last executing test programs: 8.107966544s ago: executing program 2 (id=84): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x1000000, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 8.050695368s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.929288892s ago: executing program 2 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) 7.906292157s ago: executing program 2 (id=90): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 7.839588163s ago: executing program 2 (id=92): keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 7.741138621s ago: executing program 2 (id=94): r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x80000, 0x1}]}, 0x1}, 0x1) 5.027908083s ago: executing program 1 (id=120): syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a18ad9"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, 0x0) 3.785217882s ago: executing program 4 (id=127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xff}]}) 3.667576322s ago: executing program 4 (id=130): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000540)={0xff, 0x3eb, 0x5, 0x7fffffef, 0x0, "dcff7f0000000040d4ee000000000000c000", 0x1002, 0x8001}) 3.20633141s ago: executing program 4 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, 0x0, &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.079700927s ago: executing program 3 (id=138): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 2.937683666s ago: executing program 3 (id=140): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) close(0xffffffffffffffff) 2.741467028s ago: executing program 1 (id=142): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x9}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1c, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002900)={r1, r0}, 0xc) 2.710845707s ago: executing program 3 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000120000000000000000000000850000005300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.5932596s ago: executing program 0 (id=144): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.531258997s ago: executing program 0 (id=145): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 2.480021047s ago: executing program 1 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) 2.471542609s ago: executing program 3 (id=147): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{0x7}, {0x6, 0xf7}}}}, 0x8) 2.213174111s ago: executing program 4 (id=148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) unshare(0x8040600) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) 2.115479076s ago: executing program 1 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.114944864s ago: executing program 3 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x40, 0x7, 0x6837, 0x8000, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x8001, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) 2.01890334s ago: executing program 4 (id=151): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0xfffffffc, 0x6, 0x4, {0x9, @sliced={0x1, [0x0, 0x5, 0x6, 0x3, 0x0, 0x3000, 0x6, 0x4ffb, 0x9, 0x2, 0x8, 0x5, 0x7ff, 0x5, 0x5, 0x9, 0x7fff, 0x40, 0x3, 0x8, 0xb, 0x0, 0x7, 0x0, 0x400, 0x5, 0x3c, 0x0, 0x4, 0xfb2, 0x9, 0x1, 0x80, 0xffff, 0x7f, 0xe0, 0x6, 0x1, 0x8000, 0xd, 0xc94, 0x7, 0xfffb, 0x5, 0xffff, 0x34c, 0x6, 0x4], 0x9}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000906010800000000000020000200feff0900020073797a310000000008000940000004390500010007000000100008800c000780080009"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.940903707s ago: executing program 1 (id=152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000cf7018008000700ac1e00010a0001"], 0x48}}, 0x2000c000) 1.8977775s ago: executing program 4 (id=153): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) recvmmsg(r3, &(0x7f00000081c0)=[{{&(0x7f0000000340)=@ax25={{0x3, @bcast}, [@rose, @netrom, @rose, @remote, @rose, @remote, @remote, @netrom]}, 0x80, &(0x7f0000000680)}, 0xfffffffc}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/186, 0xba}], 0x1, &(0x7f0000000b80)=""/38, 0x26}, 0xcb}, {{&(0x7f0000000bc0)=@nfc, 0x80, &(0x7f0000000f80)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000fc0)=""/10, 0xa}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) 1.347265567s ago: executing program 1 (id=154): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x2, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x49dadfcf, 0x2, 0x3ff, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xcc, 0x6b, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x1, 0x40}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x70, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x35, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xad, 0x2, 0x3, 0xf, 0x0, [0xbbcb1ef4b590026b, 0x3f00]}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.313847437s ago: executing program 0 (id=155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x67bb, &(0x7f0000000280)) io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 1.084514069s ago: executing program 3 (id=156): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) pipe(0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)={0x40, 0x2b, 0x4, "8bc9ec88"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x4, "7cad09d4"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000740)={0x20, 0x10, 0x58, "b07e767fb89c551bc8d6ab26e004e4b0b4ba7889721db74380dfecfaf2d9a10e9f16573f3eea99c2f60ac60374c988099e19d6d05d8468da5181225fce5426e11970e4515f1a81c37d564e56f80df6cff9ac64dd5e497315"}, 0x0, 0x0, 0x0, 0x0}) 329.297698ms ago: executing program 0 (id=157): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xf4, 0xffffefdf, 0x7ffffffe, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback={0x300, 0xffff888101827518}, 0x8, 0x8000}}) 184.288423ms ago: executing program 0 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) 0s ago: executing program 0 (id=159): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x1, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 54.052300][ T30] audit: type=1400 audit(1754588610.596:62): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.055491][ T5829] cgroup: Unknown subsys name 'net' [ 54.080384][ T30] audit: type=1400 audit(1754588610.596:63): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.102791][ T30] audit: type=1400 audit(1754588610.626:64): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.278499][ T5829] cgroup: Unknown subsys name 'cpuset' [ 54.286187][ T5829] cgroup: Unknown subsys name 'rlimit' [ 54.451594][ T30] audit: