last executing test programs: 10.800397069s ago: executing program 0 (id=163): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 10.795661201s ago: executing program 3 (id=164): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="8a97b053e8b22e0a6dfa8d787efc6ed7f918e887eeb83480d62458d095c4b92a53d8600434e413e831fe8d78", 0x2c}, {&(0x7f00000000c0)="db0d3c905a4aebcb052854169c8146eaff5d796016e7e4c06e84c2745d17634e9ae88736d2038159d1c533c54af3342dac141c40c980ba6854", 0x39}, {&(0x7f0000000100)="2dd6abae833c4567f9fbae93b362bb1b6aa4b527b40549029d703d2fa573d0ef0b8a8ee97b639db4632f5f22f2c47be10bb35072799334e771efbd1e83839868b2e5c95e637bc439266901aa5d57a97ce0f6c279543f17c886", 0x59}], 0x3) 9.965238043s ago: executing program 0 (id=166): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x180000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mlockall(0x6) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x200, 0x0) ptrace$poke(0xffffffffffffffff, r0, &(0x7f0000000080), 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x4, 0x3, 0x4, 0x4000c, '\x00', 0xd6a}, 0x5, 0x100, 0x9, r0, 0x0, 0x8, 'syz1\x00', 0x0}) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0xc0940, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x5) readv(r5, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) syz_kvm_add_vcpu$x86(0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b20, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 9.905604093s ago: executing program 3 (id=167): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1830200af7ab20400000500000008000300", @ANYRES32=0x0, @ANYBLOB="0500a2009f000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x84050) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_timeval(r4, 0x1, 0x33, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 9.129591468s ago: executing program 3 (id=169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) close(r5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x6, &(0x7f0000000200)=0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0xe90, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x82600, 0x0) r9 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r9, 0x351e, 0x483, 0x0, 0x0, 0x0) 8.541551835s ago: executing program 0 (id=171): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600), 0x101000, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000640)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000700000000000000000000030000000001000000020000000300000000000000020000060400000005"], 0x0, 0x53, 0x0, 0x8}, 0x28) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_init(0xf00, 0x1) r5 = fanotify_init(0x10, 0x800) fanotify_mark(r5, 0x400, 0x0, r4, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000800) 7.530416494s ago: executing program 3 (id=173): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x2000, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xb41801, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800000001f) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) socket(0xa, 0x3, 0xff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c091) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8970, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000020ec45b3e978b53dfd72f4391b76e70861daf920206010000000006000000"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000580)=""/90) 6.807292807s ago: executing program 4 (id=178): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0xc0, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x200488c0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x2f41, @mcast2, 0x80000000}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r6 = syz_io_uring_setup(0x43, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r5}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000240)={0x3}, 0x8, 0xfffffffffffffffe) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.585396034s ago: executing program 1 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0xf5, 0x0, {0x3}}}, 0x70}}, 0x0) 5.475269236s ago: executing program 0 (id=181): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x8000000}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x700000000000000, 0x0, 0x48011}, 0xc000) 4.701390734s ago: executing program 1 (id=183): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d04"], 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2842, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/fscaps', 0x101000, 0x3) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.700857927s ago: executing program 0 (id=184): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000c99000/0x2000)=nil, 0x2000}, 0x2}) madvise(&(0x7f0000d72000/0x3000)=nil, 0x3000, 0xb) syz_usb_connect(0x1, 0x54, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xfc, 0x6b, 0x4b, 0x40, 0x12d1, 0x866f, 0xd9d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xff, 0x0, 0x3, 0xff, 0x2, 0x46, 0x4, [], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x5, 0x0, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x5800}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0xa, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc7, 0xa}]}}]}}]}}]}}, 0x0) 4.496570546s ago: executing program 3 (id=185): unshare(0x62040200) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 4.32436436s ago: executing program 4 (id=186): creat(0x0, 0xecf86c37d53049cc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x118, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x1b4}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000180), 0x3, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f0000000040)={0x1, 0x10, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1}}) 3.989680249s ago: executing program 4 (id=187): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) socket(0x1e, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x1a0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f01, 0x12) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000000c0)) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000040)=0x10000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 3.53851809s ago: executing program 4 (id=188): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="8a97b053e8b22e0a6dfa8d787efc6ed7f918e887eeb83480d62458d095c4b92a53d8600434e413e831fe8d78", 0x2c}, {&(0x7f00000000c0)="db0d3c905a4aebcb052854169c8146eaff5d796016e7e4c06e84c2745d17634e9ae88736d2038159d1c533c54af3342dac141c40c980ba6854", 0x39}, {&(0x7f0000000100)="2dd6abae833c4567f9fbae93b362bb1b6aa4b527b40549029d703d2fa573d0ef0b8a8ee97b639db4632f5f22f2c47be10bb35072799334e771efbd1e83839868b2e5c95e637bc439266901aa5d57a97ce0f6c279543f17c886", 0x59}], 0x3) 3.371331093s ago: executing program 4 (id=189): unshare(0x62040200) pipe2(0x0, 0x0) open(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 2.842159753s ago: executing program 1 (id=192): r0 = syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="0407ff04aaaaaaaaaa10"], 0x102) ftruncate(r0, 0x8000000000000001) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000080)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host32=0x4c00, 0x3, 0x5, 0x37}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x61, 0x0, 0xfff, 0xe}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x51, 0x79c, 0x1ff, 0x1}}, @rdmsr={0x66, 0x18, {0x8f2}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xfffffffffffffffb, 0xc, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x7, 0x7f}}, @rdmsr={0x66, 0x18, {0x80c}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x16, 0x7, 0xf50b, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xd, 0x6, 0x2, 0x7}}, @set_irq_handler={0xc8, 0x20, {0x8}}], 0x220}) ioctl$KVM_NMI(r1, 0xae9a) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000dd4586dd608c0500000c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22000c907803000000"], 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000030001"]) accept$alg(0xffffffffffffffff, 0x0, 0x0) 2.840373175s ago: executing program 3 (id=194): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd}, 0x0) r2 = syz_io_uring_setup(0x3b69, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) keyctl$session_to_parent(0x12) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r5 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0406"], 0x7) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffe) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, &(0x7f00000003c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x503801, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x16, 0x0, r1, 0x80, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x3, 0x4, 0x4, {0xa, 0x4e21, 0x5, @mcast1, 0x3}}}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002240)=""/102400, 0x19000) close_range(r2, r0, 0x2) pipe2$watch_queue(&(0x7f0000000100), 0x80) 2.629372503s ago: executing program 2 (id=195): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000000000000, 0x800000000000208, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff0000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x6, 0x6]}}) 2.617398379s ago: executing program 1 (id=196): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80070000000000000000000009ffffffe000"/40, 0xfd1b}], 0x1}, 0x20040000) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x10}, 0x94) close_range(r2, r2, 