last executing test programs: 1m0.349719753s ago: executing program 1 (id=396): semget(0x1, 0x3, 0x319) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_getroute={0x60, 0x1a, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_IIF={0x8}, @RTA_METRICS={0x1d, 0x8, 0x0, 0x1, "1bad3b695c96e1b5b4c15c4442d9020d368ca937affff7e710"}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x16, 0x18}}, @RTA_EXPIRES={0x8, 0x17, 0x7ff}]}, 0x60}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(0x0, 0x4) setsockopt$inet_opts(r0, 0xffffffff, 0x4, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0) ioperm(0x0, 0x1, 0x1bf4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) io_uring_setup(0x67a0, &(0x7f0000000000)={0x0, 0xe1c5, 0x40, 0x1, 0x26a}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 59.646425922s ago: executing program 1 (id=399): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='xprtrdma_prepsend_failed\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4, 0x0, 0x1}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) socket$nl_sock_diag(0x10, 0x3, 0x4) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, 0x0) fcntl$setsig(r4, 0xa, 0x12) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) read(r6, 0x0, 0xeffd) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x40080) r7 = dup2(r4, r5) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x4c42bb4f92, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfff, 0x3, 0x54, 0x100, r7, 0xc3e9, '\x00', 0x0, r6, 0x0, 0x5, 0x2, 0x9, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) 58.655868274s ago: executing program 1 (id=406): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x428, 0x1b8, 0x2e0, 0x428, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x3, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x63, 0x2, 0x5, 0x1}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0xfffc]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r1 = socket$packet(0x11, 0x2, 0x300) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r6, 0x25, 0x0, @val=@perf_event}, 0x40) syz_emit_ethernet(0x2e, &(0x7f0000001c40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x0, 0x100, @void}}}}}}}, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r8, &(0x7f0000002900)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000300000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00'], 0xb4}}, 0x0) 57.974113099s ago: executing program 1 (id=407): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x640, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) (fail_nth: 4) 44.116678024s ago: executing program 1 (id=407): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x640, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) (fail_nth: 4) 29.533560151s ago: executing program 1 (id=407): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x640, 0x1, 0x2, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) (fail_nth: 4) 26.739556902s ago: executing program 4 (id=500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000280)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000005c0)="22dd815eae061aa471c9ffd71f09ef144abaa4ccd6c436faeeea6b073b1e67f253ae5c0c4d95f9c1ee5b313b5d39035e6e75057a910448a7a7e20d5fe8dd20c516de3885973ccd795e947b642d1f2f9e6826c9d2043abcb0cf331c012e7a467af074", 0x62}, {&(0x7f0000000740)="c4936faa2e806c1aa1a6b06126f4a5fc678c42e22e4f0a440c11881a5015ae2648e4478d11f48f1461a6ea2c582dc67abc56307f1fe822d688fa70c64b81b026c7644a3add12", 0x46}, {&(0x7f0000000100)="eea89d48320e616c0a32a3126901c26d1005c981b279", 0x16}, {&(0x7f00000007c0)="513ed577c4f4bbe80d412ba905d1177ea637deb60028b80434d6772df1b05f93e47a80650201081ccba017fcdbcc69874049ea33db8a9bd3abb83ac0ece9cd2c999493212449d241f64a8764b7a1d5a8fec86387d44a9220327fa72e9b126df539f975c4a7462120268fa4e829fbaddd1881acbc58f69ed4888e23aea5ba3e846472f1b6bed2d2822ec1884bdbfac491d9e093507a57", 0x96}, {&(0x7f0000000640)="ba", 0x1}, {&(0x7f0000000880)="8d54310810a3782ed9415328eff47f1ec1adef13bc830ba7715174e21177e2776e627694dd5bbc76027774ddf88c6b8a1bbff37e588c1a0d94a1bf9e18ea3d0ca06e96ac6c604bf4c69c5825e77719bd4e737a06318875fc560a1ec59cded34c", 0x60}, {&(0x7f0000000900)="5c794d4adf81aa21c74b56dcfd673d494b0e5ab447c05f275cd942fd2173263736e9a99393e86c4a3082d65ce2573d7a44535ebba81211a7259ef73cb23e1bfa46fd24436c587d0cbef61d13f600814645d722b3683ecd9c8180f95eb99a31df9c1d60d5fae4b30835785104564dce83a22a114b08d6cebba29cb27a9a1bfb10928d771ce4e12a06c1f509795d656b6db8d9e443a6896334a40c43e7f9e1156802a3e06b6f8346ff78bc5f7c4024c44e20f37cabb34d4034a7d64c01cdb4bb6edd6fedbf69e074afe25717f1737bb709", 0xd0}, {&(0x7f0000000a00)="baa453233c8bbb301202c6e9395213d4f0472cc44028c4e2bc42475c1f66e08962796e0d164999d5936081e2e22534b1f58f9dfcba80ec9084d0b3f416b38ac9588eeb92333c18610403454c85d65c03e9c9a9664a53b5070878ddca56b656d1cc691ce2dc107b048683aabb88b52266b964bf00b9446ed0059e1f494e9d58662605da6883d540a9970b8f96d2851a4ee7a82327dbddac2afe30d118d8177ad360feb3e9e7deaca542b5b5e0b2fe228f134c10f3995bba998e4704a23b597cc152a680b4d6befbb5f5622a9105014cfb098c78ca597f2c71fa89cf891331662ab4b602a4787f1feafa8fae", 0xeb}], 0x8, 0x0, 0x0, 0x820}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x978e8076f30145e5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000740)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x40000000, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='fsi_master_aspeed_cfam_reset\x00', r6}, 0x18) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fdffffff0f0000001800078008000200070000000c00038c7f6b000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) write(r7, &(0x7f0000000340)="41000000010006", 0x7) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) sendfile(r1, r1, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x1, 0xc, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x4f3]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x20) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r10, 0x5385, &(0x7f00000004c0)={0xfa, ""/250}) 26.442570001s ago: executing program 4 (id=501): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000040001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x530001, 0x40) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000005c0)=""/167, 0x219000, 0x1000, 0xffffffff, 0x2}, 0x1b) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="ad94263ce62e3c87caca3d5b8b09afd98830703c8fc33ac45fbdff448075752b7c3a1738", 0x24}], 0x1}, 0x20008000) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/36, 0x24}], 0x1}, 0x0) 24.680797357s ago: executing program 0 (id=507): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_submit(0x0, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x10}, 0x1, 0x7}, 0x18) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, 0x0, &(0x7f00000001c0), 0x800) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r5, 0x0, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x80002, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) getdents64(r6, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) 24.595776695s ago: executing program 4 (id=509): semget(0x1, 0x3, 0x319) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800007) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000021e8ff02b9277351dadbdf2502148006ff97e1000000000008001900", @ANYRES32=0x0, @ANYBLOB="0600150000000000"], 0x2c}, 0x1, 0x2}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001aff0f000000000000000000000000000600000100370000000003003c578e59da9d202bb033a290bcb28ec53673a904000000000000005195", @ANYRES32=r1, @ANYBLOB="1d0008801bad3b695c96e1b5b4c15c4442d9020d368ca937affff7e71000000008000400", @ANYRES32=0x0, @ANYBLOB="0c00090000801618", @ANYRES32=0x0, @ANYBLOB="0800170000020000000000000000710000000000"], 0x6c}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(0x0, 0x4) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) ioperm(0x0, 0x1, 0x1bf4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) connect$inet(r4, &(0x7f0000000000)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 24.358607959s ago: executing program 3 (id=511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000180083952cbd70000200000002001000fd00fe070027000008000500ac"], 0x34}, 0x1, 0xffffff7f, 0x0, 0x20000800}, 0x4040010) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000001833f100180000000200000000000000f7c5b27b1e195d72000000000400000000000b000000"], &(0x7f0000000100)=""/202, 0x32, 0xca, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r0}, 0x18) lseek(r0, 0xffff, 0x1) r5 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000003900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$unix(r2, &(0x7f0000000440)=@abs, &(0x7f00000002c0)=0x6e) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 24.071815117s ago: executing program 4 (id=512): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000a10000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000a10000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0xfffffdf4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x3040f4, 0x1000, 0x0, 0x3}, 0x1c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$SIOCRSACCEPT(r4, 0x89e3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 24.035500413s ago: executing program 0 (id=513): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0x6, 0x84f00) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x31) mbind(&(0x7f000078c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000180)=0x400000000000005, 0x1009, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa}, {0xa, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24"], 0x140}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5885, 0x101, 0x0, 0x30}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 23.571066218s ago: executing program 3 (id=514): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007911b00000e5ffff841000000200000085000000080000009500002356fa1b4dabd1c20500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000088}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa8abb86dd60e400ff00303a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe0000001"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x2000009, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x3, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000400000008000000ffffff7f10010100", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB="23e51c3a654a15095e0aca762c5e4dc4fe97446d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x7, 0x800) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000940)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r4, &(0x7f0000000480)="8c", 0xffc3, 0x1, 0x0, 0x0) 23.231777066s ago: executing program 3 (id=515): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x32f, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000006c0)={0x400, 0x2, 0xe}) tkill(0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff7000}]}) 23.150670682s ago: executing program 2 (id=516): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 23.030341429s ago: executing program 2 (id=517): r0 = fanotify_init(0x4, 0x101000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) fanotify_mark(r0, 0x641, 0x1019, r1, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x800) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, {0x1, 0x0, 0xd32, 0xe86}}) 22.832919635s ago: executing program 0 (id=518): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsmount(r0, 0x0, 0x89) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='configfs\x00', 0x1) (async) fsmount(r0, 0x0, 0x89) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (async) 22.734736863s ago: executing program 2 (id=519): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000040001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x530001, 0x40) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000005c0)=""/167, 0x219000, 0x1000, 0xffffffff, 0x2}, 0x1b) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="ad94263ce62e3c87caca3d5b8b09afd98830703c8fc33ac45fbdff448075752b7c3a1738", 0x24}], 0x1}, 