last executing test programs: 12.766684243s ago: executing program 2 (id=61): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x2, 0x125, &(0x7f0000000940)}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x4008004) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000180)={0x27, 0x0, 0x0, 0x5, 0x7, 0xf, "2583532e903023a40d3bfea3431d638262392150193b6a5157acc4c8735cdd5ac41071710d5886f4be678deb4cfc699bb6afbb1b998c1375b84f8cea1a6060", 0x2b}, 0x60, &(0x7f0000000400)=[{&(0x7f0000000300)="9eb448efad62e19a77e1e32344bd74c378566ff385e11b5338fea3ebe6a817bc5b5e3b135bbef77e8c28916dc55957fde2b22d617883272ef83864fb0bad42744be55e9718686ba137ded6dc", 0x4c}, {&(0x7f0000000500)="784fc5e52b05bf1412ba609ca481d2976e044c6c0a1f36493ac3c7d15e66700c513da1c02f53f267c36a8345a0df6f03797ff0836af0e264610a31f8d9cfaafae19452aebd11f4e85de1aabc3c86f505583e892c9e28b3ddfd5cea78157eb7cedb81c24e2bf12d36cc555d111a72e8448c18522992cb00d64b0b672e54fffe9b6edf6f1d3b7ec7e6b72f9c65fdb7b44fa9d8c5d8701b4e61ed5d16d81c664d7c34a51c559cb5570af01951a7f8c3bfa3a17fd22ea15acc0d7aa7bcc13f5bd832798c9b78a5d89b1535", 0xc9}], 0x2, 0x0, 0x0, 0x20040000}, {&(0x7f0000000600)={0x27, 0x0, 0x0, 0x2, 0xf3, 0x1, "428769bca5a907a7cd23b96a7e16b5326043c726d4464ea53531653fdd8788d0dbd49f177a37e2f348a0943a756a2becd5f3f8c964e49bdbb9dee0b956d3a5", 0x7fff}, 0x60, 0x0, 0x0, &(0x7f0000000e40)={0xd0, 0x119, 0x8, "232555e632eef00c08efdb3abdcef4c3e1f89415d7ea8d22480e21498af97344b680f08811beed856fd2182d0071c9aa45fed5c073946f8d08d76938744dc5f2ed5e6849ec96c7d500e87af9437d2ca3db4d94a60e5445a34630df30449d490f4093cfe665f3c3edd1635d946176ad9ec47cc53f37e11ab55c8b26d2615468e9d24927c59b1ac7f98fbc6be824e2861711900cc7030bfa2980ef16c2acf41adfc7032ea5e56e09a98c672823f2740f0f4eccc46068373caea273396c5005"}, 0xd0, 0x20004011}], 0x2, 0x28000) kexec_load(0xff0e, 0x0, &(0x7f0000000900), 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x140) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000000)={0x0, 0x8a}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0xfffffff7, [{0x4, 0x2, 0x6756}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x0, 0x2e, 0x30]}}, &(0x7f0000000200)=""/138, 0x39, 0x8a, 0x1}, 0x28) 11.67853437s ago: executing program 2 (id=65): r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r1, 0x0, 0x80, 0xa) timer_settime(0x0, 0x0, 0x0, 0x0) 11.571444856s ago: executing program 2 (id=68): r0 = socket(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000024c0)={{0x0, 0xcef, 0x187, 0x5, 0x7fffffffffffffff, 0x4, 0x100, 0x1, 0x5, 0x2d1, 0xfffffff9, 0x8, 0x7, 0xffffffffffffe32a, 0x40}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$getenv(0x4201, r2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r2, r3) ioprio_get$uid(0x3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @broadcast}) 10.649533103s ago: executing program 0 (id=70): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000001300), 0x0, 0x10, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) 8.701121239s ago: executing program 2 (id=75): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xf8, 0x29, 0x36, {0x5e, 0x1b, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1a8}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281", 0x52}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa1", 0xa6}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.187881156s ago: executing program 0 (id=77): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='R', 0x50, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000640)={0x5601, 0x5, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x1, 0x0, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @local, 0x9}, 0x1c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x94, 0x2210000, 0x3, 0xb2bc, 0x10000, 0x2, 0x0, 0x0, 0x40, 0x10}}, 0x50) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2, 0x100000}, 0x1c) socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a7", 0x14) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 7.969899832s ago: executing program 0 (id=79): creat(&(0x7f0000000000)='./file0\x00', 0x6b) unshare(0x6020400) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r0, 0x2) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 7.162949884s ago: executing program 1 (id=80): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) openat$dsp1(0xffffffffffffff9c, 0x0, 0x9640, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d11, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 7.111519753s ago: executing program 0 (id=81): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000440)=ANY=[]}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d90", 0x33}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.108446085s ago: executing program 3 (id=82): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket(0x10, 0x3, 0x0) shutdown(r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) getpid() mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x800, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xa}, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.531739539s ago: executing program 2 (id=84): semget(0x0, 0x1, 0x23) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000440)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}], 0x58}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x10) 5.514425045s ago: executing program 3 (id=85): r0 = socket(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000024c0)={{0x0, 0xcef, 0x187, 0x5, 0x7fffffffffffffff, 0x4, 0x100, 0x1, 0x5, 0x2d1, 0xfffffff9, 0x8, 0x7, 0xffffffffffffe32a, 0x40}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$getenv(0x4201, r2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r2, r3) ioprio_get$uid(0x3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) ioctl$SIOCGETSGCNT(r0, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @broadcast}) 5.514057768s ago: executing program 2 (id=86): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x800000}) 5.512138087s ago: executing program 0 (id=87): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905896eef"], 0x0) 4.11995465s ago: executing program 4 (id=90): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.114972558s ago: executing program 1 (id=91): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000900150009"], 0x50) 4.037418569s ago: executing program 3 (id=92): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = dup(r0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xd, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x20000042) r8 = dup(r0) setresuid(0x0, 0xee00, 0x0) r9 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x48f, 0x0, 0x0) ioctl$FITHAW(r4, 0xc0045878) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r8, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, &(0x7f00000003c0)="1d706e48f85762ce39cc039bb7378a01b730fe85ec8636cf494dabedd16d0bbd4dfd78dc1fe1e56d654a8d0710629c3e3d16d0f168c3e8229093ac475456d2655799e3daded180a32c886f8fcfc200", 0x4f) 3.875554415s ago: executing program 1 (id=93): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0x7}, {0x2, 0x40000}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) 3.787129831s ago: executing program 4 (id=94): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.717963494s ago: executing program 1 (id=95): r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000140), 0x4440, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)={0x8, {0x8, 0x4, 0x1, 0x8, 0x50, 0x4}}) r1 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x1fdf, &(0x7f0000000000)={0x0, 0x1a6d, 0x800, 0x0, 0x76}, &(0x7f00000000c0), &(0x7f0000000100)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2a, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 3.419501663s ago: executing program 4 (id=96): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket(0x10, 0x3, 0x0) shutdown(r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) getpid() mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x800, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xa}, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.717410736s ago: executing program 4 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x7f, 0x9, 0x2, 0x9}, {0xfe, 0x0, 0xa, 0x4, 0xf338, 0x59}, 0x4, 0x7, 0x6c5}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.595881212s ago: executing program 1 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000002800)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) 2.529121015s ago: executing program 4 (id=99): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, &(0x7f0000000000), 0xc, 0x0) 1.575802559s ago: executing program 3 (id=100): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1) 1.50837175s ago: executing program 0 (id=101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x238, &(0x7f00000003c0)={0x0, 0x59ef, 0x10100, 0x2, 0x2ce}, &(0x7f0000000080), &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="6000000000000000fa3c5dd857cdfe4c585dbdbd62a4ce8128e53c5d40633157daa9c03692307cb12d2964e4ec3791884ab1d5f6d4c0619ba6e6eea535bd0d2decad583b1c4b9b5dbb83f5a113545698f93a18a79e4ad940c423af87c52fa635f27ca5fac38587208adfb21a247d", @ANYRES64=r1, @ANYBLOB="0500000000000000010000000000000012000000010001002f6465762f736e642f6d69646943234423000000000000000500000000000000000000000000000005000000ffffff7f2c2e235b260000"], 0x60) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 667.822051ms ago: executing program 1 (id=102): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe000202b}) socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0x12) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) keyctl$assume_authority(0x10, 0x0) nanosleep(&(0x7f0000000300), 0x0) socket(0x10, 0x803, 0x0) 444.442498ms ago: executing program 3 (id=103): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$cgroup(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x2810044, &(0x7f0000000000)={[{@subsystem='cpu'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 165.316µs ago: executing program 3 (id=104): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file1'}, 0xb) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=105): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0x7}, {0x2, 0x40000}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 52.667462][ T29] audit: type=1400 audit(1771532262.161:62): avc: denied { mounton } for pid=5789 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.690922][ T29] audit: type=1400 audit(1771532262.181:63): avc: denied { mount } for pid=5789 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.693453][ T5789] cgroup: Unknown subsys name 'net' [ 52.720130][ T29] audit: type=1400 audit(1771532262.211:64): avc: denied { unmount } for pid=5789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.856646][ T5789] cgroup: Unknown subsys