4ffe5b4cad4b724eafc9c00fcf3c9a627a41083d19f0159138b40c99caac51221654145915dabbe1e9f31e877bd7e50d8c6"], 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 11m13.401826679s ago: executing program 32 (id=1388): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000fe8000000000000000000000000000bb00"/54, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000300000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000200000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000400000000000000480002006563622863697068"], 0x138}, 0x1, 0xe}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80980, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffe7ffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3ff, 0x0, 0x0, 0x0, 0x20}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffff}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r5, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="607788c1a9caf145ec7f0f3b179cb01000a7bc21a87bf81c282477bea6c78bd73f80e3d41f697b1c2a454757241d39bf0559a66a32a93a858002dacbbba4287e49b8bf3448789cc951", 0x49}, {&(0x7f0000000440)="b77f194ecef3d4cabafc5af5a16dc6ea923253944984a055658a12f6ab77148e9acbe0df83e817ec4af5abbd75da5cb933ee8dc844854d08fa4a43fba912c1b74a0de7e310cf92a73d9eec55575470", 0x4f}], 0x2, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@end, @noop, @ssrr={0x89, 0x1f, 0x2f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xa3, 0x1, 0x1, [{@private=0xa010101}, {@empty, 0x3ff}, {@local, 0x1}, {@multicast2, 0x9}, {@private=0xa010101, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xca, [@multicast1]}, @cipso={0x86, 0x17, 0x1, [{0x6, 0x11, "d62e21454a2974b7c66941fe45ccd5"}]}, @timestamp_prespec={0x44, 0x4c, 0x81, 0x3, 0x9, [{@loopback, 0x5}, {@broadcast, 0x7dc}, {@broadcast, 0x101}, {@remote, 0x40}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3}, {@empty, 0x7f}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x45, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x5c, 0x3, 0x4, [{@multicast1, 0x6}, {@local, 0x2}, {@multicast2, 0xc}]}, @rr={0x7, 0x7, 0x8e, [@loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}], 0x1c0}, 0x8010) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="80020000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="a6133b0ee13d8561ec7059af709ed0a71e5106d38737d3f2d4ffe5b4cad4b724eafc9c00fcf3c9a627a41083d19f0159138b40c99caac51221654145915dabbe1e9f31e877bd7e50d8c6"], 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 6.429535021s ago: executing program 3 (id=3338): pipe2(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setgid(0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1a20484568097968}, 0xfd}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = dup2(r3, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) 5.856165241s ago: executing program 3 (id=3340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x51d2, &(0x7f0000000140)={0x0, 0x3957, 0x1000, 0x2, 0x402d7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x40) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.543704646s ago: executing program 5 (id=3345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.519957642s ago: executing program 4 (id=3346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@any, 0x4, 0x9, 0xb, "13aa8d", 0x2, 0x5}]}}}, 0x13) 4.254553162s ago: executing program 5 (id=3347): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.015597626s ago: executing program 5 (id=3349): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001980)=[{0x0}, {&(0x7f0000000880)=""/113, 0x71}, {&(0x7f0000000000)=""/40, 0x28}, {0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5}, 0x160) 3.918503195s ago: executing program 3 (id=3350): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) 3.8757224s ago: executing program 3 (id=3351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fcntl$addseals(r2, 0x409, 0xe) 3.870908963s ago: executing program 5 (id=3352): pipe2(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setgid(0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1a20484568097968}, 0xfd}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = dup2(r3, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) 3.429055593s ago: executing program 0 (id=3353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000180)={0xd, 0x2e}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r7 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.34763571s ago: executing program 1 (id=3354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) close(r1) 3.290158921s ago: executing program 5 (id=3355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 2.254478028s ago: executing program 0 (id=3356): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 2.254094271s ago: executing program 1 (id=3357): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa8}}, 0x0) 2.253704617s ago: executing program 5 (id=3358): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r3, 0x0, 0x0, 0x8) 2.155559813s ago: executing program 0 (id=3359): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.145800806s ago: executing program 1 (id=3360): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) sendfile(r0, r0, 0x0, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.017841457s ago: executing program 0 (id=3361): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) 1.910596887s ago: executing program 0 (id=3362): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001980)=[{0x0}, {&(0x7f0000000880)=""/113, 0x71}, {&(0x7f0000000000)=""/40, 0x28}, {0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5}, 0x160) 988.514993ms ago: executing program 0 (id=3363): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000000c0)=0xcab) getpid() prctl$PR_SET_DUMPABLE(0x4, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{0x0}], 0x1}, 0x1d52a}], 0x1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r2 = fsopen(&(0x7f0000000000)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfd}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 140.048842ms ago: executing program 4 (id=3372): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=3373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): object_r:event_device_t tclass=chr_file permissive=1 [ 485.006089][ T9864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.335867][ T30] audit: type=1400 audit(1750960052.829:271): avc: denied { ioctl } for pid=9813 comm="syz.0.1085" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 488.091063][ T5878] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 488.261163][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 488.721530][ T5878] usb 2-1: no configurations [ 488.726165][ T5878] usb 2-1: can't read configurations, error -22 [ 488.737909][ T9891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.980739][ T5878] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 489.280965][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 489.312218][ T5878] usb 2-1: no configurations [ 489.335822][ T5878] usb 2-1: can't read configurations, error -22 [ 489.405559][ T5878] usb usb2-port1: attempt power cycle [ 490.602799][ T9915] Invalid ELF header type: 3 != 1 [ 490.609062][ T5878] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 490.651465][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 490.657112][ T5878] usb 2-1: no configurations [ 490.662107][ T5878] usb 2-1: can't read configurations, error -22 [ 490.845610][ T5878] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 491.831145][ T5878] usb 2-1: device descriptor read/8, error -71 [ 492.062875][ T5878] usb usb2-port1: unable to enumerate USB device [ 493.747600][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.901053][ T5815] Bluetooth: hci3: command 0x0c1a tx timeout [ 499.746672][ T9978] fuseblk: Unknown parameter 'user_i00000000000000000000' [ 501.172225][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.178590][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.614923][T10013] netlink: 'syz.3.1141': attribute type 1 has an invalid length. [ 503.518445][T10016] loop6: detected capacity change from 0 to 524287999 [ 503.525549][T10016] buffer_io_error: 7 callbacks suppressed [ 503.525558][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.539122][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.546997][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.555130][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.562986][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.570864][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.578734][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.586652][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.594547][T10016] ldm_validate_partition_table(): Disk read failed. [ 503.601152][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.608992][T10016] Buffer I/O error on dev loop6, logical block 0, async page read [ 503.616914][T10016] Dev loop6: unable to read RDB block 0 [ 503.622642][T10016] loop6: unable to read partition table [ 503.628345][T10016] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 504.074801][T10027] overlayfs: failed to clone upperpath [ 504.552021][T10018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.935955][ T5913] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 508.180846][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.191162][T10063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.457758][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.512389][ T5913] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 508.640815][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.661770][ T5913] usb 2-1: config 0 descriptor?? [ 508.794610][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 508.820551][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 509.203709][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 509.217014][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 509.247031][ T5913] usb 2-1: USB disconnect, device number 24 [ 509.706595][T10077] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 509.714474][T10077] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1161'. [ 510.342752][T10074] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 513.850887][ T5871] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 514.045105][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 514.059900][ T5871] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 514.078723][ T5871] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 514.589418][ T5871] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 514.604080][ T5871] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 514.616396][ T5871] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 514.626864][ T5871] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.663357][ T5871] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.686327][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.954120][ T5871] usb 2-1: GET_CAPABILITIES returned 0 [ 514.982559][ T5871] usbtmc 2-1:16.0: can't read capabilities [ 515.101099][T10128] overlayfs: failed to clone upperpath [ 515.584481][ T5871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5871 comm=kworker/0:4 [ 515.601816][T10134] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 515.760854][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 515.971709][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.166272][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.213466][ T5871] usb 2-1: USB disconnect, device number 25 [ 516.235767][T10111] blktrace: Concurrent blktraces are not allowed on loop6 [ 516.332045][ T5892] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 516.341269][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.361688][ T5892] usb 1-1: config 0 descriptor?? [ 517.218313][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 517.232916][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 517.238921][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 517.259051][ T5892] usb 1-1: USB disconnect, device number 27 [ 519.760451][T10166] netlink: 'syz.0.1184': attribute type 4 has an invalid length. [ 519.768376][T10166] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1184'. [ 520.622119][ T5892] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 520.930823][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 521.078113][ T5892] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 521.170803][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.186482][ T5892] usb 4-1: Product: syz [ 521.202448][ T5892] usb 4-1: Manufacturer: syz [ 521.207085][ T5892] usb 4-1: SerialNumber: syz [ 521.239013][ T5892] usb 4-1: config 0 descriptor?? [ 521.252584][ T5892] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 521.279148][ T5892] usb 4-1: Detected FT232H [ 521.453921][ T5892] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 522.275183][ T5892] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 522.290895][ T5892] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 522.345871][ T5892] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 522.370840][ T5892] usb 4-1: USB disconnect, device number 28 [ 522.572606][ T5892] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 523.377054][ T5892] ftdi_sio 4-1:0.0: device disconnected [ 532.510893][T10258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 532.517535][T10258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.576148][T10258] vhci_hcd vhci_hcd.0: Device attached [ 532.585120][T10264] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.609000][ T5871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5871 comm=kworker/0:4 [ 532.624847][T10265] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 532.663916][T10258] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 532.670565][T10258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.695811][T10258] vhci_hcd vhci_hcd.0: Device attached [ 532.779814][T10272] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 532.786443][T10272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.793976][T10258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 532.797672][T10272] vhci_hcd vhci_hcd.0: Device attached [ 532.800569][T10258] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 532.816445][ T5824] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 532.826983][T10264] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.856388][T10264] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.867119][T10258] vhci_hcd vhci_hcd.0: Device attached [ 532.876801][T10272] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 532.883420][T10272] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 532.914876][T10272] vhci_hcd vhci_hcd.0: Device attached [ 532.925775][T10276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.932657][T10258] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.950287][T10272] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 532.956916][T10272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.989781][T10258] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(29) [ 