0x0) 2.48119517s ago: executing program 2 (id=197): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x109100, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$sndmidi(0x0, 0x7, 0x40) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r5, 0x0, 0x0, 0x1001f0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc615, 0x101, 0xf001100000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c00000400426a1400018006000600800a00000800", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x514}}, 0x20}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 2.149271154s ago: executing program 1 (id=198): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x329041, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x79, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x2}, &(0x7f0000000200)=0x8) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.236429135s ago: executing program 2 (id=199): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="8a97b053e8b22e0a6dfa8d787efc6ed7f918e887eeb83480d62458d095c4b92a53d8600434e413e831fe8d78", 0x2c}, {&(0x7f00000000c0)="db0d3c905a4aebcb052854169c8146eaff5d796016e7e4c06e84c2745d17634e9ae88736d2038159d1c533c54af3342dac141c40c980ba6854", 0x39}, {&(0x7f0000000100)="2dd6abae833c4567f9fbae93b362bb1b6aa4b527b40549029d703d2fa573d0ef0b8a8ee97b639db4632f5f22f2c47be10bb35072799334e771efbd1e83839868b2e5c95e637bc439266901aa5d57a97ce0f6c279543f17c886", 0x59}], 0x3) 1.015906598s ago: executing program 0 (id=200): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x4) socket$netlink(0x10, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) r8 = socket(0x18, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x40, 0x0, 0x1, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {0x1400000000000, 0x0, 0xabf4, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x8}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb8, 0xc4, 0xfffffefe, 0x20000}}, 0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x9, 0x2, 0x4, 0x0, 0x1, {0x77359400}, {0x4, 0x1, 0xf2, 0x3, 0xc, 0x95}, 0x6, 0x3, {&(0x7f00000003c0)=[{0x1000, 0x8000, {0x8001}, 0x81}, {0x80000000, 0x2, {0x8}, 0x1}]}, 0xca, 0x0, r1}) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9}, 0x5, 0x1, {}, 0x0, 0x0, r2}) 997.519919ms ago: executing program 2 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003500)={0x2c, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048019}, 0xc000) 929.649331ms ago: executing program 1 (id=202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x30884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x0, &(0x7f00000000c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_open_pts(r3, 0x900) dup3(r4, r3, 0x80000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 784.356331ms ago: executing program 2 (id=203): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002"], 0x1c}, 0x1, 0x30000, 0x0, 0x40089}, 0x8004) 421.763709ms ago: executing program 2 (id=204): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_gettime(0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x40000000}], 0x34000, 0x0) 0s ago: executing program 4 (id=205): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x34000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 341.318176][ T30] audit: type=1400 audit(1770949509.618:62): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 341.341793][ T30] audit: type=1400 audit(1770949509.638:63): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 341.344268][ T5828] cgroup: Unknown subsys name 'net' [ 341.370879][ T30] audit: type=1400 audit(1770949509.668:64): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 341.497073][ T5828] cgroup: Unknown subsys name 'cpuset' [ 341.504604][ T5828] cgroup: Unknown subsys name 'rlimit' [ 341.623992][ T30] audit: type=1400 audit(1770949509.918:65): avc: denied { setattr } for pid=5828 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.674689][ T30] audit: type=1400 audit(1770949509.918:66): avc: denied { create } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.702195][ T5830] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 341.706665][ T30] audit: type=1400 audit(1770949509.928:67): avc: denied { write } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.731336][ T30] audit: type=1400 audit(1770949509.928:68): avc: denied { read } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 341.751672][ T30] audit: type=1400 audit(1770949509.938:69): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 341.778039][ T30] audit: type=1400 audit(1770949509.938:70): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 341.801928][ T30] audit: type=1400 audit(1770949510.018:71): avc: denied { relabelto } for pid=5830 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 342.697484][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 346.048270][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.055925][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.063228][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.071168][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.078606][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.178350][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 346.334784][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.342674][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.350733][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.358352][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.367677][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.371727][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.382472][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.390269][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.400970][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.410344][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.420156][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.427636][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.436438][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.448470][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.448686][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.456222][ T5124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.469937][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.478631][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.480072][ T5124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.493400][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.520137][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.534947][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.542078][ T5840] bridge_slave_0: entered allmulticast mode [ 346.549232][ T5840] bridge_slave_0: entered promiscuous mode [ 346.558357][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.565464][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.572561][ T5840] bridge_slave_1: entered allmulticast mode [ 346.579511][ T5840] bridge_slave_1: entered promiscuous mode [ 346.614291][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.629120][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.680746][ T5840] team0: Port device team_slave_0 added [ 346.690676][ T5840] team0: Port device team_slave_1 added [ 346.722147][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.729191][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.755428][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.770026][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.777023][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.802987][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.868407][ T5840] hsr_slave_0: entered promiscuous mode [ 346.874404][ T5840] hsr_slave_1: entered promiscuous mode [ 347.166197][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 347.205042][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 347.278415][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 347.293239][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.319620][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.338137][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 347.350658][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.382204][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 347.420334][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.428461][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.435657][ T5848] bridge_slave_0: entered allmulticast mode [ 347.442277][ T5848] bridge_slave_0: entered promiscuous mode [ 347.458648][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.466312][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.473394][ T5847] bridge_slave_0: entered allmulticast mode [ 347.480299][ T5847] bridge_slave_0: entered promiscuous mode [ 347.490378][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.497544][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.504861][ T5848] bridge_slave_1: entered allmulticast mode [ 347.511690][ T5848] bridge_slave_1: entered promiscuous mode [ 347.525912][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.532985][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.540342][ T5847] bridge_slave_1: entered allmulticast mode [ 347.547077][ T5847] bridge_slave_1: entered promiscuous mode [ 