type=1400 audit(1754588610.996:65): avc: denied { setattr } for pid=5829 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.484022][ T30] audit: type=1400 audit(1754588610.996:66): avc: denied { create } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.517460][ T30] audit: type=1400 audit(1754588610.996:67): avc: denied { write } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 54.538003][ T30] audit: type=1400 audit(1754588610.996:68): avc: denied { read } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.542761][ T5832] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 54.558507][ T30] audit: type=1400 audit(1754588611.006:69): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 54.591954][ T30] audit: type=1400 audit(1754588611.006:70): avc: denied { mount } for pid=5829 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 54.616703][ T30] audit: type=1400 audit(1754588611.046:71): avc: denied { read } for pid=5512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 55.465871][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.688646][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.697125][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.704622][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.725760][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.733846][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.734259][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.741497][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.756770][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.764471][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.772776][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.780318][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.786531][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.787455][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.796763][ T5168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.808079][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.809069][ T5168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.815339][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.827372][ T5168] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.830535][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.844596][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.851978][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.864448][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.872340][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.880186][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.888623][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.310305][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 58.344217][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 58.368068][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 58.388770][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 58.506581][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 58.592385][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.600169][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.607660][ T5845] bridge_slave_0: entered allmulticast mode [ 58.614352][ T5845] bridge_slave_0: entered promiscuous mode [ 58.637307][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.644390][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.651867][ T5844] bridge_slave_0: entered allmulticast mode [ 58.658792][ T5844] bridge_slave_0: entered promiscuous mode [ 58.665409][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.673046][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.680592][ T5852] bridge_slave_0: entered allmulticast mode [ 58.687826][ T5852] bridge_slave_0: entered promiscuous mode [ 58.695179][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.702463][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.709662][ T5845] bridge_slave_1: entered allmulticast mode [ 58.716592][ T5845] bridge_slave_1: entered promiscuous mode [ 58.723469][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.730658][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.737881][ T5840] bridge_slave_0: entered allmulticast mode [ 58.744499][ T5840] bridge_slave_0: entered promiscuous mode [ 58.754884][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.761993][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.769364][ T5844] bridge_slave_1: entered allmulticast mode [ 58.776797][ T5844] bridge_slave_1: entered promiscuous mode [ 58.783655][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.791233][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.798489][ T5852] bridge_slave_1: entered allmulticast mode [ 58.805095][ T5852] bridge_slave_1: entered promiscuous mode [ 58.819805][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.826950][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.834056][ T5840] bridge_slave_1: entered allmulticast mode [ 58.841458][ T5840] bridge_slave_1: entered promiscuous mode [ 58.901925][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.929113][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.940094][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.952072][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.962856][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.983321][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.995350][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.014287][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.047613][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.054705][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.062257][ T5855] bridge_slave_0: entered allmulticast mode [ 59.069321][ T5855] bridge_slave_0: entered promiscuous mode [ 59.103186][ T5845] team0: Port device team_slave_0 added [ 59.111475][ T5845] team0: Port device team_slave_1 added [ 59.124603][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.132934][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.140797][ T5855] bridge_slave_1: entered allmulticast mode [ 59.148252][ T5855] bridge_slave_1: entered promiscuous mode [ 59.155767][ T5844] team0: Port device team_slave_0 added [ 59.163384][ T5852] team0: Port device team_slave_0 added [ 59.185343][ T5840] team0: Port device team_slave_0 added [ 59.200654][ T5844] team0: Port device team_slave_1 added [ 59.207718][ T5852] team0: Port device team_slave_1 added [ 59.224092][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.231164][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.257200][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.270380][ T5840] team0: Port device team_slave_1 added [ 59.312364][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.319536][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.345552][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.356898][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.363835][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.390169][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.411150][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.429027][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.436455][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.462636][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.474518][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.481604][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.507789][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.523863][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.530856][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.557393][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.569881][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.577065][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.603045][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.615465][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.625240][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.632229][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.658168][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.720352][ T5855] team0: Port device team_slave_0 added [ 59.745799][ T5844] hsr_slave_0: entered promiscuous mode [ 59.752067][ T5844] hsr_slave_1: entered promiscuous mode [ 59.771152][ T5855] team0: Port device team_slave_1 added [ 59.789854][ T5845] hsr_slave_0: entered promiscuous mode [ 59.795876][ T5845] hsr_slave_1: entered promiscuous mode [ 59.801880][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 59.807939][ T5845] Cannot create hsr debugfs directory [ 59.840070][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.847054][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.873139][ T5856] Bluetooth: hci0: command tx timeout [ 59.873143][ T5851] Bluetooth: hci1: command tx timeout [ 59.879405][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.922220][ T5840] hsr_slave_0: entered promiscuous mode [ 59.928453][ T5840] hsr_slave_1: entered promiscuous mode [ 59.934386][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 59.940182][ T5851] Bluetooth: hci3: command tx timeout [ 59.940194][ T5856] Bluetooth: hci4: command tx timeout [ 59.940519][ T51] Bluetooth: hci2: command tx timeout [ 59.947542][ T5840] Cannot create hsr debugfs directory [ 59.959091][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.969224][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.995145][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.009455][ T5852] hsr_slave_0: entered promiscuous mode [ 60.015555][ T5852] hsr_slave_1: entered promiscuous mode [ 60.021755][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 60.027595][ T5852] Cannot create hsr debugfs directory [ 60.152288][ T5855] hsr_slave_0: entered promiscuous mode [ 60.159791][ T5855] hsr_slave_1: entered promiscuous mode [ 60.165594][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 60.171362][ T5855] Cannot create hsr debugfs directory [ 60.429138][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.439546][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.449947][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.463815][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.511993][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.522500][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.547655][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.560720][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.602290][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.620850][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.649785][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.661226][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.725821][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.748181][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.768257][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.794735][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.829019][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.864024][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.874695][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.884317][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.900148][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.923944][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.938811][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.948990][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.989245][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.001316][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.008525][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.022630][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.043846][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.050941][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.060988][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.068086][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.093989][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.101099][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.110046][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.117169][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.128387][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.135462][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.272771][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.308603][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.333512][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 61.333525][ T30] audit: type=1400 audit(1754588617.876:86): avc: denied { sys_module } for pid=5845 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.339050][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.425654][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.437578][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.444662][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.488754][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.495872][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.528914][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.536053][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.612239][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.619376][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.650481][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.670861][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.701569][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.839435][ T5844] veth0_vlan: entered promiscuous mode [ 61.887890][ T5852] veth0_vlan: entered promiscuous mode [ 61.893946][ T5844] veth1_vlan: entered promiscuous mode [ 61.937650][ T5851] Bluetooth: hci0: command tx timeout [ 61.943076][ T5851] Bluetooth: hci1: command tx timeout [ 61.961355][ T5852] veth1_vlan: entered promiscuous mode [ 62.010281][ T5844] veth0_macvtap: entered promiscuous mode [ 62.019663][ T5851] Bluetooth: hci4: command tx timeout [ 62.031482][ T51] Bluetooth: hci2: command tx timeout [ 62.036993][ T5851] Bluetooth: hci3: command tx timeout [ 62.080496][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.100275][ T5844] veth1_macvtap: entered promiscuous mode [ 62.122837][ T5852] veth0_macvtap: entered promiscuous mode [ 62.142001][ T5852] veth1_macvtap: entered promiscuous mode [ 62.154379][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.181551][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.191791][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.199804][ T5845] veth0_vlan: entered promiscuous mode [ 62.213056][ T5845] veth1_vlan: entered promiscuous mode [ 62.235442][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.260341][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.269435][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.288092][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.298981][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.315378][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.325853][ T5855] veth0_vlan: entered promiscuous mode [ 62.346867][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.374811][ T5840] veth0_vlan: entered promiscuous mode [ 62.380978][ T5855] veth1_vlan: entered promiscuous mode [ 62.388313][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.399469][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.430893][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.468448][ T5840] veth1_vlan: entered promiscuous mode [ 62.485369][ T5845] veth0_macvtap: entered promiscuous mode [ 62.487020][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.506918][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.535621][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.537908][ T5845] veth1_macvtap: entered promiscuous mode [ 62.549220][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.568876][ T5855] veth0_macvtap: entered promiscuous mode [ 62.583338][ T5840] veth0_macvtap: entered promiscuous mode [ 62.611087][ T5855] veth1_macvtap: entered promiscuous mode [ 62.625144][ T5840] veth1_macvtap: entered promiscuous mode [ 62.646970][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.655737][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.671383][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.679746][ T971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.682774][ T30] audit: type=1400 audit(1754588619.226:87): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.3hRzzI/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.696368][ T971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.735653][ T30] audit: type=1400 audit(1754588619.256:88): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.763487][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.769143][ T30] audit: type=1400 audit(1754588619.266:89): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.3hRzzI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.773640][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.805478][ T30] audit: type=1400 audit(1754588619.266:90): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.846178][ T30] audit: type=1400 audit(1754588619.276:91): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.3hRzzI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.847938][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.887122][ T30] audit: type=1400 audit(1754588619.276:92): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.3hRzzI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.891324][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.926634][ T30] audit: type=1400 audit(1754588619.276:93): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.929428][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.950764][ T30] audit: type=1400 audit(1754588619.306:94): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.989629][ T30] audit: type=1400 audit(1754588619.306:95): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="gadgetfs" ino=6955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.992119][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.050407][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.061666][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.103227][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.118533][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.161086][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.176676][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.367461][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.424018][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.549409][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.630197][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.680004][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.691941][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.733935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.837117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.066042][ T5851] Bluetooth: hci1: command tx timeout [ 64.071498][ T5851] Bluetooth: hci0: command tx timeout [ 64.135986][ T5851] Bluetooth: hci3: command tx timeout [ 64.136002][ T51] Bluetooth: hci2: command tx timeout [ 64.136032][ T51] Bluetooth: hci4: command tx timeout [ 64.168732][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.177937][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.203552][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.246188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.276347][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.293706][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.352493][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.414227][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.480362][ T971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.504725][ T971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.603718][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.625672][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.776439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.834501][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.850031][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.861124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.963779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.986211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.506211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.514520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.522977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.736226][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.996108][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 66.011080][ T5904] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 66.092097][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.102721][ T51] Bluetooth: hci1: command tx timeout [ 66.108249][ T51] Bluetooth: hci0: command tx timeout [ 66.193338][ T5856] Bluetooth: hci3: command tx timeout [ 66.196756][ T51] Bluetooth: hci2: command tx timeout [ 66.198920][ T5851] Bluetooth: hci4: command tx timeout [ 66.302533][ T5904] pvrusb2: Hardware description: Terratec Grabster AV400 [ 66.466071][ T5904] pvrusb2: ********** [ 66.475963][ T5904] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 66.520745][ T5904] pvrusb2: Important functionality might not be entirely working. [ 66.566167][ T5904] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 66.607752][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.628778][ T5904] pvrusb2: ********** [ 66.638977][ T2336] pvrusb2: Invalid write control endpoint [ 66.748373][ T2336] pvrusb2: Invalid write control endpoint [ 66.774719][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 66.774735][ T30] audit: type=1400 audit(1754588623.306:129): avc: denied { append } for pid=5994 comm="syz.2.9" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.840346][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 66.856296][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 67.116397][ T43] usb 5-1: config 2 has an invalid interface number: 185 but max is 0 [ 67.127498][ T43] usb 5-1: config 2 has no interface number 0 [ 67.166965][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 67.176896][ T30] audit: type=1400 audit(1754588623.316:130): avc: denied { read write } for pid=5994 comm="syz.2.9" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.201552][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 67.232579][ T2336] pvrusb2: Device being rendered inoperable [ 67.242880][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 67.255968][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.256210][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 67.273638][ T30] audit: type=1400 audit(1754588623.316:131): avc: denied { open } for pid=5994 comm="syz.2.9" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.297440][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.305426][ T43] usb 5-1: Product: syz [ 67.336165][ T43] usb 5-1: Manufacturer: syz [ 67.340855][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 67.349804][ T43] usb 5-1: SerialNumber: syz [ 67.358597][ T30] audit: type=1400 audit(1754588623.456:132): avc: denied { sqpoll } for pid=5976 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.386599][ T2336] pvrusb2: Attached sub-driver cx25840 [ 67.396009][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 67.406481][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 67.415997][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 67.431034][ T43] usb-storage 5-1:2.185: USB Mass Storage device detected [ 67.441851][ T43] usb-storage 5-1:2.185: Quirks match for vid 05ac pid 120a: 10 [ 67.456785][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.486530][ T5897] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 67.504478][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.540168][ T5897] usb 4-1: Product: syz [ 67.545529][ T5925] usb 1-1: USB disconnect, device number 2 [ 67.551467][ T5897] usb 4-1: Manufacturer: syz [ 67.588291][ T5897] usb 4-1: SerialNumber: syz [ 67.695331][ T5897] usb 4-1: config 0 descriptor?? [ 67.719255][ T5990] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 67.740875][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 67.866330][ T30] audit: type=1400 audit(1754588624.416:133): avc: denied { relabelto } for pid=5988 comm="syz.4.8" name="bus" dev="tmpfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 67.903945][ T5992] tmpfs: Unknown parameter 'qu_inode_hardlimit' [ 67.922387][ T43] apple-mfi-fastcharge 5-1: USB disconnect, device number 2 [ 68.022174][ T30] audit: type=1400 audit(1754588624.446:134): avc: denied { associate } for pid=5988 comm="syz.4.8" name="bus" dev="tmpfs" ino=26 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mouse_device_t:s0" [ 68.074995][ T5998] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 68.155310][ T30] audit: type=1400 audit(1754588624.446:135): avc: denied { mounton } for pid=5988 comm="syz.4.8" path="/1/file0/file0" dev="ramfs" ino=8615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 68.273519][ T5897] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 68.280884][ T5897] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 68.337963][ T30] audit: type=1400 audit(1754588624.546:136): avc: denied { ioctl } for pid=5997 comm="syz.3.10" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.424852][ T5897] usb 4-1: USB disconnect, device number 2 [ 68.716081][ T30] audit: type=1400 audit(1754588624.636:137): avc: denied { create } for pid=5997 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.740311][ T30] audit: type=1400 audit(1754588624.636:138): avc: denied { ioctl } for pid=5997 comm="syz.3.10" path="socket:[7565]" dev="sockfs" ino=7565 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.265272][ T6034] syz.3.15 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.584745][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.604020][ T5904] usb 3-1: no configurations [ 70.718669][ T5904] usb 3-1: can't read configurations, error -22 [ 70.915968][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.922421][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.409121][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 