last executing test programs: 9.539977264s ago: executing program 3 (id=317): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x88040) (rerun: 32) ioctl$FE_GET_INFO(r4, 0x80a86f3d, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000340), &(0x7f0000000900)=0x4) (async) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000300)={0x2, "acb632ef00833a502bb97d89bdf34ec0f9c214792571d432c5887dbe5f562e1c"}) (async, rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51eaffff4d01000000000000000000e300"}) (async, rerun: 32) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f00000002c0)=0x3) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000), 0x5c) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) 8.940389147s ago: executing program 3 (id=318): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = accept4$tipc(r0, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x800) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, @generic={0x22, "3c2e5b7ac9fc2d53b666ff363433"}, @ax25={0x3, @bcast}, @l2={0x1f, 0x18, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x101, &(0x7f00000000c0)='wg0\x00', 0x6, 0x100, 0x800}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000000070103000000000000000000000000090001000000a74abbf0a3e886a976005628f807234fb57f5bb1f91198df650b63d0da470b32a06ade7604a31311dd52acb20ba71fe9f3c2a3a1dffe23d5ba6307b3bb4c1298edf4f789f01ee9fbd3d40b8642dc25b1527b143e0789f000a44d54d7955b40a2b1efb63179c2f8d0226ca51834fee6a35ddd0daa3165232a113d892d3b905bc261a101e268642e72ae290197a90ede182dc2bf6c920a17d86f00b452093a3dbbc884555d99c5d554fefe0790ebc809e2267b8251d8"], 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000030701032f83e19ed579cbd1ac1d9bdc3a14e9c3a38d2d56c32e6da9bb29ba29847a55643aecf473891b4800d6a6d9be9c85316bdd5bba73965fac4eaa431295fa52a68924f239bd197bfe30e1da31a63ffdfb7cab700e690e4fce8eda6f9786dadccc3b5ec29f5d975da6896b394c616ffbe99d65abb8e37995dea5af8559f0ae7115b1826f9cee634d3aebbabfbcccc2ad806d5b5c43cfb6e014ad236f4093c1b2983a37476436b5f5550c4fcc940abfd48681b850f9fa9a4fcea7685a59c72463a515b566eb4479601a579ec8ac98af22ffa9cdd2"], 0x14}}, 0x4040000) 8.708604881s ago: executing program 3 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x4ca31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 8.227924643s ago: executing program 3 (id=322): open_tree(0xffffffffffffffff, 0x0, 0x48800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xefc8, 0x1f480, 0x0, 0x332}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 8.227236757s ago: executing program 1 (id=323): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x80000, @mcast1={0xff, 0x5}}, 0x6d) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaa0a0535810800450800240000000000119078ac1414bbe000000100004e20001090780209000080000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000d80)={0x2, 0x0, {&(0x7f0000000c40)=""/203, 0xcb, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000004c0)=""/26, 0xfffffc26, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x200a4800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf04414605200a", 0xe9}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0xff95}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0x37}, 0x28) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f0000000600)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b46", 0x35}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12", 0x2b}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) 6.850793634s ago: executing program 0 (id=324): socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpgrp(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)='ubifs\x00', 0x1a0c099, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002640)={0x4c, r2, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000810) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}, 0x1, 0x0, 0x0, 0x4000045}, 0x40000) 6.315722553s ago: executing program 3 (id=326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a", 0x66}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf5000000) 6.315389011s ago: executing program 1 (id=327): socket$inet6_udp(0xa, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000000740)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004840) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x4c855) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) socket$key(0xf, 0x3, 0x2) 6.252232747s ago: executing program 2 (id=328): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000140)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000080)=0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@my=0x0, 0x2}, @host, 0x0, 0x6, 0x10000000005d, 0x6fa, 0x4, 0x3, 0x28e}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 6.163104997s ago: executing program 3 (id=329): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xcb, 0xfffffffb, {0x0}, {0xee00}, 0xff, 0x5}) prlimit64(r0, 0x9, &(0x7f0000000140)={0x5e149cb8, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r5 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x7, 0x40800) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f0000000100)) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000001b80)=[{{&(0x7f0000000280)=@l2={0x1f, 0x4, @none, 0x9, 0x1}, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x13c8}}, {{&(0x7f00000018c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001940)="28bfb929d6bd6e23a216245fc262c192c9dbc9164e1cfd66838785988c13dfff3158af578283cea6a0d11375431b5dc1e3ee7a122eb31f", 0x37}], 0x1, &(0x7f0000001c00)=[{0x20, 0x10d, 0x2, "2bd2b0f815d167d550a57fcad788"}, {0xf8, 0x0, 0xce, "1f550b75cf704f040ddaf2d9acd1279aff9dc245505d66e08ae7f04b6d157badf8e0af4f2c12f7ea2d3c0e4bbb52bee0c5b09e305fc8f90f50aac180b8d75916a11b3e5a21e8c53e6ee73d5ffb88418715150dab713f648041afe35610545834fc51e86e3e8ba5bba7429c42d4260093dcd2a670764264dd7e81dc36a04b2b2c72f82eb394bc5fca7dbe0e0056c5af533cdb5842576b3804eaaf60953ba0be8be8af74620c693d9f32d0a989cb4a842f7b68e1c3f95403d4fcb1221a6242001231d5e606017fa344f49e2db9d111ec00ffcd2fe27c0fd8fb7e6bd55d290bf07e419aac9390d8"}, {0x90, 0x10a, 0xe1fe, "3e2c36fbf6b27fd37cd969453175aa9bd645a4e8b46cb6282184a54b810c860fc7b0ca41a7b07bc1a3c8b4c7621a4d920642f8fca6381075031dd7e5794eedb50fd766b873016885e211c4e3798a466d799df2f8734f99dff61b64fe6c89672e8d09b546fe63abc2df98d967c8e29f3072f486207d6710549136163b"}, {0x38, 0x10c, 0x9, "8522417b8b6e9d5ce3ba39562e139fd2ab105d0841c3167e476ab1259cfb9025712b"}], 0x1e0}}], 0x2, 0x300) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.519980959s ago: executing program 4 (id=330): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r0, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x800) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000000070103000000000000000000000000090001000000a74abbf0a3e886a976005628f807234fb57f5bb1f91198df650b63d0da470b32a06ade7604a31311dd52acb20ba71fe9f3c2a3a1dffe23d5ba6307b3bb4c1298edf4f789f01ee9fbd3d40b8642dc25b1527b143e0789f000a44d54d7955b40a2b1efb63179c2f8d0226ca51834fee6a35ddd0daa3165232a113d892d3b905bc261a101e268642e72ae290197a90ede182dc2bf6c920a17d86f00b452093a3dbbc884555d99c5d554fefe0790ebc809e2267b8251d8"], 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000030701032f83e19ed579cbd1ac1d9bdc3a14e9c3a38d2d56c32e6da9bb29ba29847a55643aecf473891b4800d6a6d9be9c85316bdd5bba73965fac4eaa431295fa52a68924f239bd197bfe30e1da31a63ffdfb7cab700e690e4fce8eda6f9786dadccc3b5ec29f5d975da6896b394c616ffbe99d65abb8e37995dea5af8559f0ae7115b1826f9cee634d3aebbabfbcccc2ad806d5b5c43cfb6e014ad236f4093c1b2983a37476436b5f5550c4fcc940abfd48681b850f9fa9a4fcea7685a59c72463a515b566eb4479601a579ec8ac98af22ffa9cdd2"], 0x14}}, 0x4040000) 5.37314253s ago: executing program 1 (id=331): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = eventfd2(0x2, 0x1) writev(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10800440}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, 0x1403, 0x200, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4880}, 0x400c000) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.365051922s ago: executing program 2 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000000)=0xd, r0, &(0x7f0000000040)=0x8, 0x100000000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0xa, 0x6) socket$rds(0x15, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x2000000000000, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x101, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) 5.234544467s ago: executing program 4 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4300fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e040000000000000019cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2509b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f980763802788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06470635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b5af41c4bce81eda040ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_RUN(r2, 0xae80, 0xf8000000) 4.963819096s ago: executing program 0 (id=334): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0xc, 0x6, 0x7, 0x80, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x1840, 0x4) 4.782648358s ago: executing program 4 (id=335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) 4.586898732s ago: executing program 4 (id=336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060108000000000000000000010000050005000a000000050001000700000005000400010000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008001340"], 0x5c}}, 0x0) 4.371684255s ago: executing program 2 (id=337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair(0x1, 0x1, 0x7, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000780)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01002cbd700000120000010000000c0002000200000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRESOCT=r3, @ANYRESHEX=r4, @ANYRES32=r2, @ANYBLOB="0c0001c008000100", @ANYRES8=r5, @ANYBLOB="0c000500e201"], 0x6c}}, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000400002000080000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1f, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005800000000000000900000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="42dbf03aae3a871e601b78c77cddfc72886cf3f6f2e07e66d535b39efe4f013b807180d3e15be015703c9187d7a69cddcaab0ec25153a4e8c9aac2486b9709fd3ace443d9bf784ed2682e8154c890869705eb55ac6adeddb9d3a04d34279ed09c0e40d38f6369eb00a6b5002bbfce4924f995c715839041cd4d597c9f423305327b3e5a20c414c510daeb4671c57db7e7a8059782b7c571d48f8547d479ab1770cc25dc1a6217bba9b3e2adb682875f7fcbdb60878f342ea132e2d316d2db03126a0c3e62ccfcf6453f9", @ANYBLOB="0000000000000000b702000000000004850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0xe, 0x2c, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000002c0)="ed", 0x1, 0x889d0, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @remote, 0x6}, 0x1c) (async, rerun: 64) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000001bc0)=""/20) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9, 0xa}, &(0x7f0000000640)=0x18) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r9 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7) 4.370113182s ago: executing program 1 (id=338): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x1, 0x100) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04003120"], 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = gettid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x210, 0x202, 0x225, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff], [0xff], 'veth1_vlan\x00', 'team_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x31, 'syz1\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) tkill(r7, 0xb) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d0000", 0x2b}], 0x1) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb86dd00017f02832d", 0x0, 0x104, 0x6000000000000000, 0xf0, 0x0, 0x0, 0x0}, 0x50) 4.350713687s ago: executing program 4 (id=339): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000940)="df05000000a60011090000000000", 0x0, 0xae33, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.485700193s ago: executing program 2 (id=340): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x33}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r5 = socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004b0000004b00000003000000090000000400000f0300000002000000010001009a00000004000000d4000000050000000005000000fbffffff01000100f3974a05000000000000020200000000003000"], &(0x7f0000000380)=""/121, 0x67, 0x79, 0x0, 0x1}, 0x28) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8c2c2, 0x0) write$P9_RSTATu(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb"], 0x2c2) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 3.344382941s ago: executing program 1 (id=341): memfd_create(&(0x7f0000000040)=']\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) 2.6244073s ago: executing program 1 (id=342): syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x0, 0xa, 0xa) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0xcb1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000400)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000540)=""/195, 0xc3}], 0x2, &(0x7f0000000680)=""/232, 0xe8}, 0x3ff}, {{&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/162, 0xa2}, {&(0x7f00000009c0)=""/85, 0x55}], 0x3, &(0x7f0000000a80)=""/106, 0x6a}}, {{&(0x7f0000000b00)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000002600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/152, 0x98}, {&(0x7f0000002580)=""/83, 0x53}], 0x3, &(0x7f0000002640)=""/224, 0xe0}, 0x6}], 0x3, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) socket(0x10, 0xf8c7326038a14379, 0x5) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), 0x0) getgroups(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff) r6 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'veth0_macvtap\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0x6, 0xfff}}) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 