last executing test programs: 1m2.208042785s ago: executing program 3 (id=359): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000040)={0xfffffffc, 0x3, &(0x7f0000000140)=[0x101, 0x3, 0x2ad], 0x0, 0x0, 0x0}) (fail_nth: 2) 1m1.736735793s ago: executing program 0 (id=360): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$video(&(0x7f0000000880), 0x1d, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f00000008c0)={0x3, 0x10001, @name="322754113726347419feaaf4203704a7ef1c48b73c659f74bfe55bf596b9d875"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0xc8, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xb4, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x58, 0x1a, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x5, 0x3, 0x3, 0x9}, {0x0, 0x1, 0xff, 0x2}, {0x5, 0x51, 0x0, 0xf}, {0xfff4, 0x91, 0x88, 0x30}, {0x9, 0x0, 0x0, 0xd}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x88c4}, 0x4000814) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 1m1.579049491s ago: executing program 3 (id=362): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x800, 0x2, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f00000001c0)=""/200, 0xc8, 0x0) symlinkat(0x0, r2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)="9f1092045ded0a92b001829a8681ed391da1a71d8d76fb536620d115b1cbfbc6db7cbcd67820dc4e26d04cc8846669170792aecf367865e79ff9de833896b50ce26cbae180fdfb0448992d37629d9538cd0e847e2bdb529738418671a26b89b80a85f9489d2b8ea7f40e7cbd0e8bffde", 0x70}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) 1m0.784272634s ago: executing program 0 (id=364): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000280), &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) 1m0.699854937s ago: executing program 0 (id=366): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xb00, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x5411, 0x7ffffffffffffffe) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000063fcffffffff1474351500"], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000003c0)={0x2002, {{0x2, 0x4e23, @multicast1}}, {{0x2002, 0x4e24, @loopback}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 1m0.551687241s ago: executing program 3 (id=368): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x80, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1ff}, @cb_func={0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x95, &(0x7f00000002c0)=""/149, 0x40f00, 0x11, '\x00', r5, @fallback=0x5, r6, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x1000}, 0x10, r7, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000480)=[{0x3, 0x5, 0x2, 0x2}, {0x2, 0x3, 0x10, 0xa}, {0x2, 0x1, 0xc, 0x2}], 0x10, 0x4}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r9 = syz_io_uring_complete(0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000580)) recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 1m0.500289341s ago: executing program 0 (id=369): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) getpid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setxattr$security_ima(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000340)=@md5={0x1, "356d4407c7350adb0f328a0b093edea7"}, 0x11, 0x1) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 59.448037638s ago: executing program 0 (id=373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r2, 0x9) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r4, 0x1000000000931f, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x5) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x105, 0xf038, 0xf06, 0x109, 0xefd6356a6035ed50, 0x5d, 0x1}, 0x9c) 58.445557197s ago: executing program 3 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}}, 0x40880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x80, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaa8aaaabb86dd000186dd06100004aaaaaaaaaabbfc000000000000000000000000000001aaaaaaaaaabbfe8000"/62], 0x0) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000a00)={0xb, @raw_data="458b7c63435c050ec5f3508f2d9dd0bd631274b6eae4ebb4d4e02e1e4f1111055f3cf4d5db3b33f186eef1cb36c5e8a76e591f3d9de39eddd43e3b87d36ec0ad725cdb758a5df00b49e65e76fbf6cfd22abc2998ca18e27e0540447e58abd2c90f3cb7ebcd92c711110726060e3a1b2009a8d18d10287d587edfc1af491d903d2ca483d64c7720b20c16a7580b80816772a091860cd670a079b2585af6159231c69f1c43d44f874c29df93fcbdcdaab4ea20e05c70a4dd8a09df47fc9b51cc1fae5fb2ad3d3d75a0"}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 57.605089885s ago: executing program 0 (id=381): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x80, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1ff}, @cb_func={0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x95, &(0x7f00000002c0)=""/149, 0x40f00, 0x11, '\x00', r5, @fallback=0x5, r6, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x1000}, 0x10, r7, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000480)=[{0x3, 0x5, 0x2, 0x2}, {0x2, 0x3, 0x10, 0xa}, {0x2, 0x1, 0xc, 0x2}], 0x10, 0x4}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r9 = syz_io_uring_complete(0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000580)) recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 57.52598953s ago: executing program 3 (id=382): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x1000000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x80, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1ff}, @cb_func={0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x95, &(0x7f00000002c0)=""/149, 0x40f00, 0x11, '\x00', r5, @fallback=0x5, r6, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x1000}, 0x10, r7, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000480)=[{0x3, 0x5, 0x2, 0x2}, {0x2, 0x3, 0x10, 0xa}, {0x2, 0x1, 0xc, 0x2}], 0x10, 0x4}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r9 = syz_io_uring_complete(0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000580)) recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 50.410286922s ago: executing program 3 (id=385): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x1, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f0000000140)={0x79b8bb80}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000080)=0x20044, 0x4) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 42.339208167s ago: executing program 32 (id=381): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x80, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1ff}, @cb_func={0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x95, &(0x7f00000002c0)=""/149, 0x40f00, 0x11, '\x00', r5, @fallback=0x5, r6, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x1000}, 0x10, r7, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000480)=[{0x3, 0x5, 0x2, 0x2}, {0x2, 0x3, 0x10, 0xa}, {0x2, 0x1, 0xc, 0x2}], 0x10, 0x4}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r9 = syz_io_uring_complete(0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000580)) recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 32.84878047s ago: executing program 33 (id=385): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x1, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f0000000140)={0x79b8bb80}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000080)=0x20044, 0x4) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 27.08761156s ago: executing program 4 (id=404): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c014}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc004ae0a, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x2, 0x1, 0x0) 26.566972453s ago: executing program 2 (id=406): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 25.117201428s ago: executing program 2 (id=409): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="c4e27d9811c4c1fde69762ec7cd166baa000ed0f20e035200000000f22e0f2af0f78e50f01cbc4c1d9c27df20b26650fc71c583ef26c", 0x36}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0xfffffffffffffcee, {0xdddd0000, 0x80af000}}, "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", "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"}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 25.115486346s ago: executing program 4 (id=410): socket$inet6(0xa, 0x80002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x84a42, 0x99) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x7}, {}, {0x0, 0x9}, {0x0, 0x1}, {}, {0x0, 0x7}], 0x20}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019080)=ANY=[@ANYBLOB="54000000120001030000000000dcdf250040ff004e24", @ANYRESDEC=r4], 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r5 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data=[0x5c7, 0x5a, 0x800, 0x5, 0x4, 0x6, 0x6, 0xffff, 0x5, 0x7, 0x3, 0x5, 0x2, 0x80000000, 0x1, 0x9, 0x80000000, 0x8, 0xb, 0x456d, 0x0, 0x6, 0x4, 0x0, 0xfffffff8, 0xfffffffd, 0x2, 0x9, 0x8, 0x6, 0x3, 0x6]}) keyctl$restrict_keyring(0x3, r5, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) 24.077185101s ago: executing program 2 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400) r3 = dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) read$FUSE(r3, &(0x7f0000002280)={0x2020}, 0x2020) inotify_rm_watch(r3, r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.485499782s ago: executing program 1 (id=412): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 22.386628835s ago: executing program 4 (id=413): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 22.282917434s ago: executing program 1 (id=414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.608106386s ago: executing program 2 (id=415): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="66b98d0400000f32b880018ee067660f350f01d166b9940a000066b80048000066ba000000000f3066b8640000000f23c00f21f8663503000a000f23f866b9040100c00f320f5429660f73fc95670f234f", 0x51}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 21.548210353s ago: executing program 2 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0xc6, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000008b04"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21.54591181s ago: executing program 1 (id=417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bdf000fbdbdf25010000000800020002000000080001"], 0x48}}, 0x0) 21.382970954s ago: executing program 1 (id=418): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x49, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c014}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc004ae0a, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x2, 0x1, 0x0) 21.29732556s ago: executing program 4 (id=419): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x40000000, 0x0, 0x0) 21.227163561s ago: executing program 4 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) r3 = getpid() fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) syz_pidfd_open(r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x48000) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, 0x0, 0x0) listen(r5, 0x208) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0xb4, 0x0, 0x0, @tick=0x8, {0x0, 0x1}, {0x0, 0x4}, @addr={0x9, 0x4}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 19.890650603s ago: executing program 4 (id=421): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3) 19.828335139s ago: executing program 1 (id=422): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="663203010f00d0ea6287f3e06f0066ba2100ed66baf80cb892a8e08aef66bafc0cec660f3880a9eb1500004d62fdd8d8c121dba984848318821ce60fb8000000800f23d00f21f835100000050f23f8b9800000c00f3235000400fd000030b98f0a0000b889000000ba000000000f30", 0x6f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19.616835476s ago: executing program 1 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 18.976531272s ago: executing program 2 (id=424): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x100000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.627319899s ago: executing program 34 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 3.014274839s ago: executing program 35 (id=421): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3) 0s ago: executing program 36 (id=424): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x100000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. [ 49.698871][ T30] audit: type=1400 audit(1755334938.252:62): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.700072][ T5831] cgroup: Unknown subsys name 'net' [ 49.721592][ T30] audit: type=1400 audit(1755334938.252:63): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.749958][ T30] audit: type=1400 audit(1755334938.302:64): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.848729][ T5831] cgroup: Unknown subsys name 'cpuset' [ 49.855363][ T5831] cgroup: Unknown subsys name 'rlimit' [ 49.953167][ T30] audit: type=1400 audit(1755334938.502:65): avc: denied { setattr } for pid=5831 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.976626][ T30] audit: type=1400 audit(1755334938.502:66): avc: denied { create } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.997285][ T30] audit: type=1400 audit(1755334938.502:67): avc: denied { write } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.017764][ T30] audit: type=1400 audit(1755334938.502:68): avc: denied { read } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.038191][ T30] audit: type=1400 audit(1755334938.512:69): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 50.038678][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.071544][ T30] audit: type=1400 audit(1755334938.512:70): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 50.094761][ T30] audit: type=1400 audit(1755334938.562:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 50.885450][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.643931][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.654449][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.666840][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.673840][ T5169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.681085][ T5169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.697503][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.707173][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.712324][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.721131][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.721326][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.728544][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.735726][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.746528][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.749430][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.756222][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.762863][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.771567][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.784336][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.784577][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.799057][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.808347][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.815544][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.822969][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.830101][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.847572][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.006664][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 53.046916][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 53.108622][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 53.137984][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 53.157770][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.164857][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.172293][ T5841] bridge_slave_0: entered allmulticast mode [ 53.178913][ T5841] bridge_slave_0: entered promiscuous mode [ 53.191951][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.199173][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.206224][ T5850] bridge_slave_0: entered allmulticast mode [ 53.212581][ T5850] bridge_slave_0: entered promiscuous mode [ 53.225895][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.232982][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.240036][ T5841] bridge_slave_1: entered allmulticast mode [ 53.246259][ T5841] bridge_slave_1: entered promiscuous mode [ 53.260478][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.267537][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.274568][ T5850] bridge_slave_1: entered allmulticast mode [ 53.281292][ T5850] bridge_slave_1: entered promiscuous mode [ 53.299503][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 53.309302][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.328904][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.340922][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.367332][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.376410][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.383483][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.390746][ T5848] bridge_slave_0: entered allmulticast mode [ 53.397090][ T5848] bridge_slave_0: entered promiscuous mode [ 53.409760][ T5841] team0: Port device team_slave_0 added [ 53.421549][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.428649][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.435682][ T5848] bridge_slave_1: entered allmulticast mode [ 53.442846][ T5848] bridge_slave_1: entered promiscuous mode [ 53.453589][ T5841] team0: Port device team_slave_1 added [ 53.482108][ T5850] team0: Port device team_slave_0 added [ 53.491336][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.498592][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.505625][ T5844] bridge_slave_0: entered allmulticast mode [ 53.512148][ T5844] bridge_slave_0: entered promiscuous mode [ 53.519491][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.526411][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.552411][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.567431][ T5850] team0: Port device team_slave_1 added [ 53.579172][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.588312][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.595368][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.602591][ T5844] bridge_slave_1: entered allmulticast mode [ 53.608895][ T5844] bridge_slave_1: entered promiscuous mode [ 53.615122][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.622346][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.648308][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.665337][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.672424][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.679543][ T5852] bridge_slave_0: entered allmulticast mode [ 53.685875][ T5852] bridge_slave_0: entered promiscuous mode [ 53.693432][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.710706][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.717928][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.725004][ T5852] bridge_slave_1: entered allmulticast mode [ 53.731399][ T5852] bridge_slave_1: entered promiscuous mode [ 53.754054][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.761122][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.787334][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.802795][ T5848] team0: Port device team_slave_0 added [ 53.809533][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.820336][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.833024][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.840109][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.866027][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.883787][ T5848] team0: Port device team_slave_1 added [ 53.894870][ T5841] hsr_slave_0: entered promiscuous mode [ 53.901427][ T5841] hsr_slave_1: entered promiscuous mode [ 53.914153][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.924853][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.962226][ T5844] team0: Port device team_slave_0 added [ 53.974260][ T5850] hsr_slave_0: entered promiscuous mode [ 53.980547][ T5850] hsr_slave_1: entered promiscuous mode [ 53.986266][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 53.992332][ T5850] Cannot create hsr debugfs directory [ 53.998641][ T5852] team0: Port device team_slave_0 added [ 54.004550][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.011553][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.037515][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.049091][ T5844] team0: Port device team_slave_1 added [ 54.055006][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.061984][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.087894][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.107720][ T5852] team0: Port device team_slave_1 added [ 54.124411][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.131395][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.158244][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.170106][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.177215][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.203145][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.251959][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.258998][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.285492][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.299466][ T5848] hsr_slave_0: entered promiscuous mode [ 54.305361][ T5848] hsr_slave_1: entered promiscuous mode [ 54.311148][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 54.316899][ T5848] Cannot create hsr debugfs directory [ 54.328283][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.335210][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.361820][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.392233][ T5844] hsr_slave_0: entered promiscuous mode [ 54.398178][ T5844] hsr_slave_1: entered promiscuous mode [ 54.403887][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 54.409929][ T5844] Cannot create hsr debugfs directory [ 54.457245][ T5852] hsr_slave_0: entered promiscuous mode [ 54.463075][ T5852] hsr_slave_1: entered promiscuous mode [ 54.468964][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 54.474673][ T5852] Cannot create hsr debugfs directory [ 54.559060][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.567246][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.586058][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.600571][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.639767][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.648563][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.658793][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.673555][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.698296][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.708703][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.726499][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.739224][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.777825][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.786063][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.794462][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.796817][ T5846] Bluetooth: hci0: command tx timeout [ 54.820706][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.828549][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.836497][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.845311][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.853793][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.866890][ T5846] Bluetooth: hci1: command tx timeout [ 54.867059][ T5843] Bluetooth: hci3: command tx timeout [ 54.872262][ T5846] Bluetooth: hci2: command tx timeout [ 54.877844][ T5861] Bluetooth: hci4: command tx timeout [ 54.890742][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.905322][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.922597][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.941401][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.948471][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.958599][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.971229][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.978281][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.989697][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.996750][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.034853][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.041933][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.073789][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.111555][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 55.111570][ T30] audit: type=1400 audit(1755334943.662:86): avc: denied { sys_module } for pid=5850 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.145589][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.155600][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.172976][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.180054][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.199939][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.215266][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.254219][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.263948][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.271031][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.285112][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.297600][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.304672][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.313597][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.320674][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.330891][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.337976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.361915][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.368982][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.402786][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.438101][ T5850] veth0_vlan: entered promiscuous mode [ 55.452528][ T5850] veth1_vlan: entered promiscuous mode [ 55.508184][ T5850] veth0_macvtap: entered promiscuous mode [ 55.531651][ T5841] veth0_vlan: entered promiscuous mode [ 55.551341][ T5841] veth1_vlan: entered promiscuous mode [ 55.558957][ T5850] veth1_macvtap: entered promiscuous mode [ 55.586326][ T5841] veth0_macvtap: entered promiscuous mode [ 55.603293][ T5841] veth1_macvtap: entered promiscuous mode [ 55.630282][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.652536][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.663326][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.678846][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.687869][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.695379][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.710100][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725603][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.742738][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.758192][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.785033][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.800813][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.815705][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.827877][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.848292][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.881537][ T5848] veth0_vlan: entered promiscuous mode [ 55.888645][ T5852] veth0_vlan: entered promiscuous mode [ 55.900357][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.920226][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.933968][ T5852] veth1_vlan: entered promiscuous mode [ 55.941325][ T5848] veth1_vlan: entered promiscuous mode [ 55.975627][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.987076][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.994871][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.999885][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.011257][ T5848] veth0_macvtap: entered promiscuous mode [ 56.028915][ T5852] veth0_macvtap: entered promiscuous mode [ 56.034663][ T30] audit: type=1400 audit(1755334944.582:87): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.egWjLC/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 56.040729][ T5844] veth0_vlan: entered promiscuous mode [ 56.064578][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.075198][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.080216][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.091254][ T5848] veth1_macvtap: entered promiscuous mode [ 56.104537][ T30] audit: type=1400 audit(1755334944.582:88): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.117886][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.136573][ T30] audit: type=1400 audit(1755334944.582:89): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.egWjLC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.144042][ T5852] veth1_macvtap: entered promiscuous mode [ 56.167906][ T30] audit: type=1400 audit(1755334944.582:90): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.170845][ T5844] veth1_vlan: entered promiscuous mode [ 56.195821][ T30] audit: type=1400 audit(1755334944.582:91): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.egWjLC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.205841][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.230108][ T30] audit: type=1400 audit(1755334944.582:92): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/root/syzkaller.egWjLC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.258996][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.282356][ T30] audit: type=1400 audit(1755334944.592:93): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.304803][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.334300][ T30] audit: type=1400 audit(1755334944.612:94): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.363917][ T5844] veth0_macvtap: entered promiscuous mode [ 56.370795][ T1149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.377124][ T30] audit: type=1400 audit(1755334944.612:95): avc: denied { mount } for pid=5850 comm="syz-executor" name="/" dev="gadgetfs" ino=8194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.414335][ T5844] veth1_macvtap: entered promiscuous mode [ 56.422553][ T1149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.472467][ T1149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.504082][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.506066][ T1149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.521120][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.523464][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.537231][ T1149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.545993][ T1149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.563610][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.582386][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.604045][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.615901][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.629635][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.630120][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.646469][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.656328][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.669917][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.684053][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.694719][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.748546][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.761372][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.818553][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.832791][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.868606][ T5843] Bluetooth: hci0: command tx timeout [ 56.882551][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.903903][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.956995][ T5843] Bluetooth: hci3: command tx timeout [ 56.962477][ T5843] Bluetooth: hci2: command tx timeout [ 56.968087][ T5843] Bluetooth: hci4: command tx timeout [ 56.973496][ T5843] Bluetooth: hci1: command tx timeout [ 57.786348][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.795857][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.796122][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.798375][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.808254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.809280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.810309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.811336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.812365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.813394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.814423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.815451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.816482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.817511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.014833][ T5983] Bluetooth: MGMT ver 1.23 [ 58.065847][ T5982] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10'. [ 58.336096][ T5978] tty tty29: ldisc open failed (-12), clearing slot 28 [ 58.843575][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 58.849731][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.852235][ T5960] mkiss: ax0: crc mode is auto. [ 58.956954][ T5846] Bluetooth: hci0: command tx timeout [ 59.027350][ T5846] Bluetooth: hci1: command tx timeout [ 59.027367][ T5861] Bluetooth: hci4: command tx timeout [ 59.027375][ T5843] Bluetooth: hci2: command tx timeout [ 59.027396][ T5843] Bluetooth: hci3: command tx timeout [ 59.049054][ T9] usb 3-1: device descriptor read/64, error -71 [ 59.286833][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 59.429004][ T9] usb 3-1: device descriptor read/64, error -71 [ 59.817809][ T9] usb usb3-port1: attempt power cycle [ 60.196869][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 60.215160][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 60.215174][ T30] audit: type=1400 audit(1755334948.762:194): avc: denied { create } for pid=6023 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.257233][ T9] usb 3-1: device descriptor read/8, error -71 [ 60.284898][ T30] audit: type=1400 audit(1755334948.812:195): avc: denied { setopt } for pid=6023 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.461793][ T30] audit: type=1400 audit(1755334948.912:196): avc: denied { write } for pid=6023 comm="syz.0.19" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.576824][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 60.617253][ T9] usb 3-1: device descriptor read/8, error -71 [ 60.663568][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.733391][ T9] usb usb3-port1: unable to enumerate USB device [ 60.769734][ T30] audit: type=1400 audit(1755334949.302:197): avc: denied { ioctl } for pid=6037 comm="syz.3.23" path="socket:[9378]" dev="sockfs" ino=9378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.809268][ T30] audit: type=1400 audit(1755334949.352:198): avc: denied { name_connect } for pid=6037 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 61.027962][ T5843] Bluetooth: hci0: command tx timeout [ 61.107921][ T5846] Bluetooth: hci1: command tx timeout [ 61.113840][ T5859] Bluetooth: hci4: command tx timeout [ 61.113863][ T5846] Bluetooth: hci2: command tx timeout [ 61.127449][ T5843] Bluetooth: hci3: command tx timeout [ 61.204140][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 61.213912][ T30] audit: type=1400 audit(1755334949.752:199): avc: denied { name_bind } for pid=6050 comm="syz.4.26" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.282622][ T6051] 8021q: VLANs not supported on nlmon0 [ 61.400891][ T30] audit: type=1400 audit(1755334949.752:200): avc: denied { setattr } for pid=6050 comm="syz.4.26" name="PACKET" dev="sockfs" ino=9406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.718775][ T30] audit: type=1400 audit(1755334950.252:201): avc: denied { create } for pid=6060 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 62.110361][ T30] audit: type=1400 audit(1755334950.652:202): avc: denied { setopt } for pid=6066 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.176948][ T30] audit: type=1400 audit(1755334950.722:203): avc: denied { append } for pid=6067 comm="syz.0.32" name="001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.113061][ T5846] Bluetooth: hci0: command tx timeout [ 63.226192][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.376859][ T9] usb 1-1: device descriptor read/64, error -71 [ 64.056883][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 64.206850][ T9] usb 1-1: device descriptor read/64, error -71 [ 64.274920][ T6113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.282178][ T6113] IPv6: NLM_F_CREATE should be set when creating new route [ 64.316992][ T9] usb usb1-port1: attempt power cycle [ 64.526895][ T5892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.666938][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.678195][ T5892] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 64.687342][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.695522][ T9] usb 1-1: device descriptor read/8, error -71 [ 64.702762][ T5892] usb 2-1: config 0 descriptor?? [ 64.710175][ T5892] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 64.996130][ T6130] ubi31: attaching mtd0 [ 65.003240][ T6130] ubi31: scanning is finished [ 65.008005][ T6130] ubi31: empty MTD device detected [ 65.264688][ T5892] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 65.317828][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 65.348082][ T6130] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 65.355682][ T6130] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 65.363087][ T6130] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 65.370731][ T6130] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 65.378227][ T6130] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 65.385070][ T6130] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 65.393153][ T6130] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 711135560 [ 65.403153][ T6130] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 65.413236][ T6133] ubi31: background thread "ubi_bgt31d" started, PID 6133 [ 65.432075][ T9] usb 1-1: device descriptor read/8, error -71 [ 65.527019][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 65.527051][ T30] audit: type=1400 audit(1755334954.072:220): avc: denied { mounton } for pid=6138 comm="syz.4.52" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.558830][ T9] usb usb1-port1: unable to enumerate USB device [ 65.748806][ T30] audit: type=1400 audit(1755334954.302:221): avc: denied { create } for pid=6138 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 65.806538][ T30] audit: type=1400 audit(1755334954.302:222): avc: denied { bind } for pid=6138 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 66.360121][ T5892] gspca_cpia1: usb_control_msg 02, error -71 [ 66.394990][ T5892] gspca_cpia1: usb_control_msg 05, error -71 [ 66.407096][ T5892] cpia1 2-1:0.0: unexpected systemstate: 00 [ 66.462300][ T5892] usb 2-1: USB disconnect, device number 2 [ 66.581051][ T30] audit: type=1400 audit(1755334955.132:223): avc: denied { accept } for pid=6158 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 67.688142][ T30] audit: type=1400 audit(1755334956.192:224): avc: denied { block_suspend } for pid=6169 comm="syz.0.59" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.097299][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'. [ 68.108365][ T6181] can0: slcan on ptm0. [ 68.179642][ T6180] can0 (unregistered): slcan off ptm0. [ 68.606848][ T30] audit: type=1400 audit(1755334957.152:225): avc: denied { execute } for pid=6185 comm="syz.2.62" path="/8/cpu.stat" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.629184][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.206859][ T30] audit: type=1400 audit(1755334957.402:226): avc: denied { create } for pid=6188 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 69.226955][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.262297][ T6196] warning: `syz.1.