532.996421][T10258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 533.007565][T10258] vhci_hcd vhci_hcd.0: Device attached [ 533.020308][T10272] vhci_hcd vhci_hcd.0: Device attached [ 533.040845][ T5871] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 533.048909][T10284] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 533.055522][T10284] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 533.109403][T10272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 533.138614][T10284] vhci_hcd vhci_hcd.0: Device attached [ 533.222142][T10289] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 533.238122][T10259] vhci_hcd: connection reset by peer [ 533.244128][T10266] vhci_hcd: connection closed [ 533.244347][T10269] vhci_hcd: connection closed [ 533.249360][T10282] vhci_hcd: connection closed [ 533.254744][ T4247] vhci_hcd: stop threads [ 533.257428][T10272] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 533.259418][ T4247] vhci_hcd: release socket [ 533.270835][ T4247] vhci_hcd: disconnect device [ 533.282341][ T4247] vhci_hcd: stop threads [ 533.284962][T10272] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(29) [ 533.286648][ T4247] vhci_hcd: release socket [ 533.293145][T10272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 533.295899][T10272] vhci_hcd vhci_hcd.0: Device attached [ 533.297744][ T4247] vhci_hcd: disconnect device [ 533.367369][T10293] netlink: 'syz.2.1216': attribute type 4 has an invalid length. [ 533.375253][T10293] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1216'. [ 533.660007][ T4247] vhci_hcd: stop threads [ 533.735959][ T4247] vhci_hcd: release socket [ 533.813220][ T4247] vhci_hcd: disconnect device [ 533.839457][ T4247] vhci_hcd: stop threads [ 533.860089][ T4247] vhci_hcd: release socket [ 533.870921][ T4247] vhci_hcd: disconnect device [ 533.898077][T10291] vhci_hcd: connection closed [ 533.903284][T10286] vhci_hcd: connection closed [ 533.909661][T10273] vhci_hcd: connection reset by peer [ 533.920809][T10277] vhci_hcd: connection closed [ 533.965761][T10280] vhci_hcd: connection closed [ 533.970673][ T59] vhci_hcd: stop threads [ 534.006777][ T59] vhci_hcd: release socket [ 534.011872][ T59] vhci_hcd: disconnect device [ 534.016828][ T59] vhci_hcd: stop threads [ 534.023339][ T59] vhci_hcd: release socket [ 534.027828][ T59] vhci_hcd: disconnect device [ 534.041367][ T59] vhci_hcd: stop threads [ 534.053676][ T59] vhci_hcd: release socket [ 534.087539][ T59] vhci_hcd: disconnect device [ 534.133849][ T59] vhci_hcd: stop threads [ 534.172166][ T59] vhci_hcd: release socket [ 534.176701][ T59] vhci_hcd: disconnect device [ 534.193117][ T59] vhci_hcd: stop threads [ 534.197598][ T59] vhci_hcd: release socket [ 534.204519][ T59] vhci_hcd: disconnect device [ 537.552961][T10335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.974781][ T5824] vhci_hcd: vhci_device speed not set [ 538.077359][T10342] hub 8-0:1.0: USB hub found [ 538.087178][T10342] hub 8-0:1.0: 1 port detected [ 538.130954][ T5871] vhci_hcd: vhci_device speed not set [ 539.430814][T10356] fuseblk: Unknown parameter 'user_i00000000000000000000' [ 540.666418][ T8974] usb usb40-port1: attempt power cycle [ 541.507969][ T5913] usb usb36-port1: attempt power cycle [ 542.132687][ T8974] usb usb40-port1: unable to enumerate USB device [ 542.768134][T10378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.413591][ T5913] usb usb36-port1: unable to enumerate USB device [ 547.728900][ T5885] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 548.998531][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.417071][ T5885] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 549.465155][ T5885] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 549.785859][ T5885] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.050796][ T5885] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.204802][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.809674][ T5885] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.011490][ T5885] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 551.833749][ T5913] usb 1-1: USB disconnect, device number 28 [ 552.983141][T10489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.770873][T10494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.422720][T10508] Invalid ELF header type: 3 != 1 [ 556.190443][ T5913] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 556.481043][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 556.563952][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 556.737804][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 556.798339][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 556.837538][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 557.647369][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.740629][ T5913] usb 2-1: config 0 descriptor?? [ 557.854726][ T5913] usb 2-1: can't set config #0, error -71 [ 557.862050][ T5913] usb 2-1: USB disconnect, device number 26 [ 557.910892][ T5916] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 558.158975][T10531] fuseblk: Unknown parameter 'user_i00000000000000000000' [ 558.533675][ T5916] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 558.548821][ T5916] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.805830][ T5916] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.820000][ T5916] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 558.829651][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.874773][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.976934][ T5916] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 559.525882][ T5916] usb 4-1: USB disconnect, device number 29 [ 559.544639][ T6526] udevd[6526]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.049494][T10562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.558733][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.565421][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.637007][ T30] audit: type=1400 audit(1750960130.769:272): avc: denied { read } for pid=10561 comm="syz.4.1292" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 562.697040][ T30] audit: type=1400 audit(1750960130.769:273): avc: denied { listen } for pid=10561 comm="syz.4.1292" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.979266][T10597] netlink: 'syz.3.1303': attribute type 4 has an invalid length. [ 566.987057][T10597] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1303'. [ 570.557066][ T30] audit: type=1400 audit(1750960138.779:274): avc: denied { write } for pid=10614 comm="syz.1.1307" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 570.900853][ T30] audit: type=1400 audit(1750960138.779:275): avc: denied { ioctl } for pid=10614 comm="syz.1.1307" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 570.926244][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.851956][ T5913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5913 comm=kworker/1:5 [ 577.865648][T10686] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 586.031153][ T5885] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 586.686885][ T5885] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 586.710534][ T5885] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 586.723472][ T5885] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 586.734371][ T5885] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 586.747535][ T5885] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 586.756674][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.023497][ T5885] ath6kl: Failed to submit usb control message: -71 [ 587.030205][ T5885] ath6kl: unable to send the bmi data to the device: -71 [ 587.082124][ T5885] ath6kl: Unable to send get target info: -71 [ 587.098627][ T5885] ath6kl: Failed to init ath6kl core: -71 [ 587.122838][ T5885] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 587.154288][ T5885] usb 2-1: USB disconnect, device number 27 [ 593.701641][T10814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.800292][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.247392][ T30] audit: type=1400 audit(1750960167.949:276): avc: denied { write } for pid=10857 comm="syz.0.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 602.402248][ T5824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5824 comm=kworker/0:3 [ 602.427699][T10893] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 606.214808][ T5827] Bluetooth: hci3: unexpected subevent 0x0a length: 91 > 30 [ 607.875440][T10942] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 611.092239][T10960] fuseblk: Unknown parameter 'user_i00000000000000000000' [ 612.463683][T10968] 9pnet_fd: Insufficient options for proto=fd [ 613.587980][T10976] netlink: 'syz.4.1404': attribute type 4 has an invalid length. [ 613.595784][T10976] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1404'. [ 613.919944][T10980] netlink: 'syz.1.1406': attribute type 4 has an invalid length. [ 613.930822][T10980] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1406'. [ 622.950871][ T5892] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 623.053251][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 623.062123][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 623.070278][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 623.078734][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 623.090610][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 623.132630][ T30] audit: type=1400 audit(1750960191.349:277): avc: denied { mounton } for pid=11046 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 623.231579][ T5892] usb 2-1: config 0 has no interfaces? [ 623.251237][ T5892] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 623.267045][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 623.327505][ T5892] usb 2-1: SerialNumber: syz [ 623.814512][ T5892] usb 2-1: config 0 descriptor?? [ 624.001049][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.007562][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.038562][ T5913] usb 2-1: USB disconnect, device number 28 [ 624.308073][T11067] Invalid ELF header type: 3 != 1 [ 624.791016][ T5913] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 625.182820][ T5827] Bluetooth: hci5: command tx timeout [ 627.270752][ T5827] Bluetooth: hci5: command tx timeout [ 627.479638][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.550871][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 627.559504][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 627.603237][T11046] chnl_net:caif_netlink_parms(): no params data found [ 627.622154][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 627.658241][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.793778][ T5913] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.803381][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.660887][T11079] netlink: 'syz.0.1429': attribute type 4 has an invalid length. [ 628.668768][T11079] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1429'. [ 628.840056][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.852383][T11082] netlink: 'syz.1.1430': attribute type 4 has an invalid length. [ 628.860190][T11082] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1430'. [ 629.340876][ T5827] Bluetooth: hci5: command tx timeout [ 629.353341][ T5913] usb 4-1: config 0 descriptor?? [ 629.431476][ T5913] usb 4-1: can't set config #0, error -71 [ 629.492387][ T5913] usb 4-1: USB disconnect, device number 30 [ 630.588216][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.677329][ T5827] Bluetooth: hci5: command tx timeout [ 632.580968][ T5892] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 632.602447][T11115] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 632.610273][T11115] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1436'. [ 632.930065][ T5892] usb 1-1: config 0 has no interfaces? [ 632.964061][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.997409][ T5892] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 633.011258][T11046] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.012912][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 633.027758][ T5892] usb 1-1: SerialNumber: syz [ 633.038649][T11046] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.039298][ T5892] usb 1-1: config 0 descriptor?? [ 633.057817][T11046] bridge_slave_0: entered allmulticast mode [ 633.070582][T11046] bridge_slave_0: entered promiscuous mode [ 633.098541][T11046] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.108749][T11046] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.116365][T11046] bridge_slave_1: entered allmulticast mode [ 633.124672][T11046] bridge_slave_1: entered promiscuous mode [ 633.234059][T11046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.253197][T11046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.284483][ T5913] usb 1-1: USB disconnect, device number 29 [ 633.369368][T11121] Invalid ELF header type: 3 != 1 [ 633.651184][ T5892] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 633.881294][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 633.942639][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 633.981687][T11046] team0: Port device team_slave_0 added [ 634.074240][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 634.163315][T11046] team0: Port device team_slave_1 added [ 634.249368][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.444890][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.586612][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.846828][ T5892] usb 4-1: config 0 descriptor?? [ 634.936134][T11121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 635.412720][T11046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.466837][ T30] audit: type=1400 audit(1750960203.689:278): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.483457][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 635.492722][ T30] audit: type=1400 audit(1750960203.709:279): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.500413][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.555502][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 635.561464][ T30] audit: type=1400 audit(1750960203.709:280): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.583968][ T5892] usb 4-1: USB disconnect, device number 31 [ 635.789709][ T30] audit: type=1400 audit(1750960203.709:281): avc: denied { read } for pid=5479 comm="dhcpcd" name="n101" dev="tmpfs" ino=6307 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 635.810789][T11046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.822243][ T30] audit: type=1400 audit(1750960203.709:282): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=6307 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 635.869794][ T12] bridge_slave_1: left allmulticast mode [ 635.891051][ T12] bridge_slave_1: left promiscuous mode [ 636.268043][ T30] audit: type=1400 audit(1750960203.709:283): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=6307 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 636.298640][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.312060][ T12] bridge_slave_0: left allmulticast mode [ 636.317754][ T12] bridge_slave_0: left promiscuous mode [ 636.326927][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.637076][T11139] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 636.643726][T11139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 636.653357][T11139] vhci_hcd vhci_hcd.0: Device attached [ 637.691605][T11153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 638.671699][ T5913] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 638.703562][T11139] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 638.710210][T11139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 638.830921][T11139] vhci_hcd vhci_hcd.0: Device attached [ 638.900860][T11153] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(23) [ 638.907500][T11153] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 639.787085][T11139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.797276][T11139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.807336][T11139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.885904][T11156] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(20) [ 639.892546][T11156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 639.924311][T11153] vhci_hcd vhci_hcd.0: Device attached [ 640.008808][T11156] vhci_hcd vhci_hcd.0: Device attached [ 640.069871][T11139] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(32) [ 640.076512][T11139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 640.096458][T11139] vhci_hcd vhci_hcd.0: Device attached [ 640.241319][T11157] vhci_hcd: connection closed [ 640.241564][T11159] vhci_hcd: connection closed [ 640.247192][ T7759] vhci_hcd: stop threads [ 640.260593][T11143] vhci_hcd: connection closed [ 640.260923][T11140] vhci_hcd: connection reset by peer [ 640.278081][ T7759] vhci_hcd: release socket [ 640.296378][ T7759] vhci_hcd: disconnect device [ 640.325313][ T7759] vhci_hcd: stop threads [ 640.346965][ T7759] vhci_hcd: release socket [ 640.360862][ T7759] vhci_hcd: disconnect device [ 640.369085][ T7759] vhci_hcd: stop threads [ 640.376155][ T7759] vhci_hcd: release socket [ 640.390361][ T7759] vhci_hcd: disconnect device [ 640.403922][ T7759] vhci_hcd: stop threads [ 640.408549][ T7759] vhci_hcd: release socket [ 640.420438][ T7759] vhci_hcd: disconnect device [ 640.477026][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.487355][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.549152][T11175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.911527][ T12] bond0 (unregistering): Released all slaves [ 640.935738][T11046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.939878][T11166] vhci_hcd: connection closed [ 640.944013][T11046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.268221][ T2978] vhci_hcd: stop threads [ 641.272737][ T2978] vhci_hcd: release socket [ 641.319778][ T2978] vhci_hcd: disconnect device [ 641.824055][T11046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.906345][ T30] audit: type=1400 audit(1750960211.129:284): avc: denied { read open } for pid=11194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.936183][ T30] audit: type=1400 audit(1750960211.159:285): avc: denied { getattr } for pid=11194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.272271][T11205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.517310][ T30] audit: type=1400 audit(1750960211.739:286): avc: denied { read } for pid=11201 comm="syz.1.1457" path="socket:[26847]" dev="sockfs" ino=26847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 643.661289][T11046] hsr_slave_0: entered promiscuous mode [ 643.676955][T11046] hsr_slave_1: entered promiscuous mode [ 643.683215][T11046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.699341][T11046] Cannot create hsr debugfs directory [ 643.887395][ T5913] vhci_hcd: vhci_device speed not set [ 643.959150][ T30] audit: type=1400 audit(1750960212.179:287): avc: denied { add_name } for pid=11189 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.095969][ T30] audit: type=1400 audit(1750960212.179:288): avc: denied { create } for pid=11189 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 644.275520][ T30] audit: type=1400 audit(1750960212.179:289): avc: denied { write } for pid=11189 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=6338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 644.311222][ T30] audit: type=1400 audit(1750960212.179:290): avc: denied { append } for pid=11189 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=6338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 644.339494][ T12] hsr_slave_0: left promiscuous mode [ 644.349174][ T12] hsr_slave_1: left promiscuous mode [ 644.365270][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.390045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.419020][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.559879][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.348718][ T30] audit: type=1400 audit(1750960213.569:291): avc: denied { remove_name } for pid=11223 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=6338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.439678][ T30] audit: type=1400 audit(1750960213.569:292): avc: denied { unlink } for pid=11223 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=6338 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 645.544742][ T12] veth1_macvtap: left promiscuous mode [ 645.550595][ T12] veth0_macvtap: left promiscuous mode [ 645.572837][ T12] veth1_vlan: left promiscuous mode [ 645.586189][ T12] veth0_vlan: left promiscuous mode [ 646.586354][T11246] overlayfs: failed to clone upperpath [ 646.890521][ T5892] usb usb40-port1: attempt power cycle [ 648.349419][ T5892] usb usb40-port1: unable to enumerate USB device [ 648.711833][ T12] team0 (unregistering): Port device team_slave_1 removed [ 648.738343][ T12] team0 (unregistering): Port device team_slave_0 removed [ 649.012138][T11258] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 649.021602][T11258] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 649.032134][T11258] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 649.044020][ T30] audit: type=1400 audit(1750960217.259:293): avc: denied { firmware_load } for pid=11254 comm="syz.4.1466" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 650.419707][T11046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 650.442787][T11046] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 650.561763][T11046] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 650.657178][T11046] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 650.995235][ T12] IPVS: stop unused estimator thread 0... [ 651.197538][T11046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.234714][T11046] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.283940][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.291067][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.342772][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.349883][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.888145][T11329] netlink: 'syz.4.1476': attribute type 4 has an invalid length. [ 651.896031][T11329] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1476'. [ 653.972209][ T5815] Bluetooth: hci5: command 0x0405 tx timeout [ 654.114568][T11046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.440141][T11345] Invalid ELF header type: 3 != 1 [ 655.686239][T11368] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 655.694084][T11368] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1481'. [ 656.319892][T11046] veth0_vlan: entered promiscuous mode [ 656.406096][T11380] 9pnet_fd: Insufficient options for proto=fd [ 656.406925][T11046] veth1_vlan: entered promiscuous mode [ 657.000162][T11046] veth0_macvtap: entered promiscuous mode [ 657.015950][T11046] veth1_macvtap: entered promiscuous mode [ 657.117665][T11046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.135940][T11046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.150394][T11046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.173998][T11046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.194021][T11046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.213410][T11046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.894839][ T30] audit: type=1400 audit(1750960225.849:294): avc: denied { create } for pid=11392 comm="syz.4.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 658.814195][ T8114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.935951][ T8114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.039065][T10511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.064393][T10511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.033065][ T30] audit: type=1400 audit(1750960228.259:295): avc: denied { mounton } for pid=11046 comm="syz-executor" path="/root/syzkaller.pKefSi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 660.204793][ T30] audit: type=1400 audit(1750960228.419:296): avc: denied { mount } for pid=11046 comm="syz-executor" name="/" dev="gadgetfs" ino=7394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 663.244693][T11465] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 669.903324][ T30] audit: type=1800 audit(1750960238.039:297): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1518" name="nullb0" dev="tmpfs" ino=1685 res=0 errno=0 [ 670.123443][T11541] vxfs: WRONG superblock magic 00000000 at 1 [ 670.130967][T11541] vxfs: WRONG superblock magic 00000000 at 8 [ 670.136984][T11541] vxfs: can't find superblock. [ 670.772457][T11551] netlink: 'syz.3.1520': attribute type 4 has an invalid length. [ 670.780260][T11551] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1520'. [ 672.016265][ T30] audit: type=1400 audit(1750960240.229:298): avc: denied { setopt } for pid=11567 comm="syz.1.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 672.990597][T11575] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 673.026136][ T30] audit: type=1800 audit(1750960241.179:299): pid=11574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1526" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 673.728352][T11596] lo speed is unknown, defaulting to 1000 [ 673.734571][T11596] lo speed is unknown, defaulting to 1000 [ 673.745649][T11596] lo speed is unknown, defaulting to 1000 [ 673.761214][T11596] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 673.784068][T11596] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 673.838261][T11597] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 674.670589][T11596] lo speed is unknown, defaulting to 1000 [ 674.678980][T11596] lo speed is unknown, defaulting to 1000 [ 674.686263][T11596] lo speed is unknown, defaulting to 1000 [ 674.694068][T11596] lo speed is unknown, defaulting to 1000 [ 674.701295][T11596] lo speed is unknown, defaulting to 1000 [ 675.316672][T11586] netlink: 'syz.3.1531': attribute type 11 has an invalid length. [ 675.324622][T11586] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1531'. [ 681.212630][ T30] audit: type=1400 audit(1750960246.679:300): avc: denied { create } for pid=11617 comm="syz.3.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 685.036799][T11675] netlink: 'syz.5.1548': attribute type 11 has an invalid length. [ 685.044723][T11675] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1548'. [ 685.431866][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.438212][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.765243][T11680] netlink: 'syz.0.1550': attribute type 11 has an invalid length. [ 685.773152][T11680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1550'. [ 688.019016][ T30] audit: type=1800 audit(1750960256.189:301): pid=11704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1553" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 688.431605][T11708] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 689.430987][ T30] audit: type=1400 audit(1750960257.639:302): avc: denied { shutdown } for pid=11685 comm="syz.5.1552" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 689.679504][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 690.588328][ T30] audit: type=1400 audit(1750960258.809:303): avc: denied { setopt } for pid=11718 comm="syz.1.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 691.917188][T11768] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 693.088562][T11793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.631374][T11816] netlink: 'syz.3.1576': attribute type 11 has an invalid length. [ 695.639269][T11816] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1576'. [ 696.330810][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 696.821507][T11825] siw: device registration error -23 [ 697.646259][T11833] netlink: 'syz.0.1579': attribute type 11 has an invalid length. [ 697.654208][T11833] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1579'. [ 698.627979][T11848] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 699.573348][T11856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.347144][ T30] audit: type=1400 audit(1750960268.569:304): avc: denied { kexec_image_load } for pid=11830 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 700.548451][ T5824] usb 6-1: device descriptor read/all, error -71 [ 701.647258][T11875] Invalid ELF header type: 3 != 1 [ 702.431108][ T9602] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 702.667620][ T9602] usb 4-1: Using ep0 maxpacket: 16 [ 702.712393][ T9602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 702.876442][ T9602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 703.047571][ T9602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 703.237461][ T9602] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 703.602422][ T9602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.641715][ T9602] usb 4-1: config 0 descriptor?? [ 703.647806][T11875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 703.833301][T11889] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 704.318764][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 704.390575][ T9602] usbhid 4-1:0.0: can't add hid device: -71 [ 704.400481][ T9602] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 704.454153][ T9602] usb 4-1: USB disconnect, device number 32 [ 704.725976][T11899] netlink: 'syz.0.1595': attribute type 11 has an invalid length. [ 704.733907][T11899] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1595'. [ 705.839867][T11909] netlink: 'syz.0.1597': attribute type 11 has an invalid length. [ 705.847787][T11909] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1597'. [ 708.165434][T11936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.917334][T11949] overlayfs: failed to clone upperpath [ 709.602127][T11956] vxfs: WRONG superblock magic 00000000 at 1 [ 709.609394][T11956] vxfs: WRONG superblock magic 00000000 at 8 [ 709.615450][T11956] vxfs: can't find superblock. [ 712.922987][T11975] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 713.702642][T11996] netlink: 'syz.5.1612': attribute type 11 has an invalid length. [ 713.710517][T11996] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1612'. [ 714.899130][T12019] overlayfs: failed to resolve './file0': -2 [ 718.510369][T12057] netlink: 'syz.5.1628': attribute type 11 has an invalid length. [ 718.518277][T12057] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1628'. [ 721.498263][T12112] overlayfs: failed to resolve './file0': -2 [ 722.375825][ T30] audit: type=1800 audit(1750960290.579:305): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1639" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 723.417513][ T8974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8974 comm=kworker/0:7 [ 725.217916][T12168] overlayfs: failed to resolve './file0': -2 [ 727.560770][ T30] audit: type=1400 audit(1750960295.389:306): avc: denied { block_suspend } for pid=12181 comm="syz.0.1655" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 729.750221][T12211] netlink: 'syz.0.1659': attribute type 11 has an invalid length. [ 729.758853][T12211] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1659'. [ 730.039611][T12218] netlink: 'syz.5.1660': attribute type 11 has an invalid length. [ 730.047479][T12218] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1660'. [ 731.437848][T12233] siw: device registration error -23 [ 731.465465][T12233] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 733.242341][T12250] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 733.250168][T12250] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1667'. [ 736.549634][T12268] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 737.076051][T12280] netlink: 'syz.4.1676': attribute type 4 has an invalid length. [ 737.093053][T12280] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1676'. [ 738.723842][T12299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.704118][ T30] audit: type=1400 audit(1750960309.929:307): avc: denied { create } for pid=12335 comm="syz.5.