72.409135][ T30] audit: type=1400 audit(1754588628.956:146): avc: denied { name_bind } for pid=6045 comm="syz.2.19" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.476004][ T30] audit: type=1400 audit(1754588628.956:147): avc: denied { node_bind } for pid=6045 comm="syz.2.19" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.632878][ T30] audit: type=1400 audit(1754588629.436:148): avc: denied { create } for pid=6047 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.705806][ T30] audit: type=1400 audit(1754588629.546:149): avc: denied { mounton } for pid=6047 comm="syz.3.20" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 73.838219][ T5856] Bluetooth: hci4: Malformed LE Event: 0x1d [ 74.022765][ T30] audit: type=1400 audit(1754588630.566:150): avc: denied { create } for pid=6056 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.511022][ T30] audit: type=1400 audit(1754588630.676:151): avc: denied { connect } for pid=6056 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.631399][ T30] audit: type=1400 audit(1754588631.176:152): avc: denied { create } for pid=6066 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.666351][ T30] audit: type=1400 audit(1754588631.176:153): avc: denied { read } for pid=6066 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.734877][ T30] audit: type=1400 audit(1754588631.236:154): avc: denied { write } for pid=6066 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.345639][ T30] audit: type=1400 audit(1754588631.886:155): avc: denied { create } for pid=6075 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.545989][ T5897] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 75.972643][ T6085] random: crng reseeded on system resumption [ 76.692419][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.706067][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.726421][ T1207] cfg80211: failed to load regulatory.db [ 76.754702][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 76.781199][ T5897] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.837781][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.890297][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.939401][ T5897] usb 3-1: Product: syz [ 76.967823][ T5897] usb 3-1: Manufacturer: syz [ 76.987803][ T5897] usb 3-1: SerialNumber: syz [ 77.005578][ T6074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.020293][ T5897] cdc_mbim 3-1:1.0: skipping garbage [ 77.036575][ T1207] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.063041][ T6097] use of bytesused == 0 is deprecated and will be removed in the future, [ 77.072862][ T6097] use the actual size instead. [ 77.212522][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.233905][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.264137][ T1207] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 77.293545][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.321572][ T1207] usb 4-1: config 0 descriptor?? [ 77.475171][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 77.475185][ T30] audit: type=1400 audit(1754588634.016:178): avc: denied { read } for pid=6113 comm="syz.4.42" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.505282][ T30] audit: type=1400 audit(1754588634.016:179): avc: denied { open } for pid=6113 comm="syz.4.42" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.532429][ T30] audit: type=1400 audit(1754588634.026:180): avc: denied { ioctl } for pid=6113 comm="syz.4.42" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.536141][ T5856] Bluetooth: hci0: command tx timeout [ 77.777737][ T1207] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 77.807360][ T1207] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 77.947729][ T30] audit: type=1400 audit(1754588634.486:181): avc: denied { getopt } for pid=6127 comm="syz.1.47" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.967836][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.979662][ T1207] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x4D [ 78.031933][ T5897] cdc_mbim 3-1:1.0: bind() failure [ 78.042379][ T5897] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 78.050598][ T5897] cdc_ncm 3-1:1.1: bind() failure [ 78.066924][ T5897] usb 3-1: USB disconnect, device number 4 [ 78.114891][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.133190][ T30] audit: type=1400 audit(1754588634.676:182): avc: denied { ioctl } for pid=6136 comm="syz.4.50" path="socket:[7806]" dev="sockfs" ino=7806 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.157516][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.242071][ T6141] tipc: Started in network mode [ 78.247451][ T6141] tipc: Node identity 06ce1eaea451, cluster identity 4711 [ 78.255322][ T6141] tipc: Enabled bearer , priority 0 [ 78.266204][ T6141] tipc: Disabling bearer [ 78.604435][ T1207] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 78.656879][ T1207] usb 4-1: USB disconnect, device number 3 [ 78.672260][ T30] audit: type=1400 audit(1754588635.216:183): avc: denied { mounton } for pid=6152 comm="syz.0.58" path="/14/file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.029015][ T30] audit: type=1400 audit(1754588635.576:184): avc: denied { bind } for pid=6162 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.352466][ T30] audit: type=1400 audit(1754588635.606:185): avc: denied { setopt } for pid=6162 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.448501][ T30] audit: type=1400 audit(1754588635.616:186): avc: denied { ioctl } for pid=6162 comm="syz.0.61" path="socket:[9033]" dev="sockfs" ino=9033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.554142][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 79.849736][ T6184] Zero length message leads to an empty skb [ 80.103752][ T30] audit: type=1400 audit(1754588636.386:187): avc: denied { read write } for pid=6176 comm="syz.4.64" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.572736][ T6245] KVM: debugfs: duplicate directory 6245-5 [ 81.573175][ T6247] sctp: [Deprecated]: syz.3.95 (pid 6247) Use of int in max_burst socket option deprecated. [ 81.573175][ T6247] Use struct sctp_assoc_value instead [ 81.835528][ T6257] netlink: 'syz.3.99': attribute type 10 has an invalid length. [ 81.852698][ T6257] team0: Port device dummy0 added [ 81.864931][ T6257] netlink: 'syz.3.99': attribute type 10 has an invalid length. [ 81.887287][ T6257] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 81.936499][ T6257] team0: Failed