last executing test programs: 11.619418831s ago: executing program 1 (id=446): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000019300)={0x301000, 0x83, 0x1b}, 0x18) getdents64(r2, &(0x7f0000019340)=""/99, 0x63) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x0, 'client0\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352340900", 0x0, 0xfffffffd}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.825531381s ago: executing program 1 (id=452): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000019300)={0x301000, 0x83, 0x1b}, 0x18) getdents64(r2, &(0x7f0000019340)=""/99, 0x63) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.148223984s ago: executing program 3 (id=456): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff6900000000000100000018009b3900000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0xd4}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8aa519a98dd1391d16e0d93df2d50677147810852144ea58fafd65c36f0ddbc8b2e30accd1e3d871c6db9d72fdba27bb7c9caa0a02eb376850a6175150942abe908c6fccd39161e3f67148715cd294d158"], 0x118) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r6, 0x80104d12, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r2, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1) 9.72325353s ago: executing program 1 (id=458): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000019300)={0x301000, 0x83, 0x1b}, 0x18) getdents64(r2, &(0x7f0000019340)=""/99, 0x63) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x0, 'client0\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352340900", 0x0, 0xfffffffd}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.631209703s ago: executing program 3 (id=461): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f92612091c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6ec7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x35cb, 0x0, 0x0, 0x0) 8.448585838s ago: executing program 1 (id=462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fff50a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c"], 0x140}}, 0x20000000) 8.332350627s ago: executing program 1 (id=463): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000019300)={0x301000, 0x83, 0x1b}, 0x18) getdents64(r2, &(0x7f0000019340)=""/99, 0x63) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x0, 'client0\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352340900", 0x0, 0xfffffffd}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.81796257s ago: executing program 0 (id=466): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x4000, r1}) r2 = openat2$dir(0xffffff9c, 0x0, &(0x7f0000000100)={0x100, 0x20, 0x4}, 0x18) openat(r2, 0x0, 0xc00080, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, 0xffffffffffffffff, 0x2e8ce000) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@gettaction={0x120, 0x32, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x802}}]}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}]}, 0x120}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000001100000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000190a0101002300000000000002000009"], 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) close(0x3) 6.816520855s ago: executing program 2 (id=467): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x4, 0x40001032, r0, 0x0) close_range(r0, r1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x8, 0x7, 0x5, 0xc}, {0x3, 0x3, 0xff, 0x5}, {0x4, 0xe, 0x34, 0x200}, {0x2, 0x0, 0x80, 0x8}, {0x8, 0x6, 0xc, 0xd}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000003c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r5, 0x80, 0x1}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 6.558799483s ago: executing program 1 (id=468): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r4, 0x9, 0x3, 'syz0\x00', &(0x7f0000000300)=['/dev/vim2m\x00', '-\x14[&$\x00', '\x00', '%@\x00', '{-[+-\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x36}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket$inet6_icmp(0xa, 0x2, 0x3a) 6.305436805s ago: executing program 2 (id=469): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x541b, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0xd000) 5.589951648s ago: executing program 0 (id=471): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getpeername(r4, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, 0x0, &(0x7f0000008800)) 5.585377936s ago: executing program 3 (id=472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000600)={0x0, 0x11, 0x5, "32c3558fc6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="2009af000000a8091fde94442a098514"], 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x77110f4f, 0x9a64, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x10, 0x103}}, 0x50) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000280)=@arm64={0x9, 0x3, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.871449125s ago: executing program 4 (id=474): socket(0x2000000000000021, 0x2, 0x10000000000002) socket$kcm(0x21, 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000030000000000000120010000000000000000000000000001000000004e2200020a0000006c000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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", @ANYRES16=r0], 0x16c}}, 0x0) 4.824644741s ago: executing program 2 (id=475): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2fe4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xefbb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x845}, 0x4040080) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xa793}, 0x8) 4.666764608s ago: executing program 4 (id=476): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mlockall(0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r3, @ANYBLOB="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"/327], 0x134}}, 0x0) statx(r0, 0x0, 0x3100, 0x40, &(0x7f0000000540)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r6, @ANYRES64=0x0], 0x20) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x2000000000f4, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 4.56724292s ago: executing program 2 (id=477): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000003400000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 4.404369551s ago: executing program 2 (id=478): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, &(0x7f0000000380)}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r4, @ANYBLOB="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"/327], 0x134}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) statx(r0, 0x0, 0x3100, 0x40, &(0x7f0000000540)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7, @ANYRES64=0x0], 0x20) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x2000000000f4, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 4.028800438s ago: executing program 4 (id=479): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0x80030000}, 0x980) 3.137036317s ago: executing program 4 (id=480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f00"}}) 2.859675541s ago: executing program 0 (id=481): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "000000000000000000000000000000009000"/100}}}}}}, 0x0) 2.717926682s ago: executing program 0 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa41208cb8e5b40800450000380000000000019078ac1e0001ac1414aa030090780300000045fc00000000000000040000000000007f0000010800000000002000e389b8f054eba9de53ee1a0fdfd11f7198584c7971620010a5dccfae6ab533fab7450be094f92b755348460d3344ded05e4030f4b52c87de9dcb9f2c2609910e4017814a0014b285238184"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) r4 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create(0x3ff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x800, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x20040014) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000303a00fe8000000000000000000000000000bbff02000000000000fbffffff0000000104019078000000046909000000736cee43a1f9580000000000000000000000ffff00000000fe80000000000000000000"], 0x0) r8 = eventfd(0x8) dup2(r8, 0xffffffffffffffff) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) 1.764624764s ago: executing program 0 (id=483): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) (async) process_vm_readv(r1, &(0x7f0000000d80)=[{&(0x7f0000001e40)=""/42, 0x2a}], 0x1, &(0x7f0000001f80)=[{&(0x7f0000001e80)=""/247, 0xf7}], 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x81, 0x1, 0x3, 0x4, 0xe, 0x775}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x6c0, 0xf8, 0x478, 0x208, 0xf8, 0x478, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x9, 0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x6, 0x2000) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000104000000000009000000000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x9, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x3fc, 0x58, 0x65f9, 0x3234564e, [0x9, 0x6], [], 0x108}}) (async) syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xaedf, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000000c0), &(0x7f00000003c0)) 1.725639556s ago: executing program 3 (id=484): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000012d440)={0x800, [], 0x2, "bc735875ac3839"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfff3}, 0x3b) 1.700019409s ago: executing program 2 (id=485): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xbb, 0x7e, 0x0, 0x8, 0xeb1, 0x7007, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x10, 0x7, "", [{{0x9, 0x4, 0x19, 0x2, 0x0, 0x7d, 0x9a, 0xa, 0x80}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r0) 1.492743448s ago: executing program 4 (id=486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x28c}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x28900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) syz_emit_ethernet(0xaf, &(0x7f0000000180)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@llc_tr={0x11, {@llc={0x7e, 0x7e, 'h', "ed12edad9cb2d6e6388d36e82a0f90708081488aed5be3aa9d41a6464b0f6e71fec7cc17d09db02bb3fbd0ebf5d906579778b5bfa1a5a66b3434cb7078332dc07db672666ead44278481c35a8f22a4f05684ecfcfc149330b19af0f89fc2af68f075b13dc13aceda1e903080cd7f515c729bc45b2a28c7e554265833a831fa6f81a0653df9fab7855a9de869af922e62dc4ff33e644e68537d391c341a06"}}}}}, &(0x7f0000000240)={0x0, 0x4, [0xd0, 0xae7, 0x4b5, 0x1dc]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000003c0)={0x87b, r7, 0x1}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0xa00100, 0x0, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) accept4$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000380)=0x1c, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0bd547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.401199011s ago: executing program 0 (id=487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00080000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0x1, &(0x7f0000000140)={0xa, 0x142}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x22}, @l2cap_cid_le_signaling={{0x1e}, @l2cap_ecred_conn_req={{0x17, 0x5, 0x1a}, {0x0, 0x2, 0x0, 0x5, [0xe, 0x0, 0x7, 0x7, 0x7ff, 0x4, 0x52a0, 0xfff9, 0x5]}}}}, 0x27) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd2c, 0x25dfdbff, {0x2, 0x20, 0x20, 0x60, 0x8, 0x0, 0x0, 0x6, 0x10008}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1204c081}, 0x40040) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={r0, 0x0, 0xfffffffffffffe3c, 0xfffffffffffffd30, 0x0, 0x0, 0xc01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x7, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x20080, 0xa1) connect$inet(0xffffffffffffffff, 0x0, 0x0) 1.282316345s ago: executing program 3 (id=488): syz_clone3(&(0x7f00000002c0)={0x144001080, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000080), {0x1a}, &(0x7f00000004c0)=""/173, 0xad, &(0x7f0000000580)=""/228, &(0x7f0000000280)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2300c29, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x40, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x10, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e00232f3a79894736a8ffffed000000", @ANYRES32=0x0, @ANYBLOB="200042030a000500aaaaaaaaaaaa0000"], 0x28}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42544, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000040)) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r5, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 5.547097ms ago: executing program 4 (id=489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x3e0, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110, 0x0, {0x6000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) 0s ago: executing program 3 (id=490): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x0, 0x0) memfd_create(0x0, 0xde932a8e875be35) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd070010002b004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x22) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$kcm(0xa, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) r8 = eventfd2(0x5, 0x80800) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, r8}) kernel console output (not intermixed with test programs): lave_0) entered blocking state [ 61.698195][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.705565][ T5810] bridge_slave_0: entered allmulticast mode [ 61.712271][ T5810] bridge_slave_0: entered promiscuous mode [ 61.720809][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.731057][ T5804] team0: Port device team_slave_1 added [ 61.751282][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.760554][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.767619][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.775399][ T5810] bridge_slave_1: entered allmulticast mode [ 61.782147][ T5810] bridge_slave_1: entered promiscuous mode [ 61.808719][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.837844][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.845044][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.852700][ T5809] bridge_slave_0: entered allmulticast mode [ 61.859328][ T5809] bridge_slave_0: entered promiscuous mode [ 61.880014][ T5815] team0: Port device team_slave_0 added [ 61.886258][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.893345][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.919294][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.931119][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.938230][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.945388][ T5809] bridge_slave_1: entered allmulticast mode [ 61.952018][ T5809] bridge_slave_1: entered promiscuous mode [ 61.966249][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.976774][ T5815] team0: Port device team_slave_1 added [ 61.989460][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.996471][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.022648][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.041058][ T5818] team0: Port device team_slave_0 added [ 62.048280][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.086402][ T5818] team0: Port device team_slave_1 added [ 62.099421][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.106648][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.132787][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.144369][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.151317][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.177874][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.190947][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.209346][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.219984][ T5810] team0: Port device team_slave_0 added [ 62.253147][ T5810] team0: Port device team_slave_1 added [ 62.266745][ T5809] team0: Port device team_slave_0 added [ 62.285108][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.292246][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.318170][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.336240][ T5809] team0: Port device team_slave_1 added [ 62.352316][ T5804] hsr_slave_0: entered promiscuous mode [ 62.358311][ T5804] hsr_slave_1: entered promiscuous mode [ 62.365158][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.372287][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.398247][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.425295][ T5815] hsr_slave_0: entered promiscuous mode [ 62.431338][ T5815] hsr_slave_1: entered promiscuous mode [ 62.437185][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 62.443159][ T5815] Cannot create hsr debugfs directory [ 62.460633][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.467564][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.493721][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.519168][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.526210][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.552347][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.569023][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.576642][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.576682][ T5814] Bluetooth: hci0: command tx timeout [ 62.603051][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.619608][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.626687][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.652662][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.721594][ T5818] hsr_slave_0: entered promiscuous mode [ 62.727580][ T5818] hsr_slave_1: entered promiscuous mode [ 62.733286][ T5814] Bluetooth: hci2: command tx timeout [ 62.733310][ T5807] Bluetooth: hci1: command tx timeout [ 62.739408][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 62.744473][ T5807] Bluetooth: hci3: command tx timeout [ 62.750098][ T5818] Cannot create hsr debugfs directory [ 62.810444][ T5807] Bluetooth: hci4: command tx timeout [ 62.815898][ T5810] hsr_slave_0: entered promiscuous mode [ 62.822199][ T5810] hsr_slave_1: entered promiscuous mode [ 62.828032][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 62.834057][ T5810] Cannot create hsr debugfs directory [ 62.852804][ T5809] hsr_slave_0: entered promiscuous mode [ 62.858809][ T5809] hsr_slave_1: entered promiscuous mode [ 62.864830][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 62.870682][ T5809] Cannot create hsr debugfs directory [ 63.156221][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.166576][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.183259][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.198691][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.246868][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.255992][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.276504][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.286233][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.342706][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.353522][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.364464][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.375788][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.439507][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.449987][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.459480][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.469294][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.479259][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.513725][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.559317][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.570227][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.582073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.589240][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.599005][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.606071][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.631601][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.642578][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.718826][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.774150][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.778516][ T30] audit: type=1400 audit(1774066752.134:84): avc: denied { sys_module } for pid=5815 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.796107][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.828952][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.847816][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.854952][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.875703][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.882854][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.909684][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.919134][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.952421][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.959494][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.969365][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.976523][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.988666][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.013986][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.021098][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.043019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.050240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.101694][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.121980][ T5815] veth0_vlan: entered promiscuous mode [ 64.170122][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.180950][ T5815] veth1_vlan: entered promiscuous mode [ 64.207667][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.214815][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.292315][ T5815] veth0_macvtap: entered promiscuous mode [ 64.312706][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.319791][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.344403][ T5815] veth1_macvtap: entered promiscuous mode [ 64.381299][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.395459][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.429472][ T5810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.442795][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.465168][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.528998][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.539930][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.559369][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.572140][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.591013][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.622819][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.637262][ T5804] veth0_vlan: entered promiscuous mode [ 64.653321][ T5807] Bluetooth: hci0: command tx timeout [ 64.685680][ T5804] veth1_vlan: entered promiscuous mode [ 64.738573][ T5804] veth0_macvtap: entered promiscuous mode [ 64.808317][ T5804] veth1_macvtap: entered promiscuous mode [ 64.814310][ T5807] Bluetooth: hci1: command tx timeout [ 64.816214][ T5814] Bluetooth: hci2: command tx timeout [ 64.820779][ T5807] Bluetooth: hci3: command tx timeout [ 64.847522][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.875952][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.901091][ T5807] Bluetooth: hci4: command tx timeout [ 64.909483][ T5809] veth0_vlan: entered promiscuous mode [ 64.919536][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.928813][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.965550][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.976542][ T5809] veth1_vlan: entered promiscuous mode [ 64.994110][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.009722][ T424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.022666][ T424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.022673][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.040912][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.049861][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.076070][ T30] audit: type=1400 audit(1774066753.434:85): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.3OFxvl/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.110434][ T5818] veth0_vlan: entered promiscuous mode [ 65.123170][ T30] audit: type=1400 audit(1774066753.464:86): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.146837][ T30] audit: type=1400 audit(1774066753.464:87): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.3OFxvl/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.152026][ T5810] veth0_vlan: entered promiscuous mode [ 65.184998][ T5818] veth1_vlan: entered promiscuous mode [ 65.193403][ T30] audit: type=1400 audit(1774066753.464:88): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.203074][ T5810] veth1_vlan: entered promiscuous mode [ 65.226969][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.253365][ T30] audit: type=1400 audit(1774066753.464:89): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.3OFxvl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.285712][ T30] audit: type=1400 audit(1774066753.464:90): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.3OFxvl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.350129][ T30] audit: type=1400 audit(1774066753.484:91): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.361786][ T5809] veth0_macvtap: entered promiscuous mode [ 65.375595][ T30] audit: type=1400 audit(1774066753.504:92): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.402524][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.411696][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.429582][ T5809] veth1_macvtap: entered promiscuous mode [ 65.455686][ T5818] veth0_macvtap: entered promiscuous mode [ 65.492244][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.495512][ T5921] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6'. [ 65.500256][ T5818] veth1_macvtap: entered promiscuous mode [ 65.515284][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.692436][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.745615][ T5810] veth0_macvtap: entered promiscuous mode [ 65.808151][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.873071][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.879498][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.940555][ T422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.957870][ T86] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.981941][ T5810] veth1_macvtap: entered promiscuous mode [ 66.002038][ T86] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.012272][ T86] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.041546][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.069532][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.113254][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 66.113271][ T30] audit: type=1400 audit(1774066754.474:115): avc: denied { create } for pid=5934 comm="syz.0.1" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.150137][ T30] audit: type=1400 audit(1774066754.474:116): avc: denied { ioctl } for pid=5934 comm="syz.0.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8451 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.151804][ T86] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.181524][ T30] audit: type=1400 audit(1774066754.474:117): avc: denied { read write } for pid=5932 comm="syz.1.8" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.185761][ T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.309332][ T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.327867][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.333709][ T30] audit: type=1400 audit(1774066754.474:118): avc: denied { open } for pid=5932 comm="syz.1.8" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.372930][ T30] audit: type=1400 audit(1774066754.474:119): avc: denied { ioctl } for pid=5932 comm="syz.1.8" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.459966][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.480713][ T5865] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.520171][ T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.574793][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.598970][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.623785][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.640431][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.670747][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 66.685862][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.695973][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.726727][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.740917][ T5807] Bluetooth: hci0: command tx timeout [ 66.741978][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.759285][ T30] audit: type=1400 audit(1774066755.104:120): avc: denied { create } for pid=5938 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.779101][ T5865] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.779151][ T5939] syzkaller0: entered promiscuous mode [ 66.794033][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.804864][ T5939] syzkaller0: entered allmulticast mode [ 66.806129][ T5865] usb 2-1: config 0 descriptor?? [ 66.837690][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.846437][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.854228][ T30] audit: type=1400 audit(1774066755.214:121): avc: denied { setopt } for pid=5938 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.886915][ T30] audit: type=1400 audit(1774066755.244:122): avc: denied { write } for pid=5938 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.900418][ T5807] Bluetooth: hci2: command tx timeout [ 66.911970][ T5814] Bluetooth: hci3: command tx timeout [ 66.917367][ T5814] Bluetooth: hci1: command tx timeout [ 66.959442][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.967677][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.975183][ T5814] Bluetooth: hci4: command tx timeout [ 67.043989][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 