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 741.939512][ T30] audit: type=1400 audit(1750960310.159:308): avc: denied { connect } for pid=12335 comm="syz.5.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 742.012466][ T30] audit: type=1400 audit(1750960310.209:309): avc: denied { write } for pid=12335 comm="syz.5.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 742.665260][T12358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.785132][T12390] netlink: 'syz.3.1697': attribute type 4 has an invalid length. [ 745.792972][T12390] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1697'. [ 746.271095][ T30] audit: type=1800 audit(1750960314.489:310): pid=12406 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1701" name="nullb0" dev="tmpfs" ino=1685 res=0 errno=0 [ 747.264075][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.270415][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.170377][T12426] netlink: 'syz.0.1704': attribute type 4 has an invalid length. [ 748.178228][T12426] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1704'. [ 749.340926][T11771] Bluetooth: hci5: command 0x0405 tx timeout [ 749.752820][T12436] ceph: No mds server is up or the cluster is laggy [ 752.000382][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 752.559770][T12473] siw: device registration error -23 [ 754.238623][T12497] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 760.876489][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 762.711446][T12589] netlink: 'syz.0.1737': attribute type 4 has an invalid length. [ 762.719278][T12589] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1737'. [ 763.185216][T12584] Invalid ELF header type: 3 != 1 [ 763.691830][T12609] siw: device registration error -23 [ 766.085467][T12631] netlink: 'syz.3.1748': attribute type 4 has an invalid length. [ 766.093325][T12631] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1748'. [ 772.152228][T12688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.624190][T12722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.946610][T12732] Invalid ELF header type: 3 != 1 [ 785.577574][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 785.835781][ T30] audit: type=1400 audit(1750960354.039:311): avc: denied { nlmsg_read } for pid=12821 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 788.964345][T12878] siw: device registration error -23 [ 788.990969][T12878] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 789.913481][ T9602] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 790.514733][ T9602] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 790.568287][ T9602] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 790.615296][ T9602] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 790.679975][ T9602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.567827][T12926] netlink: 'syz.5.1807': attribute type 4 has an invalid length. [ 792.575743][T12926] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1807'. [ 793.014641][ T9602] usb 1-1: can't set config #27, error -71 [ 793.059443][ T9602] usb 1-1: USB disconnect, device number 30 [ 795.951093][T12938] netlink: 'syz.0.1812': attribute type 11 has an invalid length. [ 795.958994][T12938] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1812'. [ 800.430946][ T9602] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 801.054838][ T9602] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 801.138057][ T9602] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 801.159569][ T9602] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 801.277546][ T9602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.315703][T12997] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 801.336960][ T9602] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 802.675338][ T30] audit: type=1400 audit(1750960370.899:312): avc: denied { append } for pid=12987 comm="syz.5.1822" name="midi3" dev="devtmpfs" ino=3125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 802.870987][ T9602] usb 6-1: USB disconnect, device number 4 [ 802.929842][T13024] udevd[13024]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.804909][ T5824] IPVS: starting estimator thread 0... [ 805.980833][T13055] IPVS: using max 40 ests per chain, 96000 per kthread [ 806.807762][T13069] siw: device registration error -23 [ 806.818761][ T30] audit: type=1800 audit(1750960374.919:313): pid=13066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1833" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 808.317266][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.332353][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.292187][T13198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 821.056085][ T30] audit: type=1400 audit(1750960388.949:314): avc: denied { connect } for pid=13211 comm="syz.1.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 824.656424][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'. [ 830.145698][T13318] netlink: 'syz.3.1886': attribute type 4 has an invalid length. [ 830.153667][T13318] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1886'. [ 839.216807][T13422] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 839.226268][T13422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 839.235869][T13422] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 841.730983][T13466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.120809][ T5815] Bluetooth: hci5: unexpected subevent 0x0a length: 91 > 30 [ 848.457152][ T5815] Bluetooth: hci5: unexpected subevent 0x0a length: 91 > 30 [ 854.390923][T11771] Bluetooth: hci3: unexpected subevent 0x0a length: 91 > 30 [ 856.464131][ T5815] Bluetooth: hci3: command 0x0c1a tx timeout [ 857.380981][T13661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1948'. [ 857.390956][T13661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1948'. [ 862.487878][T13729] netlink: 'syz.5.1959': attribute type 11 has an invalid length. [ 862.495801][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1959'. [ 869.798111][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.868565][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.620776][T13805] fuseblk: Unknown parameter 'user_i00000000000000000000ÿÿÿÿÿÿÿÿ' [ 871.656352][T13821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.153739][ T30] audit: type=1800 audit(1750960440.359:315): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1980" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 872.734546][T13833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 876.546067][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1994'. [ 876.942274][ T30] audit: type=1800 audit(1750960445.159:316): pid=13893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1992" name="nullb0" dev="tmpfs" ino=2171 res=0 errno=0 [ 877.410705][ T30] audit: type=1800 audit(1750960445.319:317): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1993" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 877.550670][ T30] audit: type=1800 audit(1750960445.769:318): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1997" name="nullb0" dev="tmpfs" ino=2171 res=0 errno=0 [ 885.568800][ T30] audit: type=1800 audit(1750960453.789:319): pid=13978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2014" name="nullb0" dev="tmpfs" ino=2171 res=0 errno=0 [ 889.435806][ T30] audit: type=1800 audit(1750960457.259:320): pid=14015 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2023" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 891.893386][T14034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.907762][T14070] loop8: detected capacity change from 0 to 79 [ 895.047658][ T30] audit: type=1400 audit(1750960463.249:321): avc: denied { map } for pid=14065 comm="syz.5.2035" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 895.201905][T14070] loop8: detected capacity change from 79 to 78 [ 895.320760][ T30] audit: type=1400 audit(1750960463.249:322): avc: denied { execute } for pid=14065 comm="syz.5.2035" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 895.428591][ T30] audit: type=1400 audit(1750960463.369:323): avc: denied { ioctl } for pid=14065 comm="syz.5.2035" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 895.562289][ T30] audit: type=1800 audit(1750960463.529:324): pid=14074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2036" name="nullb0" dev="tmpfs" ino=2117 res=0 errno=0 [ 899.493730][T14123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 901.103952][ T30] audit: type=1800 audit(1750960469.329:325): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2050" name="nullb0" dev="tmpfs" ino=1685 res=0 errno=0 [ 903.131034][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'. [ 909.945219][T14236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 915.854684][T14320] siw: device registration error -23 [ 919.680769][ T8974] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 919.958577][ T8974] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 920.109449][ T8974] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 920.620892][ T8974] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 920.635486][ T8974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.663414][T14386] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 920.676271][ T8974] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 920.914882][ T5916] usb 6-1: USB disconnect, device number 5 [ 922.929986][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 926.676477][ T30] audit: type=1800 audit(1750960494.899:326): pid=14476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2114" name="nullb0" dev="tmpfs" ino=2185 res=0 errno=0 [ 929.332653][T14517] netlink: 'syz.5.2122': attribute type 11 has an invalid length. [ 929.340537][T14517] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2122'. [ 929.875378][T14513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.258245][T14529] netlink: 'syz.5.2123': attribute type 11 has an invalid length. [ 930.266161][T14529] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2123'. [ 931.189691][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.198455][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.172418][ T30] audit: type=1800 audit(1750960501.389:327): pid=14579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2133" name="nullb0" dev="tmpfs" ino=1685 res=0 errno=0 [ 935.897646][T14615] netlink: 'syz.5.2138': attribute type 11 has an invalid length. [ 935.905564][T14615] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2138'. [ 940.084769][ T30] audit: type=1800 audit(1750960508.299:328): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2149" name="nullb0" dev="tmpfs" ino=2117 res=0 errno=0 [ 943.730777][ T30] audit: type=1800 audit(1750960511.739:329): pid=14724 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2162" name="nullb0" dev="tmpfs" ino=1685 res=0 errno=0 [ 944.641943][ T5815] Bluetooth: hci3: unexpected subevent 0x0a length: 91 > 30 [ 944.650156][ T5815] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 947.971132][ T30] audit: type=1800 audit(1750960516.189:330): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2170" name="nullb0" dev="tmpfs" ino=2117 res=0 errno=0 [ 948.957359][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2174'. [ 956.763713][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2190'. [ 958.716591][T14893] xt_CT: You must specify a L4 protocol and not use inversions on it [ 975.146340][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2230'. [ 975.915287][ T30] audit: type=1800 audit(1750960544.139:331): pid=15124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2233" name="nullb0" dev="tmpfs" ino=2171 res=0 errno=0 [ 982.728526][ T30] audit: type=1800 audit(1750960550.519:332): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2247" name="nullb0" dev="tmpfs" ino=2171 res=0 errno=0 [ 983.452422][ T30] audit: type=1400 audit(1750960551.669:333): avc: denied { ioctl } for pid=15195 comm="syz.4.2248" path="socket:[36387]" dev="sockfs" ino=36387 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 984.752504][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2252'. [ 987.115604][ T30] audit: type=1400 audit(1750960555.339:334): avc: denied { read } for pid=15263 comm="syz.0.