to send options change via netlink (err -105) [ 81.947652][ T6257] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 81.957365][ T6257] team0: Port device dummy0 removed [ 81.970687][ T6257] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.096310][ T5966] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.255997][ T5966] usb 1-1: Using ep0 maxpacket: 32 [ 82.263209][ T5966] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 82.277618][ T5966] usb 1-1: config 0 has no interface number 0 [ 82.293426][ T5966] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 82.307190][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.333950][ T5966] usb 1-1: Product: syz [ 82.342652][ T5966] usb 1-1: Manufacturer: syz [ 82.357970][ T5966] usb 1-1: SerialNumber: syz [ 82.379405][ T5966] usb 1-1: config 0 descriptor?? [ 82.400711][ T5966] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 82.457328][ T6275] ======================================================= [ 82.457328][ T6275] WARNING: The mand mount option has been deprecated and [ 82.457328][ T6275] and is ignored by this kernel. Remove the mand [ 82.457328][ T6275] option from the mount to silence this warning. [ 82.457328][ T6275] ======================================================= [ 82.504617][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 82.504630][ T30] audit: type=1400 audit(1754588639.046:210): avc: denied { mount } for pid=6274 comm="syz.1.108" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.515268][ T6275] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.565460][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 82.574576][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 82.589057][ T6277] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 82.602503][ T6277] bridge0: port 3(team0) entered blocking state [ 82.605281][ T5966] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 82.615715][ T6277] bridge0: port 3(team0) entered disabled state [ 82.635499][ T6277] team0: entered allmulticast mode [ 82.638008][ T5966] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 82.664983][ T6277] team_slave_0: entered allmulticast mode [ 82.672965][ T6277] team_slave_1: entered allmulticast mode [ 82.685455][ T6277] team0: entered promiscuous mode [ 82.691978][ T6277] team_slave_0: entered promiscuous mode [ 82.700206][ T6277] team_slave_1: entered promiscuous mode [ 82.707895][ T6277] bridge0: port 3(team0) entered blocking state [ 82.714303][ T6277] bridge0: port 3(team0) entered forwarding state [ 82.723163][ T30] audit: type=1400 audit(1754588639.256:211): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.842099][ T30] audit: type=1400 audit(1754588639.386:212): avc: denied { append } for pid=6281 comm="syz.1.110" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.910574][ T30] audit: type=1400 audit(1754588639.436:213): avc: denied { open } for pid=6281 comm="syz.1.110" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.951215][ T30] audit: type=1400 audit(1754588639.436:214): avc: denied { create } for pid=6281 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.987113][ T30] audit: type=1400 audit(1754588639.496:215): avc: denied { write } for pid=6285 comm="syz.3.112" path="socket:[9347]" dev="sockfs" ino=9347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.223979][ T30] audit: type=1400 audit(1754588639.766:216): avc: denied { create } for pid=6289 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.757640][ T30] audit: type=1400 audit(1754588640.296:217): avc: denied { create } for pid=6295 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.376021][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.383651][ T30] audit: type=1400 audit(1754588640.926:218): avc: denied { write } for pid=6311 comm="syz.3.123" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.118692][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 85.119558][ T5853] usb 1-1: USB disconnect, device number 3 [ 85.137697][ T5853] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 85.153367][ T5853] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 85.216638][ T5853] quatech2 1-1:0.51: device disconnected [ 85.261108][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 85.312051][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 85.346190][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 85.355262][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.412615][ T10] usb 2-1: config 0 descriptor?? [ 85.446687][ T6309] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 85.678140][ T10] ath6kl: Failed to submit usb control message: -71 [ 85.705868][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 85.717469][ T10] ath6kl: Unable to send get target info: -71 [ 85.766360][ T10] ath6kl: Failed to init ath6kl core: -71 [ 85.783831][ T10] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 85.851573][ T10] usb 2-1: USB disconnect, device number 2 [ 85.865742][ T6340] Illegal XDP return value 4294967294 on prog (id 20) dev N/A, expect packet loss! [ 86.196018][ T6352] warning: `syz.3.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.970488][ T30] audit: type=1400 audit(1754588643.506:219): avc: denied { setopt } for pid=6370 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.220570][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 88.066049][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.271811][ T5897] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 88.281508][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.373606][ T5853] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.401585][ T5897] usb 2-1: Product: syz [ 88.546058][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 88.556306][ T5853] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 88.572743][ T5897] usb 2-1: Manufacturer: syz [ 88.625998][ T5897] usb 2-1: SerialNumber: syz [ 88.630629][ T5853] usb 4-1: config 0 has no interface number 0 [ 88.638341][ T5853] usb 4-1: config 0 interface 184 has no altsetting 0 [ 88.652784][ T5897] usb 2-1: config 0 descriptor?? [ 88.661121][ T5853] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 88.677889][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.686955][ T5853] usb 4-1: Product: syz [ 88.691141][ T5853] usb 4-1: Manufacturer: syz [ 88.695747][ T5853] usb 4-1: SerialNumber: syz [ 88.703986][ T5853] usb 4-1: config 0 descriptor?? [ 88.713730][ T5853] smsc75xx v1.0.0 [ 88.891635][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.912016][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.986599][ T5897] hso 2-1:0.0: Failed to find BULK IN ep [ 89.010643][ T5897] usb-storage 2-1:0.0: USB Mass Storage device detected [ 89.123060][ T6241] ------------[ cut here ]------------ [ 89.128690][ T6241] WARNING: CPU: 0 PID: 6241 at mm/vmalloc.c:542 vmap_small_pages_range_noflush+0x984/0xc90 [ 89.139605][ T6241] Modules linked in: [ 89.143591][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.2.94 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 89.155623][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.165788][ T6241] RIP: 0010:vmap_small_pages_range_noflush+0x984/0xc90 [ 89.173150][ T6241] Code: 4d 89 f4 4d 21 ec 4c 89 e7 e8 98 6c ab ff 4d 39 ec 75 68 e8 de 71 ab ff 4c 09 eb e9 c8 fd ff ff 4c 8b 34 24 e8 cd 71 ab ff 90 <0f> 0b 90 e9 fc fe ff ff e8 bf 71 ab ff 4c 89 e7 e8 07 00 f7 ff 31 [ 89.193011][ T6241] RSP: 0018:ffffc9000c667990 EFLAGS: 00010246 [ 89.199280][ T6241] RAX: 0000000000080000 RBX: ffffea0003000000 RCX: ffffc90005579000 [ 89.207300][ T6241] RDX: 0000000000080000 RSI: ffffffff82102153 RDI: 0000000000000005 [ 89.215262][ T6241] RBP: ffff8880855e6008 R08: 0000000000000005 R09: 0000000000000000 [ 89.223317][ T6241] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 89.231992][ T6241] R13: 8000000000000163 R14: 1ffff920018ccf47 R15: ffffc90089201000 [ 89.240392][ T6241] FS: 00007f5d0ddd16c0(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 89.249415][ T6241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.256060][ T6241] CR2: 0000001b31b21ff8 CR3: 000000007d159000 CR4: 00000000003526f0 [ 89.264008][ T6241] Call Trace: [ 89.267300][ T6241] [ 89.270213][ T6241] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 89.276801][ T6241] ? io_create_region+0x605/0xd40 [ 89.281821][ T6241] ? get_vm_area_caller+0x71/0xa0 [ 89.286878][ T6241] vmap+0x1aa/0x320 [ 89.290689][ T6241] ? __pfx_vmap+0x10/0x10 [ 89.295041][ T6241] io_create_region+0x605/0xd40 [ 89.300029][ T6241] ? __pfx_io_create_region+0x10/0x10 [ 89.305413][ T6241] io_create_region_mmap_safe+0xb2/0x170 [ 89.311088][ T6241] ? __pfx_io_create_region_mmap_safe+0x10/0x10 [ 89.317361][ T6241] __io_uring_register+0x59f/0x2440 [ 89.322556][ T6241] ? trace_contention_end+0xdd/0x130 [ 89.327841][ T6241] ? __pfx___io_uring_register+0x10/0x10 [ 89.333474][ T6241] __x64_sys_io_uring_register+0x169/0x280 [ 89.339763][ T6241] do_syscall_64+0xcd/0x4c0 [ 89.344247][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.350567][ T6241] RIP: 0033:0x7f5d0cf8ebe9 [ 89.354961][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.374589][ T6241] RSP: 002b:00007f5d0ddd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 89.383095][ T6241] RAX: ffffffffffffffda RBX: 00007f5d0d1b5fa0 RCX: 00007f5d0cf8ebe9 [ 89.391082][ T6241] RDX: 0000200000000200 RSI: 0000000000000022 RDI: 0000000000000003 [ 89.399056][ T6241] RBP: 00007f5d0d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 89.407044][ T6241] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 89.414988][ T6241] R13: 00007f5d0d1b6038 R14: 00007f5d0d1b5fa0 R15: 00007fff4525ae38 [ 89.422955][ T6241] [ 89.425966][ T6241] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.433216][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.2.94 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 89.444639][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.454666][ T6241] Call Trace: [ 89.457922][ T6241] [ 89.460838][ T6241] dump_stack_lvl+0x3d/0x1f0 [ 89.465409][ T6241] vpanic+0x6e8/0x7a0 [ 89.469370][ T6241] ? __pfx_vpanic+0x10/0x10 [ 89.473854][ T6241] ? vmap_small_pages_range_noflush+0x984/0xc90 [ 89.480075][ T6241] panic+0xca/0xd0 [ 89.483775][ T6241] ? __pfx_panic+0x10/0x10 [ 89.488187][ T6241] check_panic_on_warn+0xab/0xb0 [ 89.493120][ T6241] __warn+0xf6/0x3c0 [ 89.497010][ T6241] ? vmap_small_pages_range_noflush+0x984/0xc90 [ 89.503258][ T6241] report_bug+0x3c3/0x580 [ 89.507566][ T6241] ? vmap_small_pages_range_noflush+0x984/0xc90 [ 89.513784][ T6241] handle_bug+0x184/0x210 [ 89.518089][ T6241] exc_invalid_op+0x17/0x50 [ 89.522565][ T6241] asm_exc_invalid_op+0x1a/0x20 [ 89.527387][ T6241] RIP: 0010:vmap_small_pages_range_noflush+0x984/0xc90 [ 89.534211][ T6241] Code: 4d 89 f4 4d 21 ec 4c 89 e7 e8 98 6c ab ff 4d 39 ec 75 68 e8 de 71 ab ff 4c 09 eb e9 c8 fd ff ff 4c 8b 34 24 e8 cd 71 ab ff 90 <0f> 0b 90 e9 fc fe ff ff e8 bf 71 ab ff 4c 89 e7 e8 07 00 f7 ff 31 [ 89.553797][ T6241] RSP: 0018:ffffc9000c667990 EFLAGS: 00010246 [ 89.559855][ T6241] RAX: 0000000000080000 RBX: ffffea0003000000 RCX: ffffc90005579000 [ 89.567810][ T6241] RDX: 0000000000080000 RSI: ffffffff82102153 RDI: 0000000000000005 [ 89.575753][ T6241] RBP: ffff8880855e6008 R08: 0000000000000005 R09: 0000000000000000 [ 89.583703][ T6241] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 89.591653][ T6241] R13: 8000000000000163 R14: 1ffff920018ccf47 R15: ffffc90089201000 [ 89.599603][ T6241] ? vmap_small_pages_range_noflush+0x983/0xc90 [ 89.605830][ T6241] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 89.612393][ T6241] ? io_create_region+0x605/0xd40 [ 89.617389][ T6241] ? get_vm_area_caller+0x71/0xa0 [ 89.622391][ T6241] vmap+0x1aa/0x320 [ 89.626184][ T6241] ? __pfx_vmap+0x10/0x10 [ 89.630504][ T6241] io_create_region+0x605/0xd40 [ 89.635345][ T6241] ? __pfx_io_create_region+0x10/0x10 [ 89.640711][ T6241] io_create_region_mmap_safe+0xb2/0x170 [ 89.646347][ T6241] ? __pfx_io_create_region_mmap_safe+0x10/0x10 [ 89.652585][ T6241] __io_uring_register+0x59f/0x2440 [ 89.657772][ T6241] ? trace_contention_end+0xdd/0x130 [ 89.663030][ T6241] ? __pfx___io_uring_register+0x10/0x10 [ 89.668653][ T6241] __x64_sys_io_uring_register+0x169/0x280 [ 89.674433][ T6241] do_syscall_64+0xcd/0x4c0 [ 89.678909][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.684781][ T6241] RIP: 0033:0x7f5d0cf8ebe9 [ 89.689174][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.708756][ T6241] RSP: 002b:00007f5d0ddd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 89.717150][ T6241] RAX: ffffffffffffffda RBX: 00007f5d0d1b5fa0 RCX: 00007f5d0cf8ebe9 [ 89.725103][ T6241] RDX: 0000200000000200 RSI: 0000000000000022 RDI: 0000000000000003 [ 89.733069][ T6241] RBP: 00007f5d0d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 89.741027][ T6241] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 89.748984][ T6241] R13: 00007f5d0d1b6038 R14: 00007f5d0d1b5fa0 R15: 00007fff4525ae38 [ 89.756937][ T6241] [ 89.760125][ T6241] Kernel Offset: disabled [ 89.764424][ T6241] Rebooting in 86400 seconds..