0x20008000) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/36, 0x24}], 0x1}, 0x0) 22.586772529s ago: executing program 0 (id=520): socket(0x1d, 0x6, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f0", 0x5}], 0x1) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000200)={0xf94, 0xfffffffeffffffff, 0x5, 0x8, 0xfff, 0xc}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) add_key$user(&(0x7f0000002300), 0x0, &(0x7f00000005c0)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a790ae07918464d4383a58fa195893054f78da527cdda59aabc3a28d2202de09cecebf44b852c88f10bb3e8ba", 0xec, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00') pread64(r8, &(0x7f0000002640)=""/4107, 0x100b, 0x535) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 22.466925672s ago: executing program 3 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2000012c, &(0x7f0000000100)=ANY=[@ANYRES64=r1], &(0x7f0000000ac0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x40045532, &(0x7f0000003f80)=""/4086) ptrace(0x8, r0) pipe2$9p(0x0, 0x0) r5 = dup(0xffffffffffffffff) setreuid(0xee01, 0x0) prlimit64(r0, 0x4, &(0x7f0000000280)={0x5, 0x400020000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x9, 0x0, &(0x7f0000000380)=[{0x4, 0x7116}, {0x101, 0x7}, {0x80, 0x100000001}, {0x8, 0x7}, {0x7, 0x10000}, {0x92e, 0x7}, {0x6, 0x4}, {0xfffffffffffffeff, 0xffffffff}, {0x0, 0x5}]}) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0xf3, 0x5}, 0xf5}}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {0x10}, {0x0, 0x80}, @control}, {0x3, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x1}}], 0x70) ioprio_get$uid(0x3, 0xee01) syz_open_dev$sndmidi(&(0x7f00000002c0), 0xc, 0x100) 21.401024899s ago: executing program 3 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) sigaltstack(0x0, &(0x7f0000001500)={0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0xce3, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r7, 0xff010000, 0x0, 0x2000402) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) chroot(0x0) 21.397843818s ago: executing program 0 (id=523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000)=r4, 0x8) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) socket$vsock_stream(0x28, 0x1, 0x0) 21.274176566s ago: executing program 4 (id=524): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000100)={0x7, {0xf8000002, 0x9, 0x8, 0xb}}) fchdir(r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x6, 0x1, 0xfffffffffffffffd, 0x0) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) 21.03797586s ago: executing program 0 (id=525): syz_emit_vhci(&(0x7f0000001640)=ANY=[@ANYBLOB="0417060000000000003de125b16391e238aaa81b2a8c753b9ca344cf71e0a630a93d064e8a26bd13e1b726ffe36774cb9d79d3274d60c2299c5769a50fae198bedf6005eac6ebb96365caae5bc57"], 0x9) syz_open_dev$dri(0x0, 0x1, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r1 = epoll_create(0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="14002c8008000000"], 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x105000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x20008000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000010}) syz_open_pts(r0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000006988e5be0180000020000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f00000004c0)=""/4096) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r10, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x100000000000004, &(0x7f0000006680)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000180)=0x101, 0x8) 20.869491215s ago: executing program 3 (id=526): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r3, r5, 0x0, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000008100390086006002adf7c1ad8ecf945f1517000000000000000000000001ff0200000000000000000000000000018902040107fc00000000000000000000000000000000000102009078000000006003006300003a00ff01000000000000000000000000000100000000000000000000ffffac1414aa"], 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x1000005, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xb}}}, 0x24}}, 0x844) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 20.826928752s ago: executing program 2 (id=527): r0 = socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x15e1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000180)=0x8) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x5000000, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 20.145059648s ago: executing program 4 (id=528): socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0x6, 0x84f00) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x31) mbind(&(0x7f000078c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000180)=0x400000000000005, 0x1009, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa}, {0xa, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24"], 0x140}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5885, 0x101, 0x0, 0x30}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 19.412737665s ago: executing program 2 (id=529): syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="cf599d594a0987000000000086dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000103c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 19.216538367s ago: executing program 2 (id=530): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x100000000006, 0xfffffffffffffffc, 0xcb, 0x5, 0x0, 0x4002004c7, 0xffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffefffffffffff], 0xeeee8000, 0x1144}) r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x4f6, 0x10100, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x14) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x28, 0x3, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 32 (id=525): syz_emit_vhci(&(0x7f0000001640)=ANY=[@ANYBLOB="0417060000000000003de125b16391e238aaa81b2a8c753b9ca344cf71e0a630a93d064e8a26bd13e1b726ffe36774cb9d79d3274d60c2299c5769a50fae198bedf6005eac6ebb96365caae5bc57"], 0x9) syz_open_dev$dri(0x0, 0x1, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r1 = epoll_create(0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="14002c8008000000"], 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x105000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x20008000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000010}) syz_open_pts(r0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000006988e5be0180000020000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000030d0000000000000000000000000000000000004c5362d3b3c534bf3f8e8578e350fdfe814d3f20d64413e4e57cbd6d4eea8dc6d95cc62a0b81ca6e54f9b9de1ba8667da1fcbfde0056fdf57d1d5764a977307d81e3962ee9f2c9543b5ee6a28f073c985aaf0f06d40c9b158d1fb44aaacd2ae4c63f071503a06f0647d86c94491c8180af1752c4f696cdcf09a5840ebb8370d467d8d6476cddda52b6a0b75b901f086a9463861329b14fefb8076c46a6e5f7405cbf0c1f7d1ac21f802c053f35ffb288857a18d048903135512fc23252eeb5a641b1efaf126250b8b9ca5a0e5f75c1b8d4a5190f18c98f3e6faedacd29b062ce4396478c3a702c566a09"], 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f00000004c0)=""/4096) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r10, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x100000000000004, &(0x7f0000006680)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000180)=0x101, 0x8) kernel console output (not intermixed with test programs): } for pid=6605 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.943889][ T30] audit: type=1400 audit(1744294939.295:325): avc: denied { mount } for pid=6605 comm="syz.3.173" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.973095][ T30] audit: type=1400 audit(1744294939.305:326): avc: denied { read } for pid=6605 comm="syz.3.173" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.001336][ T30] audit: type=1400 audit(1744294939.305:327): avc: denied { open } for pid=6605 comm="syz.3.173" path="/32/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.068041][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 112.079737][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 112.209818][ T30] audit: type=1400 audit(1744294939.355:328): avc: denied { ioctl } for pid=6610 comm="syz.4.174" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10803 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.236057][ T30] audit: type=1400 audit(1744294939.355:329): avc: denied { read } for pid=6610 comm="syz.4.174" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.687113][ T30] audit: type=1400 audit(1744294939.355:330): avc: denied { open } for pid=6610 comm="syz.4.174" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.260593][ T54] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 113.666897][ T30] audit: type=1400 audit(1744294941.025:331): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.902702][ T30] audit: type=1400 audit(1744294941.245:332): avc: denied { ioctl } for pid=6639 comm="syz.2.182" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 115.368614][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.581099][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.601597][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 115.625368][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.651860][ T9] usb 3-1: config 0 descriptor?? [ 115.680685][ T9] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 115.992019][ T47] usb 3-1: USB disconnect, device number 4 [ 117.000294][ T54] Bluetooth: hci0: command 0x0419 tx timeout [ 117.022011][ T6662] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.073565][ T6662] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 117.248470][ T6684] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 117.308458][ T6687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.320684][ T54] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 117.329089][ T54] Bluetooth: hci4: Injecting HCI hardware error event [ 117.336640][ T54] Bluetooth: hci4: hardware error 0x00 [ 117.506120][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 117.506135][ T30] audit: type=1400 audit(1744294944.855:337): avc: denied { connect } for pid=6688 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.838813][ T30] audit: type=1400 audit(1744294945.195:338): avc: denied { shutdown } for pid=6688 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.942083][ T6662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.955964][ T6662] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 117.967990][ T6662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.013028][ T6662] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 118.037659][ T6662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.043660][ T6662] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 118.072773][ T6695] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 118.504046][ T6713] netlink: 'syz.4.200': attribute type 10 has an invalid length. [ 118.512278][ T6713] syz_tun: entered promiscuous mode [ 118.525738][ T6713] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 118.586923][ T6715] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 118.979087][ T6720] [U] [ 118.981860][ T6720] [U] [ 118.984521][ T6720] [U] [ 118.987193][ T6720] [U] [ 118.992301][ T6720] [U] [ 118.995007][ T6720] [U] [ 118.997670][ T6720] [U] [ 119.000348][ T6720] [U] [ 119.003490][ T6720] [U] [ 119.006175][ T6720] [U] [ 119.008835][ T6720] [U] [ 119.011502][ T6720] [U] [ 119.014397][ T6720] [U] [ 119.017081][ T6720] [U] [ 119.019749][ T6720] [U] [ 119.022416][ T6720] [U] [ 119.025234][ T6720] [U] [ 119.027921][ T6720] [U] [ 119.030598][ T6720] [U] [ 119.033272][ T6720] [U] [ 119.037301][ T6720] [U] [ 119.040006][ T6720] [U] [ 119.042695][ T6720] [U] [ 119.045378][ T6720] [U] [ 119.048748][ T6720] [U] [ 119.051452][ T6720] [U] [ 119.054138][ T6720] [U] [ 119.056824][ T6720] [U] [ 119.059617][ T6720] [U] [ 119.062313][ T6720] [U] [ 119.064984][ T6720] [U] [ 119.067653][ T6720] [U] [ 119.070556][ T6720] [U] [ 119.073247][ T6720] [U] [ 119.075936][ T6720] [U] [ 119.078626][ T6720] [U] [ 119.096546][ T6720] [U] [ 119.099239][ T6720] [U] [ 119.101907][ T6720] [U] [ 119.104581][ T6720] [U] [ 119.107813][ T6720] [U] [ 119.110515][ T6720] [U] [ 119.113201][ T6720] [U] [ 119.115896][ T6720] [U] [ 119.116194][ T30] audit: type=1400 audit(1744294946.475:339): avc: denied { write } for pid=6722 comm="syz.1.204" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.184521][ T30] audit: type=1400 audit(1744294946.525:340): avc: denied { create } for pid=6722 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.220175][ T6720] [U] [ 119.222892][ T6720] [U] [ 119.225582][ T6720] [U] [ 119.228278][ T6720] [U] [ 119.238054][ T6720] [U] [ 119.240762][ T6720] [U] [ 119.243450][ T6720] [U] [ 119.246131][ T6720] [U] [ 119.258312][ T30] audit: type=1400 audit(1744294946.615:341): avc: denied { connect } for pid=6724 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.273181][ T6720] [U] [ 119.280269][ T6720] [U] [ 119.282952][ T6720] [U] [ 119.285640][ T6720] [U] [ 119.331538][ T6720] [U] [ 119.334255][ T6720] [U] [ 119.336948][ T6720] [U] [ 119.339638][ T6720] [U] [ 119.370988][ T6720] [U] [ 119.373703][ T6720] [U] [ 119.376395][ T6720] [U] [ 119.379083][ T6720] [U] [ 119.382787][ T6720] [U] [ 119.385456][ T6720] [U] [ 119.388108][ T6720] [U] [ 119.390767][ T6720] [U] [ 119.395051][ T54] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 119.402029][ T6720] [U] [ 119.404706][ T6720] [U] [ 119.407364][ T6720] [U] [ 119.410022][ T6720] [U] [ 119.415479][ T6720] [U] [ 119.418156][ T6720] [U] [ 119.420813][ T6720] [U] [ 119.423470][ T6720] [U] [ 119.428348][ T6720] [U] [ 119.431040][ T6720] [U] [ 119.431169][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.433703][ T6720] [U] [ 119.433727][ T6720] [U] [ 119.472614][ T6720] [U] [ 119.475327][ T6720] [U] [ 119.478022][ T6720] [U] [ 119.480709][ T6720] [U] [ 119.500963][ T6720] [U] [ 119.503673][ T6720] [U] [ 119.506369][ T6720] [U] [ 119.509063][ T6720] [U] [ 119.517183][ T6720] [U] [ 119.519884][ T6720] [U] [ 119.522571][ T6720] [U] [ 119.523529][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.525239][ T6720] [U] [ 119.536808][ T6720] [U] [ 119.539500][ T6720] [U] [ 119.542175][ T6720] [U] [ 119.544842][ T6720] [U] [ 119.556411][ T6720] [U] [ 119.559118][ T6720] [U] [ 119.561807][ T6720] [U] [ 119.564498][ T6720] [U] [ 119.587050][ T6720] [U] [ 119.589759][ T6720] [U] [ 119.592444][ T6720] [U] [ 119.595113][ T6720] [U] [ 119.610511][ T6720] [U] [ 119.613214][ T6720] [U] [ 119.613348][ T30] audit: type=1400 audit(1744294946.975:342): avc: denied { read } for pid=6740 comm="syz.3.208" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 119.615882][ T6720] [U] [ 119.615908][ T6720] [U] [ 119.651932][ T30] audit: type=1400 audit(1744294947.005:343): avc: denied { open } for pid=6740 comm="syz.3.208" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 119.686711][ T6720] [U] [ 119.689401][ T6720] [U] [ 119.692058][ T6720] [U] [ 119.694732][ T6720] [U] [ 119.701226][ T6720] [U] [ 119.703917][ T6720] [U] [ 119.706585][ T6720] [U] [ 119.709253][ T6720] [U] [ 119.712018][ T6720] [U] [ 119.714706][ T6720] [U] [ 119.717392][ T6720] [U] [ 119.720081][ T6720] [U] [ 119.722813][ T6720] [U] [ 119.725501][ T6720] [U] [ 119.728193][ T6720] [U] [ 119.730884][ T6720] [U] [ 119.747297][ T6742] syz.2.207: attempt to access beyond end of device [ 119.747297][ T6742] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 119.781968][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 119.789659][ T6720] [U] [ 119.792372][ T6720] [U] [ 119.795058][ T6720] [U] [ 119.798363][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.824130][ T6742] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 119.971485][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 120.008378][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.095433][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.124818][ T47] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 120.136069][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.162284][ T47] usb 5-1: Product: syz [ 120.166496][ T47] usb 5-1: Manufacturer: syz [ 120.172793][ T47] usb 5-1: SerialNumber: syz [ 120.493427][ T47] usb 5-1: config 0 descriptor?? [ 120.522815][ T47] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 120.543088][ T30] audit: type=1400 audit(1744294947.905:344): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2801 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.567940][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.808335][ T6755] openvswitch: netlink: IP tunnel TTL not specified. [ 120.825048][ T30] audit: type=1400 audit(1744294948.185:345): avc: denied { create } for pid=6719 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.844500][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.882782][ T6719] [U] [ 120.901808][ T47] imon:send_packet: packet tx failed (-71) [ 120.955742][ T47] imon 5-1:0.0: panel buttons/knobs setup failed [ 121.109417][ T30] audit: type=1400 audit(1744294948.465:346): avc: denied { write } for pid=6765 comm="syz.1.218" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 121.132374][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.352658][ T47] rc_core: IR keymap rc-imon-pad not found [ 121.363771][ T47] Registered IR keymap rc-empty [ 121.393297][ T47] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 121.658719][ T47] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 121.737850][ T47] imon:send_packet: packet tx failed (-71) [ 121.780957][ T47] imon 5-1:0.0: remote input dev register failed [ 121.812173][ T47] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 122.243152][ T47] imon 5-1:0.0: unable to initialize intf0, err 0 [ 122.260695][ T47] imon:imon_probe: failed to initialize context! [ 122.290442][ T47] imon 5-1:0.0: unable to register, err -19 [ 122.345548][ T47] usb 5-1: USB disconnect, device number 3 [ 122.509920][ T6777] fuse: Unknown parameter '017777777777777777777770x000000000000000cÿ00000000000000000000014' [ 122.706179][ T6782] netlink: 44 bytes leftover after parsing attributes in process `syz.3.222'. [ 122.715992][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 122.716017][ T30] audit: type=1400 audit(1744294950.055:352): avc: denied { read write } for pid=6775 comm="syz.3.222" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.520266][ T30] audit: type=1400 audit(1744294950.055:353): avc: denied { open } for pid=6775 comm="syz.3.222" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.894412][ T6786] netlink: 44 bytes leftover after parsing attributes in process `syz.4.223'. [ 125.973347][ T6790] gtp0: entered promiscuous mode [ 126.515199][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.569688][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 126.804692][ T6801] Bluetooth: MGMT ver 1.23 [ 127.271475][ T6804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.759612][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 127.767691][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.779231][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.798516][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 127.808276][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.822136][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.831203][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.846477][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 127.849562][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.855790][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.876611][ T10] usb 4-1: config 0 descriptor?? [ 127.884681][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 127.895908][ T9] usb 3-1: Product: syz [ 127.905370][ T9] usb 3-1: Manufacturer: syz [ 127.912052][ T9] usb 3-1: SerialNumber: syz [ 127.918576][ T9] usb 3-1: config 0 descriptor?? [ 127.925731][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.949302][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 127.987514][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.012340][ T30] audit: type=1400 audit(1744294955.375:354): avc: denied { mount } for pid=6812 comm="syz.1.234" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.035600][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 128.044577][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 128.058210][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 128.070555][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.083943][ T47] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 128.095260][ T47] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 128.104711][ T47] usb 5-1: Product: syz [ 128.108863][ T47] usb 5-1: Manufacturer: syz [ 128.115223][ T47] usb 5-1: SerialNumber: syz [ 128.122987][ T47] usb 5-1: config 0 descriptor?? [ 128.134638][ T9] usb 3-1: USB disconnect, device number 5 [ 128.134728][ T47] smsusb:smsusb_probe: board id=2, interface number 0 [ 128.159340][ T47] smsusb:smsusb_probe: Device initialized with return code -19 [ 128.337076][ T30] audit: type=1400 audit(1744294955.695:355): avc: denied { create } for pid=6805 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.392373][ T30] audit: type=1400 audit(1744294955.755:356): avc: denied { connect } for pid=6805 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.412087][ T30] audit: type=1400 audit(1744294955.765:357): avc: denied { write } for pid=6805 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.456286][ T6806] netlink: 'syz.4.230': attribute type 10 has an invalid length. [ 128.466709][ T9] usb 5-1: USB disconnect, device number 4 [ 128.722783][ T6824] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 129.054646][ T6831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.237'. [ 129.511038][ T9] usb 4-1: USB disconnect, device number 4 [ 130.743554][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 130.765462][ T6845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.829574][ T6844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.241'. [ 131.055054][ T30] audit: type=1400 audit(1744294958.405:358): avc: denied { create } for pid=6848 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.174893][ T30] audit: type=1400 audit(1744294958.405:359): avc: denied { write } for pid=6848 comm="syz.3.243" path="socket:[12187]" dev="sockfs" ino=12187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 131.282241][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.246'. [ 131.501188][ T6865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.247'. [ 131.591383][ T6868] netlink: 64 bytes leftover after parsing attributes in process `syz.4.246'. [ 131.628260][ T6868] block device autoloading is deprecated and will be removed. [ 132.354554][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.361308][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.761504][ T30] audit: type=1400 audit(1744294960.125:360): avc: denied { mount } for pid=6887 comm="syz.4.255" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 132.811710][ T30] audit: type=1400 audit(1744294960.125:361): avc: denied { write } for pid=6887 comm="syz.4.255" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.834804][ T30] audit: type=1400 audit(1744294960.125:362): avc: denied { add_name } for pid=6887 comm="syz.4.255" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.901113][ T30] audit: type=1400 audit(1744294960.125:363): avc: denied { create } for pid=6887 comm="syz.4.255" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.250253][ T6896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.869705][ T5902] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.098933][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 134.108039][ T5902] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 134.117818][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.126263][ T5902] usb 2-1: Product: syz [ 134.130612][ T5902] usb 2-1: Manufacturer: syz [ 134.135197][ T5902] usb 2-1: SerialNumber: syz [ 134.154224][ T5902] usb 2-1: config 0 descriptor?? [ 