2.43881813s ago: executing program 2 (id=343): r0 = semget$private(0x0, 0x2, 0x20) semop(r0, &(0x7f0000000100)=[{0x0, 0xec7b, 0x1000}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="c28b0fc50000f900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x4}, {0x0, 0xf0}], 0x2) 1.604654185s ago: executing program 0 (id=344): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000040)={0xffff7fff, 0x0, 0x1, 0x80, 0xffffffff, 0x7c}) r3 = syz_io_uring_setup(0x2f55, &(0x7f0000001300)={0x0, 0xf257, 0x2, 0x3, 0x3}, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000000), 0x80000) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000004900)=[{0x0, 0x0, 0x0, &(0x7f00000046c0), 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfff, {}, {}, @raw32={[0xf401]}}], 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x400, 0x82) lseek(r7, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='=relative', &(0x7f0000000140)='./cgroup\x00', r1) 1.107964094s ago: executing program 0 (id=345): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4c8c0) accept$phonet_pipe(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, '\t\x00', "9f1b21bfcdd63f97d0778b079513f25d", "27bbde0a", "bcc42c7cc2eb2a34"}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) 841.998979ms ago: executing program 2 (id=346): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) io_setup(0x6, &(0x7f0000001380)=0x0) unshare(0x6a040000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x208c, &(0x7f0000000180)={0x0, 0x50a5, 0x2040, 0x2, 0x3be}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/13, 0xd, 0x40002063, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x143440) socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) io_pgetevents(r1, 0x400, 0x2, &(0x7f0000000280)=[{}, {}], &(0x7f0000000240)={0x77359400}, &(0x7f00000000c0)={&(0x7f0000000380)={[0x7fffffff]}, 0x8}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000340)=0x7) r6 = socket$inet6(0xa, 0xa, 0x5) socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r3], 0xe0}}, 0x80) ioctl$OCFS2_IOC_RESVSP64(r6, 0x4030582a, &(0x7f00000001c0)={0x0, 0x2, 0x7, 0x200000004, 0x3, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, 0x0) 671.728617ms ago: executing program 4 (id=347): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x292}]}) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "00000100", "8da0630cb37381ee2b00010000802000", '\x00', "19a4216dfdbf6602"}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, &(0x7f0000000440)) 134.577847ms ago: executing program 0 (id=348): openat$sysfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x146) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0), 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffa, 0x100, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x87}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000195, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x200000000000000}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x30}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1ff}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x844) 0s ago: executing program 0 (id=349): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4, 0x8, 0xa, 0x800004, 0x3, 0x80, 0xdf9, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0xa, 0x0, 0x5, 0x400, 0x4, 0x10000, 0x8]}) syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 54.943013][ T29] audit: type=1400 audit(1776841073.387:62): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.966939][ T29] audit: type=1400 audit(1776841073.407:63): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.969455][ T5811] cgroup: Unknown subsys name 'net' [ 54.996029][ T29] audit: type=1400 audit(1776841073.437:64): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.101413][ T5811] cgroup: Unknown subsys name 'cpuset' [ 55.109396][ T5811] cgroup: Unknown subsys name 'rlimit' [ 55.248334][ T29] audit: type=1400 audit(1776841073.687:65): avc: denied { setattr } for pid=5811 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.271962][ T29] audit: type=1400 audit(1776841073.697:66): avc: denied { create } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.318196][ T29] audit: type=1400 audit(1776841073.697:67): avc: denied { write } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.338636][ T29] audit: type=1400 audit(1776841073.697:68): avc: denied { read } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.359224][ T29] audit: type=1400 audit(1776841073.717:69): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.381269][ T5814] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 55.384158][ T29] audit: type=1400 audit(1776841073.717:70): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 55.416477][ T29] audit: type=1400 audit(1776841073.837:71): avc: denied { relabelto } for pid=5814 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.351666][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.229136][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.239574][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.252737][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.264712][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.272154][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.282279][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.300791][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.308468][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.316347][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.324673][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.325224][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.333180][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.339905][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.346595][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.355605][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.362173][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.369181][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.376816][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.388136][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.390410][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.403458][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.404553][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.418673][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.420065][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.428260][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.827284][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 58.864590][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 58.958912][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 59.010063][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 59.048963][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 59.059078][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.066600][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.073763][ T5834] bridge_slave_0: entered allmulticast mode [ 59.080504][ T5834] bridge_slave_0: entered promiscuous mode [ 59.117915][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.125060][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.132317][ T5834] bridge_slave_1: entered allmulticast mode [ 59.139093][ T5834] bridge_slave_1: entered promiscuous mode [ 59.181012][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.188198][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.195421][ T5832] bridge_slave_0: entered allmulticast mode [ 59.202234][ T5832] bridge_slave_0: entered promiscuous mode [ 59.228027][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.235173][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.242495][ T5832] bridge_slave_1: entered allmulticast mode [ 59.249320][ T5832] bridge_slave_1: entered promiscuous mode [ 59.261697][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.291938][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.307938][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.315085][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.322300][ T5825] bridge_slave_0: entered allmulticast mode [ 59.329320][ T5825] bridge_slave_0: entered promiscuous mode [ 59.368413][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.375510][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.382673][ T5825] bridge_slave_1: entered allmulticast mode [ 59.389410][ T5825] bridge_slave_1: entered promiscuous mode [ 59.404086][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.421734][ T5834] team0: Port device team_slave_0 added [ 59.433757][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.441208][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.448639][ T5824] bridge_slave_0: entered allmulticast mode [ 59.455258][ T5824] bridge_slave_0: entered promiscuous mode [ 59.463496][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.479654][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.486774][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.493947][ T5831] bridge_slave_0: entered allmulticast mode [ 59.500560][ T5831] bridge_slave_0: entered promiscuous mode [ 59.508923][ T5834] team0: Port device team_slave_1 added [ 59.521658][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.528917][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.536011][ T5824] bridge_slave_1: entered allmulticast mode [ 59.542880][ T5824] bridge_slave_1: entered promiscuous mode [ 59.554865][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.562397][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.569596][ T5831] bridge_slave_1: entered allmulticast mode [ 59.576225][ T5831] bridge_slave_1: entered promiscuous mode [ 59.590802][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.607531][ T5832] team0: Port device team_slave_0 added [ 59.626593][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.651930][ T5832] team0: Port device team_slave_1 added [ 59.664192][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.671441][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.697843][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.717704][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.734273][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.744255][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.751330][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.777271][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.789271][ T5825] team0: Port device team_slave_0 added [ 59.796391][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.813421][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.831843][ T5825] team0: Port device team_slave_1 added [ 59.843728][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.850902][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.877211][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.914810][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.921860][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.947981][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.965982][ T5831] team0: Port device team_slave_0 added [ 59.979512][ T5824] team0: Port device team_slave_0 added [ 60.003598][ T5831] team0: Port device team_slave_1 added [ 60.010060][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.017252][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.043387][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.055525][ T5824] team0: Port device team_slave_1 added [ 60.065278][ T5834] hsr_slave_0: entered promiscuous mode [ 60.071625][ T5834] hsr_slave_1: entered promiscuous mode [ 60.093698][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.100721][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.126713][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.172686][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.179949][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.206190][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.220989][ T5832] hsr_slave_0: entered promiscuous mode [ 60.227790][ T5832] hsr_slave_1: entered promiscuous mode [ 60.233710][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 60.239532][ T5832] Cannot create hsr debugfs directory [ 60.245492][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.252677][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.279366][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.291327][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.298326][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.324373][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.346362][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.353418][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.379395][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.454983][ T5825] hsr_slave_0: entered promiscuous mode [ 60.461292][ T5825] hsr_slave_1: entered promiscuous mode [ 60.467364][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 60.473095][ T5825] Cannot create hsr debugfs directory [ 60.479145][ T5826] Bluetooth: hci1: command tx timeout [ 60.479277][ T5826] Bluetooth: hci4: command tx timeout [ 60.485069][ T5828] Bluetooth: hci2: command tx timeout [ 60.491341][ T5826] Bluetooth: hci0: command tx timeout [ 60.496150][ T50] Bluetooth: hci3: command tx timeout [ 60.529618][ T5824] hsr_slave_0: entered promiscuous mode [ 60.535644][ T5824] hsr_slave_1: entered promiscuous mode [ 60.541783][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 60.547540][ T5824] Cannot create hsr debugfs directory [ 60.566731][ T5831] hsr_slave_0: entered promiscuous mode [ 60.573105][ T5831] hsr_slave_1: entered promiscuous mode [ 60.579152][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 60.584876][ T5831] Cannot create hsr debugfs directory [ 