347.607608][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.619007][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.628211][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.635361][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.642439][ T5857] bridge_slave_0: entered allmulticast mode [ 347.649223][ T5857] bridge_slave_0: entered promiscuous mode [ 347.657751][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.681611][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.688842][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.696020][ T5853] bridge_slave_0: entered allmulticast mode [ 347.702742][ T5853] bridge_slave_0: entered promiscuous mode [ 347.726397][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.733501][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.740677][ T5857] bridge_slave_1: entered allmulticast mode [ 347.747856][ T5857] bridge_slave_1: entered promiscuous mode [ 347.766662][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.776628][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.783704][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.791278][ T5853] bridge_slave_1: entered allmulticast mode [ 347.798609][ T5853] bridge_slave_1: entered promiscuous mode [ 347.809374][ T5847] team0: Port device team_slave_0 added [ 347.816991][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.841580][ T5847] team0: Port device team_slave_1 added [ 347.848625][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.884794][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.901716][ T5857] team0: Port device team_slave_0 added [ 347.908917][ T5848] team0: Port device team_slave_0 added [ 347.916865][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.950549][ T5853] team0: Port device team_slave_0 added [ 347.957366][ T5857] team0: Port device team_slave_1 added [ 347.963871][ T5848] team0: Port device team_slave_1 added [ 347.978350][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.985404][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.011553][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.023968][ T5853] team0: Port device team_slave_1 added [ 348.043320][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.050307][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.076348][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.087612][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.095262][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.121632][ T5851] Bluetooth: hci0: command tx timeout [ 348.127260][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.151618][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.158604][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.184584][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.196054][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.202986][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.228942][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.259251][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.266303][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.292453][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.308018][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.315016][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.341069][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.360933][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.367992][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.393997][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.435066][ T5851] Bluetooth: hci1: command tx timeout [ 348.444885][ T5847] hsr_slave_0: entered promiscuous mode [ 348.450942][ T5847] hsr_slave_1: entered promiscuous mode [ 348.457055][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 348.462805][ T5847] Cannot create hsr debugfs directory [ 348.482474][ T5848] hsr_slave_0: entered promiscuous mode [ 348.488480][ T5848] hsr_slave_1: entered promiscuous mode [ 348.494291][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 348.500024][ T5848] Cannot create hsr debugfs directory [ 348.514565][ T5851] Bluetooth: hci2: command tx timeout [ 348.557008][ T5857] hsr_slave_0: entered promiscuous mode [ 348.563084][ T5857] hsr_slave_1: entered promiscuous mode [ 348.569220][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 348.575242][ T5857] Cannot create hsr debugfs directory [ 348.594588][ T5851] Bluetooth: hci3: command tx timeout [ 348.594599][ T51] Bluetooth: hci4: command tx timeout [ 348.620958][ T5853] hsr_slave_0: entered promiscuous mode [ 348.627338][ T5853] hsr_slave_1: entered promiscuous mode [ 348.633273][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 348.639206][ T5853] Cannot create hsr debugfs directory [ 348.890199][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.904373][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.924084][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 348.933141][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.949690][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.982278][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.009246][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.016388][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.035343][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.050767][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.068664][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.079074][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.089861][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.096930][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.137931][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.158280][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.173692][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.208168][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.215667][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.262693][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.288880][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.299610][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.310655][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.318654][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 349.318668][ T30] audit: type=1400 audit(1770949517.618:84): avc: denied { sys_module } for pid=5840 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 349.330557][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.355954][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.370752][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.409315][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.416439][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.522300][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.534033][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.558584][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.587891][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.600495][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.619367][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.626476][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.659177][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.666318][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.677030][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.684143][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.723135][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.730298][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.768964][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.796407][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.807655][ T5840] veth0_vlan: entered promiscuous mode [ 349.825125][ T5840] veth1_vlan: entered promiscuous mode [ 349.837180][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.844253][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.872160][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.879371][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.896965][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.960156][ T5840] veth0_macvtap: entered promiscuous mode [ 349.997661][ T5840] veth1_macvtap: entered promiscuous mode [ 350.051575][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.062061][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.088033][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.130396][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.182620][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.196747][ T5851] Bluetooth: hci0: command tx timeout [ 350.202642][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.221674][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.252545][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.262720][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.330689][ T5848] veth0_vlan: entered promiscuous mode [ 350.363116][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.427586][ T5848] veth1_vlan: entered promiscuous mode [ 350.452680][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.467364][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.494215][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.505029][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.519013][ T5851] Bluetooth: hci1: command tx timeout [ 350.532825][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.544362][ T30] audit: type=1400 