134.707816][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 134.742217][ T6916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.744460][ T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.786050][ T6923] FAULT_INJECTION: forcing a failure. [ 134.786050][ T6923] name failslab, interval 1, probability 0, space 0, times 0 [ 134.802869][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.3.266 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 134.802892][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.802901][ T6923] Call Trace: [ 134.802906][ T6923] [ 134.802913][ T6923] dump_stack_lvl+0x16c/0x1f0 [ 134.802938][ T6923] should_fail_ex+0x512/0x640 [ 134.802955][ T6923] ? __kmalloc_noprof+0xbf/0x510 [ 134.802973][ T6923] ? memcg_list_lru_alloc+0x4e9/0x740 [ 134.802991][ T6923] should_failslab+0xc2/0x120 [ 134.803010][ T6923] __kmalloc_noprof+0xd2/0x510 [ 134.803030][ T6923] memcg_list_lru_alloc+0x4e9/0x740 [ 134.803054][ T6923] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 134.803085][ T6923] __memcg_slab_post_alloc_hook+0x131/0x940 [ 134.803109][ T6923] ? kasan_save_track+0x14/0x30 [ 134.803126][ T6923] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 134.803142][ T6923] ? find_inode_fast+0x1e9/0x600 [ 134.803162][ T6923] ? __d_alloc+0x31/0xaa0 [ 134.803182][ T6923] __d_alloc+0x31/0xaa0 [ 134.803203][ T6923] d_alloc_pseudo+0x1c/0xc0 [ 134.803220][ T6923] alloc_file_pseudo_noaccount+0xcf/0x230 [ 134.803238][ T6923] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 134.803253][ T6923] ? iput+0xd3/0x880 [ 134.803271][ T6923] bdev_file_open_by_dev+0x13e/0x210 [ 134.803287][ T6923] setup_bdev_super+0x39b/0x730 [ 134.803308][ T6923] get_tree_bdev_flags+0x363/0x620 [ 134.803320][ T6923] ? __pfx_befs_fill_super+0x10/0x10 [ 134.803339][ T6923] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 134.803353][ T6923] ? bpf_lsm_capable+0x9/0x10 [ 134.803365][ T6923] ? security_capable+0x7e/0x260 [ 134.803380][ T6923] vfs_get_tree+0x8b/0x340 [ 134.803400][ T6923] path_mount+0x14d4/0x1f30 [ 134.803418][ T6923] ? kmem_cache_free+0x2d4/0x4d0 [ 134.803432][ T6923] ? __pfx_path_mount+0x10/0x10 [ 134.803453][ T6923] ? putname+0x154/0x1a0 [ 134.803473][ T6923] __x64_sys_mount+0x28d/0x310 [ 134.803492][ T6923] ? __pfx___x64_sys_mount+0x10/0x10 [ 134.803515][ T6923] do_syscall_64+0xcd/0x260 [ 134.803539][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.803554][ T6923] RIP: 0033:0x7f936478d169 [ 134.803568][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.803583][ T6923] RSP: 002b:00007f9365541038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.803599][ T6923] RAX: ffffffffffffffda RBX: 00007f93649a5fa0 RCX: 00007f936478d169 [ 134.803609][ T6923] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000200000000280 [ 134.803619][ T6923] RBP: 00007f9365541090 R08: 0000000000000000 R09: 0000000000000000 [ 134.803628][ T6923] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 134.803638][ T6923] R13: 0000000000000001 R14: 00007f93649a5fa0 R15: 00007ffc9ea3a0b8 [ 134.803660][ T6923] [ 134.806817][ T6923] /dev/nbd3: Can't open blockdev [ 135.037014][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.109538][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 135.117797][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.135061][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.156667][ T47] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.208802][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.235429][ T47] usb 3-1: config 0 descriptor?? [ 135.282615][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 135.282629][ T30] audit: type=1400 audit(1744294962.645:366): avc: denied { setopt } for pid=6928 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 135.312371][ T6930] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 135.321189][ T6930] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 135.329812][ T6930] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 135.337631][ T6930] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 135.345943][ T30] audit: type=1400 audit(1744294962.675:367): avc: denied { create } for pid=6928 comm="syz.4.269" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.386739][ T30] audit: type=1400 audit(1744294962.745:368): avc: denied { unlink } for pid=5822 comm="syz-executor" name="file0" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.410117][ T5902] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 135.431870][ T30] audit: type=1400 audit(1744294962.795:369): avc: denied { ioctl } for pid=6931 comm="syz.4.270" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.465481][ T47] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.649020][ T30] audit: type=1400 audit(1744294963.005:370): avc: denied { write } for pid=6908 comm="syz.2.262" name="iowarrior0" dev="devtmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.679876][ T5930] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 135.820681][ T5930] usb 5-1: device descriptor read/64, error -71 [ 135.942540][ T47] usb 3-1: USB disconnect, device number 6 [ 135.991667][ T6936] Invalid source name [ 135.995694][ T6936] UBIFS error (pid: 6936): cannot open "ubifs", error -22 [ 136.053898][ T30] audit: type=1400 audit(1744294963.415:371): avc: denied { getopt } for pid=6937 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.082112][ T5930] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 136.184112][ T30] audit: type=1400 audit(1744294963.525:372): avc: denied { map } for pid=6939 comm="syz.3.273" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 136.208090][ T30] audit: type=1400 audit(1744294963.525:373): avc: denied { execute } for pid=6939 comm="syz.3.273" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 136.249622][ T5930] usb 5-1: device descriptor read/64, error -71 [ 136.360848][ T5930] usb usb5-port1: attempt power cycle [ 136.434431][ T5902] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 136.585372][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 136.594783][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 136.639785][ T10] usb 2-1: USB disconnect, device number 5 [ 136.719560][ T5930] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 136.754295][ T5930] usb 5-1: device descriptor read/8, error -71 [ 137.019575][ T5930] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 137.042683][ T5930] usb 5-1: device descriptor read/8, error -71 [ 137.049681][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.275'. [ 137.207110][ T5930] usb usb5-port1: unable to enumerate USB device [ 137.362641][ T6961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.279'. [ 137.855437][ T30] audit: type=1400 audit(1744294965.215:374): avc: denied { ioctl } for pid=6965 comm="syz.1.280" path="socket:[12624]" dev="sockfs" ino=12624 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.038108][ T30] audit: type=1400 audit(1744294965.395:375): avc: denied { audit_write } for pid=6970 comm="syz.0.282" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.234420][ T6974] : renamed from bond0 (while UP) [ 139.340593][ T5916] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 139.729553][ T3187] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.760851][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.772762][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 139.792663][ T5916] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 139.811922][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.833073][ T5916] usb 5-1: config 0 descriptor?? [ 139.839833][ T6977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.891114][ T3187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.912071][ T3187] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 139.947968][ T3187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.967295][ T3187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.985741][ T3187] usb 3-1: Product: syz [ 139.994531][ T3187] usb 3-1: Manufacturer: syz [ 139.999202][ T3187] usb 3-1: SerialNumber: syz [ 140.208253][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.216785][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.241088][ T5930] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.262722][ T3187] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.411861][ T3187] usb 3-1: USB disconnect, device number 7 [ 140.464133][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 140.500022][ T5930] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.511279][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.526333][ T5930] usb 4-1: Product: syz [ 140.533491][ T5930] usb 4-1: Manufacturer: syz [ 140.539756][ T5930] usb 4-1: SerialNumber: syz [ 140.547476][ T5930] usb 4-1: config 0 descriptor?? [ 140.759579][ T3187] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.761235][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.777300][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.909657][ T3187] usb 3-1: Using ep0 maxpacket: 8 [ 140.916132][ T3187] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 140.924420][ T3187] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 140.934787][ T3187] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.944606][ T3187] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.955348][ T3187] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 140.965515][ T3187] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 140.976887][ T3187] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.985975][ T3187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.994391][ T5930] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 141.158917][ T5916] usb 5-1: USB disconnect, device number 9 [ 141.201235][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.201463][ T3187] usb 3-1: usb_control_msg returned -32 [ 141.224268][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.227654][ T3187] usbtmc 3-1:16.0: can't read capabilities [ 141.331521][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 141.331535][ T30] audit: type=1400 audit(1744294968.685:384): avc: denied { name_bind } for pid=7001 comm="syz.4.291" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 141.433793][ T5902] usb 3-1: USB disconnect, device number 8 [ 141.482958][ T30] audit: type=1400 audit(1744294968.845:385): avc: denied { ioctl } for pid=7003 comm="syz.2.292" path="socket:[12705]" dev="sockfs" ino=12705 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.669642][ T3187] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 142.182361][ T3187] usb 5-1: Using ep0 maxpacket: 16 [ 142.193645][ T3187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.222479][ T3187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.238223][ T3187] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.249007][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 142.259429][ T3187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.270888][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 142.282154][ T3187] usb 5-1: Product: syz [ 142.286423][ T3187] usb 5-1: Manufacturer: syz [ 142.292367][ T3187] usb 5-1: SerialNumber: syz [ 142.314671][ T5930] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 142.355222][ T5930] usb 4-1: USB disconnect, device number 5 [ 142.642074][ T30] audit: type=1400 audit(1744294970.005:386): avc: denied { create } for pid=7024 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.663669][ T30] audit: type=1400 audit(1744294970.005:387): avc: denied { setopt } for pid=7024 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.725228][ T3187] usb 5-1: cannot find UAC_HEADER [ 142.782303][ T3187] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 142.802966][ T3187] usb 5-1: USB disconnect, device number 10 [ 143.342941][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.150003][ T30] audit: type=1400 audit(1744294971.495:388): avc: denied { getopt } for pid=7042 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 