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 987.704227][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 993.371052][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.377379][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.701257][ T30] audit: type=1800 audit(1750960567.899:335): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2287" name="nullb0" dev="tmpfs" ino=2185 res=0 errno=0 [ 1000.153336][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 1001.933340][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 1002.794188][ T30] audit: type=1800 audit(1750960570.989:336): pid=15448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2299" name="nullb0" dev="tmpfs" ino=2185 res=0 errno=0 [ 1013.779540][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2317'. [ 1018.002319][ T30] audit: type=1800 audit(1750960585.569:337): pid=15592 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2329" name="nullb0" dev="tmpfs" ino=2171 res=0 errno=0 [ 1020.325355][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 1025.594275][T15670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1029.138466][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2354'. [ 1031.351173][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 1033.073233][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2360'. [ 1037.418639][T15811] siw: device registration error -23 [ 1043.269148][T15870] siw: device registration error -23 [ 1045.305810][T15885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1046.058411][T15895] syz.0.2392 uses obsolete (PF_INET,SOCK_PACKET) [ 1046.372690][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 1050.523716][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 1054.092155][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.098622][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.653259][T15983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1057.061056][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1057.613874][T16006] siw: device registration error -23 [ 1060.134599][T16022] ceph: No mds server is up or the cluster is laggy [ 1062.916135][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2426'. [ 1063.980769][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 1065.462983][T16067] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1075.122967][T16146] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1076.074542][ T30] audit: type=1800 audit(1750960644.289:338): pid=16157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2452" name="nullb0" dev="tmpfs" ino=2185 res=0 errno=0 [ 1076.318444][T16163] fuse: Bad value for 'fd' [ 1078.516688][T16186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1079.793908][ T30] audit: type=1800 audit(1750960648.019:339): pid=16200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2466" name="nullb0" dev="tmpfs" ino=1014 res=0 errno=0 [ 1084.760425][T16256] siw: device registration error -23 [ 1088.203638][ T30] audit: type=1800 audit(1750960656.429:340): pid=16293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2488" name="nullb0" dev="tmpfs" ino=1014 res=0 errno=0 [ 1098.455043][T16384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1098.727842][ T30] audit: type=1800 audit(1750960666.949:341): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2508" name="nullb0" dev="tmpfs" ino=2185 res=0 errno=0 [ 1101.810959][T16421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1102.709581][ T30] audit: type=1800 audit(1750960670.929:342): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2518" name="nullb0" dev="tmpfs" ino=2117 res=0 errno=0 [ 1102.876423][T16434] /dev/nullb0: Can't lookup blockdev [ 1103.209631][T16433] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1103.338380][ T30] audit: type=1800 audit(1750960671.519:343): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2521" name="nullb0" dev="tmpfs" ino=2185 res=0 errno=0 [ 1104.741521][T16441] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1106.997369][ T30] audit: type=1800 audit(1750960675.209:344): pid=16471 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2529" name="nullb0" dev="tmpfs" ino=1685 res=0 errno=0 [ 1107.922385][T16495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1109.058948][ T30] audit: type=1400 audit(1750960677.269:345): avc: denied { connect } for pid=16487 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1109.731972][T16514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1115.240470][ T30] audit: type=1800 audit(1750960683.449:346): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2552" name="nullb0" dev="tmpfs" ino=1685 res=0 errno=0 [ 1115.551593][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.557932][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.341840][T16592] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1119.864677][T16638] lo speed is unknown, defaulting to 1000 [ 1122.110789][T11771] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1122.197851][ T30] audit: type=1400 audit(1750960690.419:347): avc: denied { sqpoll } for pid=16724 comm="syz.1.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1123.806164][T11771] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 1123.901586][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2631'. [ 1123.994820][T11771] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1125.899826][ T30] audit: type=1400 audit(1750960694.119:348): avc: denied { shutdown } for pid=16785 comm="syz.1.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1126.460043][ T30] audit: type=1400 audit(1750960694.679:349): avc: denied { mount } for pid=16791 comm="syz.3.2642" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1126.603953][T11771] Bluetooth: hci5: unexpected event for opcode 0x200a [ 1127.328367][T16812] netlink: 'syz.5.2652': attribute type 7 has an invalid length. [ 1127.430930][T16818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1127.940515][T16833] 9pnet_fd: Insufficient options for proto=fd [ 1128.062585][T11771] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1128.071448][T11771] Bluetooth: hci2: Injecting HCI hardware error event [ 1128.079670][T11771] Bluetooth: hci2: hardware error 0x00 [ 1129.802709][T16866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1130.147439][T11771] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1131.450652][ T30] audit: type=1400 audit(1750960699.509:350): avc: denied { setopt } for pid=16880 comm="syz.5.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1132.437650][ T30] audit: type=1400 audit(1750960700.659:351): avc: denied { write } for pid=16903 comm="syz.4.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1132.620604][ T30] audit: type=1400 audit(1750960700.839:352): avc: denied { listen } for pid=16908 comm="syz.1.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1133.258909][ T30] audit: type=1400 audit(1750960701.479:353): avc: denied { watch } for pid=16917 comm="syz.4.2686" path="/554/file0" dev="tmpfs" ino=2918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1133.477190][ T30] audit: type=1400 audit(1750960701.479:354): avc: denied { watch_sb } for pid=16917 comm="syz.4.2686" path="/554/file0" dev="tmpfs" ino=2918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1134.620670][ T30] audit: type=1400 audit(1750960701.639:355): avc: denied { connect } for pid=16919 comm="syz.0.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1134.743984][ T30] audit: type=1400 audit(1750960702.969:356): avc: denied { getopt } for pid=16927 comm="syz.3.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1134.994902][ T30] audit: type=1400 audit(1750960703.189:357): avc: denied { create } for pid=16930 comm="syz.4.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1135.041726][ T30] audit: type=1400 audit(1750960703.249:358): avc: denied { ioctl } for pid=16930 comm="syz.4.2691" path="socket:[40177]" dev="sockfs" ino=40177 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1135.101380][ T30] audit: type=1400 audit(1750960703.249:359): avc: denied { bind } for pid=16930 comm="syz.4.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1135.873369][T16957] tipc: Started in network mode [ 1135.879147][T16957] tipc: Node identity ac1414aa, cluster identity 4711 [ 1135.986251][T16957] tipc: Enabled bearer , priority 10 [ 1135.996861][T16957] tipc: Enabled bearer , priority 0 [ 1136.640111][T16968] netlink: 'syz.4.2702': attribute type 1 has an invalid length. [ 1136.659263][ T30] audit: type=1400 audit(1750960704.879:360): avc: denied { accept } for pid=16967 comm="syz.0.2703" lport=42978 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1136.721777][T16968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1136.749809][ T30] audit: type=1400 audit(1750960704.879:361): avc: denied { write } for pid=16967 comm="syz.0.2703" lport=42978 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1136.817770][ T30] audit: type=1400 audit(1750960704.879:362): avc: denied { setopt } for pid=16967 comm="syz.0.2703" lport=42978 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1136.901055][T16968] bond1: entered promiscuous mode [ 1136.975019][T16973] bond1: (slave geneve2): making interface the new active one [ 1137.015841][T16973] geneve2: entered promiscuous mode [ 1137.032814][T16973] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1137.087936][ T30] audit: type=1400 audit(1750960705.279:363): avc: denied { write } for pid=16988 comm="syz.5.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1137.113900][ T5892] tipc: Node number set to 2886997162 [ 1137.496006][T16998] overlayfs: failed to clone upperpath [ 1138.669821][T17003] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1138.906063][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2722'. [ 1138.939985][T17022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2723'. [ 1139.196559][ T30] audit: type=1400 audit(1750960707.389:364): avc: denied { mount } for pid=17027 comm="syz.3.2726" name="/" dev="configfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1139.293945][T11771] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 1139.920665][ T30] audit: type=1400 audit(1750960708.089:365): avc: denied { bind } for pid=17043 comm="syz.4.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1140.855891][ T30] audit: type=1400 audit(1750960708.099:366): avc: denied { setopt } for pid=17043 comm="syz.4.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1140.927597][ T30] audit: type=1400 audit(1750960709.149:367): avc: denied { setopt } for pid=17054 comm="syz.5.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1142.675179][T17081] sctp: [Deprecated]: syz.0.2747 (pid 17081) Use of int in max_burst socket option deprecated. [ 1142.675179][T17081] Use struct sctp_assoc_value instead [ 1143.909537][T17092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2751'. [ 1145.327563][ T30] audit: type=1400 audit(1750960713.549:368): avc: denied { connect } for pid=17134 comm="syz.3.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1145.459303][ T30] audit: type=1400 audit(1750960713.679:369): avc: denied { connect } for pid=17139 comm="syz.3.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1149.233713][T17192] atomic_op ffff88806f2e5998 conn xmit_atomic 0000000000000000 [ 1152.082038][ T30] audit: type=1400 audit(1750960720.299:370): avc: denied { bind } for pid=17231 comm="syz.1.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1152.102601][ T30] audit: type=1400 audit(1750960720.299:371): avc: denied { setopt } for pid=17231 comm="syz.1.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1156.411717][ T30] audit: type=1400 audit(1750960724.619:372): avc: denied { getopt } for pid=17275 comm="syz.4.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1156.815043][ T30] audit: type=1400 audit(1750960724.679:373): avc: denied { setopt } for pid=17275 comm="syz.4.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1157.506511][ T30] audit: type=1400 audit(1750960725.359:374): avc: denied { create } for pid=17282 comm="syz.0.2816" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1157.539862][ T30] audit: type=1400 audit(1750960725.759:375): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=2910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1157.625664][T17278] lo speed is unknown, defaulting to 1000 [ 1157.712529][T17299] overlayfs: failed to resolve './file0': -2 [ 1158.736809][ T30] audit: type=1400 audit(1750960726.959:376): avc: denied { connect } for pid=17309 comm="syz.0.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1158.825926][ T30] audit: type=1400 audit(1750960726.979:377): avc: denied { write } for pid=17309 comm="syz.0.2823" path="socket:[40580]" dev="sockfs" ino=40580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1158.946300][ T30] audit: type=1400 audit(1750960727.019:378): avc: denied { mount } for pid=17313 comm="syz.1.2824" name="/" dev="ramfs" ino=40585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1159.046462][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.053990][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.083553][T17323] bridge0: entered allmulticast mode [ 1159.182110][T17323] bridge_slave_1: left allmulticast mode [ 1159.188004][T17323] bridge_slave_1: left promiscuous mode [ 1159.205909][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.312210][T17323] bridge_slave_0: left allmulticast mode [ 1159.341638][T17323] bridge_slave_0: left promiscuous mode [ 1159.348525][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.366778][T17334] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 1160.048470][T17339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1160.058605][T17339] bond1: (slave bond2): making interface the new active one [ 1160.066664][T17339] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1160.111946][T17349] tipc: Enabling of bearer rejected, failed to enable media [ 1160.427685][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1160.986159][T17378] lo: entered allmulticast mode [ 1160.993438][T17378] tunl0: entered allmulticast mode [ 1160.999557][T17378] gre0: entered allmulticast mode [ 1161.008069][T17378] gretap0: entered allmulticast mode [ 1161.014836][T17378] erspan0: entered allmulticast mode [ 1161.466739][T17378] ip_vti0: entered allmulticast mode [ 1161.473991][T17378] ip6_vti0: entered allmulticast mode [ 1161.481580][T17378] sit0: entered allmulticast mode [ 1161.488230][T17378] ip6tnl0: entered allmulticast mode [ 1161.495556][T17378] ip6gre0: entered allmulticast mode [ 1161.508001][T17378] syz_tun: entered allmulticast mode [ 1161.523491][T17378] ip6gretap0: entered allmulticast mode [ 1161.531442][T17378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.539020][T17378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.546380][T17378] bridge0: entered allmulticast mode [ 1161.553892][T17378] vcan0: entered allmulticast mode [ 1161.560476][T17378] bond0: entered allmulticast mode [ 1161.565601][T17378] bond_slave_0: entered allmulticast mode [ 1161.572162][T17378] bond_slave_1: entered allmulticast mode [ 1161.580443][T17378] team0: entered allmulticast mode [ 1161.588806][T17378] team_slave_0: entered allmulticast mode [ 1161.595294][T17378] team_slave_1: entered allmulticast mode [ 1161.602799][T17378] dummy0: entered allmulticast mode [ 1161.622955][T17378] nlmon0: entered allmulticast mode [ 1161.629029][T17378] caif0: entered allmulticast mode [ 1161.634510][T17378] batadv0: entered allmulticast mode [ 1161.641357][T17378] vxcan0: entered allmulticast mode [ 1161.647041][T17378] vxcan1: entered allmulticast mode [ 1161.695632][T17378] veth0: entered allmulticast mode [ 1161.702371][T17378] veth1: entered allmulticast mode [ 1161.766552][T17378] wg0: entered allmulticast mode [ 1161.777882][T17378] wg1: entered allmulticast mode [ 1161.789862][T17378] wg2: entered allmulticast mode [ 1161.795951][T17378] veth0_to_bridge: entered allmulticast mode [ 