name 'cpuset' [ 52.864510][ T5789] cgroup: Unknown subsys name 'rlimit' [ 52.984804][ T29] audit: type=1400 audit(1771532262.481:65): avc: denied { setattr } for pid=5789 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.023760][ T29] audit: type=1400 audit(1771532262.481:66): avc: denied { create } for pid=5789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.055154][ T29] audit: type=1400 audit(1771532262.481:67): avc: denied { write } for pid=5789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.077011][ T29] audit: type=1400 audit(1771532262.481:68): avc: denied { read } for pid=5789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.097375][ T29] audit: type=1400 audit(1771532262.481:69): avc: denied { mounton } for pid=5789 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 53.118287][ T5793] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 53.122329][ T29] audit: type=1400 audit(1771532262.481:70): avc: denied { mount } for pid=5789 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 53.154559][ T29] audit: type=1400 audit(1771532262.631:71): avc: denied { relabelto } for pid=5793 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 54.112113][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.171304][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.187890][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.202249][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.206858][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.218229][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.218374][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.227325][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.240408][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.242060][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.247595][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.258142][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.261964][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.270777][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.283756][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.284351][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.292812][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.304366][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.310956][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.313090][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.320860][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.336815][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.349488][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.359409][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.367237][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.367324][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.713531][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 56.796507][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 56.853305][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 56.971852][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.979715][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.987088][ T5814] bridge_slave_0: entered allmulticast mode [ 56.994054][ T5814] bridge_slave_0: entered promiscuous mode [ 57.001745][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.009168][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.017664][ T5803] bridge_slave_0: entered allmulticast mode [ 57.024494][ T5803] bridge_slave_0: entered promiscuous mode [ 57.031752][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 57.054866][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.061963][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.069472][ T5814] bridge_slave_1: entered allmulticast mode [ 57.076570][ T5814] bridge_slave_1: entered promiscuous mode [ 57.083449][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.090634][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.097795][ T5803] bridge_slave_1: entered allmulticast mode [ 57.105933][ T5803] bridge_slave_1: entered promiscuous mode [ 57.154317][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 57.168301][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.175512][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.182807][ T5809] bridge_slave_0: entered allmulticast mode [ 57.189674][ T5809] bridge_slave_0: entered promiscuous mode [ 57.227144][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.234454][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.241549][ T5809] bridge_slave_1: entered allmulticast mode [ 57.248489][ T5809] bridge_slave_1: entered promiscuous mode [ 57.257078][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.268327][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.280506][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.314018][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.351831][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.359488][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.366870][ T5802] bridge_slave_0: entered allmulticast mode [ 57.373614][ T5802] bridge_slave_0: entered promiscuous mode [ 57.388769][ T5803] team0: Port device team_slave_0 added [ 57.400455][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.411873][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.421569][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.429260][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.436476][ T5802] bridge_slave_1: entered allmulticast mode [ 57.443117][ T5802] bridge_slave_1: entered promiscuous mode [ 57.457995][ T5803] team0: Port device team_slave_1 added [ 57.465034][ T5814] team0: Port device team_slave_0 added [ 57.497364][ T5814] team0: Port device team_slave_1 added [ 57.504390][ T5809] team0: Port device team_slave_0 added [ 57.534591][ T5809] team0: Port device team_slave_1 added [ 57.555792][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.578697][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.585769][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.611658][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.631258][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.638269][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.664203][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.676514][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.686499][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.693424][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.719405][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.746933][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.754175][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.761281][ T5813] bridge_slave_0: entered allmulticast mode [ 57.768386][ T5813] bridge_slave_0: entered promiscuous mode [ 57.782697][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.789727][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.815950][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.828040][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.835642][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.862191][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.874801][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.881829][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.908035][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.919210][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.926401][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.933596][ T5813] bridge_slave_1: entered allmulticast mode [ 57.940656][ T5813] bridge_slave_1: entered promiscuous mode [ 57.977099][ T5802] team0: Port device team_slave_0 added [ 57.993410][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.017551][ T5802] team0: Port device team_slave_1 added [ 58.032172][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.051810][ T5803] hsr_slave_0: entered promiscuous mode [ 58.058483][ T5803] hsr_slave_1: entered promiscuous mode [ 58.096742][ T5814] hsr_slave_0: entered promiscuous mode [ 58.102891][ T5814] hsr_slave_1: entered promiscuous mode [ 58.109062][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 58.115200][ T5814] Cannot create hsr debugfs directory [ 58.125390][ T5809] hsr_slave_0: entered promiscuous mode [ 58.131417][ T5809] hsr_slave_1: entered promiscuous mode [ 58.137492][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 58.143215][ T5809] Cannot create hsr debugfs directory [ 58.149359][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.156522][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.182659][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.220208][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.227307][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.253341][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.266009][ T5813] team0: Port device team_slave_0 added [ 58.295525][ T5813] team0: Port device team_slave_1 added [ 58.369087][ T5802] hsr_slave_0: entered promiscuous mode [ 58.375257][ T5802] hsr_slave_1: entered promiscuous mode [ 58.381109][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 58.384427][ T5812] Bluetooth: hci2: command tx timeout [ 58.387117][ T5815] Bluetooth: hci0: command tx timeout [ 58.392540][ T5128] Bluetooth: hci1: command tx timeout [ 58.398124][ T5802] Cannot create hsr debugfs directory [ 58.417857][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.425003][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.450969][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.464130][ T5812] Bluetooth: hci3: command tx timeout [ 58.469845][ T5128] Bluetooth: hci4: command tx timeout [ 58.489575][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.496627][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.522574][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.670977][ T5813] hsr_slave_0: entered promiscuous mode [ 58.677270][ T5813] hsr_slave_1: entered promiscuous mode [ 58.683119][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 58.688913][ T5813] Cannot create hsr debugfs directory [ 