audit(1770949518.848:85): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.ixKyY4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 350.569190][ T5857] veth0_vlan: entered promiscuous mode [ 350.576672][ T30] audit: type=1400 audit(1770949518.848:86): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 350.598826][ T5851] Bluetooth: hci2: command tx timeout [ 350.607283][ T5847] veth0_vlan: entered promiscuous mode [ 350.613594][ T30] audit: type=1400 audit(1770949518.848:87): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.ixKyY4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 350.639961][ T30] audit: type=1400 audit(1770949518.848:88): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 350.641509][ T5857] veth1_vlan: entered promiscuous mode [ 350.662463][ T30] audit: type=1400 audit(1770949518.848:89): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.ixKyY4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 350.693944][ T5851] Bluetooth: hci3: command tx timeout [ 350.699406][ T5851] Bluetooth: hci4: command tx timeout [ 350.706493][ T30] audit: type=1400 audit(1770949518.848:90): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.ixKyY4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 350.713775][ T5853] veth0_vlan: entered promiscuous mode [ 350.740831][ T30] audit: type=1400 audit(1770949518.878:91): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 350.761788][ T5848] veth0_macvtap: entered promiscuous mode [ 350.762215][ T30] audit: type=1400 audit(1770949518.908:92): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 350.772503][ T5847] veth1_vlan: entered promiscuous mode [ 350.797419][ T30] audit: type=1400 audit(1770949518.908:93): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="gadgetfs" ino=7092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 350.827250][ T5848] veth1_macvtap: entered promiscuous mode [ 350.838944][ T5853] veth1_vlan: entered promiscuous mode [ 350.862034][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 350.866413][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.899304][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.930585][ T5894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.966849][ T5894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.995922][ T5847] veth0_macvtap: entered promiscuous mode [ 351.064039][ T5853] veth0_macvtap: entered promiscuous mode [ 351.076692][ T5853] veth1_macvtap: entered promiscuous mode [ 351.095375][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.108652][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.139074][ T5894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.149680][ T5894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.170976][ T5894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.185566][ T5857] veth0_macvtap: entered promiscuous mode [ 351.194039][ T5847] veth1_macvtap: entered promiscuous mode [ 351.433821][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.467101][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.153500][ T5894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.162624][ T5894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.202670][ T5894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.235611][ T5857] veth1_macvtap: entered promiscuous mode [ 352.250636][ T5894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.274855][ T51] Bluetooth: hci0: command tx timeout [ 352.283482][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.303470][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.313469][ T5894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.343740][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.358996][ T5894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.380371][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.396479][ T5894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.442581][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.456536][ T5894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.465349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.472825][ T5894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.503433][ T5894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.565870][ T5894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.575357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.583173][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.599083][ T51] Bluetooth: hci1: command tx timeout [ 352.606671][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.615175][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.675077][ T51] Bluetooth: hci2: command tx timeout [ 352.680797][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.691818][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.754769][ T51] Bluetooth: hci4: command tx timeout [ 352.755847][ T5851] Bluetooth: hci3: command tx timeout [ 352.773684][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.783002][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.903508][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.921909][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.974350][ T5894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.996624][ T5894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.410106][ T5981] bond0: entered promiscuous mode [ 353.508378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 353.566818][ T5981] bond_slave_0: entered promiscuous mode [ 353.590950][ T5981] bond_slave_1: entered promiscuous mode [ 353.642340][ T5981] batadv0: entered promiscuous mode [ 353.657851][ T5981] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 353.703971][ T5981] bond0: left promiscuous mode [ 353.740396][ T5981] bond_slave_0: left promiscuous mode [ 353.747804][ T5981] bond_slave_1: left promiscuous mode [ 353.792661][ T5981] batadv0: left promiscuous mode [ 353.917450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 354.020110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 354.037827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 354.327611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 354.354670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 354.430013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 354.634781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 354.814588][ T5851] Bluetooth: hci0: command tx timeout [ 354.815025][ T51] Bluetooth: hci1: command tx timeout [ 354.819988][ T5851] Bluetooth: hci2: command tx timeout [ 354.844202][ T5851] Bluetooth: hci4: command tx timeout [ 354.849646][ T5124] Bluetooth: hci3: command tx timeout [ 354.936622][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 354.936638][ T30] audit: type=1400 audit(1770949523.238:135): avc: denied { read write } for pid=5997 comm="syz.0.11" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.977530][ T30] audit: type=1400 audit(1770949523.238:136): avc: denied { open } for pid=5997 comm="syz.0.11" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.001953][ T30] audit: type=1400 audit(1770949523.238:137): avc: denied { ioctl } for pid=5997 comm="syz.0.11" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.186745][ T5784] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 355.404059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 355.413150][ T30] audit: type=1400 audit(1770949523.668:138): avc: denied { create } for pid=6003 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.455197][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 355.476559][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.492022][ T30] audit: type=1400 audit(1770949523.668:139): avc: denied { bind } for pid=6003 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.529178][ T30] audit: type=1400 audit(1770949523.668:140): avc: denied { write } for pid=6003 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.529178][ T5784] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 355.529214][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.568358][ T30] audit: type=1400 audit(1770949523.678:141): avc: denied { create } for pid=5993 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.877713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 356.606354][ T30] audit: type=1400 audit(1770949523.678:142): avc: denied { bind } for pid=5993 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.710654][ T6016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.732934][ T5784] usb 1-1: config 0 descriptor?? [ 356.790767][ T30] audit: type=1400 audit(1770949523.678:143): avc: denied { write } for pid=5993 comm="syz.2.10" name="rt_acct" dev="proc" ino=4026533289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 356.954537][ T30] audit: type=1400 audit(1770949523.678:144): avc: denied { create } for pid=5993 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 357.162153][ T5784] isku 0003:1E7D:319C.0001: item fetching failed at offset 6/7 [ 357.202982][ T5784] isku 0003:1E7D:319C.0001: parse failed [ 357.234719][ T5784] isku 0003:1E7D:319C.0001: probe with driver isku failed with error -22 [ 357.623224][ T5998] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 357.647152][ T29] usb 1-1: USB disconnect, device number 2 [ 357.659582][ T6024] process 'syz.2.18' launched '/dev/fd/6' with NULL argv: empty string added [ 358.147791][ T5972] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 