last executing test programs: 2.316121219s ago: executing program 2 (id=565): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 2.1900511s ago: executing program 2 (id=567): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) 1.281095852s ago: executing program 0 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 1.252899261s ago: executing program 3 (id=586): socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.063867757s ago: executing program 3 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 965.118788ms ago: executing program 0 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 954.420355ms ago: executing program 4 (id=591): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(0xffffffffffffffff, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) 900.603349ms ago: executing program 3 (id=593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7, 0x3, "fd02b2"}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 812.938336ms ago: executing program 1 (id=594): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, 0x0, &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='bfq', 0x3) 812.616563ms ago: executing program 1 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000006800010500000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0) 735.602506ms ago: executing program 1 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[]) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl(r1, 0x40140921, &(0x7f0000000420)="010000000100000001000000010000000600") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002") 728.117485ms ago: executing program 0 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000420)="010000000100000001000000010000000600") 724.732149ms ago: executing program 4 (id=598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000040)) 657.908169ms ago: executing program 3 (id=599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219b"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000050000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000030900010073797a300012000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 627.578676ms ago: executing program 0 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x44, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 558.194483ms ago: executing program 0 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a3100000000050001000700000044000780180001801400024000000000000000000000ffffac14143a180014801400024020010000000000000000000000000000060004404e1f0000050007"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 543.871017ms ago: executing program 2 (id=602): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, 0x0, 0x0) timerfd_create(0x0, 0x0) 509.976456ms ago: executing program 4 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 507.845214ms ago: executing program 1 (id=604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 462.12857ms ago: executing program 3 (id=605): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 406.032156ms ago: executing program 3 (id=606): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07d8230c"], 0xa) 377.818048ms ago: executing program 0 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 340.880354ms ago: executing program 4 (id=608): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0xc0000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) 331.007715ms ago: executing program 2 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000010c0)=0xc) 250.858176ms ago: executing program 1 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000420)="010000000100000001000000010000000600") 217.083928ms ago: executing program 2 (id=611): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f000001f500)) 190.569575ms ago: executing program 4 (id=612): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0xcb9, 0xfffffffe, 0x7, 0x10001, 0xff000000}) 41.963255ms ago: executing program 2 (id=613): socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.0965ms ago: executing program 4 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000800)="001122", 0x3, 0x0, &(0x7f0000000900)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 0s ago: executing program 1 (id=615): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x7, 0x2, 0x4, 0x12, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 48.190123][ T31] audit: type=1400 audit(1788440948.851:121): avc: denied { write } for pid=5520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.254711][ T31] audit: type=1400 audit(1788440948.921:122): avc: denied { write } for pid=5531 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.424302][ T31] audit: type=1400 audit(1788440949.091:123): avc: denied { write } for pid=5534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.488600][ T31] audit: type=1400 audit(1788440949.151:124): avc: denied { write } for pid=5545 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.661340][ T31] audit: type=1400 audit(1788440949.321:125): avc: denied { write } for pid=5548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.709212][ T31] audit: type=1400 audit(1788440949.371:126): avc: denied { write } for pid=5559 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.885511][ T31] audit: type=1400 audit(1788440949.551:127): avc: denied { write } for pid=5563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 55.616581][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 55.617733][ T31] audit: type=1400 audit(1788440956.281:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.625113][ T31] audit: type=1400 audit(1788440956.291:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.627658][ T5585] cgroup: Unknown subsys name 'net' [ 55.629525][ T31] audit: type=1400 audit(1788440956.291:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.794192][ T5585] cgroup: Unknown subsys name 'cpuset' [ 55.801333][ T5585] cgroup: Unknown subsys name 'rlimit' [ 55.900809][ T31] audit: type=1400 audit(1788440956.561:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.924324][ T31] audit: type=1400 audit(1788440956.561:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.924364][ T31] audit: type=1400 audit(1788440956.561:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.924393][ T31] audit: type=1400 audit(1788440956.571:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.014815][ T5587] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.015945][ T31] audit: type=1400 audit(1788440956.681:136): avc: denied { relabelto } for pid=5587 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 56.017499][ T31] audit: type=1400 audit(1788440956.681:137): avc: denied { write } for pid=5587 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.091012][ T31] audit: type=1400 audit(1788440956.751:138): avc: denied { read } for pid=5585 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 57.014187][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.753307][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 60.753342][ T31] audit: type=1400 audit(1788440961.421:140): avc: denied { execmem } for pid=5590 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.869905][ T31] audit: type=1400 audit(1788440962.531:141): avc: denied { create } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.873209][ T31] audit: type=1400 audit(1788440962.531:142): avc: denied { read write } for pid=5595 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.873923][ T31] audit: type=1400 audit(1788440962.531:143): avc: denied { open } for pid=5595 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.890110][ T31] audit: type=1400 audit(1788440962.531:144): avc: denied { ioctl } for pid=5596 comm="syz-executor" path="socket:[4586]" dev="sockfs" ino=4586 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.922716][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.923329][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.923969][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.924252][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.924963][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.925427][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.938671][ T31] audit: type=1400 audit(1788440962.581:145): avc: denied { read } for pid=5595 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.938712][ T31] audit: type=1400 audit(1788440962.581:146): avc: denied { open } for pid=5595 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.938743][ T31] audit: type=1400 audit(1788440962.581:147): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.938771][ T31] audit: type=1400 audit(1788440962.581:148): avc: denied { module_request } for pid=5595 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.941122][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.941448][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.943269][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.969149][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.985864][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.987988][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.988352][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.989091][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.989581][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.045910][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.046938][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.047222][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.047894][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.048528][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.119493][ T31] audit: type=1400 audit(1788440962.781:149): avc: denied { sys_module } for pid=5595 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.157794][ T4918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.160306][ T4918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.160923][ T4918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.161485][ T4918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.163984][ T4918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.308968][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.318905][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.319323][ T5595] bridge_slave_0: entered allmulticast mode [ 63.320555][ T5595] bridge_slave_0: entered promiscuous mode [ 63.324090][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.324154][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.324234][ T5595] bridge_slave_1: entered allmulticast mode [ 63.325376][ T5595] bridge_slave_1: entered promiscuous mode [ 63.396072][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.396224][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.396614][ T5596] bridge_slave_0: entered allmulticast mode [ 63.397972][ T5596] bridge_slave_0: entered promiscuous mode [ 63.431877][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.433081][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.433158][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.433240][ T5596] bridge_slave_1: entered allmulticast mode [ 63.434633][ T5596] bridge_slave_1: entered promiscuous mode [ 63.477151][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.512013][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.538266][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.567810][ T5595] team0: Port device team_slave_0 added [ 63.569764][ T5595] team0: Port device team_slave_1 added [ 63.584598][ T5596] team0: Port device team_slave_0 added [ 63.611742][ T5596] team0: Port device team_slave_1 added [ 63.619316][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.619435][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.619525][ T5605] bridge_slave_0: entered allmulticast mode [ 63.620590][ T5605] bridge_slave_0: entered promiscuous mode [ 63.623606][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.623671][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.623751][ T5605] bridge_slave_1: entered allmulticast mode [ 63.625369][ T5605] bridge_slave_1: entered promiscuous mode [ 63.627237][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.627302][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.627386][ T5614] bridge_slave_0: entered allmulticast mode [ 63.628799][ T5614] bridge_slave_0: entered promiscuous mode [ 63.631471][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.631536][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.632088][ T5614] bridge_slave_1: entered allmulticast mode [ 63.633197][ T5614] bridge_slave_1: entered promiscuous mode [ 63.635977][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.635988][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.636005][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.680461][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.680474][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.680491][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.687149][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.687162][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.687179][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.760958][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.760972][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.760990][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.773262][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.789336][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.808265][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.820380][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.823392][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.823496][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.823578][ T5604] bridge_slave_0: entered allmulticast mode [ 63.824647][ T5604] bridge_slave_0: entered promiscuous mode [ 63.841858][ T5595] hsr_slave_0: entered promiscuous mode [ 63.842602][ T5595] hsr_slave_1: entered promiscuous mode [ 63.861954][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.862024][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.862509][ T5604] bridge_slave_1: entered allmulticast mode [ 63.867016][ T5604] bridge_slave_1: entered promiscuous mode [ 63.944541][ T4918] Bluetooth: hci1: command tx timeout [ 63.960086][ T5605] team0: Port device team_slave_0 added [ 63.977282][ T5614] team0: Port device team_slave_0 added [ 63.983332][ T5596] hsr_slave_0: entered promiscuous mode [ 63.984001][ T5596] hsr_slave_1: entered promiscuous mode [ 63.984462][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 63.984534][ T5596] Cannot create hsr debugfs directory [ 64.003801][ T5605] team0: Port device team_slave_1 added [ 64.022449][ T4918] Bluetooth: hci0: command tx timeout [ 64.022664][ T4918] Bluetooth: hci2: command tx timeout [ 64.032857][ T5614] team0: Port device team_slave_1 added [ 64.037321][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.093939][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.094407][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.094417][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.094433][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.103114][ T5602] Bluetooth: hci3: command tx timeout [ 64.132240][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.132254][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.132272][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.145584][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.145599][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.145616][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.185806][ T5602] Bluetooth: hci4: command tx timeout [ 64.205662][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.205676][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.205694][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.235610][ T5604] team0: Port device team_slave_0 added [ 64.258998][ T5604] team0: Port device team_slave_1 added [ 64.308720][ T5605] hsr_slave_0: entered promiscuous mode [ 64.309421][ T5605] hsr_slave_1: entered promiscuous mode [ 64.309931][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 64.309946][ T5605] Cannot create hsr debugfs directory [ 64.355375][ T5614] hsr_slave_0: entered promiscuous mode [ 64.356005][ T5614] hsr_slave_1: entered promiscuous mode [ 64.356650][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 64.356664][ T5614] Cannot create hsr debugfs directory [ 64.380198][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.380257][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.380276][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.406415][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.406428][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.406451][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.559044][ T5604] hsr_slave_0: entered promiscuous mode [ 64.559684][ T5604] hsr_slave_1: entered promiscuous mode [ 64.560185][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 64.560199][ T5604] Cannot create hsr debugfs directory [ 64.603665][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.615979][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.619026][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.632471][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.655163][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.665172][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.665881][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.675483][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.781365][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.790167][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.807174][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.816049][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.827857][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.837087][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.846986][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.855669][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.907140][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.916459][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.917634][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.926279][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.928391][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.935081][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.945534][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.955883][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.040009][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.050016][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.055335][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.063907][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.068646][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.070721][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.076962][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.096238][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.104752][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.160656][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.168997][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.169109][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.173327][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.173399][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.190753][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.204158][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.204792][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.209716][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.230079][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.233302][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.245404][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.256281][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.259172][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.300843][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.320891][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.340710][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.340844][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.376026][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.376118][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.383427][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.416765][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.416853][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.441980][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.455107][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.455197][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.512469][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.547233][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.547343][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.570482][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.570562][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.636290][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.712984][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.746419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.746497][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.806905][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.806992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.868682][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.868755][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.024749][ T5602] Bluetooth: hci1: command tx timeout [ 66.103734][ T5602] Bluetooth: hci2: command tx timeout [ 66.103773][ T5602] Bluetooth: hci0: command tx timeout [ 66.188090][ T4918] Bluetooth: hci3: command tx timeout [ 66.209477][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.262295][ T4918] Bluetooth: hci4: command tx timeout [ 66.385057][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.400672][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.544692][ T5596] veth0_vlan: entered promiscuous mode [ 66.570848][ T5596] veth1_vlan: entered promiscuous mode [ 66.623347][ T5605] veth0_vlan: entered promiscuous mode [ 66.669484][ T5605] veth1_vlan: entered promiscuous mode [ 66.700740][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.721197][ T5596] veth0_macvtap: entered promiscuous mode [ 66.732140][ T5596] veth1_macvtap: entered promiscuous mode [ 66.783834][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.797586][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.806129][ T5605] veth0_macvtap: entered promiscuous mode [ 66.819011][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.824122][ T5605] veth1_macvtap: entered promiscuous mode [ 66.842757][ T5614] veth0_vlan: entered promiscuous mode [ 66.864529][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875337][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875389][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875419][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.911257][ T5614] veth1_vlan: entered promiscuous mode [ 66.934721][ T5595] veth0_vlan: entered promiscuous mode [ 66.941588][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.967633][ T5595] veth1_vlan: entered promiscuous mode [ 66.977281][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.016034][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.034672][ T5604] veth0_vlan: entered promiscuous mode [ 67.048689][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.048734][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.083082][ T5614] veth0_macvtap: entered promiscuous mode [ 67.084455][ T5595] veth0_macvtap: entered promiscuous mode [ 67.093620][ T5595] veth1_macvtap: entered promiscuous mode [ 67.095478][ T5614] veth1_macvtap: entered promiscuous mode [ 67.097736][ T5604] veth1_vlan: entered promiscuous mode [ 67.147503][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.150705][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.155065][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.155085][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.180984][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.184490][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.214506][ T31] audit: type=1400 audit(1788440967.881:150): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.1HO6zU/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.244164][ T31] audit: type=1400 audit(1788440967.911:151): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.264638][ T5604] veth0_macvtap: entered promiscuous mode [ 67.274835][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.274876][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.280312][ T5604] veth1_macvtap: entered promiscuous mode [ 67.287746][ T31] audit: type=1400 audit(1788440967.951:152): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.1HO6zU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.294540][ T31] audit: type=1400 audit(1788440967.961:153): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.297386][ T31] audit: type=1400 audit(1788440967.961:154): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.1HO6zU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.298737][ T31] audit: type=1400 audit(1788440967.961:155): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.1HO6zU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.306891][ T31] audit: type=1400 audit(1788440967.971:156): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.345940][ T31] audit: type=1400 audit(1788440968.011:157): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.348464][ T31] audit: type=1400 audit(1788440968.011:158): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="gadgetfs" ino=8065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.350898][ T31] audit: type=1400 audit(1788440968.011:159): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.423913][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.423952][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.423978][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.452295][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.452957][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.452985][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.453010][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.453036][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.453063][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.453089][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.453115][ T1147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.541017][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.541035][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.557289][ T5596] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.573983][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.656200][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.668713][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.668750][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.725472][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.725503][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.817421][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.817464][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.837591][ T5789] FAULT_INJECTION: forcing a failure. [ 67.837591][ T5789] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 67.851479][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 67.851508][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 67.851520][ T5789] Call Trace: [ 67.851526][ T5789] [ 67.851535][ T5789] dump_stack_lvl+0x100/0x190 [ 67.851568][ T5789] should_fail_ex.cold+0x5/0xa [ 67.851592][ T5789] ? prepare_alloc_pages+0x16d/0x5b0 [ 67.851616][ T5789] should_fail_alloc_page+0xeb/0x140 [ 67.851641][ T5789] prepare_alloc_pages+0x1f0/0x5b0 [ 67.851670][ T5789] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 67.851699][ T5789] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 67.851721][ T5789] ? rcu_is_watching+0x13/0xc0 [ 67.851745][ T5789] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 67.851780][ T5789] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 67.851804][ T5789] ? __pfx_flush_tlb_func+0x10/0x10 [ 67.851822][ T5789] ? smp_call_function_many_cond+0x944/0x18c0 [ 67.851845][ T5789] ? __pfx_should_flush_tlb+0x10/0x10 [ 67.851862][ T5789] ? __pfx_flush_tlb_func+0x10/0x10 [ 67.851888][ T5789] ? __lock_acquire+0x4c5/0x1ec0 [ 67.851906][ T5789] ? __css_rstat_updated+0x1ce/0x590 [ 67.851927][ T5789] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 67.851948][ T5789] ? policy_nodemask+0xed/0x4f0 [ 67.851970][ T5789] alloc_pages_mpol+0x201/0x550 [ 67.851993][ T5789] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 67.852018][ T5789] ? page_table_check_set+0x31e/0x580 [ 67.852042][ T5789] folio_alloc_mpol_noprof+0x36/0x260 [ 67.852069][ T5789] vma_alloc_folio_noprof+0xed/0x1d0 [ 67.852093][ T5789] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 67.852117][ T5789] ? rcu_read_unlock+0x2d/0xb0 [ 67.852140][ T5789] ? rcu_read_unlock+0x2d/0xb0 [ 67.852169][ T5789] do_wp_page+0xe11/0x45c0 [ 67.852193][ T5789] ? lock_acquire+0x1d1/0x380 [ 67.852211][ T5789] ? __pfx_do_wp_page+0x10/0x10 [ 67.852231][ T5789] ? do_raw_spin_lock+0x128/0x260 [ 67.852251][ T5789] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 67.852278][ T5789] __handle_mm_fault+0x1cd2/0x2f60 [ 67.852309][ T5789] ? __pfx___handle_mm_fault+0x10/0x10 [ 67.852330][ T5789] ? __pfx_mt_find+0x10/0x10 [ 67.852363][ T5789] ? find_vma+0xbf/0x140 [ 67.852378][ T5789] ? __pfx_find_vma+0x10/0x10 [ 67.852398][ T5789] handle_mm_fault+0x363/0xa20 [ 67.852438][ T5789] do_user_addr_fault+0x745/0x12f0 [ 67.852465][ T5789] exc_page_fault+0x6f/0xd0 [ 67.852483][ T5789] asm_exc_page_fault+0x26/0x30 [ 67.852502][ T5789] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 67.852530][ T5789] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff b0 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 67.852545][ T5789] RSP: 0018:ffffc90004e4f920 EFLAGS: 00050206 [ 67.852560][ T5789] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000e80 [ 67.852569][ T5789] RDX: 0000000000000001 RSI: ffff88800c00a180 RDI: 000020000000a000 [ 67.852579][ T5789] RBP: ffffc90004e4fd30 R08: 0000000000000000 R09: ffffed10018015ff [ 67.852589][ T5789] R10: ffff88800c00afff R11: 0000000000000000 R12: ffff88800c00a000 [ 67.852599][ T5789] R13: 0000000000009b80 R14: 0000200000009e80 R15: 0000000000001000 [ 67.852619][ T5789] _copy_to_iter+0x4c5/0x1720 [ 67.852650][ T5789] ? __pfx__copy_to_iter+0x10/0x10 [ 67.852685][ T5789] copy_page_to_iter+0x285/0x370 [ 67.852711][ T5789] process_vm_rw_core.constprop.0+0x5a3/0x950 [ 67.852741][ T5789] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 67.852776][ T5789] ? iovec_from_user+0xda/0x140 [ 67.852806][ T5789] process_vm_rw+0x309/0x370 [ 67.852822][ T5789] ? futex_wake+0x220/0x5e0 [ 67.852849][ T5789] ? __pfx_process_vm_rw+0x10/0x10 [ 67.852866][ T5789] ? __pfx_futex_wake+0x10/0x10 [ 67.852897][ T5789] ? find_held_lock+0x2b/0x80 [ 67.852918][ T5789] ? ksys_write+0x190/0x250 [ 67.852955][ T5789] ? xfd_validate_state+0x129/0x190 [ 67.852979][ T5789] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 67.852997][ T5789] ? do_syscall_64+0xae/0x790 [ 67.853017][ T5789] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.853037][ T5789] do_syscall_64+0x123/0x790 [ 67.853057][ T5789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.853076][ T5789] RIP: 0033:0x7f99ee59e159 [ 67.853091][ T5789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.853108][ T5789] RSP: 002b:00007f99ef400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 67.853125][ T5789] RAX: ffffffffffffffda RBX: 00007f99ee825fa0 RCX: 00007f99ee59e159 [ 67.853137][ T5789] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000003 [ 67.853150][ T5789] RBP: 00007f99ee635024 R08: 0000000000000286 R09: 0000000000000000 [ 67.853160][ T5789] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 67.853171][ T5789] R13: 00007f99ee826038 R14: 00007f99ee825fa0 R15: 00007ffd045e6468 [ 67.853195][ T5789] [ 67.902588][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.902623][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.902647][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.902671][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.909694][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.909712][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.023257][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.055575][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.055594][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.121191][ T4918] Bluetooth: hci1: command tx timeout [ 68.185178][ T4918] Bluetooth: hci0: command tx timeout [ 68.185203][ T4918] Bluetooth: hci2: command tx timeout [ 68.185853][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.185933][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.185972][ T10] usb 1-1: too many configurations: 228, using maximum allowed: 8 [ 68.196034][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.196071][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.209321][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.209357][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.210767][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.210799][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.215054][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.215099][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.221275][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.221309][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.236598][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.236635][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.243418][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.243435][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.244271][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.244302][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.253300][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.253335][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.261431][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 68.261454][ T10] usb 1-1: SerialNumber: syz [ 68.262371][ T5602] Bluetooth: hci3: command tx timeout [ 68.341950][ T5602] Bluetooth: hci4: command tx timeout [ 68.384130][ T10] usb 1-1: No union descriptors [ 68.767022][ T5787] bridge_slave_0: left allmulticast mode [ 68.767073][ T5787] bridge_slave_0: left promiscuous mode [ 68.775129][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.813555][ T5797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.855395][ T5787] bridge_slave_1: left allmulticast mode [ 68.861159][ T5787] bridge_slave_1: left promiscuous mode [ 68.868276][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.890536][ T5803] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 68.938271][ T5787] bond0: (slave bond_slave_0): Releasing backup interface [ 68.972387][ T5787] bond0: (slave bond_slave_1): Releasing backup interface [ 69.024314][ T5787] team0: Port device team_slave_0 removed [ 69.040207][ T5804] UDC core: g1: couldn't find an available UDC or it's busy [ 69.044406][ T5787] team0: Port device team_slave_1 removed [ 69.051373][ T5787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.051392][ T5787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.075131][ T5787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.075168][ T5787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.087048][ T5787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.121763][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.161100][ T5798] team0: Mode changed to "loadbalance" [ 69.232982][ T5333] usb 1-1: USB disconnect, device number 2 [ 69.282478][ T30] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 69.292956][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.303478][ T30] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 69.313315][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.335379][ T30] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 69.356902][ T30] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 69.753118][ T5800] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 69.753547][ T5800] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 69.754308][ T5800] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 69.877218][ T5800] SPCP8x5 ttyUSB0: Set UART format 0x609 failed (error = -32) [ 69.997606][ T5711] usb 3-1: USB disconnect, device number 2 [ 70.044549][ T5711] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 70.050046][ T5711] spcp8x5 3-1:1.0: device disconnected [ 70.182552][ T5602] Bluetooth: hci1: command tx timeout [ 70.263108][ T4918] Bluetooth: hci0: command tx timeout [ 70.263163][ T5602] Bluetooth: hci2: command tx timeout [ 70.344412][ T5602] Bluetooth: hci3: command tx timeout [ 70.395278][ T5790] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0 [ 70.404211][ T5790] hid-multitouch 0005:0457:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 70.425270][ T5602] Bluetooth: hci4: command tx timeout [ 70.579880][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.579973][ T5849] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.631753][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.652899][ T5849] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.681368][ T5849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.705812][ T5849] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.717880][ T5849] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.770628][ T5849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.770707][ T5849] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.783506][ T30] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 70.794007][ T30] usb 2-1: config 0 has no interfaces? [ 70.794048][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.809676][ T30] usb 2-1: config 0 descriptor?? [ 70.848886][ T5849] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.866575][ T5849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.866687][ T5849] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.889823][ T5866] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.905247][ T5865] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.907913][ T5849] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.936501][ T5849] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 70.942744][ T5849] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 70.970266][ T5849] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 71.035740][ T30] usb 2-1: USB disconnect, device number 2 [ 71.078992][ T5865] socket: no more sockets [ 71.441591][ T5886] binder: BINDER_SET_CONTEXT_MGR already set [ 71.441623][ T5886] binder: 5885:5886 ioctl 4018620d 200000000040 returned -16 [ 71.653809][ T5896] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 71.661740][ T5896] binder: 5895:5896 ioctl 4018620d 200000000040 returned -1 [ 71.756531][ T5900] openvswitch: netlink: Duplicate or invalid key (type 0). [ 71.925747][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 71.938007][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 71.948110][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 71.948153][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 71.948175][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 71.948195][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 71.948216][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 71.948237][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 71.948257][ T30] logitech-hidpp-device 0005:046D:B012.0002: unknown main item tag 0x0 [ 72.023424][ T30] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 72.087208][ T5921] msr: Write to unrecognized MSR 0x0 by syz.0.57 (pid: 5921), tainting CPU_OUT_OF_SPEC. [ 72.098976][ T5921] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 72.161128][ T5922] fido_id[5922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 72.328654][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 72.341442][ T5926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.356367][ T5932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.372655][ T31] kauditd_printk_skb: 119 callbacks suppressed [ 72.372705][ T31] audit: type=1400 audit(1788440973.031:277): avc: denied { read write } for pid=5930 comm="syz.0.58" name="md0" dev="devtmpfs" ino=2806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.372741][ T31] audit: type=1400 audit(1788440973.031:278): avc: denied { open } for pid=5930 comm="syz.0.58" path="/9/dev/md0" dev="devtmpfs" ino=2806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.433741][ T5933] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 72.440120][ T31] audit: type=1400 audit(1788440973.101:279): avc: denied { map_read map_write } for pid=5934 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.469074][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.492774][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.579458][ T5945] ip_tables: iptables: counters copy to user failed while replacing table [ 72.582379][ T4918] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.597300][ T31] audit: type=1400 audit(1788440973.261:280): avc: denied { create } for pid=5944 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.618298][ T31] audit: type=1400 audit(1788440973.281:281): avc: denied { setopt } for pid=5944 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.642232][ T5945] IPVS: fo: FWM 3 0x00000003 - no destination available [ 72.646747][ T49] IPVS: starting estimator thread 0... [ 72.655835][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 72.735663][ T5949] IPVS: using max 40 ests per chain, 96000 per kthread [ 72.743266][ T4918] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.823005][ T4918] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.902644][ T4918] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.983655][ T4918] Bluetooth: hci4: command 0x0c1a tx timeout [ 73.001210][ T31] audit: type=1400 audit(1788440973.661:282): avc: denied { create } for pid=5964 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.003604][ T31] audit: type=1400 audit(1788440973.671:283): avc: denied { bind } for pid=5964 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.233040][ T5978] ALSA: mixer_oss: invalid OSS volume ';' [ 73.342841][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.389730][ T5943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.389952][ T5943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.390102][ T5943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.391024][ T5943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.391175][ T5943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 73.470715][ T5992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.503728][ T31] audit: type=1400 audit(1788440974.171:284): avc: denied { ioctl } for pid=5995 comm="syz.0.88" path="socket:[10366]" dev="sockfs" ino=10366 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.508109][ T31] audit: type=1400 audit(1788440974.171:285): avc: denied { mount } for pid=5994 comm="syz.1.89" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.510086][ T174] IPVS: starting estimator thread 0... [ 73.514284][ T5997] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.600380][ T31] audit: type=1400 audit(1788440974.261:286): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.612376][ T5998] IPVS: using max 45 ests per chain, 108000 per kthread [ 73.836241][ T6012] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 73.845416][ T6012] netlink: 224 bytes leftover after parsing attributes in process `syz.1.97'. [ 74.091073][ T6022] tipc: Started in network mode [ 74.091110][ T6022] tipc: Node identity 7f000001, cluster identity 4711 [ 74.093944][ T6022] tipc: Enabled bearer , priority 10 [ 74.136578][ T6024] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.324826][ T6030] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 74.733655][ T6048] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.742332][ T4918] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.877668][ T6052] random: crng reseeded on system resumption [ 75.213427][ T5711] tipc: Node number set to 2130706433 [ 75.419996][ T6082] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 75.422819][ T13] IPVS: starting estimator thread 0... [ 75.432886][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 75.462155][ T4918] Bluetooth: hci4: command 0x0c1a tx timeout [ 75.463470][ T4918] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.463495][ T4918] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.463515][ T4918] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.494891][ T6086] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.511824][ T6083] IPVS: using max 45 ests per chain, 108000 per kthread [ 75.529829][ T6090] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 75.798396][ T6109] Zero length message leads to an empty skb [ 75.900767][ T174] IPVS: starting estimator thread 0... [ 75.901158][ T6115] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 76.012334][ T6116] IPVS: using max 43 ests per chain, 103200 per kthread [ 76.105359][ T1215] cfg80211: failed to load regulatory.db [ 76.136405][ T6075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.136582][ T6075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.136685][ T6075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.136877][ T6075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.136983][ T6075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.416798][ T6135] netlink: 'syz.4.149': attribute type 2 has an invalid length. [ 76.436111][ T6135] netlink: 'syz.4.149': attribute type 2 has an invalid length. [ 76.461967][ T6137] FAULT_INJECTION: forcing a failure. [ 76.461967][ T6137] name failslab, interval 1, probability 0, space 0, times 0 [ 76.477358][ T6137] CPU: 0 UID: 0 PID: 6137 Comm: syz.0.152 Not tainted syzkaller #0 PREEMPT(full) [ 76.477387][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 76.477398][ T6137] Call Trace: [ 76.477405][ T6137] [ 76.477413][ T6137] dump_stack_lvl+0x100/0x190 [ 76.477444][ T6137] should_fail_ex.cold+0x5/0xa [ 76.477478][ T6137] should_failslab+0xc2/0x120 [ 76.477501][ T6137] __kmalloc_cache_noprof+0x91/0x6d0 [ 76.477529][ T6137] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 76.477551][ T6137] ? kvm_set_irq_routing+0x24f/0x960 [ 76.477585][ T6137] kvm_set_irq_routing+0x24f/0x960 [ 76.477619][ T6137] kvm_arch_vm_ioctl+0xf08/0x18d0 [ 76.477638][ T6137] ? register_lock_class+0x3f/0x7b0 [ 76.477658][ T6137] ? find_held_lock+0x2b/0x80 [ 76.477682][ T6137] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 76.477706][ T6137] ? __lock_acquire+0x4c5/0x1ec0 [ 76.477728][ T6137] ? __lock_acquire+0x4c5/0x1ec0 [ 76.477749][ T6137] ? __lock_acquire+0x4c5/0x1ec0 [ 76.477768][ T6137] ? __lock_acquire+0x4c5/0x1ec0 [ 76.477786][ T6137] ? lock_acquire+0x1d1/0x380 [ 76.477802][ T6137] ? unwind_next_frame+0xbd/0x2090 [ 76.477834][ T6137] ? find_held_lock+0x2b/0x80 [ 76.477855][ T6137] ? is_bpf_text_address+0x8a/0x1a0 [ 76.477877][ T6137] ? is_bpf_text_address+0x8a/0x1a0 [ 76.477898][ T6137] ? bpf_ksym_find+0x128/0x1c0 [ 76.477927][ T6137] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 76.477956][ T6137] ? is_bpf_text_address+0x94/0x1a0 [ 76.477977][ T6137] ? kernel_text_address+0x8d/0x100 [ 76.478001][ T6137] ? __kernel_text_address+0xd/0x30 [ 76.478023][ T6137] ? unwind_get_return_address+0x59/0xa0 [ 76.478045][ T6137] ? arch_stack_walk+0xa6/0xf0 [ 76.478075][ T6137] ? tomoyo_path_number_perm+0x46d/0x580 [ 76.478101][ T6137] ? stack_trace_save+0x8e/0xc0 [ 76.478130][ T6137] ? __pfx_stack_trace_save+0x10/0x10 [ 76.478159][ T6137] ? stack_depot_save_flags+0x27/0x9f0 [ 76.478177][ T6137] ? __lock_acquire+0x4c5/0x1ec0 [ 76.478193][ T6137] ? tomoyo_path_number_perm+0x46d/0x580 [ 76.478215][ T6137] ? kasan_save_stack+0x3f/0x50 [ 76.478234][ T6137] kvm_vm_ioctl+0x167d/0x42d0 [ 76.478260][ T6137] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 76.478294][ T6137] ? kasan_quarantine_put+0x104/0x240 [ 76.478309][ T6137] ? lockdep_hardirqs_on+0x7d/0x110 [ 76.478328][ T6137] ? find_held_lock+0x2b/0x80 [ 76.478350][ T6137] ? tomoyo_path_number_perm+0x28f/0x580 [ 76.478376][ T6137] ? tomoyo_path_number_perm+0x28f/0x580 [ 76.478405][ T6137] ? tomoyo_path_number_perm+0x188/0x580 [ 76.478431][ T6137] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 76.478456][ T6137] ? __pfx_futex_wait+0x10/0x10 [ 76.478498][ T6137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.478521][ T6137] ? do_vfs_ioctl+0x226/0x13e0 [ 76.478549][ T6137] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 76.478575][ T6137] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 76.478604][ T6137] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.478635][ T6137] ? __fget_files+0x34/0x3d0 [ 76.478666][ T6137] ? selinux_file_ioctl+0x13b/0x290 [ 76.478692][ T6137] ? selinux_file_ioctl+0xb6/0x290 [ 76.478721][ T6137] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 76.478743][ T6137] __x64_sys_ioctl+0x18e/0x210 [ 76.478774][ T6137] do_syscall_64+0x123/0x790 [ 76.478798][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.478818][ T6137] RIP: 0033:0x7fcc95b9e159 [ 76.478835][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.478853][ T6137] RSP: 002b:00007fcc96b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.478873][ T6137] RAX: ffffffffffffffda RBX: 00007fcc95e25fa0 RCX: 00007fcc95b9e159 [ 76.478885][ T6137] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 76.478896][ T6137] RBP: 00007fcc95c35024 R08: 0000000000000000 R09: 0000000000000000 [ 76.478907][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.478917][ T6137] R13: 00007fcc95e26038 R14: 00007fcc95e25fa0 R15: 00007ffce6b62ff8 [ 76.478942][ T6137] [ 76.503836][ T174] wlan1: Trigger new scan to find an IBSS to join [ 76.618470][ T4918] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 76.698872][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.699320][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.979005][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.991507][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.037396][ T6152] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.088984][ T6152] md: array md0 already has disks! [ 77.122663][ T6152] md: could not open device unknown-block(1,1). [ 77.122736][ T6152] md: error, md_import_device() returned -16 [ 77.206182][ T6162] LUN: removable file: (no medium) [ 77.214923][ T6160] md: array md0 already has disks! [ 77.303222][ T174] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.303279][ T174] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.303316][ T174] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.303346][ T174] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.374702][ T6168] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 77.388316][ T4918] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.397796][ T6168] netlink: 224 bytes leftover after parsing attributes in process `syz.3.166'. [ 77.489812][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 77.489855][ T31] audit: type=1400 audit(1788440978.151:314): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 77.598815][ T4918] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 77.646036][ T31] audit: type=1400 audit(1788440978.311:315): avc: denied { create } for pid=6174 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.721338][ T31] audit: type=1400 audit(1788440978.381:316): avc: denied { mount } for pid=6181 comm="syz.4.173" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 77.751642][ T31] audit: type=1400 audit(1788440978.411:317): avc: denied { getopt } for pid=6184 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.920780][ T31] audit: type=1400 audit(1788440978.581:318): avc: denied { setopt } for pid=6190 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.947137][ T6195] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 77.947173][ T6195] netlink: 224 bytes leftover after parsing attributes in process `syz.3.178'. [ 78.005405][ T31] audit: type=1400 audit(1788440978.671:319): avc: denied { read } for pid=6200 comm="syz.3.182" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.005471][ T31] audit: type=1400 audit(1788440978.671:320): avc: denied { open } for pid=6200 comm="syz.3.182" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.064895][ T31] audit: type=1400 audit(1788440978.731:321): avc: denied { ioctl } for pid=6200 comm="syz.3.182" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.071609][ T6201] input: syz1 as /devices/virtual/input/input5 [ 78.125253][ T4918] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 78.182414][ T4918] Bluetooth: hci4: command 0x0c1a tx timeout [ 78.189036][ T5602] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.189070][ T5602] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.189108][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.283162][ T31] audit: type=1400 audit(1788440978.951:322): avc: denied { ioctl } for pid=6212 comm="syz.3.187" path="socket:[11138]" dev="sockfs" ino=11138 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.945703][ T6204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.946327][ T6204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.946441][ T6204] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.946540][ T6204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.946639][ T6204] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.093217][ T6230] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 79.093259][ T6230] netlink: 224 bytes leftover after parsing attributes in process `syz.0.192'. [ 79.120422][ T31] audit: type=1400 audit(1788440979.781:323): avc: denied { mount } for pid=6231 comm="syz.3.196" name="/" dev="rpc_pipefs" ino=11181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 79.210032][ T6232] rpc_mkpipe_dentry() failed to create pipe clnt0/krb5 (errno = -12) [ 79.220789][ T6235] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.273005][ T6235] md: array md0 already has disks! [ 79.402715][ T6243] md: could not open device unknown-block(1,1). [ 79.410573][ T6243] md: error, md_import_device() returned -16 [ 79.432416][ T6246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.452583][ T6243] md: could not open device unknown-block(1,2). [ 79.452644][ T6243] md: error, md_import_device() returned -16 [ 79.466072][ T174] wlan1: Trigger new scan to find an IBSS to join [ 79.485869][ T5790] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 79.503765][ T6246] md: array md0 already has disks! [ 79.608808][ T5599] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 79.623509][ T6249] md: could not open device unknown-block(1,1). [ 79.624897][ T6249] md: error, md_import_device() returned -16 [ 79.632674][ T5790] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.633577][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 79.636022][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.636040][ T5790] usb 5-1: Product: syz [ 79.636052][ T5790] usb 5-1: Manufacturer: syz [ 79.636063][ T5790] usb 5-1: SerialNumber: syz [ 79.639222][ T5790] usb 5-1: config 0 descriptor?? [ 79.646386][ T6238] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 79.673696][ T6249] md: could not open device unknown-block(1,2). [ 79.673742][ T6249] md: error, md_import_device() returned -16 [ 80.058460][ T6269] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 80.058489][ T6269] netlink: 224 bytes leftover after parsing attributes in process `syz.1.208'. [ 80.087553][ T6270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'. [ 80.087694][ T6270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'. [ 80.431463][ T6254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.439935][ T6254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.446737][ T6254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.447157][ T6254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.447458][ T6254] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.715262][ T5790] usb 5-1: USB disconnect, device number 2 [ 80.856698][ T6284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.097969][ T5599] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 81.918908][ T6303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.920275][ T6303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.920455][ T6303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.921211][ T6303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.921660][ T6303] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 82.088992][ T5599] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 82.192470][ T5711] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.295049][ T6347] bridge_slave_0: left allmulticast mode [ 82.300878][ T6347] bridge_slave_0: left promiscuous mode [ 82.306890][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.342586][ T5711] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 82.353376][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 82.353410][ T5711] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 82.353449][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.394262][ T5711] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 82.417321][ T5711] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 82.434789][ T1166] wlan1: Trigger new scan to find an IBSS to join [ 82.863126][ T6369] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 82.863804][ T6369] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 82.864044][ T6369] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 82.896994][ T6376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.932036][ T6376] md: array md0 already has disks! [ 82.954396][ T6376] md: could not open device unknown-block(1,1). [ 82.954459][ T6376] md: error, md_import_device() returned -16 [ 82.992361][ T6376] md: could not open device unknown-block(1,2). [ 82.992426][ T6376] md: error, md_import_device() returned -16 [ 83.063397][ T6320] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 83.073418][ T5785] usb 1-1: USB disconnect, device number 3 [ 83.134374][ T5785] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 83.164475][ T5785] spcp8x5 1-1:1.0: device disconnected [ 83.222527][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.354813][ T174] wlan1: Creating new IBSS network, BSSID 9e:87:ae:03:cc:f5 [ 83.391742][ T5711] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.546606][ T5711] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 83.556567][ T5711] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.568536][ T5711] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.587631][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.587668][ T5711] usb 5-1: Product: syz [ 83.587692][ T5711] usb 5-1: Manufacturer: syz [ 83.587708][ T5711] usb 5-1: SerialNumber: syz [ 83.627147][ T5711] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 83.645280][ T5711] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 83.663159][ T5711] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 83.720574][ T6425] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.741785][ T6425] md: array md0 already has disks! [ 83.741846][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 83.741857][ T31] audit: type=1400 audit(1788440984.401:328): avc: denied { bind } for pid=6417 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.779059][ T31] audit: type=1400 audit(1788440984.441:329): avc: denied { read } for pid=6417 comm="syz.1.269" path="socket:[12628]" dev="sockfs" ino=12628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.820255][ T31] audit: type=1800 audit(1788440984.481:330): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.272" name="nofua" dev="configfs" ino=11842 res=0 errno=0 [ 83.865588][ T6429] md: could not open device unknown-block(1,1). [ 83.865654][ T6429] md: error, md_import_device() returned -16 [ 83.883989][ T31] audit: type=1400 audit(1788440984.551:331): avc: denied { write } for pid=6417 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.953704][ T6209] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.953716][ T4918] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.953760][ T5599] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.037022][ T6425] md/raid10:md0: not clean -- starting background reconstruction [ 84.044914][ T6425] md/raid10:md0: active with 1 out of 2 devices [ 84.055171][ T6425] md0: detected capacity change from 0 to 2048 [ 84.069661][ T6429] md: could not open device unknown-block(1,2). [ 84.070069][ T6429] md: md_import_device