58.811216][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.822048][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.841844][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.866853][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.928627][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.944235][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.955119][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.971741][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.025216][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.039786][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.055200][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.067285][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.155284][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.164877][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.184701][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.192511][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.202792][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.243194][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.277151][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.284361][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.315903][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.329275][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.340794][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.351667][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.366874][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.373991][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.387764][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.425798][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.450970][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.494375][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.501459][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.525564][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 59.525580][ T29] audit: type=1400 audit(1771532269.021:84): avc: denied { sys_module } for pid=5814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.553790][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.560856][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.574480][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.617700][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.624826][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.637470][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.644622][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.669558][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.712447][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.730283][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.756233][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.763316][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.783767][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.800493][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.807618][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.872609][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.928308][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.941742][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.978112][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.997263][ T5814] veth0_vlan: entered promiscuous mode [ 60.008609][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.015720][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.032041][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.039226][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.131403][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.140977][ T5814] veth1_vlan: entered promiscuous mode [ 60.155810][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.249683][ T5814] veth0_macvtap: entered promiscuous mode [ 60.301049][ T5809] veth0_vlan: entered promiscuous mode [ 60.320505][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.334559][ T5814] veth1_macvtap: entered promiscuous mode [ 60.345581][ T5803] veth0_vlan: entered promiscuous mode [ 60.376311][ T5809] veth1_vlan: entered promiscuous mode [ 60.398469][ T5803] veth1_vlan: entered promiscuous mode [ 60.435381][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.462702][ T5803] veth0_macvtap: entered promiscuous mode [ 60.469337][ T5128] Bluetooth: hci1: command tx timeout [ 60.474671][ T5812] Bluetooth: hci2: command tx timeout [ 60.475220][ T5128] Bluetooth: hci0: command tx timeout [ 60.493975][ T5803] veth1_macvtap: entered promiscuous mode [ 60.508291][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.544147][ T5128] Bluetooth: hci4: command tx timeout [ 60.544769][ T5815] Bluetooth: hci3: command tx timeout [ 60.577990][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.616235][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.625576][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.641426][ T5809] veth0_macvtap: entered promiscuous mode [ 60.651097][ T5809] veth1_macvtap: entered promiscuous mode [ 60.657761][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.668510][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.682752][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.719435][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.767455][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.777155][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.788047][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.807459][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.816426][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.830057][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.842694][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.854746][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.876997][ T5802] veth0_vlan: entered promiscuous mode [ 60.899966][ T5813] veth0_vlan: entered promiscuous mode [ 60.917479][ T3578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.928624][ T3578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.952356][ T5813] veth1_vlan: entered promiscuous mode [ 60.962438][ T3578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.972130][ T3578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.984999][ T5802] veth1_vlan: entered promiscuous mode [ 61.002558][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.010912][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.033004][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.046366][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.094280][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.105099][ T29] audit: type=1400 audit(1771532270.591:85): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.YoNNaf/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.118457][ T5813] veth0_macvtap: entered promiscuous mode [ 61.135131][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.143411][ T29] audit: type=1400 audit(1771532270.591:86): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.167700][ T29] audit: type=1400 audit(1771532270.591:87): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.YoNNaf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.200516][ T5802] veth0_macvtap: entered promiscuous mode [ 61.216868][ T5802] veth1_macvtap: entered promiscuous mode [ 61.226235][ T29] audit: type=1400 audit(1771532270.591:88): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.249870][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.262442][ T5813] veth1_macvtap: entered promiscuous mode [ 61.264187][ T29] audit: type=1400 audit(1771532270.601:89): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.YoNNaf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.272681][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.298273][ T29] audit: type=1400 audit(1771532270.601:90): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/root/syzkaller.YoNNaf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.314388][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.353007][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.371609][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.383748][ T29] audit: type=1400 audit(1771532270.601:91): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.393496][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.404767][ T29] audit: type=1400 audit(1771532270.631:92): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 61.437093][ T29] audit: type=1400 audit(1771532270.631:93): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="gadgetfs" ino=8467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 61.471630][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.482956][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.498069][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.506200][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.517703][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.546069][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.592956][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.609000][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.629174][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.639157][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.676003][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.792410][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.801231][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.834781][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.845131][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.852961][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.931237][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.940716][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.971768][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.986211][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.014686][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 62.028811][ T5854] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 62.074445][ T5854] usb 3-1: config 0 has no interface number 0 [ 62.095115][ T5854] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 62.148159][ T5854] usb 3-1: config 0 interface 1 has no altsetting 0 [ 62.174406][ T5854] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 62.197252][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.209631][ T5854] usb 3-1: Product: syz [ 62.215311][ T5854] usb 3-1: Manufacturer: syz [ 62.321368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.339983][ T5854] usb 3-1: SerialNumber: syz [ 62.390185][ T5854] usb 3-1: config 0 descriptor?? [ 62.422647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 62.444437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.473894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 62.482391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 62.513713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.527063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.543749][ T5815] Bluetooth: hci0: command tx timeout [ 62.558687][ T5815] Bluetooth: hci2: command tx timeout [ 62.564457][ T5815] Bluetooth: hci1: command tx timeout [ 62.623777][ T5128] Bluetooth: hci4: command tx timeout [ 62.638956][ T5128] Bluetooth: hci3: command tx timeout [ 62.729866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 62.853668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 62.869704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.406422][ T5854] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 63.555066][ T5854] cx231xx 3-1:0.1: Failed to read PCB config [ 63.572391][ T5854] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 63.628458][ T5854] usb 3-1: USB disconnect, device number 2 [ 63.798968][ T5950] capability: warning: `syz.4.10' uses deprecated v2 capabilities in a way that may be insecure [ 63.996068][ T5941] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 64.054289][ T5854] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.440866][ T5941] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 64.469838][ T5941] usb 2-1: config 0 has no interface number 0 [ 64.481707][ T5941] usb 2-1: config 0 interface 128 altsetting 6 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 64.493330][ T5941] usb 2-1: config 0 interface 128 has no altsetting 0 [ 64.503989][ T5941] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 64.519275][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.528239][ T5941] usb 2-1: Product: syz [ 64.532847][ T5941] usb 2-1: Manufacturer: syz [ 64.539587][ T5941] usb 2-1: SerialNumber: syz [ 64.557415][ T5941] usb 2-1: config 0 descriptor?? [ 64.583448][ T5941] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 64.587850][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 64.599559][ T5941] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 64.622720][ T5854] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 64.625793][ T5941] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 64.631336][ T5128] Bluetooth: hci1: command tx timeout [ 64.644084][ T5815] Bluetooth: hci2: command tx timeout [ 64.649489][ T5815] Bluetooth: hci0: command tx timeout [ 64.660403][ T5854] usb 3-1: config 0 has no interface number 0 [ 64.670792][ T5854] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 64.682074][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 64.682090][ T29] audit: type=1400 audit(1771532274.161:124): avc: denied { create } for pid=5960 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.708473][ T5128] Bluetooth: hci3: command tx timeout [ 64.713906][ T5812] Bluetooth: hci4: command tx timeout [ 64.719429][ T5854] usb 3-1: config 0 interface 1 has no altsetting 0 [ 64.727709][ T29] audit: type=1400 audit(1771532274.181:125): avc: denied { map } for pid=5960 comm="syz.3.13" path="socket:[7767]" dev="sockfs" ino=7767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.750776][ T29] audit: type=1400 audit(1771532274.181:126): avc: denied { read } for pid=5960 comm="syz.3.13" path="socket:[7767]" dev="sockfs" ino=7767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.775543][ T29] audit: type=1400 audit(1771532274.201:127): avc: denied { create } for pid=5960 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.799521][ T5854] usb 3-1: string descriptor 0 read error: -71 [ 64.806082][ T5854] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 64.822148][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.870160][ T5874] usb 2-1: USB disconnect, device number 2 [ 64.897268][ T29] audit: type=1400 audit(1771532274.371:128): avc: denied { read write } for pid=5965 comm="syz.4.16" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.152926][ T29] audit: type=1400 audit(1771532274.371:129): avc: denied { open } for pid=5965 comm="syz.4.16" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.186602][ T29] audit: type=1400 audit(1771532274.371:130): avc: denied { ioctl } for pid=5965 comm="syz.4.16" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.212345][ T5854] usb 3-1: config 0 descriptor?? [ 65.219450][ T5854] usb 3-1: can't set config #0, error -71 [ 65.227897][ T5854] usb 3-1: USB disconnect, device number 3 [ 65.237901][ T29] audit: type=1400 audit(1771532274.381:131): avc: denied { read write } for pid=5965 comm="syz.4.16" name="radio7" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 65.265474][ T29] audit: type=1400 audit(1771532274.381:132): avc: denied { open } for pid=5965 comm="syz.4.16" path="/dev/radio7" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 65.407037][ T5972] infiniband syz2: set down [ 65.411656][ T5972] infiniband syz2: added ipvlan0 [ 65.613091][ T5972] RDS/IB: syz2: added [ 65.617582][ T5972] smc: adding ib device syz2 with port count 1 [ 65.623924][ T5972] smc: ib device syz2 port 1 has no pnetid [ 65.813882][ T29] audit: type=1400 audit(1771532274.431:133): avc: denied { create } for pid=5967 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.012910][ T5983] syzkaller0: entered promiscuous mode [ 66.041207][ T5983] syzkaller0: entered allmulticast mode [ 66.120658][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.766329][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.803709][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.836352][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.860947][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.863849][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.918147][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.925730][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.142057][ T6007] ======================================================= [ 68.142057][ T6007] WARNING: The mand mount option has been deprecated and [ 68.142057][ T6007] and is ignored by this kernel. Remove the mand [ 68.142057][ T6007] option from the mount to silence this warning. [ 68.142057][ T6007] ======================================================= [ 68.391293][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.395663][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.399448][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.416117][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.424499][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.448868][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.456572][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.468079][ T10] usb 4-1: string descriptor 0 read error: -71 [ 68.498148][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.541600][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.554448][ T5874] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.607257][ T10] usb 4-1: can't set config #1, error -71 [ 68.625554][ T10] usb 4-1: USB disconnect, device number 2 [ 68.662968][ T5874] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.789747][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.951358][ T6015] fido_id[6015]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.974009][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 68.991248][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.016800][ T5882] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 69.028772][ T5882] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 69.062608][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.084871][ T6019] netlink: 256 bytes leftover after parsing attributes in process `syz.0.28'. [ 69.103754][ T5882] usb 5-1: Product: syz [ 69.112012][ T5882] usb 5-1: Manufacturer: syz [ 69.119428][ T5882] usb 5-1: SerialNumber: syz [ 69.132550][ T5882] usb 5-1: config 0 descriptor?? [ 69.466303][ T5128] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1 [ 69.540894][ T6029] binder: 6028:6029 ioctl c0306201 2000000002c0 returned -22 [ 69.565783][ T5882] usb 5-1: USB disconnect, device number 2 [ 70.931661][ T6041] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 71.672699][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 71.672718][ T29] audit: type=1400 audit(1771532280.401:176): avc: denied { setopt } for pid=6038 comm="syz.1.33" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.700225][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.707059][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.008900][ T6046] 9pnet_virtio: no channels available for device syz [ 72.041030][ T6046] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 72.182793][ T6046] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 72.216611][ T6046] overlayfs: failed to look up (tracing) for ino (-66) [ 72.927103][ T29] audit: type=1400 audit(1771532281.521:177): avc: denied { mount } for pid=6040 comm="syz.0.35" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 72.972025][ T29] audit: type=1400 audit(1771532281.541:178): avc: denied { mount } for pid=6040 comm="syz.0.35" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.144035][ T29] audit: type=1400 audit(1771532282.541:179): avc: denied { mounton } for pid=6036 comm="syz.3.34" path="/7/file0" dev="cgroup" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 73.176226][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 73.185400][ T6045] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.192592][ T6051] syzkaller0: entered promiscuous mode [ 73.200420][ T29] audit: type=1400 audit(1771532282.611:180): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.222986][ T6051] syzkaller0: entered allmulticast mode [ 73.327858][ T29] audit: type=1400 audit(1771532282.741:181): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 73.377963][ T29] audit: type=1400 audit(1771532282.871:182): avc: denied { read } for pid=6053 comm="syz.0.39" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.421577][ T29] audit: type=1400 audit(1771532282.871:183): avc: denied { open } for pid=6053 comm="syz.0.39" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.480440][ T29] audit: type=1400 audit(1771532282.941:184): avc: denied { ioctl } for pid=6053 comm="syz.0.39" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.643690][ T29] audit: type=1400 audit(1771532283.121:185): avc: denied { mounton } for pid=6058 comm="syz.4.41" path="/proc/24/task" dev="proc" ino=9290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 74.194992][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.365871][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 74.373747][ T5874] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 74.382483][ T5874] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 74.410244][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 74.430031][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.450028][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.470281][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.524813][ T5874] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 74.554498][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.630366][ T5874] usb 4-1: config 0 descriptor?? [ 74.755436][ T5882] hid_parser_main: 33 callbacks suppressed [ 74.755467][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.779999][ T6073] Zero length message leads to an empty skb [ 