60.875214][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.886278][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.894687][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.904381][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.916489][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.925446][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.939260][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.947994][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.991968][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.000891][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.012384][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.022543][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.030318][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.041070][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.048903][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.057454][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.115673][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.125524][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.133840][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.143387][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.151152][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.159533][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.170897][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.180010][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.252501][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.263239][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.279537][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.290197][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.306192][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.317645][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.325346][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.334430][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.373641][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.413715][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.423261][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.439883][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.448711][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.463180][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.470098][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.480358][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.493901][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.503273][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.525161][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.534970][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.542621][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.561048][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.568145][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.602229][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.629739][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.643000][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.659575][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.666710][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.685833][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.692948][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.702402][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.709590][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.726290][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.733396][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.820807][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.828755][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 61.828769][ T29] audit: type=1400 audit(1776841080.277:84): avc: denied { sys_module } for pid=5834 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.832383][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.924616][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.941842][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.968339][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.975508][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.033702][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.050643][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.057814][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.075111][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.096818][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.104054][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.160484][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.167643][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.203667][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.285753][ T5834] veth0_vlan: entered promiscuous mode [ 62.312817][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.324116][ T5834] veth1_vlan: entered promiscuous mode [ 62.461240][ T5834] veth0_macvtap: entered promiscuous mode [ 62.483938][ T5834] veth1_macvtap: entered promiscuous mode [ 62.535205][ T5832] veth0_vlan: entered promiscuous mode [ 62.555604][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.568738][ T5836] Bluetooth: hci3: command tx timeout [ 62.570535][ T5828] Bluetooth: hci4: command tx timeout [ 62.574684][ T5836] Bluetooth: hci0: command tx timeout [ 62.579832][ T50] Bluetooth: hci1: command tx timeout [ 62.585337][ T5826] Bluetooth: hci2: command tx timeout [ 62.609660][ T5832] veth1_vlan: entered promiscuous mode [ 62.619742][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.632916][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.664184][ T140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.673754][ T140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.689608][ T140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.698615][ T140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.715479][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.724656][ T5825] veth0_vlan: entered promiscuous mode [ 62.758272][ T5832] veth0_macvtap: entered promiscuous mode [ 62.787852][ T5825] veth1_vlan: entered promiscuous mode [ 62.794956][ T5832] veth1_macvtap: entered promiscuous mode [ 62.831922][ T5824] veth0_vlan: entered promiscuous mode [ 62.854402][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.864652][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.873749][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.890102][ T5824] veth1_vlan: entered promiscuous mode [ 62.903242][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.931975][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.941347][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.966353][ T5825] veth0_macvtap: entered promiscuous mode [ 62.976998][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.986915][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.000291][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.007750][ T5825] veth1_macvtap: entered promiscuous mode [ 63.009096][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.039182][ T5831] veth0_vlan: entered promiscuous mode [ 63.058969][ T29] audit: type=1400 audit(1776841081.507:85): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.CrCQHF/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.073563][ T5824] veth0_macvtap: entered promiscuous mode [ 63.089339][ T29] audit: type=1400 audit(1776841081.507:86): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.113049][ T29] audit: type=1400 audit(1776841081.507:87): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.CrCQHF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.148187][ T29] audit: type=1400 audit(1776841081.507:88): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 63.155061][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.174284][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.195418][ T5831] veth1_vlan: entered promiscuous mode [ 63.198956][ T29] audit: type=1400 audit(1776841081.507:89): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.CrCQHF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 63.238190][ T29] audit: type=1400 audit(1776841081.507:90): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/root/syzkaller.CrCQHF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 63.240082][ T5824] veth1_macvtap: entered promiscuous mode [ 63.284851][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.292380][ T29] audit: type=1400 audit(1776841081.517:91): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.313102][ T29] audit: type=1400 audit(1776841081.537:92): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.348736][ T29] audit: type=1400 audit(1776841081.537:93): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="gadgetfs" ino=7129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.376999][ T3621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.394431][ T3621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.430098][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.450186][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.472510][ T140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.481634][ T140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.496195][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.509006][ T5831] veth0_macvtap: entered promiscuous mode [ 63.542164][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.589865][ T5831] veth1_macvtap: entered promiscuous mode [ 63.626749][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.636756][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.641232][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.646401][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.694772][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.713837][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.781374][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.783067][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.793228][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.807934][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.842238][ T1047] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.884394][ T1047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.938189][ T1047] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.961709][ T1047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.978843][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.996128][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.017079][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.017282][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.122257][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.164282][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.315512][ T3621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.353232][ T3621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.439606][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.513116][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.548427][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.637443][ T5826] Bluetooth: hci2: command tx timeout [ 64.642895][ T5836] Bluetooth: hci0: command tx timeout [ 64.642950][ T5828] Bluetooth: hci4: command tx timeout [ 64.648357][ T5836] Bluetooth: hci1: command tx timeout [ 64.648378][ T5836] Bluetooth: hci3: command tx timeout [ 65.026267][ T5960] tmpfs: Bad value for 'mpol' [ 65.210223][ T5964] ======================================================= [ 65.210223][ T5964] WARNING: The mand mount option has been deprecated and [ 65.210223][ T5964] and is ignored by this kernel. Remove the mand [ 65.210223][ T5964] option from the mount to silence this warning. [ 65.210223][ T5964] ======================================================= [ 65.419943][ T5952] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 65.577342][ T5952] usb 3-1: Invalid ep0 maxpacket: 64 [ 65.619296][ T5971] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 65.717256][ T5952] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 65.848195][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.856298][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.878775][ T5952] usb 3-1: Invalid ep0 maxpacket: 64 [ 65.892851][ T5952] usb usb3-port1: attempt power cycle [ 65.905075][ T5987] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 65.931121][ T5985] Cannot find add_set index 0 as target [ 65.939234][ T5987] gretap1: entered allmulticast mode [ 65.947932][ T5987] team0: Port device gretap1 added [ 66.067372][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 66.224760][ T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 66.236727][ T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 66.253142][ T5952] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 66.264922][ T9] usb 1-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 66.280099][ T9] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 66.289821][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.298491][ T5952] usb 3-1: Invalid ep0 maxpacket: 64 [ 66.325372][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 66.437247][ T5952] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 66.467761][ T5952] usb 3-1: Invalid ep0 maxpacket: 64 [ 66.480424][ T5952] usb usb3-port1: unable to enumerate USB device [ 66.481941][ T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.548724][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.573019][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.774940][ T5828] Bluetooth: hci2: command tx timeout [ 66.775015][ T50] Bluetooth: hci3: command tx timeout [ 66.780792][ T5828] Bluetooth: hci1: command tx timeout [ 66.780865][ T5828] Bluetooth: hci0: command tx timeout [ 66.780936][ T5828] Bluetooth: hci4: command tx timeout [ 66.848515][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 66.851502][ T9] usbhid 1-1:2.0: can't add hid device: -71 [ 66.949400][ T9] usbhid 1-1:2.0: probe with driver usbhid failed with error -71 [ 66.962661][ T9] usb 1-1: USB disconnect, device number 2 [ 66.995808][ T5985] syz.1.16 (5985) used greatest stack depth: 19968 bytes left [ 67.010034][ T42] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.022210][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.028986][ T42] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 67.041244][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.071913][ T42] usb 5-1: config 0 descriptor?? [ 67.165416][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 67.165432][ T29] audit: type=1400 audit(1776841085.607:168): avc: denied { setopt } for pid=5997 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.308862][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.464053][ T29] audit: type=1400 audit(1776841085.807:169): avc: denied { map_read map_write } for pid=6004 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.478611][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 67.484771][ T29] audit: type=1400 audit(1776841085.847:170): avc: denied { ioctl } for pid=6006 comm="syz.1.24" path="socket:[8695]" dev="sockfs" ino=8695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.514043][ T29] audit: type=1400 audit(1776841085.847:171): avc: denied { write } for pid=6006 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.546777][ T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 67.548075][ T42] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 67.568818][ T9] usb 1-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 67.577353][ T29] audit: type=1400 audit(1776841085.857:172): avc: denied { accept } for pid=6006 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.624069][ T29] audit: type=1400 audit(1776841086.027:173): avc: denied { read } for pid=6009 comm="syz.1.