returned -16 [ 84.084699][ T6441] md: resync of RAID array md0 [ 84.087927][ T6442] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 84.087947][ T6442] netlink: 224 bytes leftover after parsing attributes in process `syz.2.275'. [ 84.154106][ T6441] md: md0: resync done. [ 84.253122][ T6448] md: recover of RAID array md0 [ 84.253193][ T6448] md: md0: recover done. [ 84.510741][ T6426] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 84.597325][ T6465] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 84.716145][ T5599] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 84.979440][ T6489] syz_tun: entered promiscuous mode [ 84.994751][ T6489] macvtap1: entered promiscuous mode [ 85.221625][ T5599] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 85.418019][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 85.418059][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.437235][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.544741][ T6516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.563732][ T6516] md: couldn't update array info. -22 [ 85.624677][ T6521] md: could not open device unknown-block(1,1). [ 85.631253][ T6521] md: md_import_device returned -16 [ 85.672756][ T6516] md: could not open device unknown-block(1,2). [ 85.672858][ T6516] md: md_import_device returned -16 [ 85.878321][ T6532] openvswitch: netlink: Flow actions attr not present in new flow. [ 86.272114][ T6392] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 86.272172][ T6392] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 86.272408][ T6392] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 86.276975][ T5785] usb 5-1: USB disconnect, device number 3 [ 86.296585][ T5785] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 86.301087][ T5785] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 86.303432][ T5785] ti_usb_3410_5052 5-1:2.0: device disconnected [ 86.418479][ T31] audit: type=1400 audit(1788440987.081:332): avc: denied { prog_load } for pid=6563 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.421264][ T6561] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 86.421279][ T6561] binder: 6559:6561 ioctl 4018620d 200000000040 returned -1 [ 86.548536][ T5599] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 86.747698][ T31] audit: type=1400 audit(1788440987.411:333): avc: denied { map_create } for pid=6583 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.747818][ T31] audit: type=1400 audit(1788440987.411:334): avc: denied { map_read map_write } for pid=6583 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.906013][ T31] audit: type=1400 audit(1788440987.571:335): avc: denied { map } for pid=6591 comm="syz.3.334" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.918247][ T31] audit: type=1400 audit(1788440987.571:336): avc: denied { call } for pid=6591 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.967499][ T6598] bridge_slave_0: left allmulticast mode [ 86.973338][ T6598] bridge_slave_0: left promiscuous mode [ 86.980207][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.892466][ T6652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.922899][ T6645] FAULT_INJECTION: forcing a failure. [ 87.922899][ T6645] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 87.922941][ T6645] CPU: 1 UID: 0 PID: 6645 Comm: syz.3.359 Not tainted syzkaller #0 PREEMPT(full) [ 87.922965][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.922977][ T6645] Call Trace: [ 87.922984][ T6645] [ 87.922992][ T6645] dump_stack_lvl+0x100/0x190 [ 87.923025][ T6645] should_fail_ex.cold+0x5/0xa [ 87.923048][ T6645] ? prepare_alloc_pages+0x16d/0x5b0 [ 87.923073][ T6645] should_fail_alloc_page+0xeb/0x140 [ 87.923097][ T6645] prepare_alloc_pages+0x1f0/0x5b0 [ 87.923124][ T6645] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 87.923156][ T6645] ? stack_trace_save+0x8e/0xc0 [ 87.923184][ T6645] ? __pfx_stack_trace_save+0x10/0x10 [ 87.923216][ T6645] ? lock_acquire+0x1d1/0x380 [ 87.923235][ T6645] ? try_charge_memcg+0x183/0xf60 [ 87.923263][ T6645] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.923292][ T6645] ? __lock_acquire+0x4c5/0x1ec0 [ 87.923312][ T6645] ? __pfx___css_rstat_updated+0x10/0x10 [ 87.923333][ T6645] ? try_charge_memcg+0x366/0xf60 [ 87.923364][ T6645] ? lock_acquire+0x1d1/0x380 [ 87.923392][ T6645] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.923415][ T6645] ? policy_nodemask+0xed/0x4f0 [ 87.923440][ T6645] alloc_pages_mpol+0x201/0x550 [ 87.923467][ T6645] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 87.923491][ T6645] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 87.923514][ T6645] alloc_pages_noprof+0x1a/0x160 [ 87.923539][ T6645] kvm_vm_ioctl+0x453/0x42d0 [ 87.923570][ T6645] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 87.923608][ T6645] ? kasan_quarantine_put+0x104/0x240 [ 87.923624][ T6645] ? lockdep_hardirqs_on+0x7d/0x110 [ 87.923645][ T6645] ? find_held_lock+0x2b/0x80 [ 87.923664][ T6645] ? tomoyo_path_number_perm+0x28f/0x580 [ 87.923688][ T6645] ? tomoyo_path_number_perm+0x28f/0x580 [ 87.923716][ T6645] ? tomoyo_path_number_perm+0x188/0x580 [ 87.923743][ T6645] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 87.923769][ T6645] ? __pfx_futex_wait+0x10/0x10 [ 87.923806][ T6645] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.923826][ T6645] ? do_vfs_ioctl+0x226/0x13e0 [ 87.923852][ T6645] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 87.923876][ T6645] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 87.923905][ T6645] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.923935][ T6645] ? __fget_files+0x34/0x3d0 [ 87.923965][ T6645] ? selinux_file_ioctl+0x13b/0x290 [ 87.923989][ T6645] ? selinux_file_ioctl+0xb6/0x290 [ 87.924014][ T6645] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 87.924033][ T6645] __x64_sys_ioctl+0x18e/0x210 [ 87.924058][ T6645] do_syscall_64+0x123/0x790 [ 87.924079][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.924096][ T6645] RIP: 0033:0x7f99ee59e159 [ 87.924109][ T6645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.924123][ T6645] RSP: 002b:00007f99ef400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.924139][ T6645] RAX: ffffffffffffffda RBX: 00007f99ee825fa0 RCX: 00007f99ee59e159 [ 87.924151][ T6645] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000005 [ 87.924161][ T6645] RBP: 00007f99ee635024 R08: 0000000000000000 R09: 0000000000000000 [ 87.924172][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.924182][ T6645] R13: 00007f99ee826038 R14: 00007f99ee825fa0 R15: 00007ffd045e6468 [ 87.924205][ T6645] [ 88.376872][ T31] audit: type=1400 audit(1788440989.041:337): avc: denied { create } for pid=6667 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.425629][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 88.971220][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 88.971264][ T31] audit: type=1400 audit(1788440989.631:345): avc: denied { read } for pid=6707 comm="syz.1.387" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.973307][ T31] audit: type=1400 audit(1788440989.631:346): avc: denied { open } for pid=6707 comm="syz.1.387" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.997038][ T6709] RPC: Couldn't create pipefs entry nfs/clnt2, error -12 [ 89.069006][ T6711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.176352][ T6715] binder: 6714:6715 ioctl 4018620d 0 returned -22 [ 89.221929][ T31] audit: type=1400 audit(1788440989.881:347): avc: denied { prog_run } for pid=6718 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.359806][ T6727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.833882][ T31] audit: type=1400 audit(1788440990.501:348): avc: denied { write } for pid=6752 comm="syz.2.409" name="rootcell" dev="proc" ino=4026533542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.184269][ T6772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.422903][ T6786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 90.532119][ T6786] md: could not open device unknown-block(1,1). [ 90.532193][ T6786] md: md_import_device returned -16 [ 90.564312][ T6786] md: could not open device unknown-block(1,2). [ 90.565361][ T6786] md: md_import_device returned -16 [ 90.750600][ T6802] ip_tables: iptables: counters copy to user failed while replacing table [ 91.045675][ T6818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.076176][ T6817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.076335][ T6817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.076439][ T6817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.076538][ T6817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.076636][ T6817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 91.107336][ T6820] md: couldn't update array info. -22 [ 91.193696][ T6820] md: could not open device unknown-block(1,1). [ 91.194253][ T6820] md: md_import_device returned -16 [ 91.252469][ T6820] md: could not open device unknown-block(1,2). [ 91.252530][ T6820] md: md_import_device returned -16 [ 91.378352][ T6840] openvswitch: netlink: Flow key attr not present in new flow. [ 91.493112][ T31] audit: type=1400 audit(1788440992.151:349): avc: denied { setattr } for pid=6842 comm="syz.4.452" name="tun" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 91.792781][ T31] audit: type=1400 audit(1788440992.461:350): avc: denied { write } for pid=6859 comm="syz.4.459" name="userio" dev="devtmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.844534][ T6862] ip_tables: iptables: counters copy to user failed while replacing table [ 92.100911][ T5790] hid_parser_main: 12 callbacks suppressed [ 92.100953][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.100986][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.101008][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.101030][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.101051][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.101072][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.101091][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.101111][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.101133][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.101154][ T5790] logitech-hidpp-device 0005:046D:B012.0003: unknown main item tag 0x0 [ 92.205920][ T5790] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 92.326338][ T6884] fido_id[6884]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.393006][ T5599] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 92.549227][ T5599] Bluetooth: hci3: unexpected event for opcode 0x0c23 [ 92.676877][ T31] audit: type=1400 audit(1788440993.341:351): avc: denied { create } for pid=6902 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.699038][ T6905] FAULT_INJECTION: forcing a failure. [ 92.699038][ T6905] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.699070][ T6905] CPU: 0 UID: 0 PID: 6905 Comm: syz.0.479 Not tainted syzkaller #0 PREEMPT(full) [ 92.699091][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.699101][ T6905] Call Trace: [ 92.699106][ T6905] [ 92.699112][ T6905] dump_stack_lvl+0x100/0x190 [ 92.699139][ T6905] should_fail_ex.cold+0x5/0xa [ 92.699163][ T6905] _copy_to_iter+0x5a4/0x1720 [ 92.699192][ T6905] ? __pfx__copy_to_iter+0x10/0x10 [ 92.699218][ T6905] ? __skb_recv_datagram+0x1b2/0x220 [ 92.699246][ T6905] simple_copy_to_iter+0x46/0x90 [ 92.699272][ T6905] __skb_datagram_iter+0x129/0x900 [ 92.699293][ T6905] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 92.699316][ T6905] ? skb_recv_datagram+0x88/0xc0 [ 92.699340][ T6905] skb_copy_datagram_iter+0xa1/0x250 [ 92.699363][ T6905] netlink_recvmsg+0x27e/0xa90 [ 92.699389][ T6905] ? __pfx_netlink_recvmsg+0x10/0x10 [ 92.699411][ T6905] ? iovec_from_user+0x8d/0x140 [ 92.699441][ T6905] ? __pfx_netlink_recvmsg+0x10/0x10 [ 92.699466][ T6905] sock_recvmsg+0x1d5/0x220 [ 92.699486][ T6905] ____sys_recvmsg+0x21e/0x670 [ 92.699509][ T6905] ? __pfx_____sys_recvmsg+0x10/0x10 [ 92.699536][ T6905] ? __lock_acquire+0x4c5/0x1ec0 [ 92.699557][ T6905] ___sys_recvmsg+0x16a/0x1a0 [ 92.699578][ T6905] ? __pfx____sys_recvmsg+0x10/0x10 [ 92.699598][ T6905] ? lock_acquire+0x1d1/0x380 [ 92.699630][ T6905] do_recvmmsg+0x2f3/0x740 [ 92.699653][ T6905] ? __pfx_do_recvmmsg+0x10/0x10 [ 92.699686][ T6905] ? __x64_sys_futex+0x34f/0x4d0 [ 92.699710][ T6905] __x64_sys_recvmmsg+0x199/0x280 [ 92.699728][ T6905] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 92.699751][ T6905] do_syscall_64+0x123/0x790 [ 92.699772][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.699789][ T6905] RIP: 0033:0x7fcc95b9e159 [ 92.699803][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.699817][ T6905] RSP: 002b:00007fcc96b03028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 92.699835][ T6905] RAX: ffffffffffffffda RBX: 00007fcc95e25fa0 RCX: 00007fcc95b9e159 [ 92.699845][ T6905] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 92.699855][ T6905] RBP: 00007fcc95c35024 R08: 0000200000003700 R09: 0000000000000000 [ 92.699864][ T6905] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000000 [ 92.699874][ T6905] R13: 00007fcc95e26038 R14: 00007fcc95e25fa0 R15: 00007ffce6b62ff8 [ 92.699895][ T6905] [ 92.795020][ T31] audit: type=1400 audit(1788440993.461:352): avc: denied { ioctl } for pid=6902 comm="syz.1.480" path="socket:[15181]" dev="sockfs" ino=15181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.152002][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.152045][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.152081][ T5599] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.152105][ T5599] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.336606][ T6933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.390630][ T31] audit: type=1400 audit(1788440994.051:353): avc: denied { bind } for pid=6934 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.390693][ T31] audit: type=1400 audit(1788440994.051:354): avc: denied { name_bind } for pid=6934 comm="syz.3.492" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 93.618815][ T4918] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 93.818529][ T6957] syz.1.501 uses obsolete (PF_INET,SOCK_PACKET) [ 93.975830][ T6970] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 93.985179][ T6970] binder: 6968:6970 ioctl 4018620d 200000000100 returned -1 [ 94.046644][ T5785] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 94.170236][ T6977] fido_id[6977]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.236059][ T6985] bridge_slave_0: left allmulticast mode [ 94.242170][ T6985] bridge_slave_0: left promiscuous mode [ 94.247991][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.317601][ T6983] FAULT_INJECTION: forcing a failure. [ 94.317601][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 94.317650][ T6983] CPU: 0 UID: 0 PID: 6983 Comm: syz.0.513 Not tainted syzkaller #0 PREEMPT(full) [ 94.317673][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 94.317684][ T6983] Call Trace: [ 94.317689][ T6983] [ 94.317695][ T6983] dump_stack_lvl+0x100/0x190 [ 94.317729][ T6983] should_fail_ex.cold+0x5/0xa [ 94.317752][ T6983] should_failslab+0xc2/0x120 [ 94.317772][ T6983] __kmalloc_cache_noprof+0x91/0x6d0 [ 94.317795][ T6983] ? lockdep_init_map_type+0x5c/0x250 [ 94.317812][ T6983] ? kvm_create_lapic+0xa9/0x440 [ 94.317838][ T6983] kvm_create_lapic+0xa9/0x440 [ 94.317861][ T6983] kvm_arch_vcpu_create+0x273/0xab0 [ 94.317884][ T6983] kvm_vm_ioctl+0x7e3/0x42d0 [ 94.317910][ T6983] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 94.317943][ T6983] ? kasan_quarantine_put+0x104/0x240 [ 94.317961][ T6983] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.317980][ T6983] ? find_held_lock+0x2b/0x80 [ 94.318000][ T6983] ? tomoyo_path_number_perm+0x28f/0x580 [ 94.318023][ T6983] ? tomoyo_path_number_perm+0x28f/0x580 [ 94.318049][ T6983] ? tomoyo_path_number_perm+0x188/0x580 [ 94.318072][ T6983] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.318096][ T6983] ? __pfx_futex_wait+0x10/0x10 [ 94.318128][ T6983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.318147][ T6983] ? do_vfs_ioctl+0x226/0x13e0 [ 94.318172][ T6983] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.318197][ T6983] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 94.318224][ T6983] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 94.318251][ T6983] ? __fget_files+0x34/0x3d0 [ 94.318279][ T6983] ? selinux_file_ioctl+0x13b/0x290 [ 94.318301][ T6983] ? selinux_file_ioctl+0xb6/0x290 [ 94.318326][ T6983] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 94.318344][ T6983] __x64_sys_ioctl+0x18e/0x210 [ 94.318369][ T6983] do_syscall_64+0x123/0x790 [ 94.318389][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.318405][ T6983] RIP: 0033:0x7fcc95b9e159 [ 94.318420][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.318434][ T6983] RSP: 002b:00007fcc96b03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.318451][ T6983] RAX: ffffffffffffffda RBX: 00007fcc95e25fa0 RCX: 00007fcc95b9e159 [ 94.318461][ T6983] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000005 [ 94.318470][ T6983] RBP: 00007fcc95c35024 R08: 0000000000000000 R09: 0000000000000000 [ 94.318479][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.318488][ T6983] R13: 00007fcc95e26038 R14: 00007fcc95e25fa0 R15: 00007ffce6b62ff8 [ 94.318510][ T6983] [ 94.654172][ T6998] md: couldn't update array info. -22 [ 94.752316][ T6998] md: could not open device unknown-block(1,1). [ 94.753345][ T6998] md: md_import_device returned -16 [ 94.782320][ T6998] md: could not open device unknown-block(1,2). [ 94.782377][ T6998] md: md_import_device returned -16 [ 94.904287][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 94.904326][ T31] audit: type=1400 audit(1788440995.571:359): avc: denied { setopt } for pid=7011 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.925111][ T7013] FAULT_INJECTION: forcing a failure. [ 94.925111][ T7013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.925142][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.0.527 Not tainted syzkaller #0 PREEMPT(full) [ 94.925161][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 94.925172][ T7013] Call Trace: [ 94.925179][ T7013] [ 94.925199][ T7013] dump_stack_lvl+0x100/0x190 [ 94.925231][ T7013] should_fail_ex.cold+0x5/0xa [ 94.925255][ T7013] _copy_to_iter+0x5a4/0x1720 [ 94.925283][ T7013] ? __pfx__copy_to_iter+0x10/0x10 [ 94.925309][ T7013] ? __skb_recv_datagram+0x1b2/0x220 [ 94.925339][ T7013] simple_copy_to_iter+0x46/0x90 [ 94.925360][ T7013] __skb_datagram_iter+0x129/0x900 [ 94.925383][ T7013] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 94.925406][ T7013] ? skb_recv_datagram+0x88/0xc0 [ 94.925430][ T7013] skb_copy_datagram_iter+0xa1/0x250 [ 94.925453][ T7013] netlink_recvmsg+0x27e/0xa90 [ 94.925477][ T7013] ? __pfx_netlink_recvmsg+0x10/0x10 [ 94.925499][ T7013] ? iovec_from_user+0x8d/0x140 [ 94.925527][ T7013] ? __pfx_netlink_recvmsg+0x10/0x10 [ 94.925550][ T7013] sock_recvmsg+0x1d5/0x220 [ 94.925570][ T7013] ____sys_recvmsg+0x21e/0x670 [ 94.925592][ T7013] ? __pfx_____sys_recvmsg+0x10/0x10 [ 94.925619][ T7013] ? __lock_acquire+0x4c5/0x1ec0 [ 94.925641][ T7013] ___sys_recvmsg+0x16a/0x1a0 [ 94.925661][ T7013] ? __pfx____sys_recvmsg+0x10/0x10 [ 94.925681][ T7013] ? lock_acquire+0x1d1/0x380 [ 94.925714][ T7013] do_recvmmsg+0x2f3/0x740 [ 94.925737][ T7013] ? __pfx_do_recvmmsg+0x10/0x10 [ 94.925771][ T7013] ? __x64_sys_futex+0x34f/0x4d0 [ 94.925794][ T7013] __x64_sys_recvmmsg+0x199/0x280 [ 94.925812][ T7013] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 94.925836][ T7013] do_syscall_64+0x123/0x790 [ 94.925856][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.925872][ T7013] RIP: 0033:0x7fcc95b9e159 [ 94.925886][ T7013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.925901][ T7013] RSP: 002b:00007fcc96b03028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 94.925917][ T7013] RAX: ffffffffffffffda RBX: 00007fcc95e25fa0 RCX: 00007fcc95b9e159 [ 94.925927][ T7013] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 94.925937][ T7013] RBP: 00007fcc95c35024 R08: 0000200000003700 R09: 0000000000000000 [ 94.925946][ T7013] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000000 [ 94.925955][ T7013] R13: 00007fcc95e26038 R14: 00007fcc95e25fa0 R15: 00007ffce6b62ff8 [ 94.925976][ T7013] [ 95.181922][ T5599] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 95.810978][ T5599] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 95.862062][ T7058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.862205][ T7058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.862346][ T7058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.862398][ T7058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.897118][ T7058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.897255][ T7058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.161742][ T5785] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.164203][ T7073] FAULT_INJECTION: forcing a failure. [ 96.164203][ T7073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 96.164230][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.1.555 Not tainted syzkaller #0 PREEMPT(full) [ 96.164252][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.164261][ T7073] Call Trace: [ 96.164267][ T7073] [ 96.164274][ T7073] dump_stack_lvl+0x100/0x190 [ 96.164308][ T7073] should_fail_ex.cold+0x5/0xa [ 96.164329][ T7073] ? prepare_alloc_pages+0x16d/0x5b0 [ 96.164352][ T7073] should_fail_alloc_page+0xeb/0x140 [ 96.164374][ T7073] prepare_alloc_pages+0x1f0/0x5b0 [ 96.164396][ T7073] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 96.164423][ T7073] ? stack_trace_save+0x8e/0xc0 [ 96.164446][ T7073] ? __pfx_stack_trace_save+0x10/0x10 [ 96.164474][ T7073] ? __lock_acquire+0x4c5/0x1ec0 [ 96.164492][ T7073] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 96.164517][ T7073] ? __lock_acquire+0x4c5/0x1ec0 [ 96.164542][ T7073] ? lock_acquire+0x1d1/0x380 [ 96.164566][ T7073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.164586][ T7073] ? policy_nodemask+0xed/0x4f0 [ 96.164607][ T7073] alloc_pages_mpol+0x201/0x550 [ 96.164628][ T7073] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 96.164648][ T7073] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 96.164667][ T7073] alloc_pages_noprof+0x1a/0x160 [ 96.164689][ T7073] kvm_vm_ioctl+0x453/0x42d0 [ 96.164716][ T7073] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 96.164748][ T7073] ? kasan_quarantine_put+0x104/0x240 [ 96.164764][ T7073] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.164783][ T7073] ? find_held_lock+0x2b/0x80 [ 96.164803][ T7073] ? tomoyo_path_number_perm+0x28f/0x580 [ 96.164828][ T7073] ? tomoyo_path_number_perm+0x28f/0x580 [ 96.164860][ T7073] ? tomoyo_path_number_perm+0x188/0x580 [ 96.164892][ T7073] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 96.164923][ T7073] ? __pfx_futex_wait+0x10/0x10 [ 96.164955][ T7073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.164974][ T7073] ? do_vfs_ioctl+0x226/0x13e0 [ 96.164998][ T7073] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 96.165020][ T7073] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 96.165053][ T7073] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 96.165081][ T7073] ? __fget_files+0x34/0x3d0 [ 96.165111][ T7073] ? selinux_file_ioctl+0x13b/0x290 [ 96.165137][ T7073] ? selinux_file_ioctl+0xb6/0x290 [ 96.165165][ T7073] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 96.165205][ T7073] __x64_sys_ioctl+0x18e/0x210 [ 96.165230][ T7073] do_syscall_64+0x123/0x790 [ 96.165250][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.165267][ T7073] RIP: 0033:0x7f3ea0b9e159 [ 96.165286][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.165300][ T7073] RSP: 002b:00007f3ea1a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.165316][ T7073] RAX: ffffffffffffffda RBX: 00007f3ea0e25fa0 RCX: 00007f3ea0b9e159 [ 96.165326][ T7073] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000005 [ 96.165335][ T7073] RBP: 00007f3ea0c35024 R08: 0000000000000000 R09: 0000000000000000 [ 96.165345][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.165354][ T7073] R13: 00007f3ea0e26038 R14: 00007f3ea0e25fa0 R15: 00007ffe88a591f8 [ 96.165377][ T7073] [ 96.356825][ T5785] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 