358.347914][ T5972] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 358.374823][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.388598][ T5972] usb 3-1: Product: syz [ 358.392773][ T5972] usb 3-1: Manufacturer: syz [ 358.398471][ T5972] usb 3-1: SerialNumber: syz [ 358.424225][ T5972] usb 3-1: config 0 descriptor?? [ 358.451753][ T5851] Bluetooth: hci5: urb ffff888075e06700 submission failed (2) [ 359.143754][ T6049] mkiss: ax0: crc mode is auto. [ 360.275132][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 360.275143][ T30] audit: type=1400 audit(1770949528.578:185): avc: denied { create } for pid=6070 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.304641][ T30] audit: type=1400 audit(1770949528.598:186): avc: denied { ioctl } for pid=6070 comm="syz.0.27" path="socket:[9469]" dev="sockfs" ino=9469 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.463938][ T5972] usb 3-1: USB disconnect, device number 2 [ 360.481102][ T30] audit: type=1400 audit(1770949528.778:187): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 360.481944][ T6071] kvm: kvm [6070]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006d) = 0x270 [ 360.643694][ T30] audit: type=1400 audit(1770949528.808:188): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 360.732427][ T30] audit: type=1400 audit(1770949528.828:189): avc: denied { read } for pid=6075 comm="syz.3.28" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.783214][ T30] audit: type=1400 audit(1770949528.828:190): avc: denied { open } for pid=6075 comm="syz.3.28" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.811361][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 360.867356][ T30] audit: type=1400 audit(1770949528.828:191): avc: denied { ioctl } for pid=6075 comm="syz.3.28" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 360.913304][ T30] audit: type=1400 audit(1770949528.968:192): avc: denied { search } for pid=6078 comm="sed" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.964688][ T30] audit: type=1400 audit(1770949529.018:193): avc: denied { write } for pid=6070 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 361.009992][ T5820] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 361.031743][ T5820] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 361.056909][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.066198][ T30] audit: type=1400 audit(1770949529.148:194): avc: denied { getattr } for pid=6065 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.101994][ T5820] usb 4-1: Product: syz [ 361.109062][ T5820] usb 4-1: Manufacturer: syz [ 361.113665][ T5820] usb 4-1: SerialNumber: syz [ 361.124819][ T5972] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 361.145854][ T5820] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 361.160722][ T5820] dvb-usb: bulk message failed: -22 (3/0) [ 361.210466][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 361.242144][ T5820] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 361.262003][ T5820] usb 4-1: media controller created [ 361.289052][ T5972] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 361.299245][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.321423][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.337654][ T5972] usb 3-1: config 0 has no interface number 0 [ 361.360270][ T5972] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 361.389505][ T5972] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.441515][ T5972] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 361.470785][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.489601][ T5972] usb 3-1: Product: syz [ 361.493784][ T5972] usb 3-1: Manufacturer: syz [ 361.513256][ T5820] DVB: Unable to find symbol mt352_attach() [ 361.530695][ T5820] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 361.539067][ T5972] usb 3-1: SerialNumber: syz [ 361.548271][ T5972] usb 3-1: config 0 descriptor?? [ 361.556153][ T5820] dvb-usb: bulk message failed: -22 (3/0) [ 361.581256][ T5820] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 361.667898][ T5820] usb 4-1: USB disconnect, device number 2 [ 361.690023][ T6113] libceph: resolve '400' (ret=-3): failed [ 362.206452][ T5820] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 362.443288][ T6123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.139481][ T29] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 363.420168][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 363.537518][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.630484][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 363.661873][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.718929][ T29] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 363.782366][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'. [ 363.792893][ T29] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 363.935424][ T29] usb 4-1: Product: syz [ 363.955220][ T29] usb 4-1: config 0 descriptor?? [ 363.969919][ T6120] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 364.209781][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 364.216650][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 364.235024][ T29] usb 4-1: USB disconnect, device number 3 [ 364.380387][ T5972] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 364.448948][ T5972] usb 3-1: USB disconnect, device number 3 [ 364.486169][ T5843] udevd[5843]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 365.636160][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 365.636182][ T30] audit: type=1400 audit(1770949533.888:215): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 365.693782][ T6188] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 365.933273][ T30] audit: type=1400 audit(1770949534.228:216): avc: denied { create } for pid=6180 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 366.012246][ T30] audit: type=1400 audit(1770949534.258:217): avc: denied { bind } for pid=6180 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 366.031277][ T30] audit: type=1400 audit(1770949534.268:218): avc: denied { accept } for pid=6180 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 366.050688][ T30] audit: type=1400 audit(1770949534.268:219): avc: denied { write } for pid=6180 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 366.132586][ T30] audit: type=1400 audit(1770949534.428:220): avc: denied { mount } for pid=6193 comm="syz.3.45" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 366.414860][ T30] audit: type=1400 audit(1770949534.698:221): avc: denied { getopt } for pid=6193 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 366.808293][ T30] audit: type=1400 audit(1770949534.698:222): avc: denied { watch } for pid=6193 comm="syz.3.45" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 366.925330][ T30] audit: type=1400 audit(1770949534.698:223): avc: denied { watch_sb watch_reads } for pid=6193 comm="syz.3.45" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 367.169770][ T30] audit: type=1400 audit(1770949535.088:224): avc: denied { setopt } for pid=6197 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.465465][ T6219] random: crng reseeded on system resumption [ 367.523522][ T6222] syzkaller0: entered promiscuous mode [ 367.529109][ T6222] syzkaller0: entered allmulticast mode [ 370.005334][ T6276] serio: Serial port ttyS3 [ 371.036911][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 371.036928][ T30] audit: type=1400 audit(1770949539.318:239): avc: denied { setopt } for pid=6297 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 371.519186][ T30] audit: type=1400 audit(1770949539.808:240): avc: denied { execute } for pid=6312 comm="syz.4.66" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 371.568247][ T30] audit: type=1400 audit(1770949539.818:241): avc: denied { execute_no_trans } for pid=6312 comm="syz.4.66" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 371.765577][ T5972] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 372.002799][ T6330] gfs2: gfs2 mount does not exist [ 372.044810][ T30] audit: type=1400 audit(1770949540.318:242): avc: denied { mount } for pid=6323 comm="syz.3.69" name="/" dev="hugetlbfs" ino=9036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 372.350365][ T30] audit: type=1400 audit(1770949540.338:243): avc: denied { ioctl } for pid=6323 comm="syz.3.69" path="socket:[9039]" dev="sockfs" ino=9039 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 372.508595][ T5972] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 372.508612][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.508624][ T5972] usb 5-1: Product: syz [ 372.508632][ T5972] usb 5-1: Manufacturer: syz [ 372.508641][ T5972] usb 5-1: SerialNumber: syz [ 372.515226][ T5972] usb 5-1: config 0 descriptor?? [ 372.539429][ T5851] Bluetooth: hci5: urb ffff888035d95400 submission failed (2) [ 372.645336][ T30] audit: type=1400 audit(1770949540.948:244): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 372.746374][ T30] audit: type=1400 audit(1770949541.048:245): avc: denied { read write } for pid=6336 comm="syz.3.73" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 372.748436][ T30] audit: type=1400 audit(1770949541.048:246): avc: denied { open } for pid=6336 comm="syz.3.73" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 