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.749209][ T29] audit: type=1400 audit(1776841086.037:174): avc: denied { open } for pid=6009 comm="syz.1.25" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.400041][ T29] audit: type=1400 audit(1776841086.037:175): avc: denied { ioctl } for pid=6009 comm="syz.1.25" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.559286][ T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 68.568434][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.630573][ T42] IPVS: starting estimator thread 0... [ 68.648590][ T29] audit: type=1400 audit(1776841087.087:176): avc: denied { create } for pid=5989 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.767216][ T6018] IPVS: using max 50 ests per chain, 120000 per kthread [ 68.792290][ T29] audit: type=1400 audit(1776841087.117:177): avc: denied { setopt } for pid=5989 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.814585][ T9] usbhid 1-1:2.0: can't add hid device: -71 [ 68.992122][ T9] usbhid 1-1:2.0: probe with driver usbhid failed with error -71 [ 69.002961][ T9] usb 1-1: USB disconnect, device number 3 [ 69.443301][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 69.452143][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 69.461681][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 69.767141][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.855445][ T5908] usb 5-1: USB disconnect, device number 2 [ 69.891061][ T6036] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20001 [ 69.937202][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 69.990631][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.050181][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.081944][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.105276][ T9] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 70.114836][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.142750][ T9] usb 1-1: config 0 descriptor?? [ 70.487903][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.586157][ T9] zydacron 0003:13EC:0006.0002: unknown main item tag 0x7 [ 70.608610][ T9] zydacron 0003:13EC:0006.0002: unknown main item tag 0x6 [ 70.622873][ T9] zydacron 0003:13EC:0006.0002: item fetching failed at offset 36/37 [ 70.642871][ T9] zydacron 0003:13EC:0006.0002: parse failed [ 70.657813][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 70.658751][ T9] zydacron 0003:13EC:0006.0002: probe with driver zydacron failed with error -22 [ 70.668386][ T5908] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 70.686863][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.697848][ T5908] usb 2-1: Product: syz [ 70.715515][ T5908] usb 2-1: Manufacturer: syz [ 70.729711][ T5908] usb 2-1: SerialNumber: syz [ 70.757153][ T5932] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 70.793801][ T9] usb 1-1: USB disconnect, device number 4 [ 70.925874][ T5932] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 70.940763][ T5932] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 70.951889][ T5932] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 70.968321][ T5932] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 70.983589][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.985231][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.036580][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.079118][ T6062] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 71.322149][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 71.332719][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.345274][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.377337][ T5932] usbhid 3-1:2.0: can't add hid device: -71 [ 71.392413][ T5932] usbhid 3-1:2.0: probe with driver usbhid failed with error -71 [ 71.411803][ T5932] usb 3-1: USB disconnect, device number 6 [ 71.489015][ T6050] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 71.631546][ T6084] loop5: detected capacity change from 0 to 7 [ 71.763282][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 71.772123][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 71.781005][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 72.014426][ T5932] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 72.227194][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 72.253913][ T6084] Dev loop5: unable to read RDB block 7 [ 72.260886][ T5932] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 72.277722][ T802] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.278220][ T6084] loop5: unable to read partition table [ 72.286525][ T5932] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 72.307476][ T5932] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 72.317222][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.332048][ T6084] loop5: partition table beyond EOD, truncated [ 72.363567][ T6084] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 72.479495][ T802] usb 4-1: config index 0 descriptor too short (expected 29791, got 36) [ 72.488150][ T802] usb 4-1: config 109 has too many interfaces: 105, using maximum allowed: 32 [ 72.503747][ T802] usb 4-1: config 109 has an invalid descriptor of length 116, skipping remainder of the config [ 72.516484][ T802] usb 4-1: config 109 has 0 interfaces, different from the descriptor's value: 105 [ 72.528612][ T802] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 72.529785][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 72.529797][ T29] audit: type=1400 audit(1776841090.977:208): avc: denied { read } for pid=6096 comm="syz.4.49" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.538092][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.575142][ T802] usb 4-1: Product: syz [ 72.579429][ T802] usb 4-1: Manufacturer: syz [ 72.584051][ T802] usb 4-1: SerialNumber: syz [ 72.591994][ T29] audit: type=1400 audit(1776841090.987:209): avc: denied { open } for pid=6096 comm="syz.4.49" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.646539][ T5908] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 72.664642][ T29] audit: type=1400 audit(1776841090.997:210): avc: denied { ioctl } for pid=6096 comm="syz.4.49" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.673283][ T5908] usb 2-1: USB disconnect, device number 2 [ 72.753669][ T6100] kvm: apic: phys broadcast and lowest prio [ 72.815570][ T29] audit: type=1400 audit(1776841091.257:211): avc: denied { bind } for pid=6080 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.818154][ T6084] Bluetooth: MGMT ver 1.23 [ 72.843078][ T29] audit: type=1400 audit(1776841091.257:212): avc: denied { name_bind } for pid=6080 comm="syz.3.44" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.865784][ T29] audit: type=1400 audit(1776841091.257:213): avc: denied { write } for pid=6080 comm="syz.3.44" path="socket:[9702]" dev="sockfs" ino=9702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.898315][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 72.907530][ T6103] netlink: 'syz.0.50': attribute type 7 has an invalid length. [ 72.915977][ T6103] netlink: 'syz.0.50': attribute type 8 has an invalid length. [ 72.934352][ T802] usb 4-1: USB disconnect, device number 2 [ 72.950970][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 72.989623][ T6103] Zero length message leads to an empty skb [ 73.140269][ T29] audit: type=1400 audit(1776841091.587:214): avc: denied { append } for pid=6106 comm="syz.0.51" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.212056][ T6114] random: crng reseeded on system resumption [ 74.306377][ T29] audit: type=1400 audit(1776841092.657:215): avc: denied { write } for pid=6110 comm="syz.4.52" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.374294][ T29] audit: type=1400 audit(1776841092.657:216): avc: denied { open } for pid=6110 comm="syz.4.52" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.442665][ T29] audit: type=1400 audit(1776841092.747:217): avc: denied { create } for pid=6112 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 74.488782][ T5932] usbhid 3-1:2.0: can't add hid device: -71 [ 74.697941][ T5932] usbhid 3-1:2.0: probe with driver usbhid failed with error -71 [ 74.951065][ T5932] usb 3-1: USB disconnect, device number 7 [ 74.967237][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.183104][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 75.212390][ T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 75.238301][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.283554][ T9] usb 4-1: Product: syz [ 75.311060][ T9] usb 4-1: Manufacturer: syz [ 75.324481][ T9] usb 4-1: SerialNumber: syz [ 75.579650][ T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 75.850661][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 75.850759][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.58'. [ 75.850806][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 76.634636][ T10] cfg80211: failed to load regulatory.db [ 76.819623][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 76.982417][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 77.057353][ T9] usb 4-1: media controller created [ 77.144508][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.474369][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 77.561335][ T9] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 77.592904][ T9] usb 4-1: USB disconnect, device number 3 [ 77.607121][ T5813] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 77.707155][ T5932] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.771127][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.781431][ T5813] usb 5-1: config 194 has an invalid interface number: 181 but max is 0 [ 77.795455][ T5813] usb 5-1: config 194 has no interface number 0 [ 77.806291][ T5813] usb 5-1: config 194 interface 181 has no altsetting 0 [ 77.825618][ T5813] usb 5-1: string descriptor 0 read error: -22 [ 77.832756][ T5813] usb 5-1: New USB device found, idVendor=115e, idProduct=f100, bcdDevice=d9.36 [ 77.844880][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.858605][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.871133][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.874652][ T5813] usb 5-1: active config #194 != 1 ?? [ 77.887689][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 77.890324][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.926848][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 77.926863][ T29] audit: type=1400 audit(1776841096.367:227): avc: denied { ioctl } for pid=6161 comm="syz.2.66" path="socket:[10257]" dev="sockfs" ino=10257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.929104][ T5932] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 77.934298][ T29] audit: type=1400 audit(1776841096.387:228): avc: denied { bind } for pid=6161 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.958318][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.997668][ T5932] usb 2-1: config 0 descriptor?? [ 78.049439][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 78.060610][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 78.071604][ T10] usb 1-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 78.085716][ T10] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 78.105380][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.119970][ T29] audit: type=1400 audit(1776841096.567:229): avc: denied { create } for pid=6148 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.152069][ T6158] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.169834][ T1047] Bluetooth: hci5: Frame reassembly failed (-84) [ 78.182057][ T29] audit: type=1400 audit(1776841096.607:230): avc: denied { create } for pid=6148 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.208407][ T5813] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 78.276032][ T29] audit: type=1400 audit(1776841096.717:231): avc: denied { mount } for pid=6163 comm="syz.3.67" name="/" dev="hugetlbfs" ino=10267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 78.482963][ T29] audit: type=1400 audit(1776841096.907:232): avc: denied { setopt } for pid=6163 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.488925][ T5932] wacom 0003:056A:0010.0003: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 78.524169][ T29] audit: type=1400 