67.058817][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.079176][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.114465][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.139557][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.459041][ T30] audit: type=1326 audit(1774066755.814:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a39c799 code=0x7ffc0000 [ 67.489344][ T30] audit: type=1326 audit(1774066755.814:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5941 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a39c799 code=0x7ffc0000 [ 67.491401][ T5865] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 67.525797][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.529159][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.544901][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.545110][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.582337][ T5865] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 67.734321][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 67.912805][ T5951] ======================================================= [ 67.912805][ T5951] WARNING: The mand mount option has been deprecated and [ 67.912805][ T5951] and is ignored by this kernel. Remove the mand [ 67.912805][ T5951] option from the mount to silence this warning. [ 67.912805][ T5951] ======================================================= [ 68.240797][ T5965] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 68.810505][ T5814] Bluetooth: hci0: command tx timeout [ 68.820381][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.970952][ T5814] Bluetooth: hci2: command tx timeout [ 68.976584][ T5807] Bluetooth: hci3: command tx timeout [ 68.982082][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 68.989286][ T5817] Bluetooth: hci1: command tx timeout [ 68.991852][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.010767][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.031519][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=d2.57 [ 69.040866][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.048925][ T10] usb 4-1: Product: syz [ 69.054156][ T10] usb 4-1: Manufacturer: syz [ 69.054194][ T5817] Bluetooth: hci4: command tx timeout [ 69.061280][ T10] usb 4-1: SerialNumber: syz [ 69.090950][ T10] usb 4-1: config 0 descriptor?? [ 69.242463][ T5865] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 69.261637][ T5865] microsoft 0003:045E:07DA.0001: no inputs found [ 69.279108][ T5865] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 69.325463][ T5865] usb 2-1: USB disconnect, device number 2 [ 69.400342][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.414826][ T5971] fido_id[5971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 69.503801][ T5975] could not open pipe file descriptor [ 69.609651][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 69.618323][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.639072][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.651364][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.862544][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.889304][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.899299][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.913753][ T5977] capability: warning: `syz.2.16' uses 32-bit capabilities (legacy support in use) [ 70.445413][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 70.452074][ T10] usbtmc 5-1:16.0: can't read capabilities [ 70.672486][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 70.765091][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.774380][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.783450][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.871183][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.905776][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.914899][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.923960][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.932995][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.942024][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.277185][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.286290][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.295341][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.304390][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.313425][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.390963][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 71.400064][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 71.450045][ T5865] usb 4-1: USB disconnect, device number 2 [ 71.706030][ T6016] syz.3.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.990749][ T6020] netlink: 164 bytes leftover after parsing attributes in process `syz.2.27'. [ 72.627288][ T5879] usb 5-1: USB disconnect, device number 2 [ 72.633305][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 72.690589][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 72.690604][ T30] audit: type=1400 audit(1774066761.054:222): avc: denied { write } for pid=6012 comm="syz.3.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.739994][ T6013] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 72.768670][ T6026] netlink: 200 bytes leftover after parsing attributes in process `syz.2.28'. [ 72.832448][ T30] audit: type=1400 audit(1774066761.194:223): avc: denied { create } for pid=6027 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.920406][ T30] audit: type=1400 audit(1774066761.214:224): avc: denied { write } for pid=6027 comm="syz.2.31" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.003998][ T6034] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 73.152366][ T30] audit: type=1400 audit(1774066761.214:225): avc: denied { open } for pid=6027 comm="syz.2.31" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.283181][ T6037] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 73.329590][ T6039] netlink: 164 bytes leftover after parsing attributes in process `syz.0.33'. [ 73.348142][ T6041] Illegal XDP return value 4294967294 on prog (id 4) dev syz_tun, expect packet loss! [ 73.360074][ T6039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.33'. [ 74.652355][ T6061] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 74.748420][ T6063] random: crng reseeded on system resumption [ 74.813875][ T6063] openvswitch: netlink: IP tunnel dst address not specified [ 75.180709][ T30] audit: type=1400 audit(1774066763.104:226): avc: denied { write } for pid=6052 comm="syz.0.38" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.480100][ T30] audit: type=1400 audit(1774066763.104:227): avc: denied { open } for pid=6052 comm="syz.0.38" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.610801][ T30] audit: type=1400 audit(1774066763.964:228): avc: denied { create } for pid=6066 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.191501][ T978] cfg80211: failed to load regulatory.db [ 76.237962][ T30] audit: type=1400 audit(1774066763.994:229): avc: denied { create } for pid=6066 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.287955][ T30] audit: type=1326 audit(1774066764.324:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724079c799 code=0x7ffc0000 [ 76.360396][ T30] audit: type=1326 audit(1774066764.324:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6069 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724079c799 code=0x7ffc0000 [ 77.332461][ T6090] ufs: You didn't specify the type of your ufs filesystem [ 77.332461][ T6090] [ 77.332461][ T6090] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 77.332461][ T6090] [ 77.332461][ T6090] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 77.364291][ T6090] ufs: ufstype=old is supported read-only [ 77.372446][ T6090] ufs: ufs_fill_super(): bad magic number [ 77.757481][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.47'. [ 77.767384][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.47'. [ 77.843560][ T6092] fuse: Bad value for 'fd' [ 78.231227][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 78.231242][ T30] audit: type=1400 audit(1774066766.584:335): avc: denied { create } for pid=6097 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 78.811785][ T6095] fuse: Bad value for 'fd' [ 78.829019][ T30] audit: type=1400 audit(1774066767.174:336): avc: denied { mounton } for pid=6093 comm="syz.1.49" path="/10/file0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.966886][ T30] audit: type=1400 audit(1774066767.324:337): avc: denied { ioctl } for pid=6107 comm="syz.3.52" path="socket:[9398]" dev="sockfs" ino=9398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.063841][ T6109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.52'. [ 79.072764][ T6109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.52'. [ 79.302696][ T30] audit: type=1400 audit(1774066767.474:338): avc: denied { open } for pid=6107 comm="syz.3.52" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 79.580399][ T30] audit: type=1400 audit(1774066767.924:339): avc: denied { setopt } for pid=6116 comm="syz.0.56" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.616703][ T6119] Bluetooth: MGMT ver 1.23 [ 79.673531][ T30] audit: type=1400 audit(1774066767.974:340): avc: denied { read } for pid=6118 comm="syz.0.57" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.945250][ T30] audit: type=1400 audit(1774066767.974:341): avc: denied { bind } for pid=6118 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.980444][ T30] audit: type=1400 audit(1774066767.974:342): avc: denied { write } for pid=6118 comm="syz.0.57" path="socket:[9029]" dev="sockfs" ino=9029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.107544][ T6121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.53'. [ 80.119090][ T6121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.53'. [ 81.100318][ T6128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.58'. [ 81.109121][ T6128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.58'. [ 81.333079][ T6131] netlink: 164 bytes leftover after parsing attributes in process `syz.4.61'. [ 81.405169][ T30] audit: type=1400 audit(1774066769.764:343): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 81.451447][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.63'. [ 81.485638][ T30] audit: type=1400 audit(1774066769.844:344): avc: denied { bind } for pid=6134 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.858784][ T6139] Zero length message leads to an empty skb [ 81.881036][ T6139] netlink: 'syz.1.62': attribute type 13 has an invalid length. [ 81.888773][ T6139] netlink: 'syz.1.62': attribute type 17 has an invalid length. [ 82.669262][ T6139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.608612][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 83.608628][ T30] audit: type=1400 audit(1774066771.964:349): avc: denied { read } for pid=6167 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.047813][ T6175] x_tables: unsorted entry at hook 1 [ 84.115161][ T30] audit: type=1400 audit(1774066772.474:350): avc: denied { create } for pid=6176 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 84.316074][ T6180] __nla_validate_parse: 4 callbacks suppressed [ 84.316109][ T6180] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.75'. [ 84.757824][ T6182] geneve2: entered promiscuous mode [ 84.763156][ T6182] geneve2: entered allmulticast mode [ 84.773516][ T30] audit: type=1400 audit(1774066773.134:351): avc: denied { write } for pid=6179 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.793530][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.803875][ T6181] netlink: 532 bytes leftover after parsing attributes in process `syz.4.76'. [ 84.813384][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.848164][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.868257][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.426437][ T6205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.81'. [ 86.437484][ T6205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.81'. [ 86.450358][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.700407][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 87.006310][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 87.020065][ T6221] netlink: 56 bytes leftover after parsing attributes in process `syz.2.86'. [ 87.590736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 88.083611][ T6223] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 88.092961][ T6223] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 88.103531][ T6223] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 88.254766][ T30] audit: type=1400 audit(1774066775.814:352): avc: denied { read } for pid=6212 comm="syz.4.85" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.287526][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 88.300384][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 88.327427][ T30] audit: type=1400 audit(1774066775.824:353): avc: denied { open } for pid=6212 comm="syz.4.85" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.354680][ T10] usb 4-1: Product: syz [ 88.358851][ T10] usb 4-1: Manufacturer: syz [ 88.380309][ T10] usb 4-1: SerialNumber: syz [ 88.391992][ T10] usb 4-1: config 0 descriptor?? [ 88.398085][ T6199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.420970][ T30] audit: type=1400 audit(1774066775.904:354): avc: denied { ioctl } for pid=6212 comm="syz.4.85" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.440358][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.520357][ T30] audit: type=1800 audit(1774066776.444:355): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.4.85" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 88.570392][ T30] audit: type=1400 audit(1774066776.444:356): avc: denied { firmware_load } for pid=6212 comm="syz.4.85" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 88.625961][ T10] usb 4-1: USB disconnect, device number 3 [ 88.670504][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 88.687381][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.717135][ T30] audit: type=1400 audit(1774066776.464:357): avc: denied { firmware_load } for pid=6212 comm="syz.4.85" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 88.723240][ T29] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 88.836771][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.80'. [ 88.894200][ T30] audit: type=1400 audit(1774066776.894:358): avc: denied { bind } for pid=6227 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.910479][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.029151][ T29] usb 3-1: Product: syz [ 89.065668][ T29] usb 3-1: Manufacturer: syz [ 89.073667][ T30] audit: type=1400 audit(1774066776.894:359): avc: denied { node_bind } for pid=6227 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 89.081190][ T29] usb 3-1: SerialNumber: syz [ 89.122532][ T30] audit: type=1400 audit(1774066776.894:360): avc: denied { connect } for pid=6227 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.157978][ T29] usb 3-1: config 0 descriptor?? [ 89.245165][ T6238] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 89.298709][ T30] audit: type=1400 audit(1774066776.984:361): avc: denied { create } for pid=6196 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.323459][ T29] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 89.376079][ T30] audit: type=1400 audit(1774066777.014:362): avc: denied { append } for pid=6229 comm="syz.0.89" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.493516][ T12] usb 3-1: Failed to submit usb control message: -71 [ 89.500925][ T5879] usb 3-1: USB disconnect, device number 2 [ 89.507401][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 89.514898][ T12] usb 3-1: unable to get target info from device [ 89.531105][ T12] usb 3-1: could not get target info (-71) [ 89.550638][ T12] usb 3-1: could not probe fw (-71) [ 89.602575][ T30] audit: type=1400 audit(1774066777.964:363): avc: denied { create } for pid=6242 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 89.659752][ T30] audit: type=1400 audit(1774066778.014:364): avc: denied { read } for pid=6244 comm="syz.4.87" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.698235][ T30] audit: type=1400 audit(1774066778.014:365): avc: denied { open } for pid=6244 comm="syz.4.87" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.750503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.560383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.750403][ T30] audit: type=1400 audit(1774066778.054:366): avc: denied { map } for pid=6244 comm="syz.4.87" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.925821][ T6252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.94'. [ 90.934867][ T6252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.94'. [ 91.224982][ T6254] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.324483][ T6256] raw_sendmsg: syz.0.95 forgot to set AF_INET. Fix it! [ 92.319053][ T6264] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 92.999420][ T6269] dlm: no local IP address has been set [ 93.085470][ T6269] dlm: cannot start dlm midcomms -107 [ 93.228602][ T6273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.263763][ T30] audit: type=1400 audit(1774066782.624:367): avc: denied { read } for pid=6283 comm="syz.2.103" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.290354][ T30] audit: type=1400 audit(1774066782.624:368): avc: denied { open } for pid=6283 comm="syz.2.103" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.408695][ T30] audit: type=1400 audit(1774066782.704:369): avc: denied { ioctl } for pid=6283 comm="syz.2.103" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.463565][ T6288] kAFS: unable to lookup cell 'Þ({^ú@' [ 94.580105][ T6292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.630005][ T6292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.652742][ T30] audit: type=1400 audit(1774066783.004:370): avc: denied { ioctl } for pid=6293 comm="syz.1.106" path="socket:[10447]" dev="sockfs" ino=10447 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.686141][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 94.714367][ T6299] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 94.740780][ T30] audit: type=1400 audit(1774066783.094:371): avc: denied { relabelfrom } for pid=6293 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.809207][ T30] audit: type=1400 audit(1774066783.094:372): avc: denied { relabelto } for pid=6293 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.835463][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.320367][ T5919] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.500363][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 95.513058][ T5919] usb 4-1: string descriptor 0 read error: -22 [ 95.519456][ T5919] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 95.528753][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.918915][ T5919] usb 4-1: USB disconnect, device number 4 [ 97.723253][ T6344] mkiss: ax0: crc mode is auto. [ 99.758636][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.118'. [ 99.767622][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.118'. [ 99.906307][ T30] audit: type=1400 audit(1774066788.264:373): avc: denied { create } for pid=6347 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.044958][ T30] audit: type=1400 audit(1774066788.344:374): avc: denied { write } for pid=6347 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.305773][ T6369] netlink: 'syz.3.120': attribute type 4 has an invalid length. [ 100.698943][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 101.583383][ T6383] syzkaller0: entered promiscuous mode [ 101.588842][ T6383] syzkaller0: entered allmulticast mode [ 101.718628][ T6389] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 102.226044][ T6391] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.230831][ T30] audit: type=1326 audit(1774066790.594:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.4.129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9f279c799 code=0x0 [ 102.238270][ T6391] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 102.354702][ T6389] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 102.630708][ T6404] netlink: 120 bytes leftover after parsing attributes in process `syz.0.132'. [ 102.680198][ T6404] netlink: 120 bytes leftover after parsing attributes in process `syz.0.132'. [ 102.911545][ T30] audit: type=1400 audit(1774066791.264:376): avc: denied { setopt } for pid=6407 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.140345][ T5852] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.625201][ T6417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.747028][ T5852] usb 5-1: Using ep0 maxpacket: 32 [ 103.755010][ T5852] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.770424][ T5852] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.780375][ T5852] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.853005][ T5852] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 103.875211][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 103.893062][ T5852] usb 5-1: Product: syz [ 103.897241][ T5852] usb 5-1: Manufacturer: syz [ 103.902304][ T5852] usb 5-1: SerialNumber: syz [ 103.947642][ T5852] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 104.120426][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.260557][ T6410] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.272551][ T30] audit: type=1400 audit(1774066792.614:377): avc: denied { create } for pid=6407 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.391537][ T30] audit: type=1400 audit(1774066792.754:378): avc: denied { setopt } for pid=6407 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.419330][ T30] audit: type=1400 audit(1774066792.754:379): avc: denied { create } for pid=6407 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.421171][ T5879] usb 1-1: device descriptor read/64, error -71 [ 104.502030][ T30] audit: type=1400 audit(1774066792.864:380): avc: denied { name_connect } for pid=6427 comm="syz.1.139" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 104.542232][ T6430] netlink: 164 bytes leftover after parsing attributes in process `syz.2.140'. [ 104.557351][ T30] audit: type=1400 audit(1774066792.904:381): avc: denied { bind } for pid=6407 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.591860][ T24] usb 5-1: USB disconnect, device number 3 [ 104.752854][ T24] appletouch 5-1:1.0: input: appletouch disconnected [ 104.797976][ T5879] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.450496][ T5879] usb 1-1: device descriptor read/64, error -71 [ 105.499154][ T6448] netlink: 'syz.3.146': attribute type 3 has an invalid length. [ 105.560638][ T5879] usb usb1-port1: attempt power cycle [ 105.719753][ T30] audit: type=1400 audit(1774066794.074:382): avc: denied { create } for pid=6451 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.966119][ T6459] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.149'. [ 106.725090][ T6414] input: syz0 as /devices/virtual/input/input7 [ 106.819377][ T30] audit: type=1400 audit(1774066795.084:383): avc: denied { ioctl } for pid=6412 comm="syz.0.135" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.856420][ T5879] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.181767][ T5879] usb 1-1: device descriptor read/8, error -71 [ 107.450893][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.494298][ T5879] usb 1-1: device descriptor read/8, error -71 [ 107.630648][ T5879] usb usb1-port1: unable to enumerate USB device [ 107.840356][ T5865] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.269427][ T6417] syz.0.135 (6417) used greatest stack depth: 19272 bytes left [ 108.410549][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 108.500527][ T30] audit: type=1400 audit(1774066796.794:384): avc: denied { connect } for pid=6479 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.550843][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.566438][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.591028][ T5865] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 108.600180][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.611224][ T5865] usb 4-1: Product: syz [ 108.615455][ T5865] usb 4-1: Manufacturer: syz [ 108.620085][ T5865] usb 4-1: SerialNumber: syz [ 108.706437][ T5865] usb 4-1: config 0 descriptor?? [ 108.745356][ T5865] appledisplay 4-1:0.0: Could not find int-in endpoint [ 108.756817][ T5865] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 108.807408][ T6486] futex_wake_op: syz.2.159 tries to shift op by 32; fix this program [ 108.816933][ T30] audit: type=1400 audit(1774066797.174:385): avc: denied { create } for pid=6485 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.954771][ T6486] fuse: Bad value for 'fd' [ 109.001181][ T30] audit: type=1400 audit(1774066797.244:386): avc: denied { ioctl } for pid=6485 comm="syz.4.153" path="socket:[10043]" dev="sockfs" ino=10043 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.088106][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.125409][ T30] audit: type=1400 audit(1774066797.244:387): avc: denied { ioctl } for pid=6485 comm="syz.4.153" path="socket:[10043]" dev="sockfs" ino=10043 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.125458][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.305502][ T30] audit: type=1400 audit(1774066797.664:388): avc: denied { unmount } for pid=6471 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.338895][ T6496] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 109.348393][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.160'. [ 109.359560][ T6496] netlink: 'syz.0.160': attribute type 1 has an invalid length. [ 109.431193][ T6496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.444173][ T24] usb 4-1: USB disconnect, device number 5 [ 109.474956][ T30] audit: type=1400 audit(1774066797.754:389): avc: denied { associate } for pid=6471 comm="syz.3.156" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 110.354965][ T30] audit: type=1400 audit(1774066798.654:390): avc: denied { mount } for pid=6501 comm="syz.1.162" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 110.407657][ T30] audit: type=1400 audit(1774066798.714:391): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 110.783616][ T6529] netlink: 'syz.3.166': attribute type 4 has an invalid length. [ 111.568867][ T6532] capability: warning: `syz.4.170' uses deprecated v2 capabilities in a way that may be insecure [ 112.252484][ T6543] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 112.333857][ T6544] FAULT_INJECTION: forcing a failure. [ 112.333857][ T6544] name failslab, interval 1, probability 0, space 0, times 1 [ 112.340438][ T30] audit: type=1400 audit(1774066800.684:392): avc: denied { bind } for pid=6542 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.357388][ T6544] CPU: 1 UID: 0 PID: 6544 Comm: syz.1.173 Not tainted syzkaller #0 PREEMPT(full) [ 112.357411][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.357419][ T6544] Call Trace: [ 112.357424][ T6544] [ 112.357430][ T6544] dump_stack_lvl+0x100/0x190 [ 112.357459][ T6544] should_fail_ex.cold+0x5/0xa [ 112.357485][ T6544] should_failslab+0xc2/0x120 [ 112.357501][ T6544] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 112.357524][ T6544] ? sidtab_sid2str_get+0x17a/0x670 [ 112.357552][ T6544] kmemdup_noprof+0x29/0x60 [ 112.357575][ T6544] sidtab_sid2str_get+0x17a/0x670 [ 112.357599][ T6544] security_sid_to_context_core+0x35a/0x6d0 [ 112.357620][ T6544] ? avc_audit_post_callback+0x115/0x910 [ 112.357645][ T6544] avc_audit_post_callback+0x1aa/0x910 [ 112.357670][ T6544] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 112.357691][ T6544] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 112.357713][ T6544] ? skb_put+0x138/0x180 [ 112.357736][ T6544] ? audit_log_n_string+0x256/0x550 [ 112.357760][ T6544] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 112.357782][ T6544] common_lsm_audit+0x23f/0x2b0 [ 112.357804][ T6544] ? __pfx_common_lsm_audit+0x10/0x10 [ 112.357825][ T6544] ? lockdep_hardirqs_on+0x78/0x100 [ 112.357845][ T6544] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.357866][ T6544] slow_avc_audit+0x186/0x210 [ 112.357882][ T6544] ? __pfx_slow_avc_audit+0x10/0x10 [ 112.357900][ T6544] ? avc_denied+0x14a/0x190 [ 112.357925][ T6544] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 112.357944][ T6544] avc_has_perm+0x1a6/0x1e0 [ 112.357960][ T6544] ? __pfx_avc_has_perm+0x10/0x10 [ 112.357979][ T6544] ? __lock_acquire+0x4a5/0x2630 [ 112.357996][ T6544] inode_has_perm+0x166/0x1d0 [ 112.358013][ T6544] file_has_perm+0x2e2/0x350 [ 112.358031][ T6544] ? __pfx_file_has_perm+0x10/0x10 [ 112.358050][ T6544] ? get_pid_task+0xfc/0x250 [ 112.358072][ T6544] ? get_pid_task+0xfc/0x250 [ 112.358098][ T6544] selinux_file_permission+0x4aa/0x6d0 [ 112.358122][ T6544] security_file_permission+0x91/0x210 [ 112.358145][ T6544] rw_verify_area+0xb8/0x6d0 [ 112.358168][ T6544] vfs_write+0x146/0x1070 [ 112.358195][ T6544] ? __pfx_vfs_write+0x10/0x10 [ 112.358215][ T6544] ? find_held_lock+0x2b/0x80 [ 112.358234][ T6544] ? __fget_files+0x215/0x3d0 [ 112.358249][ T6544] ? __fget_files+0x215/0x3d0 [ 112.358268][ T6544] ? __fget_files+0x21f/0x3d0 [ 112.358290][ T6544] ksys_write+0x1f8/0x250 [ 112.358312][ T6544] ? __pfx_ksys_write+0x10/0x10 [ 112.358341][ T6544] do_syscall_64+0x106/0xf80 [ 112.358360][ T6544] ? clear_bhb_loop+0x40/0x90 [ 112.358379][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.358394][ T6544] RIP: 0033:0x7f724079c799 [ 112.358408][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.358422][ T6544] RSP: 002b:00007f724169f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.358437][ T6544] RAX: ffffffffffffffda RBX: 00007f7240a15fa0 RCX: 00007f724079c799 [ 112.358446][ T6544] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000005 [ 112.358454][ T6544] RBP: 00007f724169f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.358463][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.358476][ T6544] R13: 00007f7240a16038 R14: 00007f7240a15fa0 R15: 00007fff9ec63a48 [ 112.358497][ T6544] [ 112.811120][ T30] audit: type=1400 audit(1774066800.694:393): avc: denied { write } for pid=6542 comm="syz.1.173" path="socket:[10109]" dev="sockfs" ino=10109 scontext=root:sysadm_r:sysadm_t tsid=148 tclass=bluetooth_socket permissive=1 [ 112.853465][ T30] audit: type=1400 audit(1774066801.074:394): avc: denied { name_bind } for pid=6545 comm="syz.2.174" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 112.924400][ T30] audit: type=1400 audit(1774066801.074:395): avc: denied { node_bind } for pid=6545 comm="syz.2.174" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 112.952750][ T30] audit: type=1400 audit(1774066801.074:396): avc: denied { name_bind } for pid=6545 comm="syz.2.174" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 112.976027][ T30] audit: type=1400 audit(1774066801.074:397): avc: denied { listen } for pid=6545 comm="syz.2.174" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.022991][ T30] audit: type=1400 audit(1774066801.074:398): avc: denied { ioctl } for pid=6545 comm="syz.2.174" path="socket:[10977]" dev="sockfs" ino=10977 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.099941][ T30] audit: type=1400 audit(1774066801.214:399): avc: denied { execute } for pid=6547 comm="syz.3.175" path="/dev/nullb0" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.187384][ T30] audit: type=1800 audit(1774066801.214:400): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.175" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 113.327412][ T30] audit: type=1400 audit(1774066801.684:401): avc: denied { create } for pid=6558 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.657800][ T6586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.669388][ T6587] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 114.705503][ T6587] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 114.735438][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.181'. [ 114.744500][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.181'. [ 115.093021][ T6586] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 115.261752][ T6598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.185'. [ 115.271278][ T6598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.185'. [ 115.501832][ T5919] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.749086][ T6602] hub 9-0:1.0: USB hub found [ 115.760385][ T6602] hub 9-0:1.0: 1 port detected [ 115.840335][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 115.849040][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.866354][ T5919] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 115.866504][ T6609] netlink: 120 bytes leftover after parsing attributes in process `syz.0.188'. [ 115.972518][ T6609] netlink: 120 bytes leftover after parsing attributes in process `syz.0.188'. [ 116.003796][ T6609] netlink: 120 bytes leftover after parsing attributes in process `syz.0.188'. [ 116.090074][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.127840][ T5919] usb 3-1: Product: syz [ 116.219498][ T5919] usb 3-1: Manufacturer: syz [ 116.239261][ T5919] usb 3-1: SerialNumber: syz [ 116.281982][ T5919] usb 3-1: config 0 descriptor?? [ 116.500983][ T6586] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 116.509931][ T6587] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 116.522975][ T5919] usb 3-1: USB disconnect, device number 4 [ 116.714685][ T6616] can: request_module (can-proto-0) failed. [ 116.850866][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 117.474577][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 117.474592][ T30] audit: type=1400 audit(1774066805.834:406): avc: denied { getopt } for pid=6622 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.288230][ T6649] netlink: 164 bytes leftover after parsing attributes in process `syz.3.199'. [ 119.330680][ T30] audit: type=1400 audit(1774066807.684:407): avc: denied { mount } for pid=6643 comm="syz.2.200" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.364368][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.199'. [ 119.438283][ T30] audit: type=1400 audit(1774066807.684:408): avc: denied { mounton } for pid=6643 comm="syz.2.200" path="/43/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 119.791991][ T6658] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 119.813549][ T30] audit: type=1400 audit(1774066807.724:409): avc: denied { mount } for pid=6643 comm="syz.2.200" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.839793][ T6645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.914750][ T30] audit: type=1400 audit(1774066807.834:410): avc: denied { create } for pid=6653 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.095815][ T30] audit: type=1400 audit(1774066807.844:411): avc: denied { create } for pid=6637 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.140935][ T6651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'. [ 120.149984][ T6651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'. [ 120.283461][ T30] audit: type=1400 audit(1774066808.644:412): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.550241][ T30] audit: type=1400 audit(1774066808.714:413): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.609729][ T6645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.740353][ T30] audit: type=1400 audit(1774066809.044:414): avc: denied { bind } for pid=6665 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.920032][ T30] audit: type=1400 audit(1774066809.064:415): avc: denied { mount } for pid=6665 comm="syz.2.203" name="/" dev="ramfs" ino=11217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.062070][ T6669] FAULT_INJECTION: forcing a failure. [ 121.062070][ T6669] name failslab, interval 1, probability 0, space 0, times 0 [ 121.076138][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 121.076161][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.076170][ T6669] Call Trace: [ 121.076176][ T6669] [ 121.076182][ T6669] dump_stack_lvl+0x100/0x190 [ 121.076214][ T6669] should_fail_ex.cold+0x5/0xa [ 121.076236][ T6669] should_failslab+0xc2/0x120 [ 121.076253][ T6669] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 121.076278][ T6669] ? __alloc_skb+0x140/0x710 [ 121.076303][ T6669] __alloc_skb+0x140/0x710 [ 121.076321][ T6669] ? __alloc_skb+0x5b7/0x710 [ 121.076340][ T6669] ? __pfx___alloc_skb+0x10/0x10 [ 121.076358][ T6669] ? __asan_memset+0x23/0x50 [ 121.076380][ T6669] ? __alloc_skb+0x4e9/0x710 [ 121.076398][ T6669] ? __alloc_skb+0x5b7/0x710 [ 121.076421][ T6669] create_monitor_ctrl_event+0x3b/0x450 [ 121.076446][ T6669] mgmt_cmd_complete+0x2d6/0x560 [ 121.076470][ T6669] remove_remote_oob_data+0x1ac/0x320 [ 121.076493][ T6669] ? __pfx_remove_remote_oob_data+0x10/0x10 [ 121.076517][ T6669] ? do_raw_read_unlock+0x3f/0x70 [ 121.076536][ T6669] ? _raw_read_unlock+0x28/0x50 [ 121.076557][ T6669] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 121.076580][ T6669] hci_sock_sendmsg+0x154e/0x2620 [ 121.076605][ T6669] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 121.076632][ T6669] sock_write_iter+0x524/0x5a0 [ 121.076659][ T6669] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 121.076679][ T6669] ? __pfx_sock_write_iter+0x10/0x10 [ 121.076713][ T6669] ? bpf_lsm_file_permission+0x9/0x10 [ 121.076738][ T6669] ? security_file_permission+0x76/0x210 [ 121.076763][ T6669] ? rw_verify_area+0xce/0x6d0 [ 121.076789][ T6669] vfs_write+0x6ac/0x1070 [ 121.076815][ T6669] ? __pfx_sock_write_iter+0x10/0x10 [ 121.076843][ T6669] ? __pfx_vfs_write+0x10/0x10 [ 121.076867][ T6669] ? find_held_lock+0x2b/0x80 [ 121.076906][ T6669] ksys_write+0x1f8/0x250 [ 121.076931][ T6669] ? __pfx_ksys_write+0x10/0x10 [ 121.076965][ T6669] do_syscall_64+0x106/0xf80 [ 121.076986][ T6669] ? clear_bhb_loop+0x40/0x90 [ 121.077008][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.077026][ T6669] RIP: 0033:0x7fed3a39c799 [ 121.077041][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.077062][ T6669] RSP: 002b:00007fed3b221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.077079][ T6669] RAX: ffffffffffffffda RBX: 00007fed3a615fa0 RCX: 00007fed3a39c799 [ 121.077090][ T6669] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000005 [ 121.077100][ T6669] RBP: 00007fed3b221090 R08: 0000000000000000 R09: 0000000000000000 [ 121.077109][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.077117][ T6669] R13: 00007fed3a616038 R14: 00007fed3a615fa0 R15: 00007fffe3825718 [ 121.077139][ T6669] [ 121.682539][ T6645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.831499][ T6677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.206'. [ 121.956703][ T6677] netlink: 'syz.0.206': attribute type 1 has an invalid length. [ 122.050353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.330513][ T6677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.644519][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 122.644537][ T30] audit: type=1400 audit(1774066810.984:423): avc: denied { read } for pid=6683 comm="syz.3.208" path="socket:[11238]" dev="sockfs" ino=11238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.702371][ T6645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.834050][ T30] audit: type=1800 audit(1774066812.184:424): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.212" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 123.965910][ T422] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.042918][ T422] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.184380][ T422] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.346823][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 124.505214][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 124.664704][ T6715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.216'. [ 124.673762][ T424] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.772931][ T30] audit: type=1400 audit(1774066813.124:425): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.49 dest=39080 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 125.071150][ T6719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.147034][ T30] audit: type=1400 audit(1774066813.574:426): avc: denied { create } for pid=6725 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.752075][ T6734] netlink: 'syz.0.218': attribute type 39 has an invalid length. [ 126.922690][ T30] audit: type=1400 audit(1774066814.264:427): avc: denied { connect } for pid=6725 comm="syz.3.219" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.145936][ T6719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.158520][ T29] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 127.178626][ T30] audit: type=1400 audit(1774066814.694:428): avc: denied { block_suspend } for pid=6721 comm="syz.0.218" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.215295][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.222996][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.252088][ T30] audit: type=1400 audit(1774066815.254:429): avc: denied { create } for pid=6721 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.297160][ T6719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.334982][ T30] audit: type=1400 audit(1774066815.254:430): avc: denied { ioctl } for pid=6721 comm="syz.0.218" path="socket:[11366]" dev="sockfs" ino=11366 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.373149][ T6719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.412558][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.427851][ T30] audit: type=1400 audit(1774066815.574:431): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 127.469913][ T86] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.491427][ T29] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 127.509998][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.584369][ T86] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.590335][ T30] audit: type=1400 audit(1774066815.574:432): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 127.620178][ T29] usb 1-1: Product: syz [ 127.629955][ T29] usb 1-1: Manufacturer: syz [ 127.634955][ T86] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.644569][ T86] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.650362][ T29] usb 1-1: SerialNumber: syz [ 127.673471][ T29] usb 1-1: config 0 descriptor?? [ 127.708266][ T29] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 127.726772][ T30] audit: type=1400 audit(1774066815.754:433): avc: denied { mount } for pid=6737 comm="syz.3.221" name="/" dev="ramfs" ino=11373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 127.776988][ T6741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.945226][ T6741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.260753][ T29] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 128.362183][ T29] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 128.564775][ T30] audit: type=1800 audit(1774066816.924:434): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.225" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 128.766738][ T6760] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 129.571762][ T30] audit: type=1400 audit(1774066817.914:435): avc: denied { map } for pid=6764 comm="syz.2.229" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.653389][ T5852] usb 1-1: USB disconnect, device number 6 [ 129.695591][ T6769] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 129.720458][ T30] audit: type=1400 audit(1774066818.054:436): avc: denied { mounton } for pid=6764 comm="syz.2.229" path="/49/bus" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.745837][ T6769] Error validating options; rc = [-22] [ 129.844552][ T30] audit: type=1400 audit(1774066818.204:437): avc: denied { listen } for pid=6770 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.971963][ T30] audit: type=1400 audit(1774066818.204:438): avc: denied { accept } for pid=6770 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.114234][ T30] audit: type=1400 audit(1774066818.474:439): avc: denied { create } for pid=6783 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.422815][ T30] audit: type=1400 audit(1774066818.474:440): avc: denied { connect } for pid=6783 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.564376][ T6782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.232'. [ 130.574044][ T6782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.232'. [ 131.752415][ T6801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.798222][ T6801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.965145][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.241'. [ 131.974385][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.241'. [ 132.924919][ T30] audit: type=1800 audit(1774066821.274:441): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.245" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 133.080746][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.371900][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 