372.844572][ T30] audit: type=1400 audit(1770949541.128:247): avc: denied { create } for pid=6316 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.862402][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 372.862456][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 372.943686][ T30] audit: type=1400 audit(1770949541.238:248): avc: denied { setopt } for pid=6336 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 373.359676][ T6343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.894853][ T6345] mkiss: ax0: crc mode is auto. [ 374.629727][ T119] usb 5-1: USB disconnect, device number 2 [ 374.757501][ T6350] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.77'. [ 375.297864][ T6362] ======================================================= [ 375.297864][ T6362] WARNING: The mand mount option has been deprecated and [ 375.297864][ T6362] and is ignored by this kernel. Remove the mand [ 375.297864][ T6362] option from the mount to silence this warning. [ 375.297864][ T6362] ======================================================= [ 375.454500][ T6363] Zero length message leads to an empty skb [ 376.692149][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 376.692164][ T30] audit: type=1400 audit(1770949543.658:258): avc: denied { mount } for pid=6357 comm="syz.4.80" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 376.852106][ T30] audit: type=1400 audit(1770949543.778:259): avc: denied { create } for pid=6356 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.875658][ T30] audit: type=1400 audit(1770949543.808:260): avc: denied { connect } for pid=6356 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.896870][ T30] audit: type=1400 audit(1770949543.828:261): avc: denied { write } for pid=6356 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.916455][ T30] audit: type=1400 audit(1770949543.918:262): avc: denied { read } for pid=6357 comm="syz.4.80" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 376.940853][ T30] audit: type=1400 audit(1770949543.928:263): avc: denied { open } for pid=6357 comm="syz.4.80" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 376.966962][ T30] audit: type=1400 audit(1770949544.208:264): avc: denied { append } for pid=6357 comm="syz.4.80" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 377.008165][ T30] audit: type=1400 audit(1770949544.988:265): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 377.029640][ T30] audit: type=1400 audit(1770949545.198:266): avc: denied { create } for pid=6369 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 377.034835][ T5896] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 377.051915][ T30] audit: type=1400 audit(1770949545.198:267): avc: denied { setopt } for pid=6369 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 377.148413][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 377.270219][ T5896] usb 5-1: Invalid ep0 maxpacket: 64 [ 377.424764][ T5896] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 377.605201][ T5896] usb 5-1: Invalid ep0 maxpacket: 64 [ 377.619200][ T5896] usb usb5-port1: attempt power cycle [ 377.837903][ T5972] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 378.000874][ T5896] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 378.047725][ T5972] usb 4-1: Using ep0 maxpacket: 32 [ 378.053447][ T5896] usb 5-1: Invalid ep0 maxpacket: 64 [ 378.066948][ T5972] usb 4-1: unable to get BOS descriptor or descriptor too short [ 378.082530][ T5972] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 378.092125][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'. [ 378.104620][ T5972] usb 4-1: config 0 has no interface number 0 [ 378.117948][ T5972] usb 4-1: config 0 interface 11 has no altsetting 0 [ 378.125240][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.131612][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.142051][ T5972] usb 4-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=13.a1 [ 378.152215][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.160757][ T5972] usb 4-1: Product: syz [ 378.165192][ T5972] usb 4-1: Manufacturer: syz [ 378.169857][ T5972] usb 4-1: SerialNumber: syz [ 378.179366][ T5972] usb 4-1: config 0 descriptor?? [ 378.204575][ T5896] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 378.212882][ T6396] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6396 comm=syz.0.91 [ 378.255720][ T5896] usb 5-1: Invalid ep0 maxpacket: 64 [ 378.262746][ T5896] usb usb5-port1: unable to enumerate USB device [ 380.940176][ T5972] HFC-S_USB 4-1:0.11: probe with driver HFC-S_USB failed with error -5 [ 380.997657][ T5972] usb 4-1: USB disconnect, device number 4 [ 381.728827][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 381.911492][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 381.911504][ T30] audit: type=1400 audit(1770949550.098:320): avc: denied { allowed } for pid=6417 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 381.985377][ T30] audit: type=1400 audit(1770949550.098:321): avc: denied { create } for pid=6417 comm="syz.0.95" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.050776][ T30] audit: type=1400 audit(1770949550.098:322): avc: denied { map } for pid=6417 comm="syz.0.95" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.106262][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 382.117698][ T30] audit: type=1400 audit(1770949550.098:323): avc: denied { read write } for pid=6417 comm="syz.0.95" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.165035][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 382.242129][ T10] usb 2-1: config 251 has an invalid interface number: 6 but max is 0 [ 382.252498][ T10] usb 2-1: config 251 has no interface number 0 [ 382.264536][ T30] audit: type=1400 audit(1770949550.098:324): avc: denied { override_creds } for pid=6417 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 382.289479][ T10] usb 2-1: config 251 interface 6 has no altsetting 0 [ 382.317136][ T10] usb 2-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=ea.98 [ 382.341725][ T30] audit: type=1400 audit(1770949550.208:325): avc: denied { ioctl } for pid=6422 comm="syz.1.100" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 382.366572][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.374808][ T10] usb 2-1: Product: syz [ 382.379154][ T10] usb 2-1: Manufacturer: syz [ 382.383746][ T10] usb 2-1: SerialNumber: syz [ 382.405830][ T30] audit: type=1400 audit(1770949550.238:326): avc: denied { ioctl } for pid=6422 comm="syz.1.100" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 382.534062][ T30] audit: type=1400 audit(1770949550.348:327): avc: denied { read write } for pid=5853 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.574564][ T30] audit: type=1400 audit(1770949550.348:328): avc: denied { read write open } for pid=5853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.644544][ T30] audit: type=1400 audit(1770949550.348:329): avc: denied { ioctl } for pid=5853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 383.608645][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 383.935056][ T10] dvb-usb: found a 'DiBcom NIM8096MD reference design' in cold state, will try to load a firmware [ 384.004422][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 384.014065][ T10] dib0700: firmware download failed at 7 with -22 [ 384.090923][ T10] usb 2-1: USB disconnect, device number 2 [ 384.636203][ T6467] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 385.792216][ T6473] mkiss: ax0: crc mode is auto. [ 386.474704][ T5972] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 386.748804][ T5972] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 386.765232][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.846022][ T5972] usb 5-1: config 0 has no interface number 0 [ 386.853330][ T5972] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 386.865434][ T5972] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.262778][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 387.262794][ T30] audit: type=1400 audit(1770949555.218:505): avc: denied { prog_load } for pid=6491 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 387.306948][ T5972] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 387.335787][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.370692][ T30] audit: type=1400 audit(1770949555.598:506): avc: denied { ioctl } for pid=6485 comm="syz.4.114" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.465721][ T30] audit: type=1400 audit(1770949555.608:507): avc: denied { ioctl } for pid=6485 comm="syz.4.114" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.499244][ T5972] usb 5-1: Product: syz [ 387.514612][ T5972] usb 5-1: Manufacturer: syz [ 387.523623][ T5972] usb 5-1: SerialNumber: syz [ 387.588986][ T5972] usb 5-1: config 0 descriptor?? [ 387.624696][ T30] audit: type=1400 audit(1770949555.628:508): avc: denied { bpf } for pid=6491 comm="syz.0.116" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 387.755368][ T30] audit: type=1400 audit(1770949555.628:509): avc: denied { perfmon } for pid=6491 comm="syz.0.116" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 387.863218][ T30] audit: type=1400 audit(1770949555.638:510): avc: denied { prog_load } for pid=6491 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 