144.763451][ T7055] process 'syz.0.306' launched './file0' with NULL argv: empty string added [ 144.817206][ T30] audit: type=1400 audit(1744294972.125:389): avc: denied { execute } for pid=7050 comm="syz.0.306" name="file0" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.188663][ T30] audit: type=1400 audit(1744294972.135:390): avc: denied { execute_no_trans } for pid=7050 comm="syz.0.306" path="/52/file0" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.632022][ T30] audit: type=1400 audit(1744294972.985:391): avc: denied { write } for pid=7061 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.747849][ T30] audit: type=1400 audit(1744294972.985:392): avc: denied { name_connect } for pid=7061 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 145.789402][ T7071] netlink: 'syz.0.310': attribute type 25 has an invalid length. [ 145.801513][ T7071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'. [ 145.896163][ T7060] usb usb1: usbfs: process 7060 (syz.4.309) did not claim interface 0 before use [ 146.010579][ T30] audit: type=1400 audit(1744294973.045:393): avc: denied { read write } for pid=7066 comm="syz.0.310" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 147.383455][ T7095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.315'. [ 149.087584][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 149.087602][ T30] audit: type=1400 audit(1744294976.225:395): avc: denied { bind } for pid=7099 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.190884][ T7116] FAULT_INJECTION: forcing a failure. [ 149.190884][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 149.204196][ T7116] CPU: 0 UID: 0 PID: 7116 Comm: syz.2.321 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 149.204220][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.204229][ T7116] Call Trace: [ 149.204235][ T7116] [ 149.204241][ T7116] dump_stack_lvl+0x16c/0x1f0 [ 149.204267][ T7116] should_fail_ex+0x512/0x640 [ 149.204280][ T7116] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 149.204293][ T7116] should_failslab+0xc2/0x120 [ 149.204305][ T7116] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 149.204315][ T7116] ? getname_flags.part.0+0x48/0x540 [ 149.204328][ T7116] ? lock_vma_under_rcu+0x47d/0x970 [ 149.204343][ T7116] getname_flags.part.0+0x48/0x540 [ 149.204356][ T7116] getname_flags+0x93/0xf0 [ 149.204372][ T7116] do_sys_openat2+0xb8/0x1d0 [ 149.204383][ T7116] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.204401][ T7116] __x64_sys_openat+0x174/0x210 [ 149.204413][ T7116] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.204426][ T7116] ? do_user_addr_fault+0x843/0x1370 [ 149.204441][ T7116] do_syscall_64+0xcd/0x260 [ 149.204455][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.204465][ T7116] RIP: 0033:0x7f037278bad0 [ 149.204474][ T7116] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 149.204483][ T7116] RSP: 002b:00007f0373522ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 149.204493][ T7116] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f037278bad0 [ 149.204499][ T7116] RDX: 0000000000000002 RSI: 00007f037280e414 RDI: 00000000ffffff9c [ 149.204505][ T7116] RBP: 00007f037280e414 R08: 0000000000000000 R09: 0000000000000000 [ 149.204517][ T7116] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 149.204522][ T7116] R13: 0000000000000036 R14: 0000200000000040 R15: 00007ffe2fbd92f8 [ 149.204535][ T7116] [ 149.391226][ T30] audit: type=1400 audit(1744294976.555:396): avc: denied { map } for pid=7113 comm="syz.2.321" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.789677][ T47] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.963504][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 149.971830][ T47] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 149.980069][ T47] usb 5-1: can't read configurations, error -61 [ 150.122277][ T47] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.286861][ T30] audit: type=1400 audit(1744294977.615:397): avc: granted { setsecparam } for pid=7135 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 150.313027][ T30] audit: type=1400 audit(1744294977.615:398): avc: granted { setsecparam } for pid=7135 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 150.407425][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 150.423064][ T47] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 150.434954][ T47] usb 5-1: can't read configurations, error -61 [ 150.450247][ T6536] Bluetooth: Error in BCSP hdr checksum [ 150.462607][ T47] usb usb5-port1: attempt power cycle [ 150.463799][ T7139] xt_socket: unknown flags 0xc [ 151.059826][ T47] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.113758][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 151.124385][ T47] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 151.150237][ T47] usb 5-1: can't read configurations, error -61 [ 151.207391][ T30] audit: type=1400 audit(1744294978.565:399): avc: denied { sqpoll } for pid=7147 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 151.389653][ T47] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 151.566711][ T30] audit: type=1400 audit(1744294978.925:400): avc: denied { module_request } for pid=7147 comm="syz.1.331" kmod="net-pf-2-proto-9-type-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 151.795029][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 151.837147][ T47] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 151.846859][ T47] usb 5-1: can't read configurations, error -61 [ 151.859956][ T47] usb usb5-port1: unable to enumerate USB device [ 151.885987][ T30] audit: type=1400 audit(1744294979.245:401): avc: denied { read write } for pid=5831 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.938468][ T30] audit: type=1400 audit(1744294979.275:402): avc: denied { open } for pid=5831 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.967409][ T30] audit: type=1400 audit(1744294979.275:403): avc: denied { ioctl } for pid=5831 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.998011][ T30] audit: type=1400 audit(1744294979.365:404): avc: denied { setopt } for pid=7155 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.509606][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 152.516490][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.536975][ T7167] FAULT_INJECTION: forcing a failure. [ 152.536975][ T7167] name failslab, interval 1, probability 0, space 0, times 0 [ 152.549728][ T7167] CPU: 1 UID: 0 PID: 7167 Comm: syz.4.337 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 152.549751][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.549760][ T7167] Call Trace: [ 152.549766][ T7167] [ 152.549772][ T7167] dump_stack_lvl+0x16c/0x1f0 [ 152.549798][ T7167] should_fail_ex+0x512/0x640 [ 152.549815][ T7167] ? fs_reclaim_acquire+0xae/0x150 [ 152.549841][ T7167] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 152.549864][ T7167] should_failslab+0xc2/0x120 [ 152.549883][ T7167] __kmalloc_noprof+0xd2/0x510 [ 152.549905][ T7167] tomoyo_realpath_from_path+0xc2/0x6e0 [ 152.549930][ T7167] ? tomoyo_profile+0x47/0x60 [ 152.549948][ T7167] tomoyo_path_number_perm+0x245/0x580 [ 152.549967][ T7167] ? tomoyo_path_number_perm+0x237/0x580 [ 152.549989][ T7167] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.550010][ T7167] ? find_held_lock+0x2b/0x80 [ 152.550052][ T7167] ? find_held_lock+0x2b/0x80 [ 152.550070][ T7167] ? hook_file_ioctl_common+0x145/0x410 [ 152.550092][ T7167] ? __fget_files+0x20e/0x3c0 [ 152.550112][ T7167] security_file_ioctl+0x9b/0x240 [ 152.550137][ T7167] __x64_sys_ioctl+0xb7/0x200 [ 152.550161][ T7167] do_syscall_64+0xcd/0x260 [ 152.550183][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.550200][ T7167] RIP: 0033:0x7efc21f8d169 [ 152.550213][ T7167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.550228][ T7167] RSP: 002b:00007efc22e30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.550244][ T7167] RAX: ffffffffffffffda RBX: 00007efc221a5fa0 RCX: 00007efc21f8d169 [ 152.550254][ T7167] RDX: 0000200000000080 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 152.550263][ T7167] RBP: 00007efc22e30090 R08: 0000000000000000 R09: 0000000000000000 [ 152.550272][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.550281][ T7167] R13: 0000000000000000 R14: 00007efc221a5fa0 R15: 00007ffdb4d4e208 [ 152.550304][ T7167] [ 152.550310][ T7167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.023398][ T7188] netlink: 'syz.1.343': attribute type 10 has an invalid length. [ 154.050067][ T7188] veth1_vlan: entered allmulticast mode [ 154.399306][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 154.399319][ T30] audit: type=1400 audit(1744294981.755:532): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.429862][ T30] audit: type=1400 audit(1744294981.755:533): avc: denied { read write open } for pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.455100][ T30] audit: type=1400 audit(1744294981.795:534): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.556220][ T30] audit: type=1400 audit(1744294981.905:535): avc: denied { read write } for pid=5818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.694678][ T30] audit: type=1400 audit(1744294981.905:536): avc: denied { open } for pid=5818 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.728971][ T30] audit: type=1400 audit(1744294981.905:537): avc: denied { ioctl } for pid=5818 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.109655][ T5930] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 155.188077][ T30] audit: type=1400 audit(1744294981.955:538): avc: denied { read write } for pid=5831 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.219834][ T30] audit: type=1400 audit(1744294981.955:539): avc: denied { open } for pid=5831 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.252701][ T30] audit: type=1400 audit(1744294981.955:540): avc: denied { ioctl } for pid=5831 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.295936][ T30] audit: type=1400 audit(1744294981.965:541): avc: denied { create } for pid=7189 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.414659][ T5930] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 155.430704][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 155.442187][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.443236][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 155.470027][ T5930] usb 4-1: config 0 has no interface number 0 [ 155.485670][ T5930] usb 4-1: config 0 interface 235 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.570516][ T5930] usb 4-1: config 0 interface 235 has no altsetting 0 [ 155.592226][ T5930] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 155.602768][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.623025][ T5930] usb 4-1: Product: syz [ 155.634345][ T5930] usb 4-1: Manufacturer: syz [ 155.647209][ T5930] usb 4-1: SerialNumber: syz [ 155.665172][ T5930] usb 4-1: config 0 descriptor?? [ 155.692723][ T5930] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 155.719067][ T5930] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 155.754033][ T5930] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 155.785494][ T5930] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 155.797415][ T5930] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 155.806162][ T5930] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 155.814419][ T5930] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 5 [ 155.834652][ T5930] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 156.011585][ T3187] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.172614][ T3187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.197806][ T3187] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.242046][ T3187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.279884][ T3187] usb 5-1: config 0 descriptor?? [ 156.306187][ T3187] pwc: Askey VC010 type 2 USB webcam detected. [ 156.438766][ T7209] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 