96.378068][ T5785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.378095][ T5785] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.378126][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.548183][ T31] audit: type=1400 audit(1788440997.211:360): avc: denied { mmap_zero } for pid=7089 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 96.569359][ T5785] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 96.577629][ T31] audit: type=1400 audit(1788440997.231:361): avc: denied { map } for pid=7089 comm="syz.1.562" path="socket:[17700]" dev="sockfs" ino=17700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.611337][ T5785] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 96.652162][ T31] audit: type=1400 audit(1788440997.321:362): avc: denied { getopt } for pid=7089 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.021746][ T5785] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.065962][ T7108] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 97.066270][ T7108] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 97.066503][ T7108] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 97.183521][ T5785] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.193602][ T5785] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 97.193654][ T5785] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.193690][ T5785] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.193727][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.247620][ T5785] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.257486][ T5785] usb 3-1: invalid MIDI out EP 0 [ 97.282173][ T7063] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 97.287115][ T5711] usb 5-1: USB disconnect, device number 4 [ 97.332783][ T5711] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 97.333261][ T5711] spcp8x5 5-1:1.0: device disconnected [ 97.430070][ T7134] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.503359][ T7134] md: couldn't update array info. -22 [ 97.545082][ T5785] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 97.574382][ T7134] md: could not open device unknown-block(1,1). [ 97.574447][ T7134] md: md_import_device returned -16 [ 97.584188][ T6390] udevd[6390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.595244][ T7134] md: could not open device unknown-block(1,2). [ 97.595286][ T7134] md: md_import_device returned -16 [ 97.622043][ T5785] usb 3-1: USB disconnect, device number 3 [ 97.651480][ T7144] FAULT_INJECTION: forcing a failure. [ 97.651480][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 97.672730][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.1.584 Not tainted syzkaller #0 PREEMPT(full) [ 97.672761][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.672773][ T7144] Call Trace: [ 97.672781][ T7144] [ 97.672789][ T7144] dump_stack_lvl+0x100/0x190 [ 97.672823][ T7144] should_fail_ex.cold+0x5/0xa [ 97.672850][ T7144] should_failslab+0xc2/0x120 [ 97.672873][ T7144] __kmalloc_noprof+0xfc/0x840 [ 97.672893][ T7144] ? __vb2_queue_alloc+0x23e/0x1160 [ 97.672925][ T7144] __vb2_queue_alloc+0x23e/0x1160 [ 97.672966][ T7144] vb2_core_reqbufs+0x899/0xf30 [ 97.672999][ T7144] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 97.673031][ T7144] ? trace_contention_end+0x126/0x160 [ 97.673054][ T7144] ? __mutex_lock+0x26c/0x1bd0 [ 97.673076][ T7144] ? __video_do_ioctl+0x50f/0xdf0 [ 97.673103][ T7144] vb2_ioctl_reqbufs+0x291/0x450 [ 97.673130][ T7144] ? __pfx_vb2_ioctl_reqbufs+0x10/0x10 [ 97.673168][ T7144] vidioc_reqbufs+0x86/0x100 [ 97.673195][ T7144] v4l_reqbufs+0x175/0x1d0 [ 97.673214][ T7144] __video_do_ioctl+0xb2a/0xdf0 [ 97.673237][ T7144] ? __might_fault+0xc5/0x140 [ 97.673262][ T7144] ? __pfx___video_do_ioctl+0x10/0x10 [ 97.673289][ T7144] video_usercopy+0x47a/0x1730 [ 97.673309][ T7144] ? __pfx___video_do_ioctl+0x10/0x10 [ 97.673330][ T7144] ? __pfx_video_usercopy+0x10/0x10 [ 97.673363][ T7144] v4l2_ioctl+0x1bd/0x250 [ 97.673385][ T7144] ? __pfx_v4l2_ioctl+0x10/0x10 [ 97.673406][ T7144] __x64_sys_ioctl+0x18e/0x210 [ 97.673434][ T7144] do_syscall_64+0x123/0x790 [ 97.673456][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.673475][ T7144] RIP: 0033:0x7f3ea0b9e159 [ 97.673491][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.673508][ T7144] RSP: 002b:00007f3ea1a82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.673528][ T7144] RAX: ffffffffffffffda RBX: 00007f3ea0e25fa0 RCX: 00007f3ea0b9e159 [ 97.673539][ T7144] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000005 [ 97.673550][ T7144] RBP: 00007f3ea0c35024 R08: 0000000000000000 R09: 0000000000000000 [ 97.673560][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.673570][ T7144] R13: 00007f3ea0e26038 R14: 00007f3ea0e25fa0 R15: 00007ffe88a591f8 [ 97.673595][ T7144] [ 97.941785][ T6209] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.941810][ T5599] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.941829][ T6209] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.941837][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.947939][ T4918] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.107449][ T4918] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 98.167380][ T7162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.178091][ T7162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.178242][ T7162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.178393][ T7162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.178504][ T7162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.243097][ T7171] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.291996][ T7171] md: couldn't update array info. -22 [ 98.362408][ T7171] md: could not open device unknown-block(1,1). [ 98.362471][ T7171] md: md_import_device returned -16 [ 98.402934][ T7171] md: could not open device unknown-block(1,2). [ 98.402997][ T7171] md: md_import_device returned -16 [ 98.805141][ T31] audit: type=1400 audit(1788440999.471:363): avc: denied { read } for pid=7202 comm="syz.2.611" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.806043][ T31] audit: type=1400 audit(1788440999.471:364): avc: denied { open } for pid=7202 comm="syz.2.611" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.811489][ T31] audit: type=1400 audit(1788440999.471:365): avc: denied { ioctl } for pid=7202 comm="syz.2.611" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.916188][ T5599] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 98.994754][ T7211] BUG: unable to handle page fault for address: fffffffffffffc10 [ 99.002526][ T7211] #PF: supervisor read access in kernel mode [ 99.008490][ T7211] #PF: error_code(0x0000) - not-present page [ 99.014450][ T7211] PGD eb99067 P4D eb99067 PUD eb9b067 PMD 0 [ 99.020431][ T7211] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 99.025958][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.4.614 Not tainted syzkaller #0 PREEMPT(full) [ 99.035139][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.045183][ T7211] RIP: 0010:strnlen+0x4b/0x80 [ 99.049855][ T7211] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 [ 99.069456][ T7211] RSP: 0018:ffffc900054cf120 EFLAGS: 00010246 [ 99.075525][ T7211] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 99.083479][ T7211] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 99.091434][ T7211] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 99.099386][ T7211] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 99.107341][ T7211] R13: ffff88801c68ee00 R14: 0000000000000006 R15: 0000000000000010 [ 99.115297][ T7211] FS: 00007f0f6e3f66c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 99.124211][ T7211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.130783][ T7211] CR2: fffffffffffffc10 CR3: 0000000073501000 CR4: 00000000003526f0 [ 99.138756][ T7211] Call Trace: [ 99.142020][ T7211] [ 99.144937][ T7211] trace_event_raw_event_drv_net_setup_tc+0x101/0x5d0 [ 99.151697][ T7211] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 99.159021][ T7211] ? __pfx___might_resched+0x10/0x10 [ 99.164308][ T7211] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 99.169931][ T7211] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 99.176073][ T7211] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 99.181956][ T7211] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 99.188368][ T7211] ? __pfx_down_write+0x10/0x10 [ 99.193217][ T7211] tcf_block_get_ext+0x7ed/0x1950 [ 99.198232][ T7211] tcf_block_get+0xa8/0x100 [ 99.202723][ T7211] ? __pfx_tcf_block_get+0x10/0x10 [ 99.207826][ T7211] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 99.214063][ T7211] ? lockdep_init_map_type+0x5c/0x250 [ 99.219428][ T7211] ? __pfx_qfq_init_qdisc+0x10/0x10 [ 99.224610][ T7211] qfq_init_qdisc+0x3d/0x370 [ 99.229185][ T7211] ? __pfx_qfq_init_qdisc+0x10/0x10 [ 99.234367][ T7211] qdisc_create+0x47b/0x1060 [ 99.238938][ T7211] tc_modify_qdisc+0xdcf/0x2120 [ 99.243769][ T7211] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 99.249041][ T7211] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 99.254306][ T7211] rtnetlink_rcv_msg+0x3c9/0xe90 [ 99.259229][ T7211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.264670][ T7211] ? __lock_acquire+0x4c5/0x1ec0 [ 99.269587][ T7211] ? __netlink_lookup+0xa9/0x900 [ 99.274510][ T7211] netlink_rcv_skb+0x159/0x420 [ 99.279259][ T7211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.284697][ T7211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.289975][ T7211] ? netlink_deliver_tap+0x1ae/0xcc0 [ 99.295248][ T7211] netlink_unicast+0x585/0x850 [ 99.299999][ T7211] ? __pfx_netlink_unicast+0x10/0x10 [ 99.305287][ T7211] netlink_sendmsg+0x8b0/0xda0 [ 99.310054][ T7211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.315339][ T7211] ? selinux_socket_sendmsg+0x198/0x2f0 [ 99.320875][ T7211] ____sys_sendmsg+0xa4d/0xbe0 [ 99.325625][ T7211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.330894][ T7211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.336163][ T7211] ___sys_sendmsg+0x190/0x1e0 [ 99.340847][ T7211] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.346029][ T7211] ? futex_wait+0x11e/0x370 [ 99.350524][ T7211] ? find_held_lock+0x2b/0x80 [ 99.355191][ T7211] __sys_sendmsg+0x160/0x210 [ 99.359775][ T7211] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.364878][ T7211] do_syscall_64+0x123/0x790 [ 99.369454][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.375328][ T7211] RIP: 0033:0x7f0f7019e159 [ 99.379729][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.399322][ T7211] RSP: 002b:00007f0f6e3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.407731][ T7211] RAX: ffffffffffffffda RBX: 00007f0f70425fa0 RCX: 00007f0f7019e159 [ 99.415684][ T7211] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 99.423637][ T7211] RBP: 00007f0f70235024 R08: 0000000000000000 R09: 0000000000000000 [ 99.431588][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.439547][ T7211] R13: 00007f0f70426038 R14: 00007f0f70425fa0 R15: 00007ffc5ca407d8 [ 99.447506][ T7211] [ 99.450507][ T7211] Modules linked in: [ 99.454382][ T7211] CR2: fffffffffffffc10 [ 99.458529][ T7211] ---[ end trace 0000000000000000 ]--- [ 99.463962][ T7211] RIP: 0010:strnlen+0x4b/0x80 [ 99.463982][ T7211] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc 48 [ 99.463995][ T7211] RSP: 0018:ffffc900054cf120 EFLAGS: 00010246 [ 99.464006][ T7211] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 99.464015][ T7211] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 99.464024][ T7211] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 99.464032][ T7211] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 99.464041][ T7211] R13: ffff88801c68ee00 R14: 0000000000000006 R15: 0000000000000010 [ 99.464050][ T7211] FS: 00007f0f6e3f66c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 99.464064][ T7211] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.464073][ T7211] CR2: fffffffffffffc10 CR3: 0000000073501000 CR4: 00000000003526f0 [ 99.464084][ T7211] Kernel panic - not syncing: Fatal exception [ 99.563713][ T7211] Kernel Offset: disabled [ 99.568025][ T7211] Rebooting in 86400 seconds..