388.197832][ T30] audit: type=1400 audit(1770949555.658:511): avc: denied { perfmon } for pid=6491 comm="syz.0.116" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 388.335392][ T30] audit: type=1400 audit(1770949555.658:512): avc: denied { bpf } for pid=6491 comm="syz.0.116" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 388.455889][ T30] audit: type=1400 audit(1770949555.758:513): avc: denied { read write } for pid=5848 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.504144][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 388.568672][ T30] audit: type=1400 audit(1770949555.758:514): avc: denied { open } for pid=5848 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.730190][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 389.138640][ T5972] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 389.171124][ T5972] usb 5-1: USB disconnect, device number 7 [ 390.898538][ T6532] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 390.898538][ T6532] program syz.1.128 not setting count and/or reply_len properly [ 391.710253][ T6532] syzkaller1: entered promiscuous mode [ 391.755206][ T6532] syzkaller1: entered allmulticast mode [ 391.801121][ T6537] mkiss: ax0: crc mode is auto. [ 392.265335][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 392.265350][ T30] audit: type=1400 audit(1770949560.568:672): avc: denied { ioctl } for pid=6538 comm="syz.0.130" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.327895][ T30] audit: type=1400 audit(1770949560.618:673): avc: denied { bpf } for pid=6551 comm="syz.4.133" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.334690][ T5784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 392.380700][ T30] audit: type=1400 audit(1770949560.618:674): avc: denied { read } for pid=6551 comm="syz.4.133" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.454542][ T30] audit: type=1400 audit(1770949560.618:675): avc: denied { open } for pid=6551 comm="syz.4.133" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.526744][ T30] audit: type=1400 audit(1770949560.618:676): avc: denied { read } for pid=6551 comm="syz.4.133" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 392.565568][ T6559] rdma_op ffff888055fa59f0 conn xmit_rdma 0000000000000000 [ 392.608258][ T30] audit: type=1400 audit(1770949560.618:677): avc: denied { open } for pid=6551 comm="syz.4.133" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 392.660868][ T30] audit: type=1400 audit(1770949560.618:678): avc: denied { ioctl } for pid=6551 comm="syz.4.133" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 392.757244][ T5784] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 392.774221][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.774537][ T30] audit: type=1400 audit(1770949560.618:679): avc: denied { create } for pid=6551 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 392.814139][ T5784] usb 1-1: config 0 descriptor?? [ 392.893137][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 392.923799][ T30] audit: type=1400 audit(1770949560.618:680): avc: denied { setopt } for pid=6551 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 392.975668][ T5784] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 393.024361][ T30] audit: type=1400 audit(1770949560.618:681): avc: denied { accept } for pid=6551 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 393.166377][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 393.179117][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.204508][ T24] usb 2-1: config 0 has no interface number 0 [ 393.220826][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 393.245077][ T24] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.262840][ T24] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 393.272479][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.280879][ T24] usb 2-1: Product: syz [ 393.285341][ T24] usb 2-1: Manufacturer: syz [ 393.289982][ T24] usb 2-1: SerialNumber: syz [ 393.322976][ T24] usb 2-1: config 0 descriptor?? [ 393.431152][ T6574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 393.437800][ T6574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.455117][ T6574] vhci_hcd vhci_hcd.0: Device attached [ 393.704732][ T5920] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 393.712355][ T119] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 393.894009][ T119] usb 3-1: config 0 has no interfaces? [ 393.907209][ T119] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 393.919523][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.929595][ T119] usb 3-1: config 0 descriptor?? [ 393.941669][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 394.016073][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'. [ 394.068332][ T5784] gspca_sunplus: reg_w_riv err -110 [ 394.089159][ T5784] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 394.243519][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.270849][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.431761][ T792] usb 3-1: USB disconnect, device number 4 [ 394.457271][ T24] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 394.686632][ T6575] usb 37-1: recv xbuf, 0 [ 394.709889][ T24] usb 2-1: USB disconnect, device number 3 [ 394.725588][ T36] vhci_hcd vhci_hcd.2: stop threads [ 394.735921][ T36] vhci_hcd vhci_hcd.2: release socket [ 394.770975][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 394.804559][ T5920] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 395.260894][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 395.662717][ T24] usb 1-1: USB disconnect, device number 3 [ 395.904609][ T6612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 397.314606][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 397.314623][ T30] audit: type=1400 audit(1770949565.608:884): avc: denied { allowed } for pid=6603 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 397.433000][ T6629] binder: BINDER_SET_CONTEXT_MGR already set [ 397.446347][ T6629] binder: 6627:6629 ioctl 4018620d 200000000040 returned -16 [ 397.496207][ T30] audit: type=1400 audit(1770949565.608:885): avc: denied { sqpoll } for pid=6603 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 397.625488][ T30] audit: type=1400 audit(1770949565.608:886): avc: denied { create } for pid=6603 comm="syz.2.147" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 397.785619][ T30] audit: type=1400 audit(1770949565.608:887): avc: denied { map } for pid=6603 comm="syz.2.147" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 398.267881][ T30] audit: type=1400 audit(1770949565.608:888): avc: denied { read write } for pid=6603 comm="syz.2.147" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 398.303087][ T30] audit: type=1400 audit(1770949565.718:889): avc: denied { read } for pid=6627 comm="syz.1.155" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.327086][ T30] audit: type=1400 audit(1770949565.718:890): avc: denied { open } for pid=6627 comm="syz.1.155" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.353550][ T30] audit: type=1400 audit(1770949565.728:891): avc: denied { ioctl } for pid=6627 comm="syz.1.155" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.383453][ T30] audit: type=1400 audit(1770949565.728:892): avc: denied { set_context_mgr } for pid=6627 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 398.404840][ T30] audit: type=1400 audit(1770949565.728:893): avc: denied { read } for pid=6627 comm="syz.1.155" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.430456][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 398.686660][ T6641] bridge0: port 3(gretap0) entered blocking state [ 398.693150][ T6641] bridge0: port 3(gretap0) entered disabled state [ 398.699716][ T6641] gretap0: entered allmulticast mode [ 398.705785][ T6641] gretap0: entered promiscuous mode [ 398.711402][ T6641] bridge0: port 3(gretap0) entered blocking state [ 398.717997][ T6641] bridge0: port 3(gretap0) entered forwarding state [ 398.972561][ T6648] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 398.989444][ T6648] netlink: 96 bytes leftover after parsing attributes in process `syz.4.160'. [ 399.010151][ T6648] netlink: 1 bytes leftover after parsing attributes in process `syz.4.160'. [ 399.043665][ T6648] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 399.081052][ T6648] netlink: 'syz.4.160': attribute type 8 has an invalid length. [ 399.098153][ T6648] netlink: 606 bytes leftover after parsing attributes in process `syz.4.160'. [ 399.965023][ T6648] netlink: 44 bytes leftover after parsing attributes in process `syz.4.160'. [ 400.467694][ T6667] mkiss: ax0: crc mode is auto. [ 402.391884][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 402.391899][ T30] audit: type=1400 audit(1770949570.688:1067): avc: denied { read write } for pid=5857 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.501208][ T30] audit: type=1400 audit(1770949570.758:1068): avc: denied { read write } for pid=5847 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.579295][ T30] audit: type=1400 audit(1770949570.758:1069): avc: denied { read write open } for pid=5847 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.605607][ T30] audit: type=1400 audit(1770949570.758:1070): avc: denied { ioctl } for pid=5847 