156.837738][ T3187] pwc: recv_control_msg error -32 req 02 val 2b00 [ 156.884780][ T3187] pwc: recv_control_msg error -32 req 02 val 2700 [ 156.912448][ T3187] pwc: recv_control_msg error -32 req 02 val 2c00 [ 156.940160][ T3187] pwc: recv_control_msg error -32 req 04 val 1000 [ 157.002882][ T7206] Falling back ldisc for ttyS3. [ 157.019796][ T3187] pwc: recv_control_msg error -32 req 04 val 1300 [ 157.028366][ T3187] pwc: recv_control_msg error -32 req 04 val 1400 [ 157.038549][ T3187] pwc: recv_control_msg error -32 req 02 val 2000 [ 157.045876][ T3187] pwc: recv_control_msg error -32 req 02 val 2100 [ 157.512228][ T3187] pwc: recv_control_msg error -32 req 02 val 2500 [ 157.908360][ T5916] usb 4-1: USB disconnect, device number 6 [ 157.925950][ T5916] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 157.967334][ T7231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 157.974026][ T7231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.980726][ T7231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 157.987098][ T7231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.993943][ T7231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.000332][ T7231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.007099][ T7231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.013483][ T7231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.020318][ T7231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.026688][ T7231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.180527][ T5916] keyspan 4-1:0.235: device disconnected [ 158.208614][ T3187] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.502521][ T3187] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.522535][ T3187] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.541235][ T3187] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.550544][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 158.989362][ T7240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.358'. [ 159.042755][ T7242] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 159.042904][ T7234] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 159.243317][ T3187] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.254043][ T3187] pwc: Registered as video103. [ 159.260593][ T3187] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 159.296096][ T3187] usb 5-1: USB disconnect, device number 15 [ 159.449837][ T30] kauditd_printk_skb: 268 callbacks suppressed [ 159.449852][ T30] audit: type=1400 audit(1744294986.805:810): avc: denied { read write } for pid=5818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.480193][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.844513][ T30] audit: type=1400 audit(1744294986.805:811): avc: denied { open } for pid=5818 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.936421][ T7250] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 160.036671][ T30] audit: type=1400 audit(1744294986.805:812): avc: denied { ioctl } for pid=5818 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.062139][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.145005][ T7257] loop6: detected capacity change from 0 to 524287999 [ 160.174430][ T30] audit: type=1400 audit(1744294986.925:813): avc: denied { prog_load } for pid=7247 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 160.190634][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.202469][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.245539][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.254692][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.278343][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.287502][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.297682][ T30] audit: type=1400 audit(1744294986.925:814): avc: denied { bpf } for pid=7247 comm="syz.0.359" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.299512][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.319073][ T30] audit: type=1400 audit(1744294986.925:815): avc: denied { perfmon } for pid=7247 comm="syz.0.359" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.327152][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.406913][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.416067][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.426303][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.435437][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.443915][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.453068][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.468426][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.477551][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.485396][ T7257] ldm_validate_partition_table(): Disk read failed. [ 160.493823][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.502941][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.512138][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.521248][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 160.540977][ T7257] Dev loop6: unable to read RDB block 0 [ 160.548936][ T7257] loop6: unable to read partition table [ 160.555738][ T7257] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 160.594515][ T30] audit: type=1400 audit(1744294986.965:816): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.770676][ T7269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.852006][ T5178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.854561][ T7269] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.858563][ T5178] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 161.168565][ T7276] FAULT_INJECTION: forcing a failure. [ 161.168565][ T7276] name failslab, interval 1, probability 0, space 0, times 0 [ 161.181595][ T7276] CPU: 0 UID: 0 PID: 7276 Comm: syz.4.367 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 161.181616][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.181625][ T7276] Call Trace: [ 161.181630][ T7276] [ 161.181634][ T7276] dump_stack_lvl+0x16c/0x1f0 [ 161.181650][ T7276] should_fail_ex+0x512/0x640 [ 161.181663][ T7276] should_failslab+0xc2/0x120 [ 161.181675][ T7276] __kvmalloc_node_noprof+0x135/0x600 [ 161.181685][ T7276] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 161.181703][ T7276] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 161.181717][ T7276] file_tty_write.constprop.0+0x6ed/0x9b0 [ 161.181733][ T7276] ? rw_verify_area+0xcf/0x680 [ 161.181748][ T7276] vfs_write+0x5ba/0x1180 [ 161.181757][ T7276] ? __pfx_tty_write+0x10/0x10 [ 161.181772][ T7276] ? __pfx_vfs_write+0x10/0x10 [ 161.181779][ T7276] ? find_held_lock+0x2b/0x80 [ 161.181800][ T7276] ksys_write+0x12a/0x240 [ 161.181809][ T7276] ? __pfx_ksys_write+0x10/0x10 [ 161.181818][ T7276] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 161.181832][ T7276] do_syscall_64+0xcd/0x260 [ 161.181846][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.181855][ T7276] RIP: 0033:0x7efc21f8d169 [ 161.181864][ T7276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.181873][ T7276] RSP: 002b:00007efc22e0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.181883][ T7276] RAX: ffffffffffffffda RBX: 00007efc221a6080 RCX: 00007efc21f8d169 [ 161.181889][ T7276] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000008 [ 161.181895][ T7276] RBP: 00007efc22e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.181900][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.181906][ T7276] R13: 0000000000000000 R14: 00007efc221a6080 R15: 00007ffdb4d4e208 [ 161.181918][ T7276] [ 161.377622][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.618032][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 162.634325][ T7298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.372'. [ 162.689542][ T5902] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.020305][ T5902] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.028978][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.043871][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.054218][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.068934][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.131845][ T7307] usb usb1: usbfs: process 7307 (syz.1.373) did not claim interface 0 before use [ 163.690219][ T5902] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.717931][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.754076][ T5902] usb 4-1: Product: syz [ 163.758321][ T5902] usb 4-1: Manufacturer: syz [ 164.008469][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 164.105734][ T5902] cdc_wdm 4-1:1.0: skipping garbage [ 164.126904][ T5902] cdc_wdm 4-1:1.0: skipping garbage [ 164.422156][ T5902] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 164.525826][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 164.525842][ T30] audit: type=1400 audit(1744294991.795:1051): avc: denied { execmem } for pid=7290 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 164.554047][ T30] audit: type=1400 audit(1744294991.875:1052): avc: denied { create } for pid=7290 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.580894][ T5902] cdc_wdm 4-1:1.0: Unknown control protocol [ 164.580922][ T30] audit: type=1400 audit(1744294991.915:1053): avc: denied { read write } for pid=5818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.698331][ T7323] netlink: 80 bytes leftover after parsing attributes in process `syz.3.369'. [ 165.023264][ T30] audit: type=1400 audit(1744294991.915:1054): avc: denied { open } for pid=5818 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.047479][ T30] audit: type=1400 audit(1744294991.915:1055): avc: denied { ioctl } for pid=5818 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.307188][ T30] audit: type=1400 audit(1744294992.075:1056): avc: denied { read } for pid=7290 comm="syz.3.369" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.465400][ T30] audit: type=1400 audit(1744294992.195:1057): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 165.508442][ T30] audit: type=1400 audit(1744294992.195:1058): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.644884][ T30] audit: type=1400 audit(1744294992.195:1059): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.222404][ T5902] usb 4-1: USB disconnect, device number 7 [ 166.230283][ T30] audit: type=1400 audit(1744294992.195:1060): avc: denied { open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 166.620719][ T7344] 9pnet_fd: Insufficient options for proto=fd [ 166.622292][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 166.622337][ T7348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.385'. [ 167.186980][ T7340] syz.3.382: attempt to access beyond end of device [ 167.186980][ T7340] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 167.204313][ T7340] hfsplus: unable to find HFS+ superblock [ 167.227276][ T7340] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 167.267797][ T7340] cramfs: wrong magic [ 167.283895][ T7340] ======================================================= [ 167.283895][ T7340] WARNING: The mand mount option has been deprecated and [ 167.283895][ T7340] and is ignored by this kernel. Remove the mand [ 167.283895][ T7340] option from the mount to silence this warning. [ 167.283895][ T7340] ======================================================= [ 167.293848][ T7361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.388'. [ 167.318693][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.509549][ T7365] sg_write: data in/out 150995429/25 bytes for SCSI command 0x0-- guessing data in; [ 167.509549][ T7365] program syz.2.389 not setting count and/or reply_len properly [ 167.515301][ T7359] sp0: Synchronizing with TNC [ 167.759562][ T5930] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 167.917918][ T5930] usb 5-1: device descriptor read/64, error -71 [ 167.971370][ T7354] [U] è [ 168.339698][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.348550][ T5930] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 168.559612][ T5930] usb 