1161.805282][T17378] veth1_to_bridge: entered allmulticast mode [ 1161.813356][T17378] veth0_to_bond: entered allmulticast mode [ 1161.820807][T17378] veth1_to_bond: entered allmulticast mode [ 1161.827996][T17378] veth0_to_team: entered allmulticast mode [ 1161.836308][T17378] veth1_to_team: entered allmulticast mode [ 1161.843909][T17378] veth0_to_batadv: entered allmulticast mode [ 1161.850754][T17378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.858308][T17378] batadv_slave_0: entered allmulticast mode [ 1161.865263][T17378] veth1_to_batadv: entered allmulticast mode [ 1161.872072][T17378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.880477][T17378] batadv_slave_1: entered allmulticast mode [ 1161.887557][T17378] xfrm0: entered allmulticast mode [ 1161.893691][T17378] veth0_to_hsr: entered allmulticast mode [ 1161.900327][T17378] hsr_slave_0: entered allmulticast mode [ 1161.906679][T17378] veth1_to_hsr: entered allmulticast mode [ 1161.913292][T17378] hsr_slave_1: entered allmulticast mode [ 1161.919862][T17378] hsr0: entered allmulticast mode [ 1161.925983][T17378] veth1_virt_wifi: entered allmulticast mode [ 1161.932936][T17378] veth0_virt_wifi: entered allmulticast mode [ 1161.939768][T17378] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1161.947315][T17378] veth1_vlan: entered allmulticast mode [ 1161.953855][T17378] veth0_vlan: entered allmulticast mode [ 1161.963611][T17378] vlan0: entered allmulticast mode [ 1161.968765][T17378] vlan1: entered allmulticast mode [ 1161.987479][T17378] macvlan0: entered allmulticast mode [ 1162.000934][T17378] macvlan1: entered allmulticast mode [ 1162.009255][T17378] ipvlan0: entered allmulticast mode [ 1162.014656][T17378] ipvlan1: entered allmulticast mode [ 1162.020313][T17378] veth1_macvtap: entered allmulticast mode [ 1162.027368][T17378] veth0_macvtap: entered allmulticast mode [ 1162.056707][T17378] macvtap0: entered allmulticast mode [ 1162.064326][T17378] macsec0: entered allmulticast mode [ 1162.075866][T17378] geneve0: entered allmulticast mode [ 1162.087875][T17378] geneve1: entered allmulticast mode [ 1162.094607][T17378] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1162.102969][T17378] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1162.112764][T17378] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1162.125750][T17378] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 1162.136988][T17378] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1162.144786][T17378] syzkaller0: entered allmulticast mode [ 1162.150751][T17378] hsr1: entered allmulticast mode [ 1162.157072][T17378] bond1: left promiscuous mode [ 1162.161836][T17378] geneve2: left promiscuous mode [ 1162.166809][T17378] bond1: entered allmulticast mode [ 1162.171920][T17378] geneve2: entered allmulticast mode [ 1162.178518][T17378] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.188284][T17378] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.197137][T17378] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.205980][T17378] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.266372][T17489] overlayfs: failed to clone lowerpath [ 1169.348348][T17492] overlayfs: failed to clone upperpath [ 1169.761584][T11771] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1169.772379][T11771] Bluetooth: hci5: Injecting HCI hardware error event [ 1169.783971][T11771] Bluetooth: hci5: hardware error 0x00 [ 1170.371915][T17503] capability: warning: `syz.4.2878' uses deprecated v2 capabilities in a way that may be insecure [ 1170.649709][T17507] trusted_key: syz.0.2875 sent an empty control message without MSG_MORE. [ 1171.038692][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1171.047666][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1171.055417][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1171.064556][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1171.072102][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1171.314986][T17520] lo speed is unknown, defaulting to 1000 [ 1172.071803][T11771] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1172.275017][T17520] chnl_net:caif_netlink_parms(): no params data found [ 1173.082625][T17520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.093976][T17520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.109915][T17520] bridge_slave_0: entered allmulticast mode [ 1173.117640][T17520] bridge_slave_0: entered promiscuous mode [ 1173.200709][T11771] Bluetooth: hci1: command tx timeout [ 1173.942134][T17520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.992344][T17520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.999612][T17520] bridge_slave_1: entered allmulticast mode [ 1174.008821][T17520] bridge_slave_1: entered promiscuous mode [ 1174.088911][T17520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.113336][T17520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.194359][T17520] team0: Port device team_slave_0 added [ 1174.311991][T17520] team0: Port device team_slave_1 added [ 1174.992554][T17520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.023895][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.120125][T17520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.200403][T17520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.235901][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.263623][T11771] Bluetooth: hci1: command tx timeout [ 1175.333251][T17520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.107803][T17520] hsr_slave_0: entered promiscuous mode [ 1176.114621][T17520] hsr_slave_1: entered promiscuous mode [ 1177.090937][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.097280][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.397750][T11771] Bluetooth: hci1: command tx timeout [ 1177.478120][T17607] xt_TCPMSS: Only works on TCP SYN packets [ 1178.557337][T17520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.596911][T17626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 1178.656743][T17520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.669425][T17631] atomic_op ffff88805652f198 conn xmit_atomic 0000000000000000 [ 1178.820417][T17520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.968540][T17520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.586434][T11771] Bluetooth: hci1: command tx timeout [ 1180.190246][T17520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1180.204212][T17520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1180.222566][T17520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1180.245076][T17520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1181.415756][T17672] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2919'. [ 1181.591757][T17676] atomic_op ffff88805dfcf998 conn xmit_atomic 0000000000000000 [ 1181.659478][T17520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.679762][T17520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.702589][T17536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.709722][T17536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.851398][T17532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.858575][T17532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.882893][T17687] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1182.892395][T17687] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1182.896748][T17520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1182.902077][T17687] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1183.100721][T17520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1185.119757][T17520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.275361][T17520] veth0_vlan: entered promiscuous mode [ 1185.286294][T17520] veth1_vlan: entered promiscuous mode [ 1185.348055][T17520] veth0_macvtap: entered promiscuous mode [ 1185.365053][T17520] veth1_macvtap: entered promiscuous mode [ 1185.385699][T17520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.668050][ T30] audit: type=1400 audit(1750960753.879:379): avc: denied { setopt } for pid=17709 comm="syz.5.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1185.697899][T17520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.714796][T17520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.729839][T17520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.754052][T17520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.764169][T17520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.137348][T17748] xt_hashlimit: size too large, truncated to 1048576 [ 1187.330077][ T30] audit: type=1400 audit(1750960755.539:380): avc: denied { listen } for pid=17743 comm="syz.1.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1187.647380][T17538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.673409][T17538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.441296][T17757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2943'. [ 1188.539585][T17539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.720670][T17539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.914986][ T30] audit: type=1400 audit(1750960757.129:381): avc: denied { write } for pid=17741 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1189.982777][T17770] lo speed is unknown, defaulting to 1000 [ 1190.917839][T17742] lo speed is unknown, defaulting to 1000 [ 1193.441399][T16836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1193.457581][T16836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1193.465595][T16836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1193.504054][ T30] audit: type=1400 audit(1750960761.729:382): avc: denied { mount } for pid=17800 comm="syz.5.2956" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1193.538876][T16836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1193.547355][T16836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1193.701850][T17794] lo speed is unknown, defaulting to 1000 [ 1193.797186][T17807] overlayfs: failed to clone upperpath [ 1195.418758][T17794] chnl_net:caif_netlink_parms(): no params data found [ 1195.580731][T11771] Bluetooth: hci2: command tx timeout [ 1196.123315][T17539] bridge_slave_1: left promiscuous mode [ 1196.129100][T17539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.137478][T17539] bridge_slave_0: left promiscuous mode [ 1196.143985][T17539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.270914][T17539] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1197.076869][ T30] audit: type=1400 audit(1750960765.299:383): avc: denied { bind } for pid=17845 comm="syz.0.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1197.194003][T17539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.323145][T17539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.333091][T17539] bond0 (unregistering): Released all slaves [ 1197.346798][T17752] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1197.608706][T17752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.661894][T11771] Bluetooth: hci2: command tx timeout [ 1197.802299][T17752] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1197.817231][T17752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.845441][T17752] usb 4-1: config 0 descriptor?? [ 1197.917239][T17539] bond1 (unregistering): Released all slaves [ 1198.000207][T17794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.017691][T17794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.040974][T17794] bridge_slave_0: entered allmulticast mode [ 1198.053578][T17794] bridge_slave_0: entered promiscuous mode [ 1198.075607][T17794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.085810][T17794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.093365][T17794] bridge_slave_1: entered allmulticast mode [ 1198.103550][T17794] bridge_slave_1: entered promiscuous mode [ 1198.269030][T17794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.381743][T17752] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 1198.401151][T17752] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input6 [ 1198.431312][T17794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.973061][T17752] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1199.143731][T17794] team0: Port device team_slave_0 added [ 1199.167790][T17539] dummy0: left promiscuous mode [ 1199.181475][T17539] batadv_slave_1: left promiscuous mode [ 1199.198964][T17752] usb 4-1: USB disconnect, device number 33 [ 1199.235534][T17539] hsr_slave_0: left promiscuous mode [ 1199.247050][T17876] fido_id[17876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1199.262376][T17539] hsr_slave_1: left promiscuous mode [ 1199.286359][T17539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.302288][T17539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.100779][T11771] Bluetooth: hci2: command tx timeout [ 1201.420002][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 1201.947366][T17912] overlayfs: overlapping lowerdir path [ 1202.335363][T11771] Bluetooth: hci2: command tx timeout [ 1203.636273][T17920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=17920 comm=syz.5.2988 [ 1203.719414][ T30] audit: type=1400 audit(1750960771.929:384): avc: denied { create } for pid=17914 comm="syz.3.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1204.264168][T17539] team0 (unregistering): Port device team_slave_1 removed [ 1205.134368][T17539] team0 (unregistering): Port device team_slave_0 removed [ 1208.003007][ T30] audit: type=1400 audit(1750960776.229:385): avc: denied { setattr } for pid=17958 comm="syz.3.3001" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1208.027907][T17968] overlayfs: failed to clone upperpath [ 1208.957467][T17794] team0: Port device team_slave_1 added [ 1208.967764][T17908] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1208.977196][T17908] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1208.988706][T17908] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1209.128693][T17794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.149744][T17794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.177473][T17794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.188974][ T30] audit: type=1400 audit(1750960777.389:386): avc: denied { mount } for pid=17997 comm="syz.0.3016" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1209.191404][T17794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.257057][T17794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.312276][T17794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.426823][ T30] audit: type=1326 audit(1750960777.649:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1209.479386][ T30] audit: type=1326 audit(1750960777.649:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1209.515638][T17794] hsr_slave_0: entered promiscuous mode [ 1209.527251][T17794] hsr_slave_1: entered promiscuous mode [ 1209.541271][T17794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1209.551004][T17794] Cannot create hsr debugfs directory [ 1209.556475][ T30] audit: type=1326 audit(1750960777.649:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1209.609117][ T30] audit: type=1326 audit(1750960777.649:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1209.644159][ T30] audit: type=1326 audit(1750960777.649:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1209.767945][ T30] audit: type=1326 audit(1750960777.649:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1209.849055][ T30] audit: type=1326 audit(1750960777.649:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1209.879428][T17539] IPVS: stop unused estimator thread 0... [ 1209.990697][ T30] audit: type=1326 audit(1750960777.649:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1210.570320][ T30] audit: type=1326 audit(1750960777.649:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.0.