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.726368][ T30] audit: type=1400 audit(1770949570.788:1071): avc: denied { read write open } for pid=5857 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.805757][ T30] audit: type=1400 audit(1770949570.788:1072): avc: denied { ioctl } for pid=5857 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.853188][ T30] audit: type=1400 audit(1770949570.798:1073): avc: denied { read } for pid=6692 comm="syz.1.172" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 402.894612][ T30] audit: type=1400 audit(1770949570.798:1074): avc: denied { open } for pid=6692 comm="syz.1.172" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 402.950179][ T6711] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 403.030985][ T6711] Cannot find add_set index 0 as target [ 403.037691][ T30] audit: type=1400 audit(1770949570.838:1075): avc: denied { read write } for pid=5853 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 403.245676][ T30] audit: type=1400 audit(1770949570.838:1076): avc: denied { open } for pid=5853 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 404.896031][ T6728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.064547][ T10] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 406.192056][ T6756] usb usb9: usbfs: process 6756 (syz.4.187) did not claim interface 0 before use [ 406.266208][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 406.424548][ T10] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 406.617130][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 406.636554][ T10] usb usb1-port1: attempt power cycle [ 406.997062][ T10] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 407.038997][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 407.187830][ T10] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 407.253801][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 407.261966][ T10] usb usb1-port1: unable to enumerate USB device [ 407.429928][ T30] kauditd_printk_skb: 198 callbacks suppressed [ 407.429944][ T30] audit: type=1400 audit(1770949575.728:1275): avc: denied { create } for pid=6776 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.465325][ T30] audit: type=1400 audit(1770949575.768:1276): avc: denied { create } for pid=6776 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.524583][ T30] audit: type=1400 audit(1770949575.768:1277): avc: denied { write } for pid=6776 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.555959][ T30] audit: type=1400 audit(1770949575.768:1278): avc: denied { write } for pid=6776 comm="syz.1.196" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.594642][ T30] audit: type=1400 audit(1770949575.768:1279): avc: denied { read append } for pid=6776 comm="syz.1.196" name="cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.724278][ T30] audit: type=1400 audit(1770949575.768:1280): avc: denied { open } for pid=6776 comm="syz.1.196" path="/dev/cec0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.753024][ T30] audit: type=1400 audit(1770949575.768:1281): avc: denied { ioctl } for pid=6776 comm="syz.1.196" path="/dev/cec0" dev="devtmpfs" ino=950 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.992131][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 408.001014][ T6782] openvswitch: netlink: Flow actions attr not present in new flow. [ 408.237193][ T51] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 408.257372][ T30] audit: type=1400 audit(1770949575.768:1282): avc: denied { prog_load } for pid=6776 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 408.394731][ T30] audit: type=1400 audit(1770949575.768:1283): avc: denied { bpf } for pid=6776 comm="syz.1.196" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 408.679414][ T30] audit: type=1400 audit(1770949575.768:1284): avc: denied { perfmon } for pid=6776 comm="syz.1.196" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 409.035529][ T6795] openvswitch: netlink: Actions may not be safe on all matching packets [ 409.329159][ T5851] Bluetooth: hci4: command 0x2016 tx timeout [ 410.276648][ T5851] ------------[ cut here ]------------ [ 410.282275][ T5851] refcnt < 0 [ 410.282283][ T5851] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#1: kworker/u9:3/5851 [ 410.296236][ T5851] Modules linked in: [ 410.300422][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.311588][ T5851] Tainted: [L]=SOFTLOCKUP [ 410.316736][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 410.326932][ T5851] Workqueue: hci4 hci_conn_timeout [ 410.332981][ T5851] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 410.338718][ T5851] Code: 44 0f b6 2d 03 45 5b 06 31 ff 41 83 e5 40 44 89 ee e8 7a 70 8e f7 45 84 ed 0f 84 02 ff ff ff e9 46 e9 f8 f6 e8 17 76 8e f7 90 <0f> 0b 90 e8 0e 76 8e f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 410.358759][ T5851] RSP: 0018:ffffc900035f7c20 EFLAGS: 00010293 [ 410.364949][ T5851] RAX: 0000000000000000 RBX: ffff8880559f8a40 RCX: ffffffff8a78972f [ 410.372897][ T5851] RDX: ffff88807d20c900 RSI: ffffffff8a789829 RDI: ffff88807d20c900 [ 410.380894][ T5851] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 410.388898][ T5851] R10: 00000000ffffffff R11: 00000000000075d9 R12: ffff8880559f8000 [ 410.396973][ T5851] R13: ffff88807d20cd84 R14: 0000000000000000 R15: ffff888037611400 [ 410.404948][ T5851] FS: 0000000000000000(0000) GS:ffff88812449d000(0000) knlGS:0000000000000000 [ 410.413858][ T5851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.420621][ T5851] CR2: 00007f9aad04e661 CR3: 0000000073ff1000 CR4: 00000000003526f0 [ 410.428593][ T5851] Call Trace: [ 410.431854][ T5851] [ 410.435014][ T5851] process_one_work+0x9c2/0x1840 [ 410.439945][ T5851] ? __pfx_process_one_work+0x10/0x10 [ 410.445479][ T5851] ? __pfx_hci_conn_timeout+0x10/0x10 [ 410.450838][ T5851] worker_thread+0x5da/0xe40 [ 410.455545][ T5851] ? kthread+0x13a/0x450 [ 410.459767][ T5851] ? __pfx_worker_thread+0x10/0x10 [ 410.464882][ T5851] kthread+0x370/0x450 [ 410.468932][ T5851] ? __pfx_kthread+0x10/0x10 [ 410.473509][ T5851] ret_from_fork+0x754/0xd80 [ 410.478270][ T5851] ? __pfx_ret_from_fork+0x10/0x10 [ 410.483362][ T5851] ? rcu_is_watching+0x12/0xc0 [ 410.488109][ T5851] ? __switch_to+0x7b4/0x10c0 [ 410.492760][ T5851] ? __pfx_kthread+0x10/0x10 [ 410.497359][ T5851] ret_from_fork_asm+0x1a/0x30 [ 410.502103][ T5851] [ 410.505125][ T5851] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 410.512380][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.523371][ T5851] Tainted: [L]=SOFTLOCKUP [ 410.527668][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 410.537696][ T5851] Workqueue: hci4 hci_conn_timeout [ 410.542793][ T5851] Call Trace: [ 410.546047][ T5851] [ 410.548958][ T5851] dump_stack_lvl+0x100/0x190 [ 410.553615][ T5851] vpanic+0x20d/0x630 [ 410.557572][ T5851] panic+0xd1/0xd1 [ 410.561264][ T5851] ? __pfx_panic+0x10/0x10 [ 410.565658][ T5851] ? check_panic_on_warn+0x1f/0x90 [ 410.570747][ T5851] check_panic_on_warn.cold+0x19/0x34 [ 410.576093][ T5851] ? hci_conn_timeout+0x16a/0x230 [ 410.581107][ T5851] __warn.cold+0x191/0x2f8 [ 410.585504][ T5851] __report_bug+0x296/0x3d0 [ 410.589987][ T5851] ? hci_conn_timeout+0x16a/0x230 [ 410.595004][ T5851] ? __pfx___report_bug+0x10/0x10 [ 410.600008][ T5851] ? irqentry_exit+0x180/0x670 [ 410.604751][ T5851] ? hci_conn_timeout+0x16a/0x230 [ 410.609753][ T5851] report_bug+0xb2/0x220 [ 410.613991][ T5851] ? hci_conn_timeout+0x16a/0x230 [ 410.619016][ T5851] handle_bug+0x166/0x2a0 [ 410.623335][ T5851] exc_invalid_op+0x17/0x50 [ 410.627815][ T5851] asm_exc_invalid_op+0x1a/0x20 [ 410.632644][ T5851] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 410.638271][ T5851] Code: 44 0f b6 2d 03 45 5b 06 31 ff 41 83 e5 40 44 89 ee e8 7a 70 8e f7 45 84 ed 0f 84 02 ff ff ff e9 46 e9 f8 f6 e8 17 76 8e f7 90 <0f> 0b 90 e8 0e 76 8e f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 410.657860][ T5851] RSP: 0018:ffffc900035f7c20 EFLAGS: 00010293 [ 410.663913][ T5851] RAX: 0000000000000000 RBX: ffff8880559f8a40 RCX: ffffffff8a78972f [ 410.671877][ T5851] RDX: ffff88807d20c900 RSI: ffffffff8a789829 RDI: ffff88807d20c900 [ 410.679860][ T5851] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 410.687847][ T5851] R10: 00000000ffffffff R11: 00000000000075d9 R12: ffff8880559f8000 [ 410.695798][ T5851] R13: ffff88807d20cd84 R14: 0000000000000000 R15: ffff888037611400 [ 410.703753][ T5851] ? hci_conn_timeout+0x6f/0x230 [ 410.708694][ T5851] ? hci_conn_timeout+0x169/0x230 [ 410.713720][ T5851] process_one_work+0x9c2/0x1840 [ 410.718719][ T5851] ? __pfx_process_one_work+0x10/0x10 [ 410.724089][ T5851] ? __pfx_hci_conn_timeout+0x10/0x10 [ 410.729455][ T5851] worker_thread+0x5da/0xe40 [ 410.734034][ T5851] ? kthread+0x13a/0x450 [ 410.738255][ T5851] ? __pfx_worker_thread+0x10/0x10 [ 410.743345][ T5851] kthread+0x370/0x450 [ 410.747402][ T5851] ? __pfx_kthread+0x10/0x10 [ 410.751976][ T5851] ret_from_fork+0x754/0xd80 [ 410.756553][ T5851] ? __pfx_ret_from_fork+0x10/0x10 [ 410.761644][ T5851] ? rcu_is_watching+0x12/0xc0 [ 410.766379][ T5851] ? __switch_to+0x7b4/0x10c0 [ 410.771032][ T5851] ? __pfx_kthread+0x10/0x10 [ 410.775615][ T5851] ret_from_fork_asm+0x1a/0x30 [ 410.780363][ T5851] [ 410.783648][ T5851] Kernel Offset: disabled [ 410.787948][ T5851] Rebooting in 86400 seconds..