5-1: device descriptor read/64, error -71 [ 168.639563][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.663566][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.689673][ T5930] usb usb5-port1: attempt power cycle [ 168.690286][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.744771][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.753010][ T7383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.394'. [ 168.867719][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.890298][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.904090][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.143913][ T5930] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 169.349819][ T10] usb 4-1: Product: syz [ 169.354010][ T10] usb 4-1: Manufacturer: syz [ 169.363660][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 169.370615][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 169.382171][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 169.402563][ T5930] usb 5-1: device descriptor read/8, error -71 [ 169.409156][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 169.569592][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 169.569607][ T30] audit: type=1400 audit(1744294996.925:1302): avc: denied { ioctl } for pid=7360 comm="syz.4.388" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.761787][ T5930] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 169.795910][ T30] audit: type=1400 audit(1744294997.085:1303): avc: denied { create } for pid=7388 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.980089][ T5930] usb 5-1: device descriptor read/8, error -71 [ 169.998193][ T30] audit: type=1400 audit(1744294997.105:1304): avc: denied { getopt } for pid=7388 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.035605][ T30] audit: type=1400 audit(1744294997.195:1305): avc: denied { ioctl } for pid=7360 comm="syz.4.388" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.071209][ T30] audit: type=1400 audit(1744294997.325:1306): avc: denied { create } for pid=7389 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.198709][ T5930] usb usb5-port1: unable to enumerate USB device [ 170.207597][ T30] audit: type=1400 audit(1744294997.335:1307): avc: denied { create } for pid=7389 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.227887][ T30] audit: type=1400 audit(1744294997.335:1308): avc: denied { getopt } for pid=7389 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.247978][ T30] audit: type=1400 audit(1744294997.335:1309): avc: denied { ioctl } for pid=7360 comm="syz.4.388" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.299926][ T30] audit: type=1400 audit(1744294997.355:1310): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 170.322212][ T30] audit: type=1400 audit(1744294997.355:1311): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.419964][ T7402] netlink: 80 bytes leftover after parsing attributes in process `syz.3.392'. [ 170.815383][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 170.824318][ T7405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.400'. [ 170.909242][ T7408] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 171.391907][ T7418] [U] [ 171.394714][ T7418] [U] [ 171.397378][ T7418] [U] [ 171.400056][ T7418] [U] [ 171.405426][ T7418] [U] [ 171.408132][ T7418] [U] [ 171.410814][ T7418] [U] [ 171.413499][ T7418] [U] [ 171.417774][ T7418] [U] [ 171.420471][ T7418] [U] [ 171.423144][ T7418] [U] [ 171.425801][ T7418] [U] [ 171.544192][ T7418] [U] [ 171.546918][ T7418] [U] [ 171.549598][ T7418] [U] [ 171.552276][ T7418] [U] [ 171.666406][ T7418] [U] [ 171.669132][ T7418] [U] [ 171.671826][ T7418] [U] [ 171.674504][ T7418] [U] [ 171.859190][ T5916] usb 4-1: USB disconnect, device number 8 [ 171.926933][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 171.939653][ T7418] [U] [ 171.942355][ T7418] [U] [ 171.945040][ T7418] [U] [ 171.947722][ T7418] [U] [ 171.982497][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.064559][ T7418] [U] ‘P [ 172.067456][ T7418] [U] [ 172.070149][ T7418] [U] [ 172.072842][ T7418] [U] [ 172.131760][ T7418] [U] [ 172.134487][ T7418] [U] [ 172.137176][ T7418] [U] [ 172.139871][ T7418] [U] [ 172.229384][ T7418] [U] [ 172.232106][ T7418] [U] [ 172.234802][ T7418] [U] [ 172.237493][ T7418] [U] [ 172.252226][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.253381][ T7418] [U] [ 172.265168][ T7418] [U] [ 172.267862][ T7418] [U] [ 172.270546][ T7418] [U] [ 172.349540][ T7427] usb usb1: usbfs: process 7427 (syz.3.408) did not claim interface 0 before use [ 172.367909][ T7418] [U] [ 172.370620][ T7418] [U] [ 172.373300][ T7418] [U] [ 172.375980][ T7418] [U] [ 172.750949][ T7418] [U] [ 172.753680][ T7418] [U] [ 172.756378][ T7418] [U] [ 172.759070][ T7418] [U] [ 172.770134][ T7418] [U] [ 172.772840][ T7418] [U] [ 172.775520][ T7418] [U] [ 172.778191][ T7418] [U] [ 172.793752][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.813539][ T7418] [U] [ 172.816253][ T7418] [U] [ 172.818941][ T7418] [U] [ 172.821628][ T7418] [U] [ 172.832660][ T7418] [U] [ 172.835365][ T7418] [U] [ 172.838053][ T7418] [U] [ 172.840745][ T7418] [U] [ 172.871879][ T7418] [U] [ 172.874605][ T7418] [U] [ 172.877301][ T7418] [U] [ 172.879993][ T7418] [U] [ 173.010296][ T7418] [U] [ 173.476537][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.905511][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.916166][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.925254][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.936096][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.936742][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 173.943495][ T69] bridge_slave_1: left allmulticast mode [ 173.959195][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.966833][ T69] bridge_slave_1: left promiscuous mode [ 173.975063][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.984830][ T7449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.415'. [ 173.990570][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.002178][ T69] bridge_slave_0: left allmulticast mode [ 174.008166][ T69] bridge_slave_0: left promiscuous mode [ 174.014163][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.022294][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.031402][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.035027][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.039820][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.845510][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.861157][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.861772][ T30] kauditd_printk_skb: 264 callbacks suppressed [ 174.861781][ T30] audit: type=1400 audit(1744295002.225:1576): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 174.899117][ T69] bond0 (unregistering): Released all slaves [ 174.899926][ T30] audit: type=1400 audit(1744295002.225:1577): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.927195][ T30] audit: type=1400 audit(1744295002.225:1578): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.961105][ T7454] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 175.038052][ T30] audit: type=1400 audit(1744295002.225:1579): avc: denied { open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.079536][ T30] audit: type=1400 audit(1744295002.225:1580): avc: denied { getattr } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.116034][ T30] audit: type=1400 audit(1744295002.395:1581): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.273258][ T30] audit: type=1400 audit(1744295002.395:1582): avc: denied { read write open } for pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.298848][ T30] audit: type=1400 audit(1744295002.395:1583): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.339921][ T30] audit: type=1400 audit(1744295002.445:1584): avc: denied { read write } for pid=5831 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.365745][ T30] audit: type=1400 audit(1744295002.445:1585): avc: denied { read write open } for pid=5831 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.460503][ T47] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 175.482473][ T7443] chnl_net:caif_netlink_parms(): no params data found [ 175.499783][ T5930] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 175.526728][ T69] hsr_slave_0: left promiscuous mode [ 175.533357][ T69] hsr_slave_1: left promiscuous mode [ 175.539026][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.546543][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.555694][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.564015][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.578312][ T69] veth1_macvtap: left promiscuous mode [ 175.584658][ T69] veth0_macvtap: left promiscuous mode [ 175.590573][ T69] veth0_vlan: left promiscuous mode [ 175.620161][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 175.627266][ T47] usb 5-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 175.640940][ T47] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 175.654573][ T47] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 175.664560][ T47] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 175.673052][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 175.678272][ T47] usb 5-1: Product: syz [ 175.682539][ T47] usb 5-1: SerialNumber: syz [ 175.691333][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.702678][ T47] usb 5-1: config 0 descriptor?? [ 175.707677][ T5930] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 175.723042][ T5930] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 175.733282][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 175.741464][ T5930] usb 3-1: Product: syz [ 175.745734][ T5930] usb 3-1: SerialNumber: syz [ 175.755739][ T5930] usb 3-1: config 0 descriptor?? [ 175.912151][ T69] team0 (unregistering): Port device team_slave_1 removed [ 175.940001][ T69] team0 (unregistering): Port device team_slave_0 removed [ 175.970802][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.982045][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.990932][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.015587][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.117104][ T5836] Bluetooth: hci0: command tx timeout [ 176.471931][ T7479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.509452][ T5836] Bluetooth: hci0: command tx timeout [ 178.548608][ T5930] usb 3-1: USB disconnect, device number 9 [ 178.618506][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.740338][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.754812][ T7443] bridge_slave_0: entered allmulticast mode [ 178.765045][ T7443] bridge_slave_0: entered promiscuous mode [ 178.781247][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.789391][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.797497][ T7443] bridge_slave_1: entered allmulticast mode [ 178.813053][ T7443] bridge_slave_1: entered promiscuous mode [ 178.941162][ T7504] team0: Device gtp0 is of different type [ 178.998738][ T5872] usb 5-1: USB disconnect, device number 20 [ 179.077079][ T7443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.131499][ T7443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.196020][ T7443] team0: Port device team_slave_0 added [ 179.296165][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.359031][ T7517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.512139][ T7518] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 179.537705][ T7443] team0: Port device team_slave_1 added [ 179.660125][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 179.696211][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.816925][ T10] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 179.831969][ T10] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 179.839555][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.870977][ T30] kauditd_printk_skb: 205 callbacks suppressed [ 179.870989][ T30] audit: type=1400 