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f081372ab19 code=0x7ffc0000 [ 1211.012730][T18038] netlink: 'syz.5.3024': attribute type 4 has an invalid length. [ 1211.020584][T18038] netlink: 'syz.5.3024': attribute type 5 has an invalid length. [ 1211.028329][T18038] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3024'. [ 1211.731016][T17794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1212.722908][T17794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1212.793643][T17794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1213.595748][T18056] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=18056 comm=syz.3.3028 [ 1213.836016][T17794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1214.018203][T17794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.113096][T17794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.616341][T17540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.623563][T17540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.653461][T17540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.660668][T17540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.710939][T17794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1214.730022][T17794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1217.335753][T17794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.130957][T18133] overlayfs: failed to resolve './file2': -2 [ 1219.278970][T17794] veth0_vlan: entered promiscuous mode [ 1219.290389][T17794] veth1_vlan: entered promiscuous mode [ 1219.356684][T18151] overlayfs: failed to clone lowerpath [ 1219.451011][T18152] overlayfs: failed to clone upperpath [ 1219.799504][T17794] veth0_macvtap: entered promiscuous mode [ 1219.958010][T17794] veth1_macvtap: entered promiscuous mode [ 1220.085406][T17794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.173023][T17794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.203705][T17794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.943040][T17794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.123912][T17794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.153349][T17794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.225981][T18168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.254060][T18168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.303592][T18168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.315030][T18168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.369317][T18208] overlayfs: failed to clone upperpath [ 1222.941947][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 1223.170822][ T30] audit: type=1400 audit(1750960790.699:511): avc: denied { write } for pid=18203 comm="syz.1.3060" name="file0" dev="tmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1223.502304][ T30] audit: type=1400 audit(1750960790.699:512): avc: denied { open } for pid=18203 comm="syz.1.3060" path="/605/file0" dev="tmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1223.526667][ T30] audit: type=1400 audit(1750960790.719:513): avc: denied { ioctl } for pid=18203 comm="syz.1.3060" path="/605/file0" dev="tmpfs" ino=3195 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1223.660604][ T30] audit: type=1326 audit(1750960791.519:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081378e929 code=0x7ffc0000 [ 1223.759697][ T30] audit: type=1326 audit(1750960791.519:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081378e929 code=0x7ffc0000 [ 1226.930032][T18270] Cannot find add_set index 0 as target [ 1227.202091][T18273] fuse: Bad value for 'fd' [ 1227.421497][ T30] audit: type=1400 audit(1750960795.629:516): avc: denied { read } for pid=18274 comm="syz.4.3076" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1227.475843][ T30] audit: type=1400 audit(1750960795.629:517): avc: denied { open } for pid=18274 comm="syz.4.3076" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1227.703250][T16836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1227.726428][T16836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1227.740848][T16836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1227.748899][T16836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1227.770476][T16836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1227.828311][T18286] lo speed is unknown, defaulting to 1000 [ 1227.932156][T18294] netlink: 'syz.4.3080': attribute type 4 has an invalid length. [ 1227.939957][T18294] netlink: 'syz.4.3080': attribute type 5 has an invalid length. [ 1227.947782][T18294] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3080'. [ 1228.546625][T18299] netlink: 'syz.3.3083': attribute type 7 has an invalid length. [ 1228.582170][T18299] netlink: 'syz.3.3083': attribute type 8 has an invalid length. [ 1228.600481][T18286] chnl_net:caif_netlink_parms(): no params data found [ 1228.915200][T18286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.924768][T18286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.931957][T18286] bridge_slave_0: entered allmulticast mode [ 1228.939837][T18286] bridge_slave_0: entered promiscuous mode [ 1228.948592][T18286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.956700][T18286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.967120][T18286] bridge_slave_1: entered allmulticast mode [ 1228.977624][T18286] bridge_slave_1: entered promiscuous mode [ 1229.065876][T18286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.081464][T18286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1229.129584][T18286] team0: Port device team_slave_0 added [ 1229.141414][T18286] team0: Port device team_slave_1 added [ 1229.165212][T18286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.172465][T18286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.213421][T18286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.712491][T18286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.719476][T18286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.765536][T18286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.825071][T16836] Bluetooth: hci3: command tx timeout [ 1229.964942][T18286] hsr_slave_0: entered promiscuous mode [ 1229.981612][T18286] hsr_slave_1: entered promiscuous mode [ 1229.987817][T18286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1230.000335][T18286] Cannot create hsr debugfs directory [ 1231.196038][T18286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.377416][T18286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.454941][T18286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.811617][T18373] SELinux: Context @ is not valid (left unmapped). [ 1231.839917][ T30] audit: type=1400 audit(1750960800.039:518): avc: denied { relabelto } for pid=18363 comm="syz.1.3098" name="cgroup.controllers" dev="tmpfs" ino=3245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 1231.911804][T16836] Bluetooth: hci3: command tx timeout [ 1232.079635][ T30] audit: type=1400 audit(1750960800.049:519): avc: denied { associate } for pid=18363 comm="syz.1.3098" name="cgroup.controllers" dev="tmpfs" ino=3245 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 1232.134608][T18286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.048664][ T30] audit: type=1400 audit(1750960801.209:520): avc: denied { unlink } for pid=5807 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=3245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 1233.459806][T18286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1233.619718][T18286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1233.982320][T16836] Bluetooth: hci3: command tx timeout [ 1234.284457][T18286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1234.514251][T18286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1235.254286][T18286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.428676][T18286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.624228][T17537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.631403][T17537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.060718][T16836] Bluetooth: hci3: command tx timeout [ 1236.169986][T17537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.177158][T17537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.408712][T18286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1236.595462][T18286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1238.958015][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.964405][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.989565][T18488] lo speed is unknown, defaulting to 1000 [ 1240.933169][T18286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.994661][T18286] veth0_vlan: entered promiscuous mode [ 1241.015288][T18286] veth1_vlan: entered promiscuous mode [ 1241.072526][T18286] veth0_macvtap: entered promiscuous mode [ 1241.110790][T18286] veth1_macvtap: entered promiscuous mode [ 1241.119625][T18513] Cannot find add_set index 0 as target [ 1241.577678][T18286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.614165][T18286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.626580][T18286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.637556][T18286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.685326][T18286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.200387][T18527] overlayfs: failed to clone upperpath [ 1242.279485][ T30] audit: type=1326 audit(1750960810.499:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.5.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fed8e929 code=0x7ffc0000 [ 1242.643795][T18286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.907966][ T30] audit: type=1326 audit(1750960810.499:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.5.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fed8e929 code=0x7ffc0000 [ 1242.945173][T18530] lo speed is unknown, defaulting to 1000 [ 1243.051234][ T30] audit: type=1326 audit(1750960810.499:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.5.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0fed8e929 code=0x7ffc0000 [ 1243.075459][ T30] audit: type=1326 audit(1750960810.499:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.5.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fed8e929 code=0x7ffc0000 [ 1243.102948][ T30] audit: type=1326 audit(1750960810.499:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.5.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fed8e929 code=0x7ffc0000 [ 1243.127747][ T30] audit: type=1326 audit(1750960810.499:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.5.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0fed8e929 code=0x7ffc0000 [ 1244.461910][T17551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.001476][T17551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.253450][T17551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.280035][T17551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.677171][T16311] syz_tun (unregistering): left allmulticast mode [ 1246.749953][T11771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1246.761659][T11771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1246.823905][T11771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1246.880939][T11771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1246.888667][T11771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1246.933876][T18572] kvm: kvm [18571]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4124 [ 1246.978923][T18572] kvm: kvm [18571]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100007124 [ 1246.989983][T18572] kvm: kvm [18571]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000061ec [ 1247.002224][T18572] kvm: kvm [18571]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6218 [ 1247.013820][T18572] kvm: kvm [18571]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x609a [ 1247.030685][T18564] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1247.272837][T18586] overlayfs: failed to clone upperpath [ 1247.335599][T18581] lo speed is unknown, defaulting to 1000 [ 1247.642790][T18581] chnl_net:caif_netlink_parms(): no params data found [ 1248.050572][T18581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.202157][T18581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.211731][T18581] bridge_slave_0: entered allmulticast mode [ 1248.535939][T18581] bridge_slave_0: entered promiscuous mode [ 1248.574877][T18581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.587931][T18581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.597846][T18581] bridge_slave_1: entered allmulticast mode [ 1248.606021][T18581] bridge_slave_1: entered promiscuous mode [ 1248.793559][T18581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.836018][T18581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.858371][T18612] wg2: entered promiscuous mode [ 1248.878964][T18612] wg2: entered allmulticast mode [ 1248.959958][T18581] team0: Port device team_slave_0 added [ 1248.986891][T18581] team0: Port device team_slave_1 added [ 1249.020757][T16836] Bluetooth: hci0: command tx timeout [ 1249.067555][T18581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.088896][T18581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.162849][T18581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.185490][T18581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.202826][T18581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.262469][T18581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.357067][T18581] hsr_slave_0: entered promiscuous mode [ 1249.364404][T18581] hsr_slave_1: entered promiscuous mode [ 1249.375808][T18581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.387259][T18581] Cannot create hsr debugfs directory [ 1249.706283][T18581] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.068432][T18581] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.204734][T18581] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.528107][T18581] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.964993][T18581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1251.100878][T16836] Bluetooth: hci0: command tx timeout [ 1251.167307][T18581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1251.185178][T18581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1251.205320][T18581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1251.827664][T18581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.870164][T18581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.930069][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.937239][T18162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.964619][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.971805][T18162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.993628][T18690] tipc: Enabling of bearer rejected, failed to enable media [ 1253.057434][T18696] veth0_vlan: entered allmulticast mode [ 1253.106367][T18696] ªªªªªª: renamed from vlan0 [ 1253.142151][ T30] audit: type=1400 audit(1750960821.369:527): avc: denied { read write } for pid=18697 comm="syz.0.3183" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1253.183699][T16836] Bluetooth: hci0: command tx timeout [ 1253.191478][ T30] audit: type=1400 audit(1750960821.369:528): avc: denied { ioctl open } for pid=18697 comm="syz.0.3183" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1253.199743][T18581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.436932][T18581] veth0_vlan: entered promiscuous mode [ 1253.452789][T18581] veth1_vlan: entered promiscuous mode [ 1253.711837][T18581] veth0_macvtap: entered promiscuous mode [ 1253.874864][T18581] veth1_macvtap: entered promiscuous mode [ 1254.084766][T18581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.226590][T18581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.254737][T18581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.263928][T18581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.274735][T18581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.284655][T18581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.451516][T17534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.467163][T17534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.537106][T18165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.548455][T18729] Cannot find add_set index 0 as target [ 1254.553735][T18165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.293539][T16836] Bluetooth: hci0: command tx timeout [ 1255.587250][T18737] tipc: Enabling of bearer rejected, failed to enable media [ 1258.621899][T18778] tipc: Enabling of bearer rejected, failed to enable media [ 1258.795823][T18804] pim6reg1: entered promiscuous mode [ 1258.813390][T18804] pim6reg1: entered allmulticast mode [ 1260.050259][T18834] tipc: Started in network mode [ 1260.055256][T18834] tipc: Node identity 023b1c0f0e5b, cluster identity 4711 [ 1260.071126][T18834] tipc: Enabled bearer , priority 0 [ 1260.115918][T18834] syzkaller0: MTU too low for tipc bearer [ 1260.148127][T18834] tipc: Disabling bearer [ 1260.392442][T18842] pim6reg1: entered promiscuous mode [ 1260.410236][T18842] pim6reg1: entered allmulticast mode [ 1260.563242][T18846] pim6reg1: entered promiscuous mode [ 1260.578828][T18846] pim6reg1: entered allmulticast mode [ 1261.979139][T18868] wg2: entered promiscuous mode [ 1261.990739][T18868] wg2: entered allmulticast mode [ 1262.666000][T18898] netlink: 'syz.4.3259': attribute type 41 has an invalid length. [ 1263.110415][T18905] pim6reg1: entered promiscuous mode [ 1263.125385][T18905] pim6reg1: entered allmulticast mode [ 1264.413694][T18947] atomic_op ffff88805df5c998 conn xmit_atomic 0000000000000000 [ 1265.883845][T18960] Cannot find add_set index 0 as target [ 1267.145729][T18983] pim6reg1: entered promiscuous mode [ 1267.161931][T18983] pim6reg1: entered allmulticast mode [ 1283.059003][T19055] tipc: Enabling of bearer rejected, failed to enable media [ 1283.200453][T19062] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1285.206815][T19092] tipc: Enabling of bearer rejected, failed to enable media [ 1286.975355][T19116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1290.007602][T19179] tipc: Enabling of bearer rejected, failed to enable media [ 1293.053963][T19224] tipc: Enabling of bearer rejected, failed to enable media [ 1293.343256][ T30] audit: type=1400 audit(1750960861.569:529): avc: denied { relabelfrom } for pid=19232 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1293.433722][ T30] audit: type=1400 audit(1750960861.569:530): avc: denied { relabelto } for pid=19232 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1294.855607][ C1] hrtimer: interrupt took 936785372 ns [ 1323.050621][T11046] sched: DL replenish lagged too much [ 1323.331034][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1323.360614][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1399.900464][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1399.907441][ C0] rcu: 1-...!: (1 GPs behind) idle=4d94/1/0x4000000000000000 softirq=87312/87313 fqs=4 [ 1399.917885][ C0] rcu: (detected by 0, t=10506 jiffies, g=63245, q=451 ncpus=2) [ 1399.925594][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1399.925617][ C1] NMI backtrace for cpu 1 [ 1399.925628][ C1] CPU: 1 UID: 0 PID: 19226 Comm: syz.0.3363 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1399.925646][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1399.925653][ C1] RIP: 0010:hlock_class+0x4/0x70 [ 1399.925674][ C1] Code: 0f 0b 90 e9 01 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 <66> 25 ff 1f 0f b7 c0 48 0f a3 05 3d 9b 3b 14 73 15 48 8d 04 80 48 [ 1399.925687][ C1] RSP: 0018:ffffc90000a08c38 EFLAGS: 00000046 [ 1399.925699][ C1] RAX: 0000000000004c9b RBX: 61c8864680b583eb RCX: 00000000fcd41028 [ 1399.925708][ C1] RDX: a8d35bb04e02924a RSI: 0000000005e22bf8 RDI: ffff88801c7c5398 [ 1399.925716][ C1] RBP: ffff88801c7c4880 R08: a8d35bb04e02924a R09: 0000000000000001 [ 1399.925725][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801c7c5370 [ 1399.925733][ C1] R13: ffff88801c7c5398 R14: 00000000b4b0719a R15: 0000000000000003 [ 1399.925741][ C1] FS: 00007f3f8fe3c6c0(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 1399.925756][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1399.925764][ C1] CR2: 0000200000200030 CR3: 0000000034003000 CR4: 00000000003526f0 [ 1399.925773][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1399.925780][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1399.925788][ C1] Call Trace: [ 1399.925793][ C1] [ 1399.925798][ C1] __lock_acquire+0xb8a/0x1c90 [ 1399.925820][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1399.925834][ C1] lock_acquire+0x179/0x350 [ 1399.925852][ C1] ? advance_sched+0xd9/0xc80 [ 1399.925869][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1399.925882][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1399.925901][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1399.925915][ C1] _raw_spin_lock+0x2e/0x40 [ 1399.925928][ C1] ? advance_sched+0xd9/0xc80 [ 1399.925942][ C1] advance_sched+0xd9/0xc80 [ 1399.925957][ C1] ? find_held_lock+0x2b/0x80 [ 1399.925972][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1399.925986][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1399.926001][ C1] __hrtimer_run_queues+0x202/0xad0 [ 1399.926018][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1399.926031][ C1] ? read_tsc+0x9/0x20 [ 1399.926048][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1399.926066][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 1399.926086][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1399.926104][ C1] [ 1399.926108][ C1] [ 1399.926113][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1399.926128][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1399.926144][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 50 15 f6 48 89 df e8 1e a4 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 c4 05 f6 65 8b 05 4e ba 49 08 85 c0 74 16 5b [ 1399.926157][ C1] RSP: 0018:ffffc900043ef770 EFLAGS: 00000246 [ 1399.926167][ C1] RAX: 0000000000000006 RBX: ffff88807e192a40 RCX: 0000000000000006 [ 1399.926175][ C1] RDX: 0000000000000000 RSI: ffffffff8de19fc6 RDI: ffffffff8c157ba0 [ 1399.926183][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 1399.926190][ C1] R10: ffffffff90a81257 R11: 0000000000000001 R12: ffff8880565ba140 [ 1399.926199][ C1] R13: 0000000000000246 R14: ffff88807e192a28 R15: ffffc900043ef8f8 [ 1399.926212][ C1] __skb_try_recv_datagram+0x172/0x4f0 [ 1399.926230][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1399.926245][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1399.926263][ C1] __unix_dgram_recvmsg+0x1bd/0xc50 [ 1399.926283][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1399.926300][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1399.926322][ C1] ? iovec_from_user+0xbb/0x140 [ 1399.926341][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 1399.926359][ C1] ____sys_recvmsg+0x5f6/0x6b0 [ 1399.926374][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1399.926389][ C1] ? kfree+0x24f/0x4d0 [ 1399.926408][ C1] ? __pfx___schedule+0x10/0x10 [ 1399.926425][ C1] ___sys_recvmsg+0x114/0x1a0 [ 1399.926443][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1399.926465][ C1] ? __pfx___might_resched+0x10/0x10 [ 1399.926483][ C1] do_recvmmsg+0x2fe/0x750 [ 1399.926502][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1399.926521][ C1] ? css_rstat_updated+0x9d/0xd30 [ 1399.926542][ C1] ? find_held_lock+0x2b/0x80 [ 1399.926558][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 1399.926576][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1399.926597][ C1] do_syscall_64+0xcd/0x4c0 [ 1399.926616][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.926630][ C1] RIP: 0033:0x7f3f8ef8e929 [ 1399.926641][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1399.926653][ C1] RSP: 002b:00007f3f8fe3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1399.926665][ C1] RAX: ffffffffffffffda RBX: 00007f3f8f1b6080 RCX: 00007f3f8ef8e929 [ 1399.926673][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1399.926681][ C1] RBP: 00007f3f8f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1399.926689][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1399.926697][ C1] R13: 0000000000000001 R14: 00007f3f8f1b6080 R15: 00007ffe09f055b8 [ 1399.926709][ C1] [ 1399.927613][ C0] rcu: rcu_preempt kthread starved for 7655 jiffies! g63245 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1400.455318][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1400.465280][ C0] rcu: RCU grace-period kthread stack dump: [ 1400.471154][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1400.484641][ C0] Call Trace: [ 1400.487911][ C0] [ 1400.490837][ C0] __schedule+0x116a/0x5de0 [ 1400.495350][ C0] ? __lock_acquire+0x622/0x1c90 [ 1400.500296][ C0] ? __pfx___schedule+0x10/0x10 [ 1400.505152][ C0] ? find_held_lock+0x2b/0x80 [ 1400.509825][ C0] ? schedule+0x2d7/0x3a0 [ 1400.514152][ C0] schedule+0xe7/0x3a0 [ 1400.518218][ C0] schedule_timeout+0x123/0x290 [ 1400.523062][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1400.528432][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1400.533716][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1400.539518][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1400.544979][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1400.549747][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1400.555031][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1400.560231][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1400.565170][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1400.570025][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1400.575830][ C0] rcu_gp_kthread+0x270/0x380 [ 1400.580510][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1400.585707][ C0] ? rcu_is_watching+0x12/0xc0 [ 1400.590467][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1400.595664][ C0] ? __kthread_parkme+0x19e/0x250 [ 1400.600693][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1400.605894][ C0] kthread+0x3c2/0x780 [ 1400.609955][ C0] ? __pfx_kthread+0x10/0x10 [ 1400.614539][ C0] ? rcu_is_watching+0x12/0xc0 [ 1400.619298][ C0] ? __pfx_kthread+0x10/0x10 [ 1400.623880][ C0] ret_from_fork+0x5d4/0x6f0 [ 1400.628468][ C0] ? __pfx_kthread+0x10/0x10 [ 1400.633049][ C0] ret_from_fork_asm+0x1a/0x30 [ 1400.637822][ C0] [ 1400.640834][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1400.647148][ C0] CPU: 0 UID: 0 PID: 5479 Comm: dhcpcd Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 1400.658764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1400.668811][ C0] RIP: 0010:write_comp_data+0x8b/0x90 [ 1400.674175][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 1400.693773][ C0] RSP: 0018:ffffc90003247748 EFLAGS: 00000293 [ 1400.699831][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe20 RCX: ffffffff81b001cd [ 1400.707797][ C0] RDX: ffff8880326f0000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1400.715762][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1400.723722][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1400.731685][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 1400.739645][ C0] FS: 00007f357c113740(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 1400.748568][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1400.755144][ C0] CR2: 0000001b31e1cff8 CR3: 000000007b5aa000 CR4: 00000000003526f0 [ 1400.763112][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1400.771074][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1400.779038][ C0] Call Trace: [ 1400.782308][ C0] [ 1400.785230][ C0] smp_call_function_many_cond+0xd9d/0x1510 [ 1400.791120][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1400.796322][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1400.802649][ C0] ? ldt_dup_context+0x1a2/0x300 [ 1400.807594][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1400.812787][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1400.817897][ C0] flush_tlb_mm_range+0x4a0/0x1790 [ 1400.823008][ C0] ? find_held_lock+0x2b/0x80 [ 1400.827680][ C0] ? dup_mmap+0xf88/0x21d0 [ 1400.832092][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1400.837633][ C0] ? up_write+0x1b2/0x520 [ 1400.841957][ C0] dup_mmap+0xfa2/0x21d0 [ 1400.846202][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1400.850888][ C0] copy_process+0x4081/0x76a0 [ 1400.855575][ C0] ? __pfx_copy_process+0x10/0x10 [ 1400.860609][ C0] kernel_clone+0xfc/0x960 [ 1400.865023][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1400.870062][ C0] __do_sys_clone+0xce/0x120 [ 1400.874652][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1400.879858][ C0] ? __sys_setsockopt+0x1a0/0x230 [ 1400.884876][ C0] ? __sys_setsockopt+0x1c0/0x230 [ 1400.889904][ C0] do_syscall_64+0xcd/0x4c0 [ 1400.894412][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.900297][ C0] RIP: 0033:0x7f357c1e7636 [ 1400.904703][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1400.924301][ C0] RSP: 002b:00007ffc441cd730 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1400.932707][ C0] RAX: ffffffffffffffda RBX: 00007ffc441cd738 RCX: 00007f357c1e7636 [ 1400.940672][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1400.948633][ C0] RBP: 00007ffc441edc80 R08: 0000000000000000 R09: 0000000000000001 [ 1400.956594][ C0] R10: 00007f357c113a10 R11: 0000000000000246 R12: 00007ffc441cd870 [ 1400.964556][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000561397ee2ac0 [ 1400.972529][ C0]