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.296016][ T30] audit: type=1400 audit(1755334957.412:227): avc: denied { write } for pid=6188 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 69.330933][ T30] audit: type=1400 audit(1755334957.802:228): avc: denied { create } for pid=6193 comm="syz.1.65" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.377870][ T30] audit: type=1400 audit(1755334957.812:229): avc: denied { ioctl } for pid=6193 comm="syz.1.65" path="socket:[9002]" dev="sockfs" ino=9002 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.796248][ T6017] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.968074][ T6017] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 70.003381][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.033727][ T6017] usb 4-1: config 0 descriptor?? [ 70.064927][ T6017] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 70.496752][ T6017] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 70.594492][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 70.594503][ T30] audit: type=1400 audit(1755334959.142:233): avc: denied { unlink } for pid=5850 comm="syz-executor" name="file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.826546][ T30] audit: type=1400 audit(1755334959.352:234): avc: denied { mount } for pid=6212 comm="syz.4.71" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.911942][ T30] audit: type=1400 audit(1755334959.462:235): avc: denied { read open } for pid=6219 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.040817][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.050550][ T30] audit: type=1400 audit(1755334959.492:236): avc: denied { getattr } for pid=6219 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.053808][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.250018][ T30] audit: type=1400 audit(1755334959.502:237): avc: denied { mount } for pid=6210 comm="syz.1.70" name="/" dev="rpc_pipefs" ino=9983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 71.353029][ T30] audit: type=1400 audit(1755334959.892:238): avc: denied { read write } for pid=6229 comm="syz.0.74" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.456935][ T5845] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.572807][ T30] audit: type=1400 audit(1755334959.892:239): avc: denied { open } for pid=6229 comm="syz.0.74" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.646791][ T6017] gspca_cpia1: usb_control_msg 02, error -71 [ 71.647639][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 71.654098][ T6017] gspca_cpia1: usb_control_msg 05, error -71 [ 71.679993][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.701808][ T5845] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 71.733385][ T30] audit: type=1400 audit(1755334959.902:240): avc: denied { create } for pid=6229 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.782194][ T5845] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 71.827317][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.863044][ T5845] usb 2-1: config 0 descriptor?? [ 71.898967][ T6017] cpia1 4-1:0.0: unexpected systemstate: 00 [ 71.916408][ T6017] usb 4-1: USB disconnect, device number 2 [ 71.965925][ T30] audit: type=1400 audit(1755334959.902:241): avc: denied { connect } for pid=6229 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.041339][ T30] audit: type=1400 audit(1755334959.902:242): avc: denied { read } for pid=6229 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.264652][ T6267] netfs: Couldn't get user pages (rc=-14) [ 72.408959][ T6268] : entered promiscuous mode [ 72.765048][ T5856] IPVS: starting estimator thread 0... [ 72.770993][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 72.862086][ T6284] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.046875][ T6283] IPVS: using max 65 ests per chain, 156000 per kthread [ 73.078405][ T6017] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.387585][ T6017] usb 4-1: Using ep0 maxpacket: 32 [ 73.404805][ T6017] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.414601][ T6017] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=41.ab [ 73.423868][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.433209][ T6017] usb 4-1: Product: syz [ 73.437636][ T6017] usb 4-1: Manufacturer: syz [ 73.442294][ T6017] usb 4-1: SerialNumber: syz [ 73.452883][ T6017] usb 4-1: config 0 descriptor?? [ 73.457916][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.469033][ T6017] usb-storage 4-1:0.0: USB Mass Storage device detected [ 73.478262][ T6017] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 73.609851][ T43] usb 5-1: config 9 has an invalid interface number: 116 but max is 0 [ 73.618476][ T43] usb 5-1: config 9 has an invalid descriptor of length 149, skipping remainder of the config [ 73.628806][ T43] usb 5-1: config 9 has no interface number 0 [ 73.634891][ T43] usb 5-1: config 9 interface 116 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.636837][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 73.648371][ T43] usb 5-1: config 9 interface 116 has no altsetting 0 [ 73.663659][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= c.7f [ 73.673796][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.681822][ T43] usb 5-1: Product: syz [ 73.686006][ T43] usb 5-1: Manufacturer: syz [ 73.690663][ T43] usb 5-1: SerialNumber: syz [ 73.806823][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 73.814598][ T5892] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 73.824053][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.832086][ T5892] usb 3-1: Product: syz [ 73.836233][ T5892] usb 3-1: Manufacturer: syz [ 73.841791][ T5892] usb 3-1: SerialNumber: syz [ 73.848200][ T5892] usb 3-1: config 0 descriptor?? [ 73.906820][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.953747][ T6296] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.265456][ T5845] usb 2-1: USB disconnect, device number 3 [ 74.276150][ T5892] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 74.286254][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.298862][ T5892] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 74.307596][ T5892] usb 3-1: media controller created [ 74.321239][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.396814][ T5907] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 74.419454][ T6304] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88'. [ 74.428550][ T6304] netlink: 51 bytes leftover after parsing attributes in process `syz.1.88'. [ 74.438437][ T6304] netlink: 51 bytes leftover after parsing attributes in process `syz.1.88'. [ 74.568332][ T5907] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.577586][ T5907] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 74.604107][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.613402][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.628025][ T5907] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.639078][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.665976][ T5907] usb 1-1: Product: syz [ 74.671333][ T5907] usb 1-1: Manufacturer: syz [ 74.685003][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 74.691808][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 74.697123][ T5907] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 74.867040][ T5892] zl10353_read_register: readreg error (reg=127, ret==0) [ 74.874461][ T6293] dtv5100: wlen = 0, aborting. [ 74.880376][ T5892] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 74.898602][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.906995][ T5892] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 74.948531][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.970508][ T5892] usb 3-1: USB disconnect, device number 6 [ 75.155352][ T5892] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 75.313183][ T5907] usb 1-1: USB disconnect, device number 6 [ 75.659435][ T5892] usb 4-1: USB disconnect, device number 3 [ 75.785777][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 75.785794][ T30] audit: type=1400 audit(1755334964.332:268): avc: denied { read } for pid=6338 comm="syz.2.91" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.895135][ T30] audit: type=1400 audit(1755334964.332:269): avc: denied { open } for pid=6338 comm="syz.2.91" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.024812][ T30] audit: type=1400 audit(1755334964.342:270): avc: denied { ioctl } for pid=6338 comm="syz.2.91" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x5385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.126880][ T5856] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.315720][ T1207] cfg80211: failed to load regulatory.db [ 76.329094][ T6298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.383640][ T43] usb 5-1: unknown interface protocol 0x50, assuming v1 [ 76.398168][ T43] usb 5-1: 116:2 : does not exist [ 76.406388][ T30] audit: type=1400 audit(1755334964.952:271): avc: denied { sys_module } for pid=6347 comm="syz.0.93" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.446223][ T43] usb 5-1: USB disconnect, device number 2 [ 76.531182][ T5856] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 76.543659][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.579574][ T5856] usb 4-1: config 0 descriptor?? [ 76.595476][ T5856] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 76.666451][ T30] audit: type=1400 audit(1755334965.212:272): avc: denied { bind } for pid=6364 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.792739][ T30] audit: type=1400 audit(1755334965.332:273): avc: denied { listen } for pid=6364 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.817430][ T30] audit: type=1400 audit(1755334965.332:274): avc: denied { connect } for pid=6364 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.954685][ T30] audit: type=1400 audit(1755334965.342:275): avc: denied { write } for pid=6364 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.986835][ T30] audit: type=1400 audit(1755334965.342:276): avc: denied { accept } for pid=6364 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.397872][ T5856] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 77.406612][ T30] audit: type=1400 audit(1755334965.342:277): avc: denied { read } for pid=6364 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.822147][ T6377] syz_tun: entered promiscuous mode [ 77.905481][ T6377] batadv_slave_0: entered promiscuous mode [ 77.922018][ T6377] hsr1: entered allmulticast mode [ 78.002367][ T6377] syz_tun: entered allmulticast mode [ 78.048750][ T6377] batadv_slave_0: entered allmulticast mode [ 78.163901][ T6382] FAULT_INJECTION: forcing a failure. [ 78.163901][ T6382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.246998][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.2.102 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 78.247023][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.247035][ T6382] Call Trace: [ 78.247041][ T6382] [ 78.247047][ T6382] dump_stack_lvl+0x16c/0x1f0 [ 78.247062][ T6382] should_fail_ex+0x512/0x640 [ 78.247076][ T6382] _copy_from_user+0x2e/0xd0 [ 78.247090][ T6382] drm_mode_atomic_ioctl+0x633/0x25f0 [ 78.247110][ T6382] ? avc_has_extended_perms+0x47c/0x1090 [ 78.247122][ T6382] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 78.247139][ T6382] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 78.247153][ T6382] ? drm_is_current_master+0x2c/0x40 [ 78.247168][ T6382] ? rcu_is_watching+0x12/0xc0 [ 78.247182][ T6382] ? lock_release+0x201/0x2f0 [ 78.247199][ T6382] ? do_raw_spin_unlock+0x172/0x230 [ 78.247215][ T6382] drm_ioctl_kernel+0x1f1/0x3e0 [ 78.247229][ T6382] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 78.247245][ T6382] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 78.247260][ T6382] drm_ioctl+0x5c9/0xc30 [ 78.247274][ T6382] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 78.247290][ T6382] ? __pfx_drm_ioctl+0x10/0x10 [ 78.247302][ T6382] ? rcu_is_watching+0x12/0xc0 [ 78.247318][ T6382] ? selinux_file_ioctl+0x180/0x270 [ 78.247333][ T6382] ? selinux_file_ioctl+0xb4/0x270 [ 78.247348][ T6382] ? __pfx_drm_ioctl+0x10/0x10 [ 78.247361][ T6382] __x64_sys_ioctl+0x18b/0x210 [ 78.247383][ T6382] do_syscall_64+0xcd/0x4c0 [ 78.247403][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.247420][ T6382] RIP: 0033:0x7fc7e678ebe9 [ 78.247432][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.247448][ T6382] RSP: 002b:00007fc7e765c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.247464][ T6382] RAX: ffffffffffffffda RBX: 00007fc7e69b5fa0 RCX: 00007fc7e678ebe9 [ 78.247475][ T6382] RDX: 0000200000000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 78.247484][ T6382] RBP: 00007fc7e765c090 R08: 0000000000000000 R09: 0000000000000000 [ 78.247494][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.247503][ T6382] R13: 00007fc7e69b6038 R14: 00007fc7e69b5fa0 R15: 00007ffcb1510cc8 [ 78.247519][ T6382] [ 78.521462][ T5856] gspca_cpia1: usb_control_msg 02, error -71 [ 78.528873][ T5856] gspca_cpia1: usb_control_msg 05, error -71 [ 78.535245][ T5856] cpia1 4-1:0.0: unexpected systemstate: 00 [ 78.546509][ T5856] usb 4-1: USB disconnect, device number 4 [ 78.746830][ T6017] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.013409][ T6017] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.022606][ T6017] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 79.040010][ T6017] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.381021][ T6017] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.436696][ T6017] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.447226][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.644000][ T6017] usb 2-1: Product: syz [ 79.672837][ T6017] usb 2-1: Manufacturer: syz [ 79.822402][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 79.851294][ T6017] cdc_wdm 2-1:1.0: skipping garbage [ 79.863274][ T6017] cdc_wdm 2-1:1.0: skipping garbage [ 79.889397][ T6017] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 79.899654][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 79.963487][ T6413] netlink: 'syz.4.111': attribute type 15 has an invalid length. [ 80.164481][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.324428][ T6419] netlink: 'syz.4.111': attribute type 12 has an invalid length. [ 80.427815][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.530253][ T6413] netlink: 'syz.4.111': attribute type 18 has an invalid length. [ 80.728563][ T6017] usb 2-1: USB disconnect, device number 4 [ 81.951420][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 81.951435][ T30] audit: type=1400 audit(1755334970.502:283): avc: denied { create } for pid=6456 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.981927][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.100390][ T30] audit: type=1400 audit(1755334970.512:284): avc: denied { setopt } for pid=6456 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.130331][ T6467] process 'syz.4.116' launched './file0' with NULL argv: empty string added [ 82.151354][ T6467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.116'. [ 82.161111][ T6467] netlink: 51 bytes leftover after parsing attributes in process `syz.4.116'. [ 82.170597][ T6467] netlink: 'syz.4.116': attribute type 6 has an invalid length. [ 82.180686][ T30] audit: type=1400 audit(1755334970.692:285): avc: denied { execute_no_trans } for pid=6453 comm="syz.4.116" path="/27/file0" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.203793][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.216677][ T6467] netlink: 51 bytes leftover after parsing attributes in process `syz.4.116'. [ 83.675021][ T30] audit: type=1400 audit(1755334972.222:286): avc: denied { write } for pid=6489 comm="syz.0.123" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.698397][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.081621][ T6497] sp0: Synchronizing with TNC [ 84.465916][ T30] audit: type=1326 audit(1755334972.542:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6493 comm="syz.0.125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f508e78ebe9 code=0x0 [ 84.616022][ T6493] [U] è [ 84.878273][ T30] audit: type=1400 audit(1755334973.402:288): avc: denied { write } for pid=6508 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.124102][ T30] audit: type=1400 audit(1755334974.632:289): avc: denied { write } for pid=6508 comm="syz.3.129" name="config" dev="proc" ino=4026533459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 86.233963][ T30] audit: type=1400 audit(1755334974.782:290): avc: denied { create } for pid=6527 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.259969][ T30] audit: type=1400 audit(1755334974.802:291): avc: denied { map } for pid=6527 comm="syz.4.134" path="socket:[10795]" dev="sockfs" ino=10795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.286983][ T30] audit: type=1400 audit(1755334974.802:292): avc: denied { read } for pid=6527 comm="syz.4.134" path="socket:[10795]" dev="sockfs" ino=10795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.999497][ T6534] netlink: 356 bytes leftover after parsing attributes in process `syz.3.133'. [ 87.361750][ T6548] sp0: Synchronizing with TNC [ 87.369201][ T6546] [U] è [ 87.713745][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 87.713759][ T30] audit: type=1400 audit(1755334976.262:296): avc: denied { create } for pid=6557 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.799093][ T30] audit: type=1400 audit(1755334976.292:297): avc: denied { bind } for pid=6557 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.818607][ T30] audit: type=1400 audit(1755334976.302:298): avc: denied { listen } for pid=6557 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.123620][ T6573] mmap: syz.3.145 (6573) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.778503][ T6581] ubi: mtd0 is already attached to ubi31 [ 90.329304][ T6602] sp0: Synchronizing with TNC [ 90.348360][ T6601] [U] è [ 90.689039][ T6611] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 90.697167][ T6611] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 90.705867][ T6611] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 90.715514][ T6611] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 92.340488][ T6651] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.356815][ T6651] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 92.487219][ T6651] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 92.505987][ T6651] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 93.390972][ T6665] sp0: Synchronizing with TNC [ 93.402317][ T6664] [U] è [ 93.469998][ T30] audit: type=1400 audit(1755334981.672:299): avc: denied { write } for pid=6657 comm="syz.4.163" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.566635][ T30] audit: type=1400 audit(1755334981.692:300): avc: denied { getopt } for pid=6657 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.012129][ T30] audit: type=1400 audit(1755334982.562:301): avc: denied { ioctl } for pid=6680 comm="syz.2.168" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.519417][ T6694] netlink: 256 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.575262][ T6694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'. [ 94.590628][ T30] audit: type=1400 audit(1755334983.092:302): avc: denied { create } for pid=6690 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.609914][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.977099][ T5856] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 95.242055][ T5856] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 95.517168][ T5856] usb 1-1: config 0 has no interface number 0 [ 95.523973][ T5856] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 95.573108][ T5856] usb 1-1: config 0 interface 200 has no altsetting 0 [ 95.591636][ T5856] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 95.625573][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.641781][ T5856] usb 1-1: Product: syz [ 95.647775][ T5856] usb 1-1: Manufacturer: syz [ 95.654763][ T5856] usb 1-1: SerialNumber: syz [ 95.692414][ T6717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.174'. [ 95.719820][ T5856] usb 1-1: config 0 descriptor?? [ 95.935016][ T30] audit: type=1400 audit(1755334984.482:303): avc: denied { read } for pid=6713 comm="syz.2.174" lport=54319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.989934][ T30] audit: type=1400 audit(1755334984.542:304): avc: denied { read } for pid=6718 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.247013][ T1207] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.265665][ T30] audit: type=1400 audit(1755334984.812:305): avc: denied { create } for pid=6727 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.275462][ T6729] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 96.306825][ T30] audit: type=1400 audit(1755334984.822:306): avc: denied { ioctl } for pid=6727 comm="syz.3.176" path="socket:[11063]" dev="sockfs" ino=11063 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.331411][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.338030][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 96.338534][ T30] audit: type=1400 audit(1755334984.822:307): avc: denied { read write } for pid=6727 comm="syz.3.176" name="mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 96.418874][ T30] audit: type=1400 audit(1755334984.822:308): avc: denied { open } for pid=6727 comm="syz.3.176" path="/dev/input/mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 96.476881][ T1207] usb 2-1: Using ep0 maxpacket: 16 [ 96.486448][ T1207] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 91, changing to 10 [ 96.498250][ T1207] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 51131, setting to 1024 [ 96.510261][ T1207] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.518532][ T1207] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 96.528590][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.542260][ T1207] usb 2-1: config 0 descriptor?? [ 96.551520][ T6726] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 97.373975][ T5856] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input6 [ 97.396609][ T5856] usb 1-1: USB disconnect, device number 7 [ 98.308671][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.154609][ T1207] usbhid 2-1:0.0: can't add hid device: -71 [ 99.166897][ T1207] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 99.716739][ T1207] usb 2-1: USB disconnect, device number 5 [ 100.351398][ T30] audit: type=1326 audit(1755334988.432:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz.0.189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f508e78ebe9 code=0x0 [ 100.505206][ T6787] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 100.513109][ T6787] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 100.522402][ T6787] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 100.530285][ T6787] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 100.596581][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 101.308652][ T30] audit: type=1400 audit(1755334989.802:310): avc: denied { write } for pid=6803 comm="syz.3.193" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.331256][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.516934][ T30] audit: type=1400 audit(1755334989.822:311): avc: denied { name_bind } for pid=6803 comm="syz.3.193" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 103.859697][ T6834] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 103.869384][ T6834] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 103.896931][ T6834] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 103.904825][ T6834] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 104.541770][ T6855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6855 comm=syz.3.203 [ 104.934021][ T6872] /dev/nullb0: Can't open blockdev [ 104.940178][ T6872] /dev/nullb0: Can't open blockdev [ 104.945547][ T30] audit: type=1400 