74.787668][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.798785][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.806440][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.815293][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.822880][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.911343][ T5874] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 74.932898][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.950470][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.376596][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.392592][ T5882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.408860][ T5882] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 75.624766][ T6082] fido_id[6082]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.657175][ T5882] usb 4-1: USB disconnect, device number 3 [ 75.690606][ T5882] usblp0: removed [ 75.829472][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 76.097045][ T6090] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 76.831556][ T792] cfg80211: failed to load regulatory.db [ 76.897207][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 76.897223][ T29] audit: type=1400 audit(1771532286.391:199): avc: denied { create } for pid=6089 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.926842][ T29] audit: type=1400 audit(1771532286.391:200): avc: denied { bind } for pid=6089 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.951931][ T29] audit: type=1400 audit(1771532286.441:201): avc: denied { accept } for pid=6089 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.068614][ T6096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 77.160755][ T6100] overlayfs: missing 'lowerdir' [ 77.169573][ T29] audit: type=1400 audit(1771532286.641:202): avc: denied { write } for pid=6085 comm="syz.0.45" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.298957][ T29] audit: type=1400 audit(1771532286.791:203): avc: denied { create } for pid=6103 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.821984][ T29] audit: type=1400 audit(1771532287.311:204): avc: denied { bind } for pid=6109 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.822351][ T6110] Bluetooth: MGMT ver 1.23 [ 77.914057][ T29] audit: type=1400 audit(1771532287.311:205): avc: denied { write } for pid=6109 comm="syz.2.53" path="socket:[7961]" dev="sockfs" ino=7961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.993762][ T29] audit: type=1400 audit(1771532287.391:206): avc: denied { create } for pid=6109 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.018878][ T6112] 9pnet_virtio: no channels available for device syz [ 78.066096][ T29] audit: type=1400 audit(1771532287.491:207): avc: denied { connect } for pid=6109 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.119698][ T29] audit: type=1400 audit(1771532287.491:208): avc: denied { write } for pid=6109 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.649655][ T6126] mmap: syz.1.49 (6126) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.567861][ T6130] netlink: 'syz.3.58': attribute type 13 has an invalid length. [ 79.709374][ T5128] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 80.334927][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'. [ 81.132968][ T6166] Device name cannot be null; rc = [-22] [ 82.814917][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 82.814932][ T29] audit: type=1400 audit(1771532292.311:242): avc: denied { create } for pid=6167 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 83.323775][ T29] audit: type=1400 audit(1771532292.431:243): avc: denied { create } for pid=6170 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.353901][ T29] audit: type=1400 audit(1771532292.771:244): avc: denied { listen } for pid=6170 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.444026][ T6182] netlink: 'syz.4.74': attribute type 13 has an invalid length. [ 83.560784][ T29] audit: type=1400 audit(1771532292.971:245): avc: denied { write } for pid=6179 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.580936][ T29] audit: type=1400 audit(1771532292.971:246): avc: denied { name_connect } for pid=6179 comm="syz.1.73" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.623790][ T29] audit: type=1400 audit(1771532292.971:247): avc: denied { read write } for pid=6167 comm="syz.3.71" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.830020][ T29] audit: type=1400 audit(1771532292.971:248): avc: denied { open } for pid=6167 comm="syz.3.71" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.274279][ T29] audit: type=1400 audit(1771532292.981:249): avc: denied { listen } for pid=6167 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.293745][ T29] audit: type=1400 audit(1771532293.501:250): avc: denied { setopt } for pid=6168 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.386201][ T29] audit: type=1400 audit(1771532293.851:251): avc: denied { bind } for pid=6189 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.582657][ T5128] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 86.019725][ T6222] Device name cannot be null; rc = [-22] [ 86.053861][ T6223] ubi16: attaching mtd0 [ 86.058302][ T6223] ubi16 error: ubi_attach_mtd_dev: bad VID header (24) or data offsets (88) [ 88.053989][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 88.054005][ T29] audit: type=1400 audit(1771532297.551:255): avc: denied { write } for pid=6226 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.389996][ T29] audit: type=1400 audit(1771532297.881:256): avc: denied { write } for pid=6231 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 88.415281][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.496955][ T29] audit: type=1400 audit(1771532297.991:257): avc: denied { create } for pid=6240 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.616124][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 88.647086][ T5874] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 88.708036][ T5874] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 239 [ 88.761422][ T5874] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 88.813849][ T5874] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 88.853138][ T5874] usb 1-1: Manufacturer: syz [ 88.890376][ T5874] usb 1-1: config 0 descriptor?? [ 88.914497][ T29] audit: type=1400 audit(1771532298.411:258): avc: denied { create } for pid=6246 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.004124][ T6230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.016038][ T5874] smsusb:smsusb_probe: board id=9, interface number 0 [ 89.052108][ T5874] smsusb:siano_media_device_register: media controller created [ 89.078561][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.080014][ T6248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6248 comm=syz.1.95 [ 89.085960][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.086038][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.086093][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.120379][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.127687][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.136455][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.144364][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.151638][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.158883][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.166128][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.173353][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.181767][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.189063][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.196319][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.203571][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.210816][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.218265][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.226208][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.233451][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.240674][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.247901][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.255111][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.262320][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.318381][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.325646][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.332883][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.340127][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.347335][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.354560][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.363307][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.370609][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.377884][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.385131][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.392348][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.399565][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.407802][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.415080][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.422339][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.429597][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.436854][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.444080][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.451603][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.458841][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.466058][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.473260][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.480479][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.487725][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.495980][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.503252][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.510512][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.518232][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.525496][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.532755][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.540513][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.547775][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.555034][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.562290][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.569551][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.576804][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.589950][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.597234][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.604494][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.611735][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.618955][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.626187][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.636342][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.643613][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.650882][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.658145][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.665390][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.672611][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.683991][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.691344][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.698610][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.705885][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.713153][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.720411][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.730417][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.737744][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.744993][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.752228][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.759463][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.766700][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.774998][ T5874] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 89.784594][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.784661][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.784713][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.784763][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.951217][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.958533][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.965818][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.973074][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.980297][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.987560][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 89.994809][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.004113][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.011381][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.019605][ T5874] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 90.026807][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.026899][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.026961][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.027025][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.027088][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.027148][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.027195][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.027226][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.027256][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.094659][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.101976][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.109514][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.116991][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.124236][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.131788][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.139034][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.146269][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.177920][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.185645][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.192899][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.200515][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.207757][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.215437][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.222678][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.232280][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.239568][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.249563][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.256848][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.264436][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.271689][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.280279][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.287555][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.294800][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.302039][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.304132][ T29] audit: type=1400 audit(1771532299.671:259): avc: denied { setopt } for pid=6252 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.309289][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.335877][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.343120][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.350353][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.357560][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.368280][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.375521][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.382738][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.389964][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.397170][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.404388][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.411589][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.418801][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.426081][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.434463][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.441706][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.448910][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.456109][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.463308][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.470578][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.477761][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.484955][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.492231][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.500177][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.507400][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.514693][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.521895][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.529084][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.536263][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.543441][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.551065][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.558253][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.565835][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.573036][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.580223][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.587423][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.594631][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.601812][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.608992][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.616173][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.623363][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.672699][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.679924][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.687118][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.694311][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.701508][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.708688][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.715881][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.723066][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.730261][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.737935][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.745137][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.752334][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.759514][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.766691][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.773869][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.781086][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.788383][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.795636][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.804356][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.811625][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.818879][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.826114][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.833320][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.840515][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.847784][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.855005][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.862224][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.873116][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.880395][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.887651][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.894914][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.902168][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.909424][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.916667][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.923880][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.931084][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.939764][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.947011][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.954217][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.961407][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.968636][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.975837][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.983022][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.990214][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 90.997419][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.005431][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.012646][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.019873][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.027078][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.034275][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.041471][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.048691][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.055894][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.063077][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.713407][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.720681][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.727938][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.735184][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.742447][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.749723][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.756986][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.764249][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.771511][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.780433][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.787695][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.788973][ T29] audit: type=1400 audit(1771532301.271:260): avc: denied { watch watch_reads } for pid=6262 comm="syz.3.100" path="/18" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.794931][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.794969][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.831968][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.839200][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.846404][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.853601][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.860794][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.869087][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.876348][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.883588][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.890832][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.898080][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.905322][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.912563][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.919811][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.927059][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.936221][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.943483][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.950726][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.958810][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.966081][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.973331][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.980598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.987814][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 91.995028][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.002943][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.010193][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.017441][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.024699][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.028254][ T29] audit: type=1400 audit(1771532301.501:261): avc: denied { mounton } for pid=6266 comm="syz.3.103" path="/19/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.031954][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.061811][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.069094][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.076425][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.083662][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.091911][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.099158][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.106375][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.113598][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.120820][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.128055][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.136485][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.143747][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.150987][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.158215][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.165415][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.172614][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.179811][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.187010][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.194239][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.233718][ T5874] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 92.241369][ T5874] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 92.249063][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.256322][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.263550][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.270753][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.277972][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.285198][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.292399][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.299596][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.306802][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.314281][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.321570][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.328842][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.336109][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.343365][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.350610][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.357844][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.365057][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.372261][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.380451][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.387729][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.394996][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.402261][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.409529][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.416799][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.424069][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.431332][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.438857][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.447490][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.454780][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.462034][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.469289][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.476520][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.483743][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.490944][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.498145][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.505358][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.513438][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.520666][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.527895][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.535130][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.542348][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.549555][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.556783][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.563990][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.571238][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.579432][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.586679][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.593887][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.601088][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.608391][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.615588][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.622788][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.629986][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.637221][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.654254][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.661499][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.668718][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.675943][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.683205][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.690463][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.697691][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.704909][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.712117][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.727473][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 92.735328][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.742580][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.749801][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.757007][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.764208][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.771426][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.778630][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.785831][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.796093][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.803365][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.810580][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.817786][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.825010][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.832211][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.839414][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.846608][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.853792][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 92.862014][ T5874] ------------[ cut here ]------------ [ 92.869069][ T5874] !PageLargeKmalloc(page) [ 92.869079][ T5874] WARNING: mm/slub.c:6352 at free_large_kmalloc+0x96/0xd0, CPU#1: kworker/1:6/5874 [ 92.882938][ T5874] Modules linked in: [ 92.886979][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 92.896378][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.906966][ T5874] Workqueue: usb_hub_wq hub_event [ 92.912009][ T5874] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 92.917738][ T5874] Code: 28 90 0f 0b 90 80 3d a8 2d 59 0e 00 0f 84 a5 bc bb fe 48 8b 74 24 28 48 89 ef e8 55 39 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 11 d9 e5 8d 5b 5d 41 5c 41 [ 92.937427][ T5874] RSP: 0018:ffffc900043bed70 EFLAGS: 00010202 [ 92.943524][ T5874] RAX: 00000000000000ff RBX: ffffea0001203880 RCX: ffffc90019a50000 [ 92.951994][ T5874] RDX: 0000000000000000 RSI: ffff8880480e2000 RDI: ffffea0001203880 [ 92.960620][ T5874] RBP: ffff8880480e2000 R08: 0000000000000007 R09: 0000000000000000 [ 92.968713][ T5874] R10: 0000000000000000 R11: ffffffff8274cb64 R12: ffff88802df5d000 [ 92.976737][ T5874] R13: ffff88802f5eb000 R14: dffffc0000000000 R15: ffff88802df5d0f0 [ 92.984711][ T5874] FS: 0000000000000000(0000) GS:ffff888124448000(0000) knlGS:0000000000000000 [ 92.993683][ T5874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.000252][ T5874] CR2: 0000200000400000 CR3: 000000000e598000 CR4: 00000000003526f0 [ 93.008244][ T5874] Call Trace: [ 93.011516][ T5874] [ 93.014465][ T5874] usb_free_urb.part.0+0xf8/0x110 [ 93.019490][ T5874] usb_free_urb+0x1f/0x30 [ 93.023933][ T5874] smsusb_term_device+0x108/0x200 [ 93.028976][ T5874] smsusb_init_device+0xb4e/0xbb0 [ 93.034075][ T5874] ? __pfx_smsusb_init_device+0x10/0x10 [ 93.039630][ T5874] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 93.045595][ T5874] ? usb_clear_halt+0x61/0x160 [ 93.050356][ T5874] smsusb_probe+0xd7f/0xe1f [ 93.055446][ T5874] ? __pfx_smsusb_probe+0x10/0x10 [ 93.060495][ T5874] ? mark_held_locks+0x40/0x70 [ 93.065340][ T5874] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.071179][ T5874] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.077081][ T5874] ? __pm_runtime_set_status+0x13c/0x970 [ 93.082746][ T5874] usb_probe_interface+0x303/0x8f0 [ 93.088007][ T5874] ? __pfx_usb_probe_interface+0x10/0x10 [ 93.093718][ T5874] really_probe+0x241/0xa60 [ 93.098252][ T5874] __driver_probe_device+0x1de/0x400 [ 93.103566][ T5874] driver_probe_device+0x4c/0x1b0 [ 93.108680][ T5874] __device_attach_driver+0x1ff/0x3e0 [ 93.114138][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 93.120052][ T5874] bus_for_each_drv+0x159/0x1e0 [ 93.125023][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 93.130430][ T5874] ? lockdep_hardirqs_on+0x78/0x100 [ 93.135730][ T5874] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.136901][ T29] audit: type=1400 audit(1771532302.631:262): avc: denied { execute } for pid=6272 comm="syz.3.104" name="file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.141564][ T5874] __device_attach+0x1e4/0x4d0 [ 93.141593][ T5874] ? __pfx___device_attach+0x10/0x10 [ 93.174926][ T5874] ? do_raw_spin_unlock+0x145/0x1e0 [ 93.180120][ T5874] device_initial_probe+0xaf/0xd0 [ 93.185174][ T5874] bus_probe_device+0x64/0x160 [ 93.189925][ T5874] device_add+0x11d9/0x1950 [ 93.194440][ T5874] ? __pfx_device_add+0x10/0x10 [ 93.199283][ T5874] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.205106][ T5874] usb_set_configuration+0xd97/0x1c60 [ 93.210461][ T5874] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 93.216541][ T5874] usb_generic_driver_probe+0xa1/0xe0 [ 93.221897][ T5874] usb_probe_device+0xef/0x400 [ 93.226686][ T5874] ? __pfx_usb_probe_device+0x10/0x10 [ 93.232045][ T5874] really_probe+0x241/0xa60 [ 93.236572][ T5874] __driver_probe_device+0x1de/0x400 [ 93.241849][ T5874] ? usb_driver_applicable+0x1c7/0x220 [ 93.247703][ T5874] driver_probe_device+0x4c/0x1b0 [ 93.252719][ T5874] __device_attach_driver+0x1ff/0x3e0 [ 93.258356][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 93.264309][ T5874] bus_for_each_drv+0x159/0x1e0 [ 93.269156][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 93.274535][ T5874] ? lockdep_hardirqs_on+0x78/0x100 [ 93.279709][ T5874] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.285583][ T5874] __device_attach+0x1e4/0x4d0 [ 93.290338][ T5874] ? __pfx___device_attach+0x10/0x10 [ 93.295633][ T5874] ? do_raw_spin_unlock+0x145/0x1e0 [ 93.300821][ T5874] device_initial_probe+0xaf/0xd0 [ 93.305844][ T5874] bus_probe_device+0x64/0x160 [ 93.310588][ T5874] device_add+0x11d9/0x1950 [ 93.315112][ T5874] ? __pfx_device_add+0x10/0x10 [ 93.319943][ T5874] ? add_device_randomness+0xb7/0xf0 [ 93.325247][ T5874] usb_new_device.cold+0x685/0x115c [ 93.330436][ T5874] ? do_raw_spin_lock+0x128/0x260 [ 93.335475][ T5874] ? __pfx_usb_new_device+0x10/0x10 [ 93.340674][ T5874] ? mark_held_locks+0x40/0x70 [ 93.345531][ T5874] hub_event+0x314d/0x4af0 [ 93.350317][ T5874] ? __pfx_hub_event+0x10/0x10 [ 93.355359][ T5874] ? debug_object_deactivate+0x2e4/0x3b0 [ 93.360994][ T5874] ? sched_core_enqueue+0x350/0xc00 [ 93.366230][ T5874] ? rcu_is_watching+0x12/0xc0 [ 93.371418][ T5874] process_one_work+0x9d7/0x1920 [ 93.376398][ T5874] ? __pfx_process_one_work+0x10/0x10 [ 93.381748][ T5874] ? __pfx_hub_event+0x10/0x10 [ 93.386512][ T5874] worker_thread+0x5da/0xe40 [ 93.391080][ T5874] ? __pfx_worker_thread+0x10/0x10 [ 93.396190][ T5874] ? kthread+0x13a/0x450 [ 93.400418][ T5874] ? __pfx_worker_thread+0x10/0x10 [ 93.405525][ T5874] kthread+0x370/0x450 [ 93.409564][ T5874] ? __pfx_kthread+0x10/0x10 [ 93.414160][ T5874] ret_from_fork+0x754/0xd80 [ 93.418725][ T5874] ? __pfx_ret_from_fork+0x10/0x10 [ 93.425209][ T5874] ? __switch_to+0x7b4/0x1120 [ 93.429882][ T5874] ? __pfx_kthread+0x10/0x10 [ 93.435049][ T5874] ret_from_fork_asm+0x1a/0x30 [ 93.439809][ T5874] [ 93.442810][ T5874] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.450072][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 93.459440][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.469561][ T5874] Workqueue: usb_hub_wq hub_event [ 93.474581][ T5874] Call Trace: [ 93.477847][ T5874] [ 93.480769][ T5874] dump_stack_lvl+0x100/0x190 [ 93.485443][ T5874] vpanic+0x552/0x970 [ 93.489398][ T5874] ? __pfx_vpanic+0x10/0x10 [ 93.493885][ T5874] panic+0xd1/0xe0 [ 93.497581][ T5874] ? __pfx_panic+0x10/0x10 [ 93.501984][ T5874] check_panic_on_warn.cold+0x19/0x34 [ 93.507361][ T5874] ? free_large_kmalloc+0x96/0xd0 [ 93.512371][ T5874] __warn.cold+0x191/0x348 [ 93.516784][ T5874] __report_bug+0x296/0x3d0 [ 93.521261][ T5874] ? free_large_kmalloc+0x96/0xd0 [ 93.526259][ T5874] ? __pfx___report_bug+0x10/0x10 [ 93.531273][ T5874] ? device_initial_probe+0xaf/0xd0 [ 93.536451][ T5874] ? bus_probe_device+0x64/0x160 [ 93.541358][ T5874] ? device_add+0x11d9/0x1950 [ 93.546029][ T5874] ? usb_new_device.cold+0x685/0x115c [ 93.551387][ T5874] ? hub_event+0x314d/0x4af0 [ 93.555951][ T5874] ? process_one_work+0x9d7/0x1920 [ 93.561056][ T5874] ? worker_thread+0x5da/0xe40 [ 93.565896][ T5874] ? kthread+0x370/0x450 [ 93.570117][ T5874] ? ret_from_fork+0x754/0xd80 [ 93.574851][ T5874] ? ret_from_fork_asm+0x1a/0x30 [ 93.579779][ T5874] ? find_held_lock+0x2b/0x80 [ 93.584435][ T5874] ? smscore_unregister_device+0x537/0x7f0 [ 93.590218][ T5874] ? smscore_unregister_device+0x537/0x7f0 [ 93.596015][ T5874] ? free_large_kmalloc+0x96/0xd0 [ 93.601013][ T5874] report_bug+0xb2/0x220 [ 93.605236][ T5874] ? free_large_kmalloc+0x96/0xd0 [ 93.610234][ T5874] handle_bug+0x166/0x2a0 [ 93.614546][ T5874] exc_invalid_op+0x17/0x50 [ 93.619027][ T5874] asm_exc_invalid_op+0x1a/0x20 [ 93.623852][ T5874] RIP: 0010:free_large_kmalloc+0x96/0xd0 [ 93.629457][ T5874] Code: 28 90 0f 0b 90 80 3d a8 2d 59 0e 00 0f 84 a5 bc bb fe 48 8b 74 24 28 48 89 ef e8 55 39 0c 00 b8 00 f0 ff ff 45 31 ed eb be 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 11 d9 e5 8d 5b 5d 41 5c 41 [ 93.649047][ T5874] RSP: 0018:ffffc900043bed70 EFLAGS: 00010202 [ 93.655096][ T5874] RAX: 00000000000000ff RBX: ffffea0001203880 RCX: ffffc90019a50000 [ 93.663068][ T5874] RDX: 0000000000000000 RSI: ffff8880480e2000 RDI: ffffea0001203880 [ 93.671012][ T5874] RBP: ffff8880480e2000 R08: 0000000000000007 R09: 0000000000000000 [ 93.678957][ T5874] R10: 0000000000000000 R11: ffffffff8274cb64 R12: ffff88802df5d000 [ 93.686923][ T5874] R13: ffff88802f5eb000 R14: dffffc0000000000 R15: ffff88802df5d0f0 [ 93.694875][ T5874] ? kasan_save_track+0x14/0x30 [ 93.699717][ T5874] usb_free_urb.part.0+0xf8/0x110 [ 93.704730][ T5874] usb_free_urb+0x1f/0x30 [ 93.709045][ T5874] smsusb_term_device+0x108/0x200 [ 93.714048][ T5874] smsusb_init_device+0xb4e/0xbb0 [ 93.719055][ T5874] ? __pfx_smsusb_init_device+0x10/0x10 [ 93.724593][ T5874] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 93.730131][ T5874] ? usb_clear_halt+0x61/0x160 [ 93.734878][ T5874] smsusb_probe+0xd7f/0xe1f [ 93.739463][ T5874] ? __pfx_smsusb_probe+0x10/0x10 [ 93.744477][ T5874] ? mark_held_locks+0x40/0x70 [ 93.749227][ T5874] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.755013][ T5874] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.760817][ T5874] ? __pm_runtime_set_status+0x13c/0x970 [ 93.766561][ T5874] usb_probe_interface+0x303/0x8f0 [ 93.771693][ T5874] ? __pfx_usb_probe_interface+0x10/0x10 [ 93.777316][ T5874] really_probe+0x241/0xa60 [ 93.781810][ T5874] __driver_probe_device+0x1de/0x400 [ 93.787102][ T5874] driver_probe_device+0x4c/0x1b0 [ 93.792119][ T5874] __device_attach_driver+0x1ff/0x3e0 [ 93.797484][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 93.803364][ T5874] bus_for_each_drv+0x159/0x1e0 [ 93.808196][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 93.813564][ T5874] ? lockdep_hardirqs_on+0x78/0x100 [ 93.818761][ T5874] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.824564][ T5874] __device_attach+0x1e4/0x4d0 [ 93.829306][ T5874] ? __pfx___device_attach+0x10/0x10 [ 93.834577][ T5874] ? do_raw_spin_unlock+0x145/0x1e0 [ 93.839753][ T5874] device_initial_probe+0xaf/0xd0 [ 93.844754][ T5874] bus_probe_device+0x64/0x160 [ 93.849492][ T5874] device_add+0x11d9/0x1950 [ 93.853983][ T5874] ? __pfx_device_add+0x10/0x10 [ 93.858810][ T5874] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.864599][ T5874] usb_set_configuration+0xd97/0x1c60 [ 93.869970][ T5874] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 93.876020][ T5874] usb_generic_driver_probe+0xa1/0xe0 [ 93.881372][ T5874] usb_probe_device+0xef/0x400 [ 93.886115][ T5874] ? __pfx_usb_probe_device+0x10/0x10 [ 93.891463][ T5874] really_probe+0x241/0xa60 [ 93.895950][ T5874] __driver_probe_device+0x1de/0x400 [ 93.901216][ T5874] ? usb_driver_applicable+0x1c7/0x220 [ 93.906648][ T5874] driver_probe_device+0x4c/0x1b0 [ 93.911645][ T5874] __device_attach_driver+0x1ff/0x3e0 [ 93.917001][ T5874] ? __pfx___device_attach_driver+0x10/0x10 [ 93.922866][ T5874] bus_for_each_drv+0x159/0x1e0 [ 93.927695][ T5874] ? __pfx_bus_for_each_drv+0x10/0x10 [ 93.933054][ T5874] ? lockdep_hardirqs_on+0x78/0x100 [ 93.938223][ T5874] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.944021][ T5874] __device_attach+0x1e4/0x4d0 [ 93.948762][ T5874] ? __pfx___device_attach+0x10/0x10 [ 93.954029][ T5874] ? do_raw_spin_unlock+0x145/0x1e0 [ 93.959203][ T5874] device_initial_probe+0xaf/0xd0 [ 93.964204][ T5874] bus_probe_device+0x64/0x160 [ 93.968957][ T5874] device_add+0x11d9/0x1950 [ 93.973439][ T5874] ? __pfx_device_add+0x10/0x10 [ 93.978266][ T5874] ? add_device_randomness+0xb7/0xf0 [ 93.983539][ T5874] usb_new_device.cold+0x685/0x115c [ 93.988727][ T5874] ? do_raw_spin_lock+0x128/0x260 [ 93.993730][ T5874] ? __pfx_usb_new_device+0x10/0x10 [ 93.998914][ T5874] ? mark_held_locks+0x40/0x70 [ 94.003661][ T5874] hub_event+0x314d/0x4af0 [ 94.008060][ T5874] ? __pfx_hub_event+0x10/0x10 [ 94.012795][ T5874] ? debug_object_deactivate+0x2e4/0x3b0 [ 94.018400][ T5874] ? sched_core_enqueue+0x350/0xc00 [ 94.023583][ T5874] ? rcu_is_watching+0x12/0xc0 [ 94.028331][ T5874] process_one_work+0x9d7/0x1920 [ 94.033255][ T5874] ? __pfx_process_one_work+0x10/0x10 [ 94.038607][ T5874] ? __pfx_hub_event+0x10/0x10 [ 94.043339][ T5874] worker_thread+0x5da/0xe40 [ 94.047904][ T5874] ? __pfx_worker_thread+0x10/0x10 [ 94.052986][ T5874] ? kthread+0x13a/0x450 [ 94.057196][ T5874] ? __pfx_worker_thread+0x10/0x10 [ 94.062276][ T5874] kthread+0x370/0x450 [ 94.066324][ T5874] ? __pfx_kthread+0x10/0x10 [ 94.070895][ T5874] ret_from_fork+0x754/0xd80 [ 94.075456][ T5874] ? __pfx_ret_from_fork+0x10/0x10 [ 94.080543][ T5874] ? __switch_to+0x7b4/0x1120 [ 94.085192][ T5874] ? __pfx_kthread+0x10/0x10 [ 94.089762][ T5874] ret_from_fork_asm+0x1a/0x30 [ 94.094517][ T5874] [ 94.097859][ T5874] Kernel Offset: disabled [ 94.102180][ T5874] Rebooting in 86400 seconds..