133.603862][ T5872] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 133.824671][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 133.862498][ T5872] usb 2-1: Product: syz [ 133.874918][ T5872] usb 2-1: SerialNumber: syz [ 133.886092][ T5872] usb 2-1: config 0 descriptor?? [ 133.908527][ T5872] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 133.928899][ T5872] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 133.950586][ T5872] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 133.984466][ T5872] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 134.245930][ T30] audit: type=1400 audit(1774066822.574:442): avc: denied { create } for pid=6813 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.345522][ T30] audit: type=1400 audit(1774066822.574:443): avc: denied { write } for pid=6813 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.523032][ T6853] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 134.660415][ T30] audit: type=1400 audit(1774066822.974:444): avc: denied { sqpoll } for pid=6855 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.684302][ T6853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.968763][ T6861] bond1: (slave ip6gretap1): making interface the new active one [ 134.993747][ T6861] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 135.031636][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.255'. [ 135.044269][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.255'. [ 135.064381][ T6870] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 135.156272][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.344718][ T6878] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 135.722694][ T978] usb 2-1: USB disconnect, device number 3 [ 136.835972][ T30] audit: type=1400 audit(1774066825.184:445): avc: denied { write } for pid=6900 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.390639][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.270'. [ 137.586658][ T30] audit: type=1400 audit(1774066825.944:446): avc: denied { append } for pid=6905 comm="syz.4.271" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.946500][ T6912] overlayfs: missing 'lowerdir' [ 138.148300][ T6914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.253059][ T6923] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.280406][ T6923] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 138.297851][ T6923] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.326198][ T6923] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 138.800464][ T6936] netlink: 120 bytes leftover after parsing attributes in process `syz.4.278'. [ 138.812330][ T6936] netlink: 120 bytes leftover after parsing attributes in process `syz.4.278'. [ 138.826375][ T6936] netlink: 120 bytes leftover after parsing attributes in process `syz.4.278'. [ 138.917228][ T30] audit: type=1800 audit(1774066827.274:447): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.279" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 138.986638][ T6946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.492710][ T30] audit: type=1400 audit(1774066828.854:448): avc: denied { bind } for pid=6956 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.831538][ T6969] lo speed is unknown, defaulting to 1000 [ 140.868172][ T6969] lo speed is unknown, defaulting to 1000 [ 141.027506][ T6969] lo speed is unknown, defaulting to 1000 [ 141.038231][ T30] audit: type=1800 audit(1774066829.384:449): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.288" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 141.087341][ T6969] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.125241][ T6969] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 141.338889][ T30] audit: type=1400 audit(1774066829.694:450): avc: denied { ioctl } for pid=6982 comm="syz.0.290" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 141.520168][ T6969] lo speed is unknown, defaulting to 1000 [ 141.529861][ T6994] macvlan2: entered promiscuous mode [ 141.537753][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.569161][ T6995] macvlan3: entered promiscuous mode [ 141.611778][ T6969] lo speed is unknown, defaulting to 1000 [ 141.647340][ T6969] lo speed is unknown, defaulting to 1000 [ 141.715763][ T6969] lo speed is unknown, defaulting to 1000 [ 141.723711][ T7004] netlink: 'syz.3.295': attribute type 10 has an invalid length. [ 141.754914][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.763008][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.837827][ T6969] lo speed is unknown, defaulting to 1000 [ 141.894937][ T6969] lo speed is unknown, defaulting to 1000 [ 142.086459][ T7022] netlink: 164 bytes leftover after parsing attributes in process `syz.3.302'. [ 142.095891][ T7022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.302'. [ 142.709047][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 142.735091][ T7034] syzkaller0: entered promiscuous mode [ 142.750400][ T7034] syzkaller0: entered allmulticast mode [ 143.206026][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 143.239131][ T30] audit: type=1400 audit(1774066831.594:451): avc: denied { name_bind } for pid=7052 comm="syz.3.312" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 143.271153][ T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.399607][ T7061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.417458][ T7061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.431957][ T29] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 143.440439][ T29] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 143.451531][ T29] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 143.461877][ T29] usb 2-1: config 220 has no interface number 2 [ 143.468193][ T29] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 143.481506][ T29] usb 2-1: config 220 interface 0 has no altsetting 0 [ 143.488338][ T29] usb 2-1: config 220 interface 76 has no altsetting 0 [ 143.495437][ T29] usb 2-1: config 220 interface 1 has no altsetting 0 [ 143.634244][ T29] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 143.644635][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.655084][ T29] usb 2-1: Product: syz [ 143.691320][ T29] usb 2-1: Manufacturer: syz [ 143.698039][ T29] usb 2-1: SerialNumber: syz [ 143.707980][ T7065] netlink: 120 bytes leftover after parsing attributes in process `syz.4.316'. [ 143.750381][ T7065] netlink: 120 bytes leftover after parsing attributes in process `syz.4.316'. [ 143.767873][ T7065] netlink: 120 bytes leftover after parsing attributes in process `syz.4.316'. [ 144.220369][ T5872] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.316351][ T7077] ufs: You didn't specify the type of your ufs filesystem [ 144.316351][ T7077] [ 144.316351][ T7077] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.316351][ T7077] [ 144.316351][ T7077] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.347368][ T7077] ufs: ufstype=old is supported read-only [ 144.354355][ T7077] ufs: ufs_fill_super(): bad magic number [ 144.552085][ T5872] usb 5-1: config 0 has no interfaces? [ 144.568673][ T5872] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 144.604443][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.638741][ T5872] usb 5-1: config 0 descriptor?? [ 144.665450][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'. [ 144.827130][ T30] audit: type=1400 audit(1774066833.184:452): avc: denied { write } for pid=7088 comm="syz.0.323" name="tcp" dev="proc" ino=4026532831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 145.396179][ T29] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 145.406298][ T5852] usb 5-1: USB disconnect, device number 4 [ 145.447227][ T29] uvcvideo 2-1:220.0: No valid video chain found. [ 145.477698][ T29] usb 2-1: selecting invalid altsetting 0 [ 145.639249][ T29] usb 2-1: selecting invalid altsetting 0 [ 145.705904][ T7101] FAULT_INJECTION: forcing a failure. [ 145.705904][ T7101] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.719661][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.2.325 Not tainted syzkaller #0 PREEMPT(full) [ 145.719684][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.719694][ T7101] Call Trace: [ 145.719700][ T7101] [ 145.719707][ T7101] dump_stack_lvl+0x100/0x190 [ 145.719740][ T7101] should_fail_ex.cold+0x5/0xa [ 145.719763][ T7101] _copy_from_user+0x2e/0xd0 [ 145.719782][ T7101] snd_seq_write+0x413/0x6d0 [ 145.719817][ T7101] ? __pfx_snd_seq_write+0x10/0x10 [ 145.719844][ T7101] ? bpf_lsm_file_permission+0x9/0x10 [ 145.719869][ T7101] ? security_file_permission+0x76/0x210 [ 145.719893][ T7101] ? rw_verify_area+0xce/0x6d0 [ 145.719919][ T7101] ? __pfx_snd_seq_write+0x10/0x10 [ 145.719943][ T7101] vfs_writev+0x5ea/0xe10 [ 145.719974][ T7101] ? __pfx_vfs_writev+0x10/0x10 [ 145.719997][ T7101] ? rcu_is_watching+0x12/0xc0 [ 145.720017][ T7101] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 145.720038][ T7101] ? lockdep_hardirqs_on+0x78/0x100 [ 145.720061][ T7101] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 145.720098][ T7101] ? __fget_files+0x21f/0x3d0 [ 145.720124][ T7101] ? do_writev+0x28a/0x340 [ 145.720151][ T7101] do_writev+0x28a/0x340 [ 145.720175][ T7101] ? __pfx_do_writev+0x10/0x10 [ 145.720207][ T7101] do_syscall_64+0x106/0xf80 [ 145.720228][ T7101] ? clear_bhb_loop+0x40/0x90 [ 145.720252][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.720269][ T7101] RIP: 0033:0x7f96e359c799 [ 145.720283][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.720297][ T7101] RSP: 002b:00007f96e43ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 145.720311][ T7101] RAX: ffffffffffffffda RBX: 00007f96e3816180 RCX: 00007f96e359c799 [ 145.720322][ T7101] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000007 [ 145.720331][ T7101] RBP: 00007f96e43ea090 R08: 0000000000000000 R09: 0000000000000000 [ 145.720341][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.720350][ T7101] R13: 00007f96e3816218 R14: 00007f96e3816180 R15: 00007ffc8daca278 [ 145.720374][ T7101] [ 145.929924][ T29] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 145.941001][ T29] usb 2-1: USB disconnect, device number 4 [ 146.008373][ T7103] netlink: 104 bytes leftover after parsing attributes in process `syz.1.327'. [ 146.210510][ T30] audit: type=1400 audit(1774066834.544:453): avc: denied { shutdown } for pid=7102 comm="syz.1.327" laddr=fe80::f lport=37793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.248706][ T30] audit: type=1800 audit(1774066834.584:454): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.326" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 146.518217][ T7113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.583383][ T7113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.277020][ T30] audit: type=1400 audit(1774066835.284:455): avc: denied { ioctl } for pid=7119 comm="syz.4.331" path="socket:[13140]" dev="sockfs" ino=13140 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.650881][ T30] audit: type=1326 audit(1774066835.964:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a39c799 code=0x7ffc0000 [ 147.877382][ T30] audit: type=1326 audit(1774066835.974:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a39c799 code=0x7ffc0000 [ 147.932249][ T7132] overlayfs: missing 'lowerdir' [ 147.992177][ T30] audit: type=1326 audit(1774066835.974:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a39c799 code=0x7ffc0000 [ 148.026925][ T30] audit: type=1326 audit(1774066835.974:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fed3a39c799 code=0x7ffc0000 [ 148.067186][ T30] audit: type=1326 audit(1774066835.974:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a39c799 code=0x7ffc0000 [ 148.094648][ T30] audit: type=1326 audit(1774066835.974:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7122 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a39c799 code=0x7ffc0000 [ 148.170311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 148.210299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 148.851974][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.4.337'. [ 148.860960][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.4.337'. [ 149.530593][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.567524][ T7160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.340'. [ 149.576609][ T7160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.340'. [ 149.820471][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 149.829542][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.841840][ T29] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.852599][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.868041][ T29] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 149.877838][ T29] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 149.887996][ T29] usb 3-1: Product: syz [ 149.896194][ T29] usb 3-1: Manufacturer: syz [ 149.905977][ T29] usb 3-1: SerialNumber: syz [ 149.962701][ T29] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input8 [ 150.214931][ T29] usb 3-1: USB disconnect, device number 5 [ 150.266749][ T29] appletouch 3-1:1.0: input: appletouch disconnected [ 150.424655][ T7181] x_tables: unsorted entry at hook 1 [ 151.723948][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 151.723960][ T30] audit: type=1800 audit(1774066840.084:527): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.356" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 151.885535][ T7211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.223900][ T7224] FAULT_INJECTION: forcing a failure. [ 152.223900][ T7224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.237066][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.0.358 Not tainted syzkaller #0 PREEMPT(full) [ 152.237088][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.237098][ T7224] Call Trace: [ 152.237104][ T7224] [ 152.237110][ T7224] dump_stack_lvl+0x100/0x190 [ 152.237142][ T7224] should_fail_ex.cold+0x5/0xa [ 152.237164][ T7224] _copy_from_user+0x2e/0xd0 [ 152.237182][ T7224] snd_seq_write+0x413/0x6d0 [ 152.237215][ T7224] ? __pfx_snd_seq_write+0x10/0x10 [ 152.237243][ T7224] ? bpf_lsm_file_permission+0x9/0x10 [ 152.237268][ T7224] ? security_file_permission+0x76/0x210 [ 152.237293][ T7224] ? rw_verify_area+0xce/0x6d0 [ 152.237319][ T7224] ? __pfx_snd_seq_write+0x10/0x10 [ 152.237343][ T7224] vfs_writev+0x5ea/0xe10 [ 152.237374][ T7224] ? __pfx_vfs_writev+0x10/0x10 [ 152.237397][ T7224] ? lockdep_hardirqs_on+0x78/0x100 [ 152.237419][ T7224] ? finish_task_switch.isra.0+0x205/0xb80 [ 152.237460][ T7224] ? __fget_files+0x21f/0x3d0 [ 152.237484][ T7224] ? do_writev+0x28a/0x340 [ 152.237507][ T7224] do_writev+0x28a/0x340 [ 152.237531][ T7224] ? __pfx_do_writev+0x10/0x10 [ 152.237562][ T7224] do_syscall_64+0x106/0xf80 [ 152.237583][ T7224] ? clear_bhb_loop+0x40/0x90 [ 152.237604][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.237621][ T7224] RIP: 0033:0x7fed3a39c799 [ 152.237636][ T7224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.237651][ T7224] RSP: 002b:00007fed3b1df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 152.237669][ T7224] RAX: ffffffffffffffda RBX: 00007fed3a616180 RCX: 00007fed3a39c799 [ 152.237680][ T7224] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000007 [ 152.237690][ T7224] RBP: 00007fed3b1df090 R08: 0000000000000000 R09: 0000000000000000 [ 152.237700][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.237709][ T7224] R13: 00007fed3a616218 R14: 00007fed3a616180 R15: 00007fffe3825718 [ 152.237732][ T7224] [ 152.550305][ T7211] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.668008][ T7211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.679225][ T7211] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.766637][ T7228] syz.3.360 uses obsolete (PF_INET,SOCK_PACKET) [ 152.906351][ T7211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.907669][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.363'. [ 152.928950][ T7211] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 153.798776][ T7211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.829253][ T7211] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 154.132287][ T77] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.234664][ T77] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.739243][ T30] audit: type=1400 audit(1774066843.094:528): avc: denied { name_bind } for pid=7264 comm="syz.2.369" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 154.769492][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.772355][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 154.786597][ T36] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.812494][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.821601][ T7267] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 154.832767][ T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.867500][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.885872][ T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 154.929692][ T7267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.949806][ T7271] bond3: (slave ip6gretap1): making interface the new active one [ 154.975355][ T7271] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 155.147855][ T30] audit: type=1400 audit(1774066843.504:529): avc: denied { getopt } for pid=7278 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.639703][ T30] audit: type=1400 audit(1774066843.504:530): avc: denied { ioctl } for pid=7278 comm="syz.0.371" path="socket:[13482]" dev="sockfs" ino=13482 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.669751][ T7284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 155.676343][ T7284] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 155.711185][ T7284] vhci_hcd vhci_hcd.0: Device attached [ 155.816920][ T7285] vhci_hcd: connection closed [ 155.818573][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 155.853493][ T1141] vhci_hcd vhci_hcd.0: release socket [ 155.863789][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 155.920491][ T5872] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 156.077686][ T7294] bridge3: entered promiscuous mode [ 156.117017][ T7294] bridge3: entered allmulticast mode [ 156.261273][ T7297] netlink: 120 bytes leftover after parsing attributes in process `syz.3.376'. [ 156.282832][ T7297] netlink: 120 bytes leftover after parsing attributes in process `syz.3.376'. [ 156.321031][ T7297] netlink: 120 bytes leftover after parsing attributes in process `syz.3.376'. [ 156.430393][ T7299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.377'. [ 157.569811][ T7330] FAULT_INJECTION: forcing a failure. [ 157.569811][ T7330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.583027][ T7330] CPU: 0 UID: 0 PID: 7330 Comm: syz.0.386 Not tainted syzkaller #0 PREEMPT(full) [ 157.583049][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.583058][ T7330] Call Trace: [ 157.583064][ T7330] [ 157.583070][ T7330] dump_stack_lvl+0x100/0x190 [ 157.583101][ T7330] should_fail_ex.cold+0x5/0xa [ 157.583123][ T7330] _copy_from_user+0x2e/0xd0 [ 157.583141][ T7330] snd_seq_write+0x413/0x6d0 [ 157.583174][ T7330] ? __pfx_snd_seq_write+0x10/0x10 [ 157.583203][ T7330] ? bpf_lsm_file_permission+0x9/0x10 [ 157.583228][ T7330] ? security_file_permission+0x76/0x210 [ 157.583253][ T7330] ? rw_verify_area+0xce/0x6d0 [ 157.583278][ T7330] ? __pfx_snd_seq_write+0x10/0x10 [ 157.583302][ T7330] vfs_writev+0x5ea/0xe10 [ 157.583332][ T7330] ? __pfx_vfs_writev+0x10/0x10 [ 157.583355][ T7330] ? lockdep_hardirqs_on+0x78/0x100 [ 157.583378][ T7330] ? finish_task_switch.isra.0+0x205/0xb80 [ 157.583418][ T7330] ? __fget_files+0x21f/0x3d0 [ 157.583443][ T7330] ? do_writev+0x28a/0x340 [ 157.583466][ T7330] do_writev+0x28a/0x340 [ 157.583490][ T7330] ? __pfx_do_writev+0x10/0x10 [ 157.583522][ T7330] do_syscall_64+0x106/0xf80 [ 157.583543][ T7330] ? clear_bhb_loop+0x40/0x90 [ 157.583564][ T7330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.583582][ T7330] RIP: 0033:0x7fed3a39c799 [ 157.583596][ T7330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.583612][ T7330] RSP: 002b:00007fed3b1df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 157.583629][ T7330] RAX: ffffffffffffffda RBX: 00007fed3a616180 RCX: 00007fed3a39c799 [ 157.583640][ T7330] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000007 [ 157.583650][ T7330] RBP: 00007fed3b1df090 R08: 0000000000000000 R09: 0000000000000000 [ 157.583660][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.583670][ T7330] R13: 00007fed3a616218 R14: 00007fed3a616180 R15: 00007fffe3825718 [ 157.583694][ T7330] [ 158.158296][ T30] audit: type=1400 audit(1774066846.514:531): avc: denied { read write } for pid=7339 comm="syz.4.391" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.231246][ T30] audit: type=1400 audit(1774066846.514:532): avc: denied { open } for pid=7339 comm="syz.4.391" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.283832][ T30] audit: type=1400 audit(1774066846.514:533): avc: denied { ioctl } for pid=7339 comm="syz.4.391" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.293862][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'. [ 158.309433][ T30] audit: type=1326 audit(1774066846.644:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c99c799 code=0x7ffc0000 [ 158.684555][ T30] audit: type=1326 audit(1774066846.644:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c99c799 code=0x7ffc0000 [ 158.716762][ T30] audit: type=1326 audit(1774066846.644:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c99c799 code=0x7ffc0000 [ 158.745207][ T30] audit: type=1326 audit(1774066846.644:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c99c799 code=0x7ffc0000 [ 158.942250][ T30] audit: type=1326 audit(1774066846.644:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f312c99c799 code=0x7ffc0000 [ 158.969885][ T30] audit: type=1326 audit(1774066846.644:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c99c799 code=0x7ffc0000 [ 159.155425][ T30] audit: type=1326 audit(1774066846.644:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c99c799 code=0x7ffc0000 [ 159.283256][ T7364] netlink: 'syz.3.397': attribute type 4 has an invalid length. [ 159.291628][ T7364] netlink: 17 bytes leftover after parsing attributes in process `syz.3.397'. [ 160.584768][ T7386] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 161.540667][ T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 161.681621][ T7404] overlayfs: missing 'lowerdir' [ 161.772170][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.804913][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 162.047749][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.236488][ T29] usb 2-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 162.278524][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.300351][ T29] usb 2-1: Product: syz [ 162.309064][ T29] usb 2-1: Manufacturer: syz [ 162.329619][ T29] usb 2-1: SerialNumber: syz [ 162.340132][ T29] usb 2-1: config 0 descriptor?? [ 162.351187][ T29] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 162.353136][ T29] usb 2-1: Detected SIO [ 162.353155][ T29] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 162.356635][ T29] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.550699][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.559281][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.578742][ T7394] lo speed is unknown, defaulting to 1000 [ 162.811546][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.999243][ T29] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 163.008738][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.017072][ T29] usb 5-1: Product: syz [ 163.025317][ T29] usb 5-1: Manufacturer: syz [ 163.032176][ T29] usb 5-1: SerialNumber: syz [ 163.305923][ T7427] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 163.317773][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 163.317787][ T30] audit: type=1400 audit(1774066851.684:604): avc: denied { relabelto } for pid=7426 comm="syz.2.412" name="80" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 163.422578][ T30] audit: type=1400 audit(1774066851.714:605): avc: denied { associate } for pid=7426 comm="syz.2.412" name="80" dev="tmpfs" ino=431 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 163.506369][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.531896][ T29] usb 5-1: MIDIStreaming interface descriptor not found [ 163.534874][ T30] audit: type=1400 audit(1774066851.884:606): avc: denied { remove_name } for pid=5809 comm="syz-executor" name="file0" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 163.943838][ T30] audit: type=1400 audit(1774066851.934:607): avc: denied { rmdir } for pid=5809 comm="syz-executor" name="80" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 163.966673][ T29] usb 5-1: USB disconnect, device number 5 [ 164.072654][ T7451] binder: 7444:7451 ioctl c0306201 0 returned -14 [ 164.081916][ T7451] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 164.101760][ T7451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.116552][ T7451] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 164.139595][ T7451] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 164.147406][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.416'. [ 164.157285][ T7451] batadv0: entered promiscuous mode [ 164.162547][ T7451] batadv0: entered allmulticast mode [ 164.191144][ T10] usb 2-1: USB disconnect, device number 5 [ 164.565422][ T30] audit: type=1800 audit(1774066852.254:608): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.413" name="nullb0" dev="tmpfs" ino=190 res=0 errno=0 [ 164.612180][ T7451] bond0: (slave batadv0): Releasing backup interface [ 164.637819][ T7451] bridge0: port 3(batadv0) entered blocking state [ 164.638067][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.647071][ T7451] bridge0: port 3(batadv0) entered disabled state [ 164.678599][ T30] audit: type=1400 audit(1774066852.424:609): avc: denied { read } for pid=7444 comm="syz.2.416" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.708090][ T6324] udevd[6324]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.755233][ T10] ftdi_sio 2-1:0.0: device disconnected [ 164.854186][ T30] audit: type=1400 audit(1774066852.424:610): avc: denied { open } for pid=7444 comm="syz.2.416" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.929203][ T30] audit: type=1400 audit(1774066852.434:611): avc: denied { ioctl } for pid=7444 comm="syz.2.416" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.964956][ T5919] Process accounting resumed [ 165.021309][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.419'. [ 165.030158][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.419'. [ 165.111137][ T422] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 165.120647][ T422] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 165.253718][ T7476] netlink: 400 bytes leftover after parsing attributes in process `syz.3.421'. [ 165.303462][ T7476] netlink: 'syz.3.421': attribute type 16 has an invalid length. [ 165.340816][ T7476] netlink: 'syz.3.421': attribute type 17 has an invalid length. [ 165.407784][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.414914][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.422951][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.430016][ T7476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.680597][ T7476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.700611][ T7488] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 166.018850][ T7494] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 166.027652][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.035239][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.923835][ T30] audit: type=1400 audit(1774066855.284:612): avc: denied { open } for pid=7498 comm="syz.1.427" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 167.080916][ T30] audit: type=1400 audit(1774066855.284:613): avc: denied { ioctl } for pid=7498 comm="syz.1.427" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 167.218473][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 167.487967][ T7513] netlink: 17780 bytes leftover after parsing attributes in process `syz.2.429'. [ 168.984240][ T5919] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.016553][ T7532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.049629][ T7532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.325766][ T5919] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.348939][ T7540] netlink: 120 bytes leftover after parsing attributes in process `syz.3.440'. [ 169.363985][ T5919] usb 3-1: config 0 has no interface number 0 [ 169.405938][ T7540] netlink: 120 bytes leftover after parsing attributes in process `syz.3.440'. [ 169.419026][ T7540] netlink: 120 bytes leftover after parsing attributes in process `syz.3.440'. [ 169.428169][ T5919] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 169.437681][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.450746][ T5919] usb 3-1: Product: syz [ 169.484928][ T5919] usb 3-1: Manufacturer: syz [ 169.489547][ T5919] usb 3-1: SerialNumber: syz [ 169.504459][ T5919] usb 3-1: config 0 descriptor?? [ 169.550983][ T7542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.728860][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 169.728875][ T30] audit: type=1400 audit(1774066858.084:616): avc: denied { read write } for pid=7524 comm="syz.2.435" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.795048][ T5919] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 169.878644][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 170.216911][ T5919] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.228679][ T30] audit: type=1400 audit(1774066858.124:617): avc: denied { ioctl open } for pid=7524 comm="syz.2.435" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.261761][ T5919] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 170.273681][ T5919] usb 3-1: media controller created [ 170.285548][ T30] audit: type=1400 audit(1774066858.154:618): avc: denied { bind } for pid=7524 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.311806][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.342368][ T5919] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 171.631199][ T5919] usb 3-1: USB disconnect, device number 6 [ 171.957750][ T5872] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.053435][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.083888][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.190438][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 172.209655][ T5872] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 172.221940][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.468919][ T5872] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 172.494805][ T5872] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 172.726052][ T5919] usb 5-1: USB disconnect, device number 6 [ 172.904205][ T7599] process 'syz.2.457' launched './file2' with NULL argv: empty string added [ 173.064216][ T30] audit: type=1400 audit(1774066861.254:619): avc: denied { bind } for pid=7598 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.159636][ T30] audit: type=1400 audit(1774066861.274:620): avc: denied { execute_no_trans } for pid=7598 comm="syz.2.457" path="/88/file2" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 176.040779][ T30] audit: type=1400 audit(1774066864.394:621): avc: denied { append } for pid=7632 comm="syz.0.466" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.637050][ T30] audit: type=1400 audit(1774066865.694:622): avc: denied { create } for pid=7641 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.731462][ T30] audit: type=1400 audit(1774066865.694:623): avc: denied { mounton } for pid=7641 comm="syz.2.469" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 177.850018][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 177.873021][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 177.964074][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 178.020709][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 178.198611][ T7670] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.285949][ T7670] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.286495][ T10] libceph: connect (1)[c::]:6789 error -101 [ 178.298214][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 178.307777][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 178.384854][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.476'. [ 178.394543][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.476'. [ 178.499687][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 178.711667][ T7670] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.781685][ T30] audit: type=1400 audit(1774066867.144:624): avc: denied { getopt } for pid=7649 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.878154][ T29] libceph: connect (1)[c::]:6789 error -101 [ 178.891567][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 179.598212][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 179.618223][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 179.629489][ T7680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.478'. [ 179.639970][ T7680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.478'. [ 179.771797][ T7670] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.026261][ T424] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.124202][ T424] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.260840][ T30] audit: type=1400 audit(1774066868.594:625): avc: denied { set_context_mgr } for pid=7689 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 180.602714][ T29] libceph: connect (1)[c::]:6789 error -101 [ 180.609362][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 180.664936][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.731039][ T6348] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.778011][ T7657] ceph: No mds server is up or the cluster is laggy [ 180.791211][ T7652] ceph: No mds server is up or the cluster is laggy [ 181.085197][ T7698] ptrace attach of "./syz-executor exec"[7697] was attempted by "./syz-executor exec"[7698] [ 181.570973][ T30] audit: type=1400 audit(1774066869.904:626): avc: denied { create } for pid=7707 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.605669][ T30] audit: type=1400 audit(1774066869.914:627): avc: denied { write } for pid=7707 comm="syz.4.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.630399][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.632566][ T7716] netlink: 'syz.3.488': attribute type 5 has an invalid length. [ 181.666358][ T7716] netlink: 'syz.3.488': attribute type 4 has an invalid length. [ 181.682791][ T7714] lo speed is unknown, defaulting to 1000 [ 181.932081][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 181.939314][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.947845][ T10] usb 3-1: config 4 has an invalid interface number: 25 but max is 0 [ 181.956745][ T10] usb 3-1: config 4 has no interface number 0 [ 181.967293][ T10] usb 3-1: config 4 interface 25 has no altsetting 0 [ 181.996955][ T10] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 182.026355][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.042700][ T10] usb 3-1: Product: syz [ 182.057408][ T10] usb 3-1: Manufacturer: syz [ 182.073271][ T10] usb 3-1: SerialNumber: syz [ 182.453143][ T10] go7007 3-1:4.25: probe with driver go7007 failed with error -12 [ 182.479239][ T10] usb 3-1: USB disconnect, device number 7 [ 183.042112][ T7724] x_tables: unsorted entry at hook 1 [ 183.052952][ T5817] ================================================================== [ 183.061030][ T5817] BUG: KASAN: stack-out-of-bounds in l2cap_send_cmd+0x9a5/0xc80 [ 183.068673][ T5817] Read of size 26 at addr ffffc90004237a60 by task kworker/u9:5/5817 [ 183.076719][ T5817] [ 183.079020][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 183.079035][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.079044][ T5817] Workqueue: hci0 hci_rx_work [ 183.079060][ T5817] Call Trace: [ 183.079066][ T5817] [ 183.079072][ T5817] dump_stack_lvl+0x100/0x190 [ 183.079092][ T5817] print_report+0x156/0x4c9 [ 183.079107][ T5817] ? _raw_spin_lock_irqsave+0x52/0x60 [ 183.079121][ T5817] ? __virt_addr_valid+0x81/0x620 [ 183.079137][ T5817] ? l2cap_send_cmd+0x9a5/0xc80 [ 183.079152][ T5817] kasan_report+0xdf/0x1e0 [ 183.079164][ T5817] ? l2cap_send_cmd+0x9a5/0xc80 [ 183.079181][ T5817] kasan_check_range+0x10f/0x1e0 [ 183.079193][ T5817] __asan_memcpy+0x23/0x60 [ 183.079207][ T5817] l2cap_send_cmd+0x9a5/0xc80 [ 183.079225][ T5817] l2cap_recv_frame+0x6349/0x9f80 [ 183.079239][ T5817] ? preempt_schedule_common+0x42/0xc0 [ 183.079253][ T5817] ? preempt_schedule_thunk+0x16/0x30 [ 183.079268][ T5817] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 183.079280][ T5817] ? __mutex_lock+0x8ef/0x1b90 [ 183.079294][ T5817] ? find_held_lock+0x2b/0x80 [ 183.079308][ T5817] ? l2cap_recv_acldata+0x1e4/0x10a0 [ 183.079320][ T5817] ? l2cap_recv_acldata+0x1bb/0x10a0 [ 183.079333][ T5817] ? __pfx___mutex_lock+0x10/0x10 [ 183.079347][ T5817] ? __mutex_unlock_slowpath+0x15c/0x790 [ 183.079362][ T5817] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.079378][ T5817] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 183.079391][ T5817] ? find_held_lock+0x2b/0x80 [ 183.079404][ T5817] ? l2cap_recv_acldata+0x14d/0x10a0 [ 183.079417][ T5817] l2cap_recv_acldata+0xe60/0x10a0 [ 183.079431][ T5817] hci_rx_work+0x537/0xfc0 [ 183.079444][ T5817] process_one_work+0xa23/0x19a0 [ 183.079458][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 183.079472][ T5817] ? __pfx_hci_rx_work+0x10/0x10 [ 183.079484][ T5817] worker_thread+0x5ef/0xe50 [ 183.079496][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 183.079507][ T5817] ? kthread+0x13a/0x450 [ 183.079517][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 183.079527][ T5817] kthread+0x370/0x450 [ 183.079538][ T5817] ? __pfx_kthread+0x10/0x10 [ 183.079548][ T5817] ret_from_fork+0x754/0xd80 [ 183.079559][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 183.079570][ T5817] ? __switch_to+0x7b4/0x1120 [ 183.079583][ T5817] ? __pfx_kthread+0x10/0x10 [ 183.079593][ T5817] ret_from_fork_asm+0x1a/0x30 [ 183.079609][ T5817] [ 183.079612][ T5817] [ 183.312555][ T5817] The buggy address belongs to stack of task kworker/u9:5/5817 [ 183.320070][ T5817] and is located at offset 160 in frame: [ 183.325759][ T5817] l2cap_recv_frame+0x0/0x9f80 [ 183.330520][ T5817] [ 183.332817][ T5817] This frame has 10 objects: [ 183.337379][ T5817] [48, 50) 'rsp' [ 183.337390][ T5817] [64, 68) 'rsp' [ 183.341002][ T5817] [80, 86) 'rej' [ 183.344610][ T5817] [112, 122) 'rsp' [ 183.348213][ T5817] [144, 148) 'rsp' [ 183.351993][ T5817] [160, 178) 'pdu_u' [ 183.355772][ T5817] [224, 264) 'chan' [ 183.359724][ T5817] [304, 308) 'rx_func_to_event' [ 183.363593][ T5817] [320, 328) 'buf' [ 183.368506][ T5817] [352, 364) 'buf' [ 183.372282][ T5817] [ 183.378355][ T5817] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90004230000 allocated at kernel_clone+0xfc/0x9a0 [ 183.391106][ T5817] The buggy address belongs to the physical page: [ 183.397489][ T5817] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b107 [ 183.406226][ T5817] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 183.413316][ T5817] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 183.421878][ T5817] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 183.430456][ T5817] page dumped because: kasan: bad access detected [ 183.436841][ T5817] page_owner tracks the page as allocated [ 183.442526][ T5817] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 60643563301, free_ts 60626064950 [ 183.461254][ T5817] post_alloc_hook+0x153/0x170 [ 183.466002][ T5817] get_page_from_freelist+0x111d/0x3140 [ 183.471531][ T5817] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 183.477410][ T5817] __alloc_pages_noprof+0xb/0x1b0 [ 183.482420][ T5817] __vmalloc_node_range_noprof+0xd29/0x1530 [ 183.488292][ T5817] __vmalloc_node_noprof+0xad/0xf0 [ 183.493385][ T5817] copy_process+0x5ec/0x7a40 [ 183.497954][ T5817] kernel_clone+0xfc/0x9a0 [ 183.502348][ T5817] kernel_thread+0xdb/0x120 [ 183.506833][ T5817] kthreadd+0x498/0x7a0 [ 183.510962][ T5817] ret_from_fork+0x754/0xd80 [ 183.515528][ T5817] ret_from_fork_asm+0x1a/0x30 [ 183.520268][ T5817] page last free pid 5804 tgid 5804 stack trace: [ 183.526575][ T5817] __free_frozen_pages+0x7e1/0x10d0 [ 183.531749][ T5817] qlist_free_all+0x47/0xe0 [ 183.536233][ T5817] kasan_quarantine_reduce+0x1a0/0x1f0 [ 183.541672][ T5817] __kasan_slab_alloc+0x69/0x90 [ 183.546509][ T5817] __kmalloc_cache_noprof+0x243/0x6f0 [ 183.551860][ T5817] kset_create_and_add+0x4d/0x190 [ 183.556866][ T5817] netdev_register_kobject+0x1ef/0x3d0 [ 183.562312][ T5817] register_netdevice+0x12e0/0x2210 [ 183.567507][ T5817] register_netdev+0x34/0x50 [ 183.572088][ T5817] loopback_net_init+0x7a/0x170 [ 183.576923][ T5817] ops_init+0x1e2/0x5f0 [ 183.581060][ T5817] setup_net+0x118/0x3a0 [ 183.585282][ T5817] copy_net_ns+0x46f/0x7c0 [ 183.589678][ T5817] create_new_namespaces+0x3ea/0xac0 [ 183.594945][ T5817] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 183.600557][ T5817] ksys_unshare+0x473/0xad0 [ 183.605041][ T5817] [ 183.607359][ T5817] Memory state around the buggy address: [ 183.612960][ T5817] ffffc90004237900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 183.620995][ T5817] ffffc90004237980: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f1 f1 02 f2 [ 183.629031][ T5817] >ffffc90004237a00: 04 f2 06 f2 f2 f2 00 02 f2 f2 04 f2 00 00 02 f2 [ 183.637063][ T5817] ^ [ 183.644750][ T5817] ffffc90004237a80: f2 f2 f2 f2 00 00 00 00 00 f2 f2 f2 f2 f2 04 f2 [ 183.652783][ T5817] ffffc90004237b00: 00 f2 f2 f2 00 04 f3 f3 00 00 00 00 00 00 00 00 [ 183.660824][ T5817] ================================================================== [ 183.682196][ T30] audit: type=1400 audit(1774066872.034:628): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 183.704218][ T5817] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 183.711411][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 183.720849][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.730881][ T5817] Workqueue: hci0 hci_rx_work [ 183.735552][ T5817] Call Trace: [ 183.738809][ T5817] [ 183.741721][ T5817] dump_stack_lvl+0x100/0x190 [ 183.746383][ T5817] vpanic+0x552/0x970 [ 183.750346][ T5817] ? __pfx_vpanic+0x10/0x10 [ 183.754836][ T5817] ? l2cap_send_cmd+0x9a5/0xc80 [ 183.759673][ T5817] panic+0xd1/0xe0 [ 183.763370][ T5817] ? __pfx_panic+0x10/0x10 [ 183.767761][ T5817] ? l2cap_send_cmd+0x9a5/0xc80 [ 183.772595][ T5817] ? preempt_schedule_common+0x42/0xc0 [ 183.778039][ T5817] check_panic_on_warn.cold+0x19/0x34 [ 183.783387][ T5817] end_report.part.0+0x3a/0x90 [ 183.788132][ T5817] kasan_report.cold+0xe/0x18 [ 183.792791][ T5817] ? l2cap_send_cmd+0x9a5/0xc80 [ 183.797628][ T5817] kasan_check_range+0x10f/0x1e0 [ 183.802543][ T5817] __asan_memcpy+0x23/0x60 [ 183.806942][ T5817] l2cap_send_cmd+0x9a5/0xc80 [ 183.811615][ T5817] l2cap_recv_frame+0x6349/0x9f80 [ 183.816636][ T5817] ? preempt_schedule_common+0x42/0xc0 [ 183.822078][ T5817] ? preempt_schedule_thunk+0x16/0x30 [ 183.827440][ T5817] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 183.832795][ T5817] ? __mutex_lock+0x8ef/0x1b90 [ 183.837541][ T5817] ? find_held_lock+0x2b/0x80 [ 183.842197][ T5817] ? l2cap_recv_acldata+0x1e4/0x10a0 [ 183.847467][ T5817] ? l2cap_recv_acldata+0x1bb/0x10a0 [ 183.852735][ T5817] ? __pfx___mutex_lock+0x10/0x10 [ 183.857745][ T5817] ? __mutex_unlock_slowpath+0x15c/0x790 [ 183.863362][ T5817] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.869327][ T5817] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 183.875658][ T5817] ? find_held_lock+0x2b/0x80 [ 183.880319][ T5817] ? l2cap_recv_acldata+0x14d/0x10a0 [ 183.885587][ T5817] l2cap_recv_acldata+0xe60/0x10a0 [ 183.890679][ T5817] hci_rx_work+0x537/0xfc0 [ 183.895078][ T5817] process_one_work+0xa23/0x19a0 [ 183.899999][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 183.905353][ T5817] ? __pfx_hci_rx_work+0x10/0x10 [ 183.910277][ T5817] worker_thread+0x5ef/0xe50 [ 183.914847][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 183.919936][ T5817] ? kthread+0x13a/0x450 [ 183.924155][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 183.929246][ T5817] kthread+0x370/0x450 [ 183.933294][ T5817] ? __pfx_kthread+0x10/0x10 [ 183.937861][ T5817] ret_from_fork+0x754/0xd80 [ 183.942430][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 183.947531][ T5817] ? __switch_to+0x7b4/0x1120 [ 183.952362][ T5817] ? __pfx_kthread+0x10/0x10 [ 183.956938][ T5817] ret_from_fork_asm+0x1a/0x30 [ 183.961688][ T5817] [ 183.964982][ T5817] Kernel Offset: disabled [ 183.969290][ T5817] Rebooting in 86400 seconds..