audit(1755334993.482:312): avc: denied { mounton } for pid=6871 comm="syz.2.206" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 105.040541][ T30] audit: type=1400 audit(1755334993.492:313): avc: denied { mounton } for pid=6871 comm="syz.2.206" path="/39/bus" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 105.306880][ T5892] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 105.459597][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.517297][ T5892] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 105.526377][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.549174][ T5892] usb 3-1: config 0 descriptor?? [ 105.561394][ T5892] usbhid 3-1:0.0: can't add hid device: -22 [ 105.598371][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 106.183378][ T30] audit: type=1400 audit(1755334994.702:314): avc: denied { setopt } for pid=6869 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.992192][ T6017] usb 3-1: USB disconnect, device number 7 [ 108.367918][ T5892] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.639311][ T30] audit: type=1400 audit(1755334997.182:315): avc: denied { read } for pid=6941 comm="syz.4.218" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.861121][ T5892] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 108.870385][ T30] audit: type=1400 audit(1755334997.182:316): avc: denied { open } for pid=6941 comm="syz.4.218" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.936920][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.945333][ T5892] usb 1-1: Product: syz [ 108.991735][ T5892] usb 1-1: Manufacturer: syz [ 109.001731][ T5892] usb 1-1: SerialNumber: syz [ 109.015791][ T5892] usb 1-1: config 0 descriptor?? [ 109.046030][ T5892] usb 1-1: selecting invalid altsetting 1 [ 109.065031][ T5892] comedi comedi5: could not switch to alternate setting 1 [ 109.089324][ T5892] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 109.168896][ T6961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6961 comm=syz.2.220 [ 109.253001][ T6931] use of bytesused == 0 is deprecated and will be removed in the future, [ 109.282128][ T6931] use the actual size instead. [ 109.505511][ T6969] sp0: Synchronizing with TNC [ 110.397003][ T30] audit: type=1326 audit(1755334997.992:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6962 comm="syz.3.222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2c3b8ebe9 code=0x0 [ 110.420481][ T30] audit: type=1326 audit(1755334998.662:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz.4.223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efecef8ebe9 code=0x0 [ 110.446708][ T6962] [U] è [ 110.458707][ T6017] usb 1-1: USB disconnect, device number 8 [ 112.342283][ T7012] openvswitch: netlink: Message has 4 unknown bytes. [ 112.364807][ T30] audit: type=1326 audit(1755335000.912:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.0.232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f508e78ebe9 code=0x0 [ 113.549150][ T30] audit: type=1400 audit(1755335002.062:320): avc: denied { connect } for pid=7034 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.711183][ T1207] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.898013][ T1207] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.907813][ T1207] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 113.972175][ T1207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.995815][ T1207] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.040684][ T1207] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.054201][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.494566][ T1207] usb 1-1: Product: syz [ 114.503708][ T1207] usb 1-1: Manufacturer: syz [ 114.518487][ T1207] cdc_wdm 1-1:1.0: skipping garbage [ 114.524752][ T1207] cdc_wdm 1-1:1.0: skipping garbage [ 114.536410][ T1207] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 114.730246][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.740672][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.919848][ T1207] usb 1-1: USB disconnect, device number 9 [ 116.697837][ T7094] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 116.715370][ T7094] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 116.736034][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.249'. [ 116.774055][ T7094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=7094 comm=syz.3.248 [ 116.795731][ T30] audit: type=1326 audit(1755335005.312:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 116.818943][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.826970][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 116.910002][ T30] audit: type=1326 audit(1755335005.312:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 116.933220][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.939930][ T30] audit: type=1326 audit(1755335005.352:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.222789][ T30] audit: type=1326 audit(1755335005.352:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.245514][ T7113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=7113 comm=syz.2.251 [ 117.260611][ T30] audit: type=1326 audit(1755335005.352:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.283820][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.361736][ T30] audit: type=1326 audit(1755335005.352:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.389189][ T30] audit: type=1326 audit(1755335005.352:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.454432][ T30] audit: type=1326 audit(1755335005.352:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.479724][ T30] audit: type=1326 audit(1755335005.352:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.519543][ T30] audit: type=1326 audit(1755335005.352:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.549287][ T30] audit: type=1326 audit(1755335005.352:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.600453][ T30] audit: type=1326 audit(1755335005.352:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.623864][ T30] audit: type=1326 audit(1755335005.352:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.650425][ T30] audit: type=1326 audit(1755335005.352:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.674980][ T30] audit: type=1326 audit(1755335005.362:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.699429][ T30] audit: type=1326 audit(1755335005.362:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e678ebe9 code=0x7ffc0000 [ 117.750023][ T7120] netlink: 256 bytes leftover after parsing attributes in process `syz.0.253'. [ 117.778973][ T7119] netlink: 340 bytes leftover after parsing attributes in process `syz.4.255'. [ 117.811116][ T7123] fuse: Unknown parameter 'group_id00000000000000000000' [ 119.208551][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 119.886938][ T7161] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 119.894823][ T7161] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 119.907724][ T7161] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 119.915571][ T7161] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 120.088927][ T7164] netlink: 880 bytes leftover after parsing attributes in process `syz.0.265'. [ 121.856350][ T5892] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 121.965753][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.274'. [ 122.047142][ T5892] usb 4-1: device descriptor read/64, error -71 [ 122.317658][ T5892] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 122.446824][ T5927] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.454389][ T5892] usb 4-1: device descriptor read/64, error -71 [ 122.566955][ T5892] usb usb4-port1: attempt power cycle [ 122.618026][ T5927] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.627060][ T5927] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 122.638796][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.648294][ T5927] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.665102][ T5927] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.674831][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.683309][ T5927] usb 3-1: Product: syz [ 122.687555][ T5927] usb 3-1: Manufacturer: syz [ 122.695065][ T5927] cdc_wdm 3-1:1.0: skipping garbage [ 122.700494][ T5927] cdc_wdm 3-1:1.0: skipping garbage [ 122.705689][ T5927] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 122.835195][ T7216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.281'. [ 122.899068][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.907614][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.917127][ T5892] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 122.939433][ T5892] usb 4-1: device descriptor read/8, error -71 [ 122.964728][ C1] sd 0:0:1:0: [sda] tag#3010 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 122.975090][ C1] sd 0:0:1:0: [sda] tag#3010 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 122.987759][ T24] usb 3-1: USB disconnect, device number 8 [ 123.111614][ T7225] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 123.130474][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 123.130489][ T30] audit: type=1400 audit(1755335011.672:404): avc: denied { map } for pid=7221 comm="syz.4.283" path="/63/file0" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.160423][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 123.187815][ T30] audit: type=1400 audit(1755335011.672:405): avc: denied { execute } for pid=7221 comm="syz.4.283" path="/63/file0" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.217342][ T5892] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 123.252774][ T5892] usb 4-1: device descriptor read/8, error -71 [ 123.367036][ T5892] usb usb4-port1: unable to enumerate USB device [ 124.296545][ T30] audit: type=1400 audit(1755335012.842:406): avc: denied { create } for pid=7247 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 124.498001][ T30] audit: type=1400 audit(1755335013.022:407): avc: denied { cmd } for pid=7254 comm="syz.1.291" path="socket:[13254]" dev="sockfs" ino=13254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 124.600390][ T7261] fuse: Bad value for 'user_id' [ 124.606422][ T7261] fuse: Bad value for 'user_id' [ 125.069267][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.734305][ T30] audit: type=1326 audit(1755335013.782:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f508e78ebe9 code=0x0 [ 126.088681][ T5845] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.099501][ T7273] Falling back ldisc for ttyprintk. [ 126.272368][ T5845] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.283498][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 126.305479][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 126.336971][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 126.346116][ T5845] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 126.424648][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.440129][ T24] usb 3-1: config 0 descriptor?? [ 126.471317][ T5845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.517519][ T5845] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.565008][ T5845] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.581320][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.597535][ T5845] usb 2-1: Product: syz [ 126.605804][ T5845] usb 2-1: Manufacturer: syz [ 126.668253][ T5845] cdc_wdm 2-1:1.0: skipping garbage [ 126.673473][ T5845] cdc_wdm 2-1:1.0: skipping garbage [ 126.989063][ T30] audit: type=1400 audit(1755335015.472:409): avc: denied { read write } for pid=7282 comm="syz.3.299" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 127.014818][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.016722][ T5845] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 127.102469][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.111988][ T24] logitech 0003:046D:C24F.0001: item fetching failed at offset 2/5 [ 127.122246][ T30] audit: type=1400 audit(1755335015.472:410): avc: denied { open } for pid=7282 comm="syz.3.299" path="/58/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 127.145446][ T24] logitech 0003:046D:C24F.0001: parse failed [ 127.167878][ T24] logitech 0003:046D:C24F.0001: probe with driver logitech failed with error -22 [ 127.261127][ T24] usb 2-1: USB disconnect, device number 6 [ 128.291660][ T5927] usb 3-1: USB disconnect, device number 9 [ 128.373957][ T7312] /dev/nullb0: Can't open blockdev [ 128.471228][ T7313] netlink: 'syz.3.306': attribute type 10 has an invalid length. [ 128.481354][ T7313] batman_adv: batadv0: Adding interface: team0 [ 128.487576][ T7313] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.516786][ T30] audit: type=1400 audit(1755335017.012:411): avc: denied { ioctl } for pid=7307 comm="syz.3.306" path="socket:[14436]" dev="sockfs" ino=14436 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.626211][ T30] audit: type=1400 audit(1755335017.172:412): avc: denied { connect } for pid=7314 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.664509][ T7313] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 129.824764][ T7341] Zero length message leads to an empty skb [ 130.236820][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.388054][ T24] usb 1-1: device descriptor read/64, error -71 [ 130.690174][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 131.138071][ T24] usb 1-1: device descriptor read/64, error -71 [ 131.259870][ T24] usb usb1-port1: attempt power cycle [ 131.646818][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 132.058746][ T24] usb 1-1: device descriptor read/8, error -71 [ 132.306803][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 132.537775][ T24] usb 1-1: device descriptor read/8, error -71 [ 132.547398][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.553714][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.656974][ T24] usb usb1-port1: unable to enumerate USB device [ 133.171983][ T7404] fuse: Bad value for 'fd' [ 133.387388][ T30] audit: type=1400 audit(1755335021.932:413): avc: denied { ioctl } for pid=7408 comm="syz.4.334" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.858379][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 135.944131][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 136.446366][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 136.453416][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 136.523650][ T7464] fuse: Bad value for 'fd' [ 136.669278][ T7444] ceph: No mds server is up or the cluster is laggy [ 138.497805][ T30] audit: type=1400 audit(1755335027.052:414): avc: denied { connect } for pid=7497 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.665323][ T7505] autofs: Unknown parameter '0x0000000000000000' [ 138.902102][ T7511] FAULT_INJECTION: forcing a failure. [ 138.902102][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 138.918002][ T7511] CPU: 0 UID: 0 PID: 7511 Comm: syz.3.359 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 138.918019][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.918026][ T7511] Call Trace: [ 138.918029][ T7511] [ 138.918033][ T7511] dump_stack_lvl+0x16c/0x1f0 [ 138.918048][ T7511] should_fail_ex+0x512/0x640 [ 138.918064][ T7511] ? tomoyo_encode2+0x100/0x3e0 [ 138.918082][ T7511] should_failslab+0xc2/0x120 [ 138.918094][ T7511] __kmalloc_noprof+0xd2/0x510 [ 138.918105][ T7511] ? d_absolute_path+0x136/0x1a0 [ 138.918121][ T7511] tomoyo_encode2+0x100/0x3e0 [ 138.918137][ T7511] tomoyo_encode+0x29/0x50 [ 138.918152][ T7511] tomoyo_realpath_from_path+0x18f/0x6e0 [ 138.918170][ T7511] tomoyo_path_number_perm+0x245/0x580 [ 138.918183][ T7511] ? tomoyo_path_number_perm+0x237/0x580 [ 138.918197][ T7511] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.918212][ T7511] ? ksys_write+0x190/0x250 [ 138.918226][ T7511] ? rcu_is_watching+0x12/0xc0 [ 138.918240][ T7511] ? __fget_files+0x204/0x3c0 [ 138.918251][ T7511] ? hook_file_ioctl_common+0x145/0x410 [ 138.918261][ T7511] ? lock_release+0x201/0x2f0 [ 138.918279][ T7511] ? __fget_files+0x20e/0x3c0 [ 138.918291][ T7511] security_file_ioctl+0x9b/0x240 [ 138.918311][ T7511] __x64_sys_ioctl+0xb7/0x210 [ 138.918327][ T7511] do_syscall_64+0xcd/0x4c0 [ 138.918339][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.918351][ T7511] RIP: 0033:0x7fe2c3b8ebe9 [ 138.918359][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.918369][ T7511] RSP: 002b:00007fe2c49b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.918379][ T7511] RAX: ffffffffffffffda RBX: 00007fe2c3db5fa0 RCX: 00007fe2c3b8ebe9 [ 138.918386][ T7511] RDX: 0000200000000040 RSI: 0000000000004605 RDI: 0000000000000003 [ 138.918392][ T7511] RBP: 00007fe2c49b1090 R08: 0000000000000000 R09: 0000000000000000 [ 138.918399][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.918405][ T7511] R13: 00007fe2c3db6038 R14: 00007fe2c3db5fa0 R15: 00007fff78ac80c8 [ 138.918414][ T7511] [ 138.918421][ T7511] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.412166][ T30] audit: type=1400 audit(1755335027.962:415): avc: denied { ioctl } for pid=7510 comm="syz.3.359" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 140.467538][ T30] audit: type=1400 audit(1755335029.012:416): avc: denied { ioctl } for pid=7531 comm="syz.1.367" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15042 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.252528][ T30] audit: type=1400 audit(1755335029.802:417): avc: denied { bind } for pid=7544 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.428397][ T7551] fuse: Bad value for 'fd' [ 142.787930][ T30] audit: type=1400 audit(1755335031.342:418): avc: denied { bind } for pid=7578 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.179789][ T30] audit: type=1400 audit(1755335031.342:419): avc: denied { node_bind } for pid=7578 comm="syz.4.379" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 143.203376][ T30] audit: type=1400 audit(1755335031.592:420): avc: denied { write } for pid=7573 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.360004][ T7590] sctp: [Deprecated]: syz.4.379 (pid 7590) Use of int in maxseg socket option. [ 143.360004][ T7590] Use struct sctp_assoc_value instead [ 149.015159][ C0] sched: DL replenish lagged too much [ 169.749557][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.756802][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.764248][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.773377][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.783009][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.284204][ T7655] chnl_net:caif_netlink_parms(): no params data found [ 170.441471][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.448676][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.455850][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.465147][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.474402][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.506277][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.513445][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.521996][ T7655] bridge_slave_0: entered allmulticast mode [ 170.528757][ T7655] bridge_slave_0: entered promiscuous mode [ 170.545132][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.559110][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.566284][ T7655] bridge_slave_1: entered allmulticast mode [ 170.573423][ T7655] bridge_slave_1: entered promiscuous mode [ 170.750982][ T7655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.762936][ T7655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.810961][ T7655] team0: Port device team_slave_0 added [ 170.824137][ T7655] team0: Port device team_slave_1 added [ 170.883156][ T30] audit: type=1400 audit(1755335059.432:421): avc: denied { ioctl } for pid=7677 comm="syz.1.399" path="socket:[16822]" dev="sockfs" ino=16822 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 170.907678][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.934483][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.942463][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.977243][ T7655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.990486][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.015257][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.041195][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.055989][ T7655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.070450][ T7675] chnl_net:caif_netlink_parms(): no params data found [ 171.193126][ T7655] hsr_slave_0: entered promiscuous mode [ 171.199405][ T7655] hsr_slave_1: entered promiscuous mode [ 171.207286][ T7655] debugfs: 'hsr0' already exists in 'hsr' [ 171.213059][ T7655] Cannot create hsr debugfs directory [ 171.358754][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.366380][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.377164][ T7675] bridge_slave_0: entered allmulticast mode [ 171.389053][ T7675] bridge_slave_0: entered promiscuous mode [ 171.413086][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.420589][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.429674][ T7675] bridge_slave_1: entered allmulticast mode [ 171.436649][ T7675] bridge_slave_1: entered promiscuous mode [ 171.515556][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.537983][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.593506][ T7675] team0: Port device team_slave_0 added [ 171.606493][ T7675] team0: Port device team_slave_1 added [ 171.655272][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.663846][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.689736][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.698353][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.710746][ T7655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.725361][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.736239][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.762124][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.772508][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.783614][ T7655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.827058][ T5843] Bluetooth: hci5: command tx timeout [ 172.171201][ T7655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.193774][ T7655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.205384][ T7675] hsr_slave_0: entered promiscuous mode [ 172.215723][ T7675] hsr_slave_1: entered promiscuous mode [ 172.221972][ T7675] debugfs: 'hsr0' already exists in 'hsr' [ 172.231125][ T7675] Cannot create hsr debugfs directory [ 172.412531][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.456013][ T7655] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.478245][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.485343][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.519284][ T7675] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.551870][ T5843] Bluetooth: hci0: command tx timeout [ 172.602813][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.609923][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.624041][ T7675] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.635306][ T7675] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.715811][ T7655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.727952][ T7655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.984692][ T7675] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.216268][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.932725][ T5843] Bluetooth: hci5: command tx timeout [ 174.007119][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.342426][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7716 comm=syz.4.404 [ 174.360973][ T7716] kvm: kvm [7714]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xee00000000 [ 174.376151][ T7716] kvm: kvm [7714]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x24e00000000 [ 174.480545][ T7655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.532719][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.597283][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.623259][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.630374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.644386][ T5843] Bluetooth: hci0: command tx timeout [ 174.681771][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.688877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.528072][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.544604][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 175.559033][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 175.559064][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 175.988309][ T30] audit: type=1400 audit(1755335064.542:422): avc: denied { ioctl } for pid=7736 comm="syz.1.408" path="socket:[16139]" dev="sockfs" ino=16139 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 176.030956][ T5846] Bluetooth: hci5: command tx timeout [ 176.716842][ T5846] Bluetooth: hci0: command tx timeout [ 178.101001][ T5846] Bluetooth: hci5: command tx timeout [ 178.179058][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.430362][ T30] audit: type=1400 audit(1755335066.972:423): avc: denied { watch } for pid=7747 comm="syz.2.411" path="/85" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.620779][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.637661][ T30] audit: type=1400 audit(1755335067.022:424): avc: denied { write } for pid=7747 comm="syz.2.411" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.788396][ T5846] Bluetooth: hci0: command tx timeout [ 178.794392][ T7655] veth0_vlan: entered promiscuous mode [ 178.938604][ T30] audit: type=1400 audit(1755335067.022:425): avc: denied { map } for pid=7747 comm="syz.2.411" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.964048][ T7655] veth1_vlan: entered promiscuous mode [ 179.056018][ T7655] veth0_macvtap: entered promiscuous mode [ 179.094311][ T7655] veth1_macvtap: entered promiscuous mode [ 179.149343][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.428895][ T13] bridge_slave_1: left allmulticast mode [ 179.439503][ T13] bridge_slave_1: left promiscuous mode [ 179.445309][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.489264][ T13] bridge_slave_0: left allmulticast mode [ 179.495143][ T13] bridge_slave_0: left promiscuous mode [ 179.529674][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.590332][ T7771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.417'. [ 179.972847][ T7775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7775 comm=syz.1.418 [ 179.993850][ T7775] kvm: kvm [7773]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xee00000000 [ 180.009144][ T7775] kvm: kvm [7773]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x24e00000000 [ 180.433762][ T30] audit: type=1400 audit(1755335068.892:426): avc: denied { listen } for pid=7778 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.565402][ T30] audit: type=1400 audit(1755335068.972:427): avc: denied { accept } for pid=7778 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 180.619945][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.650875][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.661823][ T13] bond0 (unregistering): Released all slaves [ 180.681501][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.807347][ T7675] veth0_vlan: entered promiscuous mode [ 181.048834][ T1149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.101976][ T1149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.120118][ T7675] veth1_vlan: entered promiscuous mode [ 181.134361][ T1149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.156476][ T1149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.214650][ T7675] veth0_macvtap: entered promiscuous mode [ 181.252084][ T7675] veth1_macvtap: entered promiscuous mode [ 181.290491][ T49] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 181.303429][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.341993][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.378741][ T1149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.421525][ T1149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.456434][ T1149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.498540][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.914721][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.921047][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.766716][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 306.773678][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5927/2:b..l P7823/1:b..l [ 306.782716][ C1] rcu: (detected by 1, t=10502 jiffies, g=15601, q=2403849 ncpus=2) [ 306.790767][ C1] task:syz-executor state:R running task stack:26440 pid:7823 tgid:7823 ppid:5831 task_flags:0x400000 flags:0x00004002 [ 306.804247][ C1] Call Trace: [ 306.807516][ C1] [ 306.810433][ C1] __schedule+0x1190/0x5de0 [ 306.814937][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 306.820306][ C1] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 306.825934][ C1] ? mas_wr_store_entry+0x102d/0x2550 [ 306.831300][ C1] ? mas_alloc_nodes+0x490/0x8b0 [ 306.836237][ C1] ? __pfx___schedule+0x10/0x10 [ 306.841086][ C1] ? rcu_is_watching+0x12/0xc0 [ 306.845844][ C1] ? __pfx_perf_event_mmap+0x10/0x10 [ 306.851127][ C1] ? uprobe_mmap+0x133/0x10e0 [ 306.855799][ C1] preempt_schedule_irq+0x51/0x90 [ 306.860815][ C1] irqentry_exit+0x36/0x90 [ 306.865220][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.871189][ C1] RIP: 0010:unwind_next_frame+0x3d9/0x20a0 [ 306.876987][ C1] Code: b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e fc 14 00 00 41 c7 45 00 00 00 00 00 31 ed d2 88 28 0a 85 c0 0f 85 9b 06 00 00 48 c7 c7 e0 11 5c 8e 48 8d [ 306.896587][ C1] RSP: 0018:ffffc90003687870 EFLAGS: 00000283 [ 306.902647][ C1] RAX: ffffc90003688001 RBX: ffffc90003687c20 RCX: ffffc90003688001 [ 306.910608][ C1] RDX: ffffc90003687c28 RSI: ffffc90003687bf0 RDI: ffffc900036878f0 [ 306.918571][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 306.926530][ C1] R10: ffffc900036878e0 R11: 00000000000116f8 R12: ffffc90003687930 [ 306.934490][ C1] R13: ffffc900036878e0 R14: ffffc90003687c20 R15: ffffc90003687914 [ 306.942455][ C1] ? __put_partials+0x165/0x1c0 [ 306.947307][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 306.953457][ C1] arch_stack_walk+0x94/0x100 [ 306.958127][ C1] ? qlist_free_all+0x4d/0x120 [ 306.962879][ C1] stack_trace_save+0x8e/0xc0 [ 306.967547][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 306.972913][ C1] ? debug_check_no_obj_freed+0x31f/0x600 [ 306.978628][ C1] ? rcu_is_watching+0x12/0xc0 [ 306.983381][ C1] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 306.989354][ C1] save_stack+0x160/0x1f0 [ 306.993678][ C1] ? __pfx_save_stack+0x10/0x10 [ 306.998525][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 307.003892][ C1] ? __put_partials+0x165/0x1c0 [ 307.008753][ C1] ? lock_release+0x201/0x2f0 [ 307.013447][ C1] ? rcu_read_lock_held+0x9/0x50 [ 307.018386][ C1] __reset_page_owner+0x84/0x1a0 [ 307.023319][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 307.028519][ C1] __put_partials+0x165/0x1c0 [ 307.033197][ C1] qlist_free_all+0x4d/0x120 [ 307.037780][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 307.043239][ C1] __kasan_slab_alloc+0x69/0x90 [ 307.048085][ C1] __kvmalloc_node_noprof+0x230/0x620 [ 307.053449][ C1] ? alloc_fdtable+0x10b/0x2d0 [ 307.058206][ C1] ? alloc_fdtable+0x10b/0x2d0 [ 307.062963][ C1] alloc_fdtable+0x10b/0x2d0 [ 307.067548][ C1] expand_files+0x176/0xa60 [ 307.072046][ C1] ? __pfx_expand_files+0x10/0x10 [ 307.077060][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 307.082076][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.087440][ C1] ksys_dup3+0x113/0x370 [ 307.091671][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 307.096951][ C1] __x64_sys_dup2+0x82/0x460 [ 307.101535][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.106291][ C1] do_syscall_64+0xcd/0x4c0 [ 307.110787][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.116677][ C1] RIP: 0033:0x7f33cb38d8d7 [ 307.121072][ C1] RSP: 002b:00007ffcffa203d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 307.129473][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f33cb38d8d7 [ 307.137436][ C1] RDX: 0000000000000000 RSI: 00000000000000f9 RDI: 0000000000000000 [ 307.145405][ C1] RBP: 00007f33cb5b2060 R08: 0000000000000005 R09: 0000000000000000 [ 307.153366][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffcffa20440 [ 307.161341][ C1] R13: 00007ffcffa20448 R14: 0000000000000009 R15: 0000000000000000 [ 307.169308][ C1] [ 307.172315][ C1] task:kworker/0:5 state:R running task stack:25080 pid:5927 tgid:5927 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 307.185879][ C1] Workqueue: mld mld_dad_work [ 307.190554][ C1] Call Trace: [ 307.193819][ C1] [ 307.196755][ C1] __schedule+0x1190/0x5de0 [ 307.201267][ C1] ? __pfx___schedule+0x10/0x10 [ 307.206116][ C1] ? __alloc_skb+0x166/0x380 [ 307.210694][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 307.216059][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 307.221428][ C1] preempt_schedule_common+0x44/0xc0 [ 307.226700][ C1] preempt_schedule_thunk+0x16/0x30 [ 307.231899][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 307.237871][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 307.243147][ C1] ? ipv6_get_lladdr+0x299/0x4f0 [ 307.248085][ C1] __local_bh_enable_ip+0x107/0x120 [ 307.253275][ C1] ipv6_get_lladdr+0x299/0x4f0 [ 307.258036][ C1] mld_newpack.isra.0+0x41d/0xa20 [ 307.263054][ C1] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 307.268590][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 307.274484][ C1] ? add_grhead+0x299/0x340 [ 307.278977][ C1] add_grhead+0x299/0x340 [ 307.283296][ C1] add_grec+0x11b5/0x1720 [ 307.287616][ C1] ? lock_release+0x201/0x2f0 [ 307.292289][ C1] ? __pfx_add_grec+0x10/0x10 [ 307.296953][ C1] ? mld_in_v1_mode+0x2b2/0x3a0 [ 307.301798][ C1] ? __pfx_mld_in_v1_mode+0x10/0x10 [ 307.306983][ C1] mld_send_initial_cr+0x151/0x320 [ 307.312088][ C1] mld_dad_work+0x32/0x1f0 [ 307.316492][ C1] process_one_work+0x9cc/0x1b70 [ 307.321420][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 307.327486][ C1] ? __pfx_process_one_work+0x10/0x10 [ 307.332848][ C1] ? assign_work+0x1a0/0x250 [ 307.337426][ C1] worker_thread+0x6c8/0xf10 [ 307.342006][ C1] ? __kthread_parkme+0x19e/0x250 [ 307.347026][ C1] ? __pfx_worker_thread+0x10/0x10 [ 307.352126][ C1] kthread+0x3c5/0x780 [ 307.356187][ C1] ? __pfx_kthread+0x10/0x10 [ 307.360766][ C1] ? ret_from_fork+0x25/0x6f0 [ 307.365435][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.370193][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.374949][ C1] ? __pfx_kthread+0x10/0x10 [ 307.379525][ C1] ret_from_fork+0x5d7/0x6f0 [ 307.384100][ C1] ? __pfx_kthread+0x10/0x10 [ 307.388678][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.393434][ C1] [ 307.396437][ C1] rcu: rcu_preempt kthread starved for 10298 jiffies! g15601 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 307.407614][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 307.417570][ C1] rcu: RCU grace-period kthread stack dump: [ 307.423439][ C1] task:rcu_preempt state:R running task stack:27888 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 307.436915][ C1] Call Trace: [ 307.440182][ C1] [ 307.443100][ C1] __schedule+0x1190/0x5de0 [ 307.447610][ C1] ? __pfx___schedule+0x10/0x10 [ 307.452455][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 307.458088][ C1] ? schedule+0x2d7/0x3a0 [ 307.462402][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.467156][ C1] ? lock_release+0x201/0x2f0 [ 307.471832][ C1] schedule+0xe7/0x3a0 [ 307.475889][ C1] schedule_timeout+0x123/0x290 [ 307.480733][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 307.486101][ C1] ? __pfx_process_timeout+0x10/0x10 [ 307.491381][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 307.497183][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 307.502638][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 307.507391][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 307.512665][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 307.517591][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 307.522434][ C1] rcu_gp_kthread+0x270/0x380 [ 307.527096][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 307.532278][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.537035][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.542219][ C1] ? __kthread_parkme+0x19e/0x250 [ 307.547236][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 307.552421][ C1] kthread+0x3c5/0x780 [ 307.556477][ C1] ? __pfx_kthread+0x10/0x10 [ 307.561053][ C1] ? rcu_is_watching+0x12/0xc0 [ 307.565808][ C1] ? __pfx_kthread+0x10/0x10 [ 307.570387][ C1] ret_from_fork+0x5d7/0x6f0 [ 307.574963][ C1] ? __pfx_kthread+0x10/0x10 [ 307.579540][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.584299][ C1] [ 307.587303][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 307.593608][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 307.605219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.615260][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 307.620888][ C1] Code: 7c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 92 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 307.640490][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 307.646549][ C1] RAX: 00000000006abfcc RBX: 0000000000000001 RCX: ffffffff8b937c29 [ 307.654511][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162680 RDI: ffffffff819133c1 [ 307.662473][ C1] RBP: ffffed1003c56488 R08: 0000000000000000 R09: ffffed10170a6655 [ 307.670435][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 307.678397][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab3b90 R15: 0000000000000000 [ 307.686361][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 307.695280][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.701855][ C1] CR2: 00007f33cb5b2060 CR3: 000000001eec6000 CR4: 00000000003526f0 [ 307.709818][ C1] Call Trace: [ 307.713085][ C1] [ 307.716003][ C1] default_idle+0x13/0x20 [ 307.720326][ C1] default_idle_call+0x6d/0xb0 [ 307.725081][ C1] do_idle+0x391/0x510 [ 307.729141][ C1] ? __pfx_do_idle+0x10/0x10 [ 307.733722][ C1] ? do_idle+0x14/0x510 [ 307.737871][ C1] cpu_startup_entry+0x4f/0x60 [ 307.742633][ C1] start_secondary+0x21d/0x2b0 [ 307.747394][ C1] ? __pfx_start_secondary+0x10/0x10 [ 307.752677][ C1] common_startup_64+0x13e/0x148 [ 307.757609][ C1] [ 308.217807][ T1297] ieee802154 phy0 wpan0: encryption failed: -22