audit(1776841096.907:233): avc: denied { write } for pid=6163 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.529052][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.562713][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 78.566677][ T5932] wacom 0003:056A:0010.0003: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 78.641937][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.655829][ T29] audit: type=1400 audit(1776841097.067:234): avc: denied { getopt } for pid=6150 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.685905][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.688109][ T5932] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.0003/input/input5 [ 78.738817][ T10] usbhid 1-1:2.0: can't add hid device: -71 [ 78.748494][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.763758][ T10] usbhid 1-1:2.0: probe with driver usbhid failed with error -71 [ 78.771712][ T29] audit: type=1400 audit(1776841097.067:235): avc: denied { getopt } for pid=6150 comm="syz.1.63" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.791896][ T5813] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 78.803396][ T10] usb 1-1: USB disconnect, device number 5 [ 78.815899][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.866301][ T5813] usb 3-1: config 0 descriptor?? [ 78.905019][ T5932] usb 2-1: USB disconnect, device number 3 [ 79.324280][ T5813] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 79.349416][ T5813] corsair 0003:1B1C:1B02.0004: unknown main item tag 0x0 [ 79.378902][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 79.388659][ T5813] corsair 0003:1B1C:1B02.0004: item fetching failed at offset 2/5 [ 79.432328][ T5813] corsair 0003:1B1C:1B02.0004: parse failed [ 79.458520][ T5813] corsair 0003:1B1C:1B02.0004: probe with driver corsair failed with error -22 [ 79.585971][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 79.649799][ T10] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 79.663572][ T5813] usb 3-1: USB disconnect, device number 8 [ 79.742901][ T10] usb 1-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 79.846072][ T10] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 79.910217][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.142612][ T29] audit: type=1400 audit(1776841098.517:236): avc: denied { create } for pid=6176 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.247160][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 80.287767][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 80.435351][ T802] usb 5-1: USB disconnect, device number 3 [ 80.736949][ T5813] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 81.027163][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 81.038669][ T5813] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 81.194630][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.238015][ T5813] usb 3-1: Product: syz [ 81.314283][ T5813] usb 3-1: Manufacturer: syz [ 81.334566][ T5813] usb 3-1: SerialNumber: syz [ 81.675094][ T6206] warning: `syz.3.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.766522][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.868159][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.643862][ T10] usbhid 1-1:2.0: can't add hid device: -71 [ 82.670208][ T10] usbhid 1-1:2.0: probe with driver usbhid failed with error -71 [ 83.441903][ T10] usb 1-1: USB disconnect, device number 6 [ 83.917110][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 84.005493][ T5813] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 84.017111][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 84.027398][ T5813] usb 3-1: USB disconnect, device number 9 [ 84.070053][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 84.087721][ T10] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 84.102192][ T10] usb 1-1: Product: syz [ 84.118132][ T10] usb 1-1: Manufacturer: syz [ 84.128143][ T10] usb 1-1: SerialNumber: syz [ 84.143500][ T10] usb 1-1: config 0 descriptor?? [ 84.148681][ T9] usb 4-1: device descriptor read/64, error -71 [ 84.397172][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 84.440902][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 84.440918][ T29] audit: type=1400 audit(1776841102.877:242): avc: denied { watch watch_reads } for pid=6224 comm="syz.0.83" path="/11" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.627163][ T9] usb 4-1: device descriptor read/64, error -71 [ 84.907368][ T9] usb usb4-port1: attempt power cycle [ 84.972779][ T802] usb 1-1: USB disconnect, device number 7 [ 85.107404][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 85.216993][ T29] audit: type=1400 audit(1776841103.657:243): avc: denied { create } for pid=6247 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 85.237429][ T29] audit: type=1400 audit(1776841103.667:244): avc: denied { mounton } for pid=6247 comm="syz.4.92" path="/21/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.259764][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 85.283701][ T29] audit: type=1400 audit(1776841103.727:245): avc: denied { read } for pid=6245 comm="syz.2.91" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.290289][ T10] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 85.322409][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 85.331596][ T9] usb 4-1: device descriptor read/8, error -71 [ 85.338053][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 85.348909][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 85.358014][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 85.363930][ T10] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 85.369804][ T29] audit: type=1400 audit(1776841103.727:246): avc: denied { open } for pid=6245 comm="syz.2.91" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.376258][ T10] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 85.414064][ T10] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 85.426469][ T6250] ceph: No mds server is up or the cluster is laggy [ 85.436775][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.471718][ T6244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 85.577156][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 85.782113][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.797216][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.797790][ T9] usb 4-1: device descriptor read/8, error -71 [ 85.882003][ T10] usbhid 2-1:2.0: can't add hid device: -71 [ 85.888090][ T10] usbhid 2-1:2.0: probe with driver usbhid failed with error -71 [ 85.903920][ T10] usb 2-1: USB disconnect, device number 4 [ 85.917508][ T9] usb usb4-port1: unable to enumerate USB device [ 86.954380][ T29] audit: type=1400 audit(1776841104.977:247): avc: denied { setopt } for pid=6263 comm="syz.2.96" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.072810][ T29] audit: type=1400 audit(1776841105.057:248): avc: denied { read write } for pid=6263 comm="syz.2.96" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.186475][ T6281] mmap: syz.3.98 (6281) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.188380][ T29] audit: type=1400 audit(1776841105.057:249): avc: denied { open } for pid=6263 comm="syz.2.96" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.336392][ T29] audit: type=1400 audit(1776841105.137:250): avc: denied { connect } for pid=6263 comm="syz.2.96" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.401390][ T29] audit: type=1400 audit(1776841105.137:251): avc: denied { write } for pid=6263 comm="syz.2.96" laddr=fe80::f lport=60 faddr=ff02::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.469336][ T6281] netlink: 5252 bytes leftover after parsing attributes in process `syz.3.98'. [ 88.377430][ T6302] overlayfs: failed to resolve './file7': -2 [ 88.396938][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.420176][ T6303] overlayfs: failed lookup in lower (newroot/26, name='file0', err=-40): overlapping layers [ 88.647224][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 88.660016][ T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 88.671363][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.678405][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 88.687842][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.708669][ T9] usb 1-1: config 0 descriptor?? [ 89.175672][ T802] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 89.500733][ T802] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 89.562480][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 89.571546][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 89.580460][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 89.674648][ T9] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 89.850554][ T802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.886835][ T802] usb 5-1: Product: syz [ 89.891605][ T802] usb 5-1: Manufacturer: syz [ 89.896257][ T802] usb 5-1: SerialNumber: syz [ 90.027260][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 90.027293][ T29] audit: type=1326 audit(1776841108.417:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e059c819 code=0x7ffc0000 [ 90.079044][ T6336] netlink: 810 bytes leftover after parsing attributes in process `syz.2.112'. [ 90.414656][ T6334] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 90.458643][ T9] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -110 [ 90.493550][ T802] usb 5-1: config 0 descriptor?? [ 90.517970][ T29] audit: type=1326 audit(1776841108.427:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e059c819 code=0x7ffc0000 [ 90.541837][ T29] audit: type=1326 audit(1776841108.427:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f13e059c819 code=0x7ffc0000 [ 90.570472][ T29] audit: type=1400 audit(1776841108.647:263): avc: denied { remount } for pid=6325 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.590190][ T29] audit: type=1400 audit(1776841108.937:264): avc: denied { create } for pid=6293 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.609662][ T29] audit: type=1400 audit(1776841108.937:265): avc: denied { write } for pid=6293 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.715498][ T802] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 90.733151][ T6342] xt_socket: unknown flags 0x4 [ 90.987048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.067133][ T5932] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 91.715441][ T5884] usb 1-1: USB disconnect, device number 8 [ 91.737220][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 91.781115][ T5932] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 91.793239][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 91.803246][ T5932] usb 3-1: Product: syz [ 91.807827][ T5932] usb 3-1: Manufacturer: syz [ 91.812445][ T5932] usb 3-1: SerialNumber: syz [ 91.848347][ T5932] usb 3-1: config 0 descriptor?? [ 92.065531][ T29] audit: type=1400 audit(1776841110.507:266): avc: denied { ioctl } for pid=6366 comm="syz.0.123" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.917059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.233307][ T6369] binder: 6366:6369 unknown command 0 [ 93.258262][ T6369] binder: 6366:6369 ioctl c0306201 200000000080 returned -22 [ 93.295413][ T29] audit: type=1400 audit(1776841110.507:267): avc: denied { set_context_mgr } for pid=6366 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.330982][ T29] audit: type=1400 audit(1776841111.777:268): avc: denied { write } for pid=6366 comm="syz.0.123" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.356508][ T29] audit: type=1400 audit(1776841111.777:269): avc: denied { map } for pid=6366 comm="syz.0.123" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.402514][ T9] usb 3-1: USB disconnect, device number 10 [ 93.584964][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 93.970739][ T802] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 93.992829][ T802] usb 5-1: USB disconnect, device number 4 [ 94.158394][ T6406] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 94.174285][ T6406] SELinux: failed to load policy [ 95.850106][ T6429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.138'. [ 95.945862][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 95.945881][ T29] audit: type=1400 audit(1776841114.387:275): avc: denied { setopt } for pid=6431 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.946117][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 95.965323][ T29] audit: type=1400 audit(1776841114.387:276): avc: denied { connect } for pid=6431 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.190652][ T29] audit: type=1400 audit(1776841114.627:277): avc: denied { create } for pid=6435 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.275514][ T29] audit: type=1400 audit(1776841114.637:278): avc: denied { setopt } for pid=6435 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.365274][ T29] audit: type=1400 audit(1776841114.787:279): avc: denied { connect } for pid=6435 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.426096][ T6443] process 'syz.0.142' launched './file2' with NULL argv: empty string added [ 96.509958][ T29] audit: type=1400 audit(1776841114.957:280): avc: denied { execute_no_trans } for pid=6440 comm="syz.0.142" path="/23/file2" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.997250][ T29] audit: type=1400 audit(1776841115.437:281): avc: denied { ioctl } for pid=6452 comm="syz.2.144" path="socket:[10864]" dev="sockfs" ino=10864 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.136952][ T29] audit: type=1400 audit(1776841115.577:282): avc: denied { write } for pid=6452 comm="syz.2.144" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.232613][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.241077][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.275675][ T29] audit: type=1400 audit(1776841115.637:283): avc: denied { read write } for pid=6452 comm="syz.2.144" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.385779][ T29] audit: type=1400 audit(1776841115.637:284): avc: denied { open } for pid=6452 comm="syz.2.144" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.767242][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.327181][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 98.346786][ T9] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 98.371154][ T9] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 98.386519][ T9] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 98.446709][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 98.457848][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.484809][ T9] usb 2-1: Product: syz [ 98.506753][ T9] usb 2-1: Manufacturer: syz [ 98.527131][ T9] usb 2-1: SerialNumber: syz [ 98.560974][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 98.581584][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 98.609310][ T6478] netlink: 'syz.2.151': attribute type 11 has an invalid length. [ 98.625043][ T9] hso 2-1:6.0: Can't find BULK endpoints [ 98.649334][ T6478] netlink: 'syz.2.151': attribute type 13 has an invalid length. [ 99.129098][ T6487] bridge0: entered allmulticast mode [ 99.145976][ T6487] bridge_slave_1: left allmulticast mode [ 99.185947][ T6487] bridge_slave_1: left promiscuous mode [ 99.220984][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.589369][ T802] usb 2-1: USB disconnect, device number 5 [ 99.595413][ T6487] bridge_slave_0: left allmulticast mode [ 99.621939][ T6487] bridge_slave_0: left promiscuous mode [ 99.640488][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.923427][ T6494] trusted_key: encrypted_key: master key parameter 'ed:syz' is invalid [ 99.981167][ T6496] tmpfs: Unknown parameter 'grpquota' [ 100.228979][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 100.387109][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.398836][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 100.406128][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.420240][ T9] usb 3-1: config 133 has an invalid descriptor of length 79, skipping remainder of the config [ 100.434497][ T9] usb 3-1: config 133 has 0 interfaces, different from the descriptor's value: 1 [ 100.446602][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=a7.db [ 100.456150][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.469214][ T9] usb 3-1: Product: syz [ 100.475578][ T9] usb 3-1: Manufacturer: syz [ 100.481159][ T9] usb 3-1: SerialNumber: syz [ 100.538825][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 100.549143][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.563128][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.660873][ T5884] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 100.670230][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.682210][ T5884] usb 2-1: config 0 descriptor?? [ 100.692015][ T6494] trusted_key: encrypted_key: insufficient parameters specified [ 100.718452][ T9] usb 3-1: USB disconnect, device number 11 [ 101.115315][ T5884] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 101.138717][ T5884] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 101.233282][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 101.233298][ T29] audit: type=1400 audit(1776841119.677:293): avc: denied { ioctl } for pid=6542 comm="syz.4.170" path="socket:[11671]" dev="sockfs" ino=11671 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.311387][ T5884] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 101.411772][ T6549] FAULT_INJECTION: forcing a failure. [ 101.411772][ T6549] name failslab, interval 1, probability 0, space 0, times 1 [ 101.424670][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.2.171 Not tainted syzkaller #0 PREEMPT(full) [ 101.424692][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 101.424702][ T6549] Call Trace: [ 101.424707][ T6549] [ 101.424713][ T6549] dump_stack_lvl+0x100/0x190 [ 101.424738][ T6549] should_fail_ex.cold+0x5/0xa [ 101.424762][ T6549] ? tomoyo_realpath_from_path+0xb6/0x690 [ 101.424785][ T6549] should_failslab+0xc2/0x120 [ 101.424804][ T6549] __kmalloc_noprof+0xe0/0x850 [ 101.424826][ T6549] ? kfree+0x1dd/0x6c0 [ 101.424851][ T6549] tomoyo_realpath_from_path+0xb6/0x690 [ 101.424876][ T6549] tomoyo_path_number_perm+0x23c/0x580 [ 101.424891][ T6549] ? tomoyo_path_number_perm+0x22e/0x580 [ 101.424909][ T6549] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 101.424947][ T6549] ? find_held_lock+0x2b/0x80 [ 101.424963][ T6549] ? __fget_files+0x215/0x3d0 [ 101.424982][ T6549] ? hook_file_ioctl_common+0x149/0x410 [ 101.425004][ T6549] ? __fget_files+0x215/0x3d0 [ 101.425027][ T6549] ? __fget_files+0x21f/0x3d0 [ 101.425049][ T6549] security_file_ioctl+0xd3/0x230 [ 101.425068][ T6549] __x64_sys_ioctl+0xb7/0x210 [ 101.425086][ T6549] do_syscall_64+0x10b/0xf80 [ 101.425107][ T6549] ? clear_bhb_loop+0x40/0x90 [ 101.425125][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.425140][ T6549] RIP: 0033:0x7f13e059c819 [ 101.425153][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.425167][ T6549] RSP: 002b:00007f13e1534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.425182][ T6549] RAX: ffffffffffffffda RBX: 00007f13e0815fa0 RCX: 00007f13e059c819 [ 101.425192][ T6549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 101.425200][ T6549] RBP: 00007f13e1534090 R08: 0000000000000000 R09: 0000000000000000 [ 101.425208][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.425217][ T6549] R13: 00007f13e0816038 R14: 00007f13e0815fa0 R15: 00007fffc37f0268 [ 101.425237][ T6549] [ 101.425260][ T6549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.638613][ T5884] ft260 0003:0403:6030.0006: failed to retrieve system status [ 101.647293][ T5884] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71 [ 101.670333][ T5884] usb 2-1: USB disconnect, device number 6 [ 101.758077][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 102.235984][ T6573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.243964][ T6576] netlink: 'syz.0.181': attribute type 6 has an invalid length. [ 102.285359][ T6576] netlink: 104 bytes leftover after parsing attributes in process `syz.0.181'. [ 102.287886][ T29] audit: type=1400 audit(1776841120.727:294): avc: denied { mount } for pid=6571 comm="syz.2.179" name="/" dev="ramfs" ino=11859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.332441][ T29] audit: type=1400 audit(1776841120.767:295): avc: denied { execute } for pid=6571 comm="syz.2.179" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=11860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 102.626596][ T29] audit: type=1400 audit(1776841121.017:296): avc: denied { write } for pid=6581 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.943547][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 103.111826][ T6597] bridge0: entered promiscuous mode [ 103.117126][ T5884] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.127548][ T6597] bridge0: entered allmulticast mode [ 103.139967][ T29] audit: type=1400 audit(1776841121.577:297): avc: denied { write } for pid=6594 comm="syz.2.186" path="socket:[11888]" dev="sockfs" ino=11888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.166005][ T29] audit: type=1400 audit(1776841121.607:298): avc: denied { read } for pid=6594 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.269372][ T5884] usb 5-1: config 226 has an invalid interface number: 127 but max is -1 [ 103.285089][ T5884] usb 5-1: config 226 has 1 interface, different from the descriptor's value: 0 [ 103.304466][ T5884] usb 5-1: config 226 has no interface number 0 [ 103.322518][ T5884] usb 5-1: config 226 interface 127 has no altsetting 0 [ 103.350455][ T5884] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=fe.2d [ 103.364322][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.372861][ T5884] usb 5-1: Product: syz [ 103.377399][ T5884] usb 5-1: Manufacturer: syz [ 103.382391][ T5884] usb 5-1: SerialNumber: syz [ 103.384606][ T29] audit: type=1400 audit(1776841121.827:299): avc: denied { setopt } for pid=6601 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.472127][ T29] audit: type=1400 audit(1776841121.917:300): avc: denied { write } for pid=6600 comm="syz.1.188" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 103.546507][ T29] audit: type=1400 audit(1776841121.917:301): avc: denied { open } for pid=6600 comm="syz.1.188" path="/36/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 103.875887][ T29] audit: type=1326 audit(1776841122.317:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.4.182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b7f9c819 code=0x0 [ 103.967110][ T802] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 104.140188][ T802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.161193][ T802] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.171891][ T802] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 104.181717][ T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.195172][ T802] usb 2-1: config 0 descriptor?? [ 104.232380][ T802] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 104.245879][ T802] dvb-usb: bulk message failed: -22 (3/0) [ 104.266212][ T802] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 104.283437][ T802] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 104.297112][ T802] usb 2-1: media controller created [ 104.315042][ T802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.363171][ T802] dvb-usb: bulk message failed: -22 (6/0) [ 104.384315][ T802] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.408772][ T802] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 104.423561][ T6610] dibusb: i2c wr: len=61 is too big! [ 104.423561][ T6610] [ 104.469671][ T6610] ptrace attach of ""[6632] was attempted by "./syz-executor exec"[6610] [ 104.475075][ T802] dvb-usb: schedule remote query interval to 150 msecs. [ 104.618257][ T802] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.803949][ T802] dvb-usb: bulk message failed: -22 (1/0) [ 104.825429][ T802] dvb-usb: error while querying for an remote control event. [ 105.023967][ T802] dvb-usb: bulk message failed: -22 (1/0) [ 105.046693][ T802] dvb-usb: error while querying for an remote control event. [ 105.227114][ T802] dvb-usb: bulk message failed: -22 (1/0) [ 105.236670][ T802] dvb-usb: error while querying for an remote control event. [ 105.371234][ T5884] redrat3 5-1:226.127: Couldn't find all endpoints [ 105.396482][ T5884] usb 5-1: USB disconnect, device number 5 [ 105.408756][ T802] dvb-usb: bulk message failed: -22 (1/0) [ 105.420887][ T802] dvb-usb: error while querying for an remote control event. [ 105.607104][ T802] dvb-usb: bulk message failed: -22 (1/0) [ 106.087225][ T802] dvb-usb: error while querying for an remote control event. [ 106.258560][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 106.264364][ T1217] dvb-usb: error while querying for an remote control event. [ 106.352645][ T6654] dummy0: entered allmulticast mode [ 106.359933][ T6654] dummy0: left allmulticast mode [ 106.448185][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 106.459956][ T1217] dvb-usb: error while querying for an remote control event. [ 106.647523][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 106.678399][ T1217] dvb-usb: error while querying for an remote control event. [ 106.724249][ T6676] trusted_key: encrypted_key: insufficient parameters specified [ 106.741311][ T6676] netlink: 'syz.2.209': attribute type 1 has an invalid length. [ 106.847621][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 106.855850][ T1217] dvb-usb: error while querying for an remote control event. [ 106.919612][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 106.919628][ T29] audit: type=1400 audit(1776841125.367:309): avc: denied { ioctl } for pid=6681 comm="syz.2.211" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.997082][ T29] audit: type=1400 audit(1776841125.367:310): avc: denied { setopt } for pid=6683 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.027196][ T802] dvb-usb: bulk message failed: -22 (1/0) [ 107.048887][ T802] dvb-usb: error while querying for an remote control event. [ 107.105945][ T1217] usb 2-1: USB disconnect, device number 7 [ 107.132409][ T6689] netlink: 'syz.0.215': attribute type 39 has an invalid length. [ 107.192374][ T1217] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 107.269126][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 107.337137][ T5932] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.442170][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 107.471353][ T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 107.475011][ T6700] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 107.492971][ T29] audit: type=1400 audit(1776841125.937:311): avc: denied { read } for pid=6697 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.493474][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 107.517211][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.532767][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.546570][ T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.556525][ T10] usb 3-1: Product: syz [ 107.560938][ T10] usb 3-1: Manufacturer: syz [ 107.564148][ T5932] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 107.565543][ T10] usb 3-1: SerialNumber: syz [ 107.578028][ T6700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.587963][ T10] usb 3-1: config 0 descriptor?? [ 107.589491][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.601089][ T5932] usb 5-1: Product: syz [ 107.605278][ T5932] usb 5-1: Manufacturer: syz [ 107.605758][ T10] usb 3-1: selecting invalid altsetting 0 [ 107.614744][ T5932] usb 5-1: SerialNumber: syz [ 107.636978][ T5932] usb 5-1: config 0 descriptor?? [ 107.663145][ T6704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.689803][ T6704] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.722381][ T6704] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 107.763641][ T6700] gretap1: entered promiscuous mode [ 107.773345][ T6700] bond1: (slave gretap1): making interface the new active one [ 107.784015][ T6700] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 107.810499][ T10] usb 3-1: USB disconnect, device number 12 [ 107.823294][ T29] audit: type=1400 audit(1776841126.267:312): avc: denied { read write } for pid=6681 comm="syz.2.211" dev="sockfs" ino=12362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.882414][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.890875][ T6707] macvlan2: entered promiscuous mode [ 107.896278][ T6707] macvlan2: entered allmulticast mode [ 107.902420][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.910921][ T6707] bond1: entered promiscuous mode [ 107.922003][ T29] audit: type=1400 audit(1776841126.327:313): avc: denied { ioctl } for pid=6685 comm="syz.4.214" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.926672][ T6707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.988629][ T6707] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 108.002598][ T6707] bond1: left promiscuous mode [ 108.073990][ T5932] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 108.081993][ T5932] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 108.099239][ T5932] usb 5-1: USB disconnect, device number 6 [ 108.359426][ T29] audit: type=1400 audit(1776841126.807:314): avc: denied { create } for pid=6708 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 108.574212][ T29] audit: type=1326 audit(1776841127.017:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f019c819 code=0x7ffc0000 [ 108.597661][ T29] audit: type=1326 audit(1776841127.017:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f019c819 code=0x7ffc0000 [ 108.625709][ T29] audit: type=1326 audit(1776841127.047:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7f019c819 code=0x7ffc0000 [ 108.649404][ T29] audit: type=1326 audit(1776841127.047:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f019c819 code=0x7ffc0000 [ 108.774184][ T6721] fuse: Bad value for 'fd' [ 108.932200][ T6724] openvswitch: netlink: EtherType 50a is less than min 600 [ 109.710026][ T6741] 9p: Bad value for 'rfdno' [ 110.369049][ T6746] netlink: 268 bytes leftover after parsing attributes in process `syz.4.232'. [ 110.931609][ T6755] syzkaller0: entered promiscuous mode [ 110.945036][ T6755] syzkaller0: entered allmulticast mode [ 111.327223][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.495827][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 112.062387][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 112.074561][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 112.085506][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 112.095003][ T10] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 112.105260][ T10] usb 5-1: Manufacturer: syz [ 112.122212][ T10] usb 5-1: config 0 descriptor?? [ 112.152887][ T10] smsusb:smsusb_probe: board id=9, interface number 0 [ 112.180086][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 113.426743][ T6796] capability: warning: `syz.2.249' uses 32-bit capabilities (legacy support in use) [ 113.835111][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 113.835128][ T29] audit: type=1400 audit(2000000002.260:329): avc: denied { create } for pid=6799 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 113.861763][ T29] audit: type=1400 audit(2000000002.290:330): avc: denied { connect } for pid=6799 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 113.885320][ T29] audit: type=1400 audit(2000000002.290:331): avc: denied { bind } for pid=6799 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 114.026651][ T10] usb 5-1: USB disconnect, device number 7 [ 114.246619][ T29] audit: type=1400 audit(2000000002.670:332): avc: denied { setopt } for pid=6803 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 114.286287][ T6803] delete_channel: no stack [ 114.289706][ T29] audit: type=1400 audit(2000000002.700:333): avc: denied { create } for pid=6803 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.335882][ T29] audit: type=1400 audit(2000000002.710:334): avc: denied { bind } for pid=6803 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.443778][ T29] audit: type=1400 audit(2000000002.870:335): avc: denied { bind } for pid=6816 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.508398][ T29] audit: type=1400 audit(2000000002.870:336): avc: denied { listen } for pid=6816 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.537184][ T29] audit: type=1400 audit(2000000002.900:337): avc: denied { ioctl } for pid=6816 comm="syz.0.259" path="socket:[13607]" dev="sockfs" ino=13607 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.357493][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 116.114554][ T29] audit: type=1400 audit(2000000004.180:338): avc: denied { create } for pid=6840 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 116.149382][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 116.237380][ T1217] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.359656][ T6855] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.270'. [ 116.369333][ T6855] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 116.407370][ T1217] usb 5-1: Using ep0 maxpacket: 8 [ 116.430646][ T1217] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 116.442009][ T1217] usb 5-1: config 127 has no interface number 1 [ 116.450643][ T1217] usb 5-1: config 127 interface 0 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 116.461911][ T1217] usb 5-1: config 127 interface 171 has no altsetting 0 [ 116.476374][ T1217] usb 5-1: config 127 interface 0 has no altsetting 0 [ 116.488403][ T1217] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 116.507644][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.525845][ T1217] usb 5-1: Product: syz [ 116.537105][ T1217] usb 5-1: Manufacturer: syz [ 116.541769][ T1217] usb 5-1: SerialNumber: syz [ 116.862642][ T1217] xr_serial 5-1:127.171: xr_serial converter detected [ 116.926327][ T1217] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 116.951303][ T1217] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 117.241341][ T1217] usb 5-1: USB disconnect, device number 8 [ 117.275812][ T1217] xr_serial 5-1:127.171: device disconnected [ 120.168463][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 120.325218][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 120.325234][ T29] audit: type=1400 audit(2000000008.750:350): avc: denied { lock } for pid=6917 comm="syz.1.289" path="socket:[12857]" dev="sockfs" ino=12857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.511899][ T29] audit: type=1400 audit(2000000009.940:351): avc: denied { map } for pid=6932 comm="syz.3.295" path="socket:[12881]" dev="sockfs" ino=12881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.583283][ T6939] kernel read not supported for file /file0 (pid: 6939 comm: syz.0.298) [ 121.614569][ T29] audit: type=1800 audit(2000000010.040:352): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.298" name="file0" dev="mqueue" ino=13758 res=0 errno=0 [ 121.776847][ T6943] netlink: 'syz.4.299': attribute type 4 has an invalid length. [ 121.784648][ T6943] netlink: 152 bytes leftover after parsing attributes in process `syz.4.299'. [ 121.822373][ T6943] .`: renamed from bond0 (while UP) [ 123.226160][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 123.477755][ T6955] overlayfs: failed to clone upperpath [ 123.529770][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 123.538697][ T6956] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.892987][ T6941] netlink: 180 bytes leftover after parsing attributes in process `syz.4.299'. [ 123.924342][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.958090][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.981602][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 123.997420][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.029629][ T10] usb 3-1: config 0 descriptor?? [ 124.150241][ T29] audit: type=1326 audit(2000000012.580:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.3.308" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6743f9c819 code=0x0 [ 124.327167][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.588861][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.617064][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 124.624256][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.635713][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.647043][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.661294][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.668409][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 124.677579][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.687536][ T9] usb 2-1: config 0 descriptor?? [ 124.696516][ T9] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 124.727120][ T5884] usb 5-1: device descriptor read/64, error -71 [ 124.798857][ T10] usbhid 3-1:0.0: can't add hid device: -32 [ 124.804923][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 124.963075][ T6974] gfs2: error -5 reading superblock [ 125.010240][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.021276][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.029220][ T5884] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.258134][ T5884] usb 5-1: device descriptor read/64, error -71 [ 125.444857][ T5884] usb usb5-port1: attempt power cycle [ 125.519841][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 125.582958][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 125.620959][ T6977] fuse: Bad value for 'fd' [ 125.809919][ T9] usb 2-1: USB disconnect, device number 8 [ 125.898040][ T5884] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 126.043257][ T5884] usb 5-1: device descriptor read/8, error -71 [ 126.419561][ T5884] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 126.545338][ T5884] usb 5-1: device descriptor read/8, error -71 [ 126.713106][ T9] usb 3-1: USB disconnect, device number 13 [ 126.754166][ T5884] usb usb5-port1: unable to enumerate USB device [ 127.301263][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.316912][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.666521][ T29] audit: type=1400 audit(2000000015.960:354): avc: denied { listen } for pid=6989 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.704795][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 127.844924][ T29] audit: type=1400 audit(2000000016.260:355): avc: denied { setopt } for pid=6990 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.174866][ T29] audit: type=1326 audit(2000000016.270:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c35b9c819 code=0x7ffc0000 [ 128.198184][ T29] audit: type=1326 audit(2000000016.600:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c35b9c819 code=0x7ffc0000 [ 128.262334][ T29] audit: type=1326 audit(2000000016.650:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c35b9c819 code=0x7ffc0000 [ 128.324954][ T29] audit: type=1326 audit(2000000016.650:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c35b9c819 code=0x7ffc0000 [ 128.380780][ T6998] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 128.395920][ T29] audit: type=1326 audit(2000000016.650:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c35b9c819 code=0x7ffc0000 [ 128.461204][ T29] audit: type=1326 audit(2000000016.650:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c35b9c819 code=0x7ffc0000 [ 128.560791][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 128.572558][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 128.572587][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.572599][ T50] Workqueue: hci4 hci_rx_work [ 128.572629][ T50] Call Trace: [ 128.572635][ T50] [ 128.572643][ T50] dump_stack_lvl+0x100/0x190 [ 128.572670][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 128.572699][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 128.572719][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.572739][ T50] ? find_held_lock+0x2b/0x80 [ 128.572756][ T50] ? kobject_add_internal+0x25f/0x930 [ 128.572782][ T50] ? kobject_add_internal+0x25f/0x930 [ 128.572813][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 128.572846][ T50] kobject_add_internal+0x2c8/0x930 [ 128.572879][ T50] kobject_add+0x16a/0x1e0 [ 128.572907][ T50] ? __pfx_kobject_add+0x10/0x10 [ 128.572932][ T50] ? class_to_subsys+0x10f/0x150 [ 128.572955][ T50] ? kobject_put+0xb9/0x640 [ 128.572979][ T50] ? _raw_spin_unlock+0x28/0x50 [ 128.573006][ T50] device_add+0x294/0x1950 [ 128.573033][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 128.573051][ T50] ? __pfx_device_add+0x10/0x10 [ 128.573076][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 128.573106][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 128.573132][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 128.573169][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.573194][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 128.573210][ T50] ? skb_pull_data+0x15f/0x1e0 [ 128.573225][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 128.573243][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 128.573259][ T50] hci_event_packet+0x51c/0xcd0 [ 128.573273][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.573288][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 128.573304][ T50] ? kcov_remote_start+0x374/0x660 [ 128.573320][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 128.573347][ T50] hci_rx_work+0x451/0xfc0 [ 128.573373][ T50] process_one_work+0xa0e/0x1980 [ 128.573400][ T50] ? __pfx_process_one_work+0x10/0x10 [ 128.573421][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 128.573439][ T50] worker_thread+0x5ef/0xe50 [ 128.573458][ T50] ? kthread+0x13a/0x450 [ 128.573469][ T50] ? __pfx_worker_thread+0x10/0x10 [ 128.573481][ T50] kthread+0x370/0x450 [ 128.573493][ T50] ? __pfx_kthread+0x10/0x10 [ 128.573507][ T50] ret_from_fork+0x72b/0xd50 [ 128.573531][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 128.573553][ T50] ? __switch_to+0x800/0x1100 [ 128.573579][ T50] ? __pfx_kthread+0x10/0x10 [ 128.573594][ T50] ret_from_fork_asm+0x1a/0x30 [ 128.573617][ T50] [ 128.573723][ T50] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.847409][ T50] Bluetooth: hci4: failed to register connection device [ 128.855261][ T29] audit: type=1326 audit(2000000016.650:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c35b9c819 code=0x7ffc0000 [ 128.878721][ T29] audit: type=1326 audit(2000000016.650:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1c35b9c819 code=0x7ffc0000 [ 129.347089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 130.167056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.977257][ T7031] binder: BINDER_SET_CONTEXT_MGR already set [ 131.030672][ T7031] binder: 7026:7031 ioctl 4018620d 200000000100 returned -16 [ 132.129496][ T7053] netlink: 136 bytes leftover after parsing attributes in process `syz.0.324'. [ 132.138616][ T7053] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 132.258408][ T7058] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 132.523178][ T7066] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 132.592554][ T7066] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 133.022702][ T5826] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 133.040997][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 133.041014][ T29] audit: type=1400 audit(2000000021.470:386): avc: denied { name_connect } for pid=7074 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 133.617188][ T29] audit: type=1400 audit(2000000021.660:387): avc: denied { shutdown } for pid=7075 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.696198][ T29] audit: type=1400 audit(2000000021.670:388): avc: denied { write } for pid=7075 comm="syz.1.338" path="socket:[14017]" dev="sockfs" ino=14017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 133.729488][ T1217] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 133.889653][ T1217] usb 5-1: Using ep0 maxpacket: 8 [ 133.909635][ T1217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.933037][ T1217] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.022767][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.041218][ T1217] usb 5-1: config 0 descriptor?? [ 134.148150][ T29] audit: type=1400 audit(2000000022.570:389): avc: denied { getopt } for pid=7086 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.711821][ T1217] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.742280][ T29] audit: type=1400 audit(2000000024.170:390): avc: denied { mount } for pid=7101 comm="syz.0.344" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 136.544578][ T1217] usb 5-1: USB disconnect, device number 13 [ 137.077383][ T5826] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 137.087261][ T5826] Bluetooth: hci4: Injecting HCI hardware error event [ 137.094898][ T5826] Bluetooth: hci4: hardware error 0x00 [ 137.203951][ T5826] ================================================================== [ 137.212063][ T5826] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 137.221255][ T5826] Read of size 8 at addr ffff8880332df578 by task kworker/u9:2/5826 [ 137.229248][ T5826] [ 137.231580][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 137.231603][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.231614][ T5826] Workqueue: hci4 hci_error_reset [ 137.231644][ T5826] Call Trace: [ 137.231650][ T5826] [ 137.231656][ T5826] dump_stack_lvl+0x100/0x190 [ 137.231677][ T5826] print_report+0x13d/0x4b0 [ 137.231700][ T5826] ? __virt_addr_valid+0x239/0x430 [ 137.231718][ T5826] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 137.231736][ T5826] kasan_report+0xdf/0x1d0 [ 137.231754][ T5826] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 137.231775][ T5826] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 137.231793][ T5826] bt_accept_unlink+0x34/0x2f0 [ 137.231811][ T5826] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 137.231838][ T5826] l2cap_chan_del+0xbd/0x930 [ 137.231857][ T5826] l2cap_conn_del+0x395/0x710 [ 137.231878][ T5826] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 137.231896][ T5826] l2cap_disconn_cfm+0x9f/0x100 [ 137.231914][ T5826] hci_conn_hash_flush+0x10e/0x280 [ 137.231942][ T5826] hci_dev_close_sync+0x5a7/0x1240 [ 137.231984][ T5826] ? __pfx_bt_err+0x10/0x10 [ 137.232009][ T5826] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 137.232027][ T5826] hci_dev_do_close+0x2e/0xb0 [ 137.232051][ T5826] hci_error_reset+0xbf/0x380 [ 137.232073][ T5826] process_one_work+0xa0e/0x1980 [ 137.232096][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 137.232111][ T5826] ? __pfx_hci_error_reset+0x10/0x10 [ 137.232126][ T5826] worker_thread+0x5ef/0xe50 [ 137.232140][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 137.232153][ T5826] ? kthread+0x13a/0x450 [ 137.232164][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 137.232176][ T5826] kthread+0x370/0x450 [ 137.232188][ T5826] ? __pfx_kthread+0x10/0x10 [ 137.232199][ T5826] ret_from_fork+0x72b/0xd50 [ 137.232216][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 137.232229][ T5826] ? rcu_is_watching+0x12/0xc0 [ 137.232244][ T5826] ? __switch_to+0x800/0x1100 [ 137.232260][ T5826] ? __pfx_kthread+0x10/0x10 [ 137.232271][ T5826] ret_from_fork_asm+0x1a/0x30 [ 137.232289][ T5826] [ 137.232293][ T5826] [ 137.436038][ T5826] Allocated by task 6993: [ 137.440347][ T5826] kasan_save_stack+0x30/0x50 [ 137.445035][ T5826] kasan_save_track+0x14/0x30 [ 137.449698][ T5826] __kasan_kmalloc+0xaa/0xb0 [ 137.454271][ T5826] __kmalloc_noprof+0x301/0x850 [ 137.459110][ T5826] sk_prot_alloc+0x10b/0x2a0 [ 137.463685][ T5826] sk_alloc+0x36/0xe80 [ 137.467739][ T5826] bt_sock_alloc+0x3b/0x3a0 [ 137.472224][ T5826] l2cap_sock_alloc.constprop.0+0x33/0x1e0 [ 137.478016][ T5826] l2cap_sock_create+0x123/0x210 [ 137.482959][ T5826] bt_sock_create+0x185/0x350 [ 137.487616][ T5826] __sock_create+0x339/0x860 [ 137.492184][ T5826] __sys_socket+0x14d/0x260 [ 137.496666][ T5826] __x64_sys_socket+0x72/0xb0 [ 137.501326][ T5826] do_syscall_64+0x10b/0xf80 [ 137.505901][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.511775][ T5826] [ 137.514078][ T5826] Freed by task 7001: [ 137.518047][ T5826] kasan_save_stack+0x30/0x50 [ 137.522711][ T5826] kasan_save_track+0x14/0x30 [ 137.527375][ T5826] kasan_save_free_info+0x3b/0x70 [ 137.532396][ T5826] __kasan_slab_free+0x5f/0x80 [ 137.537137][ T5826] kfree+0x223/0x6c0 [ 137.541016][ T5826] __sk_destruct+0x88c/0xab0 [ 137.545587][ T5826] sk_destruct+0xc8/0xf0 [ 137.549815][ T5826] __sk_free+0xf4/0x3e0 [ 137.553955][ T5826] sk_free+0x61/0x90 [ 137.557831][ T5826] l2cap_sock_kill+0x176/0x310 [ 137.562583][ T5826] l2cap_sock_release+0x1cb/0x280 [ 137.567613][ T5826] __sock_release+0xb3/0x260 [ 137.572190][ T5826] sock_close+0x1c/0x30 [ 137.576332][ T5826] __fput+0x3ff/0xb50 [ 137.580316][ T5826] task_work_run+0x150/0x240 [ 137.584889][ T5826] get_signal+0x1bd/0x21e0 [ 137.589294][ T5826] arch_do_signal_or_restart+0x91/0x7a0 [ 137.594828][ T5826] exit_to_user_mode_loop+0x86/0x4a0 [ 137.600098][ T5826] do_syscall_64+0x706/0xf80 [ 137.604668][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.610538][ T5826] [ 137.612842][ T5826] The buggy address belongs to the object at ffff8880332df000 [ 137.612842][ T5826] which belongs to the cache kmalloc-2k of size 2048 [ 137.626870][ T5826] The buggy address is located 1400 bytes inside of [ 137.626870][ T5826] freed 2048-byte region [ffff8880332df000, ffff8880332df800) [ 137.640814][ T5826] [ 137.643122][ T5826] The buggy address belongs to the physical page: [ 137.649507][ T5826] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880332de000 pfn:0x332d8 [ 137.659545][ T5826] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 137.668032][ T5826] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 137.676515][ T5826] page_type: f5(slab) [ 137.680566][ T5826] raw: 00fff00000000240 ffff88813fe8d000 ffffea0000ba5a10 ffffea0000a1fe10 [ 137.689139][ T5826] raw: ffff8880332de000 0000000800080006 00000000f5000000 0000000000000000 [ 137.697699][ T5826] head: 00fff00000000240 ffff88813fe8d000 ffffea0000ba5a10 ffffea0000a1fe10 [ 137.706346][ T5826] head: ffff8880332de000 0000000800080006 00000000f5000000 0000000000000000 [ 137.714993][ T5826] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 137.723640][ T5826] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 137.732282][ T5826] page dumped because: kasan: bad access detected [ 137.738671][ T5826] page_owner tracks the page as allocated [ 137.744363][ T5826] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 140, tgid 140 (kworker/u8:5), ts 62745242474, free_ts 62419374071 [ 137.765438][ T5826] post_alloc_hook+0x153/0x170 [ 137.770189][ T5826] get_page_from_freelist+0x11a6/0x33b0 [ 137.775718][ T5826] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 137.781594][ T5826] new_slab+0xa6/0x6c0 [ 137.785645][ T5826] refill_objects+0x277/0x420 [ 137.790303][ T5826] __pcs_replace_empty_main+0x375/0x650 [ 137.795833][ T5826] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 137.802234][ T5826] kmalloc_reserve+0xe8/0x350 [ 137.806894][ T5826] pskb_expand_head+0x249/0x10e0 [ 137.811814][ T5826] netlink_trim+0x22d/0x2f0 [ 137.816304][ T5826] netlink_broadcast_filtered+0x69/0xe90 [ 137.821915][ T5826] nlmsg_notify+0xb1/0x290 [ 137.826311][ T5826] rtmsg_ifinfo+0x177/0x1b0 [ 137.830791][ T5826] netif_state_change+0x17f/0x380 [ 137.835795][ T5826] linkwatch_do_dev+0xe0/0x120 [ 137.840540][ T5826] __linkwatch_run_queue+0x3a9/0x900 [ 137.845802][ T5826] page last free pid 24 tgid 24 stack trace: [ 137.851756][ T5826] __free_frozen_pages+0x747/0x1040 [ 137.856954][ T5826] qlist_free_all+0x47/0xf0 [ 137.861444][ T5826] kasan_quarantine_reduce+0x1a0/0x1f0 [ 137.866889][ T5826] __kasan_slab_alloc+0x69/0x90 [ 137.871716][ T5826] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 137.877593][ T5826] __alloc_skb+0x140/0x710 [ 137.881994][ T5826] mld_newpack.isra.0+0x18e/0xa20 [ 137.887002][ T5826] add_grhead+0x299/0x340 [ 137.891317][ T5826] add_grec+0x1380/0x1920 [ 137.895641][ T5826] mld_ifc_work+0x3c5/0xc10 [ 137.900127][ T5826] process_one_work+0xa0e/0x1980 [ 137.905046][ T5826] worker_thread+0x5ef/0xe50 [ 137.909616][ T5826] kthread+0x370/0x450 [ 137.913665][ T5826] ret_from_fork+0x72b/0xd50 [ 137.918325][ T5826] ret_from_fork_asm+0x1a/0x30 [ 137.923073][ T5826] [ 137.925374][ T5826] Memory state around the buggy address: [ 137.930979][ T5826] ffff8880332df400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.939031][ T5826] ffff8880332df480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.947085][ T5826] >ffff8880332df500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.955129][ T5826] ^ [ 137.963085][ T5826] ffff8880332df580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.971144][ T5826] ffff8880332df600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.979184][ T5826] ================================================================== [ 137.998311][ T5826] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.005539][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 138.014994][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 138.025062][ T5826] Workqueue: hci4 hci_error_reset [ 138.030088][ T5826] Call Trace: [ 138.033352][ T5826] [ 138.036266][ T5826] dump_stack_lvl+0x100/0x190 [ 138.040930][ T5826] vpanic+0x552/0x970 [ 138.044895][ T5826] ? __pfx_vpanic+0x10/0x10 [ 138.049378][ T5826] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 138.055776][ T5826] panic+0xd1/0xe0 [ 138.059480][ T5826] ? __pfx_panic+0x10/0x10 [ 138.063876][ T5826] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 138.070277][ T5826] ? preempt_schedule_common+0x42/0xc0 [ 138.075733][ T5826] ? check_panic_on_warn+0x1f/0x90 [ 138.080827][ T5826] check_panic_on_warn.cold+0x19/0x34 [ 138.086177][ T5826] end_report.part.0+0x3a/0x90 [ 138.090928][ T5826] kasan_report.cold+0xe/0x18 [ 138.095591][ T5826] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 138.101987][ T5826] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 138.108208][ T5826] bt_accept_unlink+0x34/0x2f0 [ 138.112957][ T5826] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 138.118326][ T5826] l2cap_chan_del+0xbd/0x930 [ 138.122901][ T5826] l2cap_conn_del+0x395/0x710 [ 138.127562][ T5826] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 138.133002][ T5826] l2cap_disconn_cfm+0x9f/0x100 [ 138.137858][ T5826] hci_conn_hash_flush+0x10e/0x280 [ 138.142960][ T5826] hci_dev_close_sync+0x5a7/0x1240 [ 138.148054][ T5826] ? __pfx_bt_err+0x10/0x10 [ 138.152545][ T5826] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 138.158076][ T5826] hci_dev_do_close+0x2e/0xb0 [ 138.162742][ T5826] hci_error_reset+0xbf/0x380 [ 138.167406][ T5826] process_one_work+0xa0e/0x1980 [ 138.172339][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 138.177700][ T5826] ? __pfx_hci_error_reset+0x10/0x10 [ 138.182973][ T5826] worker_thread+0x5ef/0xe50 [ 138.187549][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 138.192642][ T5826] ? kthread+0x13a/0x450 [ 138.196865][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 138.201959][ T5826] kthread+0x370/0x450 [ 138.206011][ T5826] ? __pfx_kthread+0x10/0x10 [ 138.210584][ T5826] ret_from_fork+0x72b/0xd50 [ 138.215158][ T5826] ? __pfx_ret_from_fork+0x10/0x10 [ 138.220253][ T5826] ? rcu_is_watching+0x12/0xc0 [ 138.225005][ T5826] ? __switch_to+0x800/0x1100 [ 138.229680][ T5826] ? __pfx_kthread+0x10/0x10 [ 138.234265][ T5826] ret_from_fork_asm+0x1a/0x30 [ 138.239060][ T5826] [ 138.242363][ T5826] Kernel Offset: disabled [ 138.246667][ T5826] Rebooting in 86400 seconds..