audit(1744295007.235:1791): avc: denied { write } for pid=7520 comm="syz.4.431" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.906277][ T7443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.919049][ T30] audit: type=1400 audit(1744295007.235:1792): avc: denied { open } for pid=7520 comm="syz.4.431" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.948593][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.951654][ T10] usb 4-1: config 0 has no interface number 0 [ 179.964269][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.990949][ T10] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 55, changing to 9 [ 179.994167][ T30] audit: type=1400 audit(1744295007.265:1793): avc: denied { ioctl } for pid=7520 comm="syz.4.431" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 180.002364][ T10] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 8496, setting to 1024 [ 180.040436][ T10] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.042918][ T7443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.073528][ T10] usb 4-1: config 0 interface 52 has no altsetting 0 [ 180.099795][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 180.109233][ T10] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 180.119592][ T10] usb 4-1: Manufacturer: syz [ 180.124290][ T30] audit: type=1400 audit(1744295007.435:1794): avc: denied { module_request } for pid=7523 comm="syz.2.432" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 180.125347][ T7524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.432'. [ 180.152830][ T10] usb 4-1: config 0 descriptor?? [ 180.168857][ T30] audit: type=1400 audit(1744295007.455:1795): avc: denied { ioctl } for pid=7510 comm="syz.3.428" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.206852][ T30] audit: type=1400 audit(1744295007.455:1796): avc: denied { ioctl } for pid=7510 comm="syz.3.428" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.292456][ T30] audit: type=1400 audit(1744295007.555:1797): avc: denied { ioctl } for pid=7510 comm="syz.3.428" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.319186][ T30] audit: type=1400 audit(1744295007.565:1798): avc: denied { sys_module } for pid=7523 comm="syz.2.432" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 180.346450][ T30] audit: type=1400 audit(1744295007.565:1799): avc: denied { module_request } for pid=7523 comm="syz.2.432" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 180.386484][ T7443] hsr_slave_0: entered promiscuous mode [ 180.393244][ T7443] hsr_slave_1: entered promiscuous mode [ 180.408706][ T30] audit: type=1400 audit(1744295007.765:1800): avc: denied { ioctl } for pid=7510 comm="syz.3.428" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.437566][ T10] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input10 [ 180.448420][ T7443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.465529][ T7443] Cannot create hsr debugfs directory [ 180.589807][ T5836] Bluetooth: hci0: command tx timeout [ 180.943025][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 180.996668][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.435'. [ 181.122912][ T5872] usb 4-1: USB disconnect, device number 9 [ 181.123003][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 181.383324][ T7443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.439815][ T7443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.450917][ T7443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.464060][ T7443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.537557][ T7443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.560554][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.574159][ T7443] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.593528][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.600670][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.623220][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.630299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.730739][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 181.746070][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 116, changing to 10 [ 181.779541][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 41033, setting to 1024 [ 181.804768][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.826772][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.856308][ T10] usb 3-1: config 0 descriptor?? [ 181.988494][ T7443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.077391][ T7443] veth0_vlan: entered promiscuous mode [ 182.087602][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 182.105372][ T7443] veth1_vlan: entered promiscuous mode [ 182.151556][ T7443] veth0_macvtap: entered promiscuous mode [ 182.167650][ T7443] veth1_macvtap: entered promiscuous mode [ 182.194724][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.234263][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.253937][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.272535][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.291959][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.303006][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.338400][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.353178][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.373892][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.396955][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.407694][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.448568][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.467322][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.481691][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.495753][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.507548][ T7443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.519957][ T5902] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 182.529123][ T7443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.530450][ T10] usb 3-1: USB disconnect, device number 10 [ 182.541668][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.559208][ T7567] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 182.580772][ T7443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.602865][ T7443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.622278][ T7443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.670288][ T5836] Bluetooth: hci0: command tx timeout [ 182.675727][ T7443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.706093][ T5902] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.716840][ T5902] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 182.731899][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.741260][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 182.779835][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 182.801296][ T7012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.809408][ T5902] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.818667][ T7012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.828704][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.859448][ T5902] usb 5-1: Product: syz [ 182.863663][ T5902] usb 5-1: Manufacturer: syz [ 182.877669][ T7012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.888310][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 182.899608][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 182.907827][ T7012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.910245][ T5902] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 183.625619][ T7581] netlink: 80 bytes leftover after parsing attributes in process `syz.4.440'. [ 184.398982][ T10] hid-generic 0FFF:0D5E:0006.0001: item fetching failed at offset 0/2 [ 184.531656][ T10] hid-generic 0FFF:0D5E:0006.0001: probe with driver hid-generic failed with error -22 [ 184.692213][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 184.701300][ T7590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.446'. [ 184.853203][ T7597] syzkaller0: entered promiscuous mode [ 184.858762][ T7597] syzkaller0: entered allmulticast mode [ 185.537280][ T5902] usb 5-1: USB disconnect, device number 21 [ 185.541445][ T30] kauditd_printk_skb: 307 callbacks suppressed [ 185.541456][ T30] audit: type=1400 audit(1744295012.905:2108): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.574300][ T30] audit: type=1400 audit(1744295012.905:2109): avc: denied { read write open } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.604660][ T30] audit: type=1400 audit(1744295012.905:2110): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 185.639588][ T30] audit: type=1400 audit(1744295012.995:2111): avc: denied { read } for pid=7601 comm="syz.4.450" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 185.668920][ T30] audit: type=1400 audit(1744295012.995:2112): avc: denied { open } for pid=7601 comm="syz.4.450" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 185.668963][ T30] audit: type=1400 audit(1744295013.005:2113): avc: denied { ioctl } for pid=7601 comm="syz.4.450" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 185.668997][ T30] audit: type=1400 audit(1744295013.025:2114): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 185.669032][ T30] audit: type=1400 audit(1744295013.025:2115): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.669065][ T30] audit: type=1400 audit(1744295013.025:2116): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.669099][ T30] audit: type=1400 audit(1744295013.025:2117): avc: denied { open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.836816][ T5902] IPVS: starting estimator thread 0... [ 185.929721][ T7606] IPVS: using max 47 ests per chain, 112800 per kthread [ 186.078663][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.087029][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.103509][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.122349][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.150067][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.260785][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.312045][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 186.318901][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.329162][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 186.723962][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.738539][ T9] usb 4-1: config 0 descriptor?? [ 186.747161][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 187.308912][ T7621] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 187.722930][ T9] gspca_vc032x: reg_r err -110 [ 187.727958][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 188.481063][ T5836] Bluetooth: hci0: command tx timeout [ 188.548343][ T7631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.455'. [ 188.906139][ T7609] chnl_net:caif_netlink_parms(): no params data found [ 189.035370][ T7643] syzkaller0: entered promiscuous mode [ 189.067250][ T7643] syzkaller0: entered allmulticast mode [ 189.479178][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.487650][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.495100][ T7609] bridge_slave_0: entered allmulticast mode [ 189.628524][ T7609] bridge_slave_0: entered promiscuous mode [ 189.698332][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.705553][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.713720][ T7609] bridge_slave_1: entered allmulticast mode [ 189.721184][ T7609] bridge_slave_1: entered promiscuous mode [ 189.780892][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 189.811202][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.876404][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.460'. [ 189.881293][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.938348][ T7609] team0: Port device team_slave_0 added [ 189.950117][ T7609] team0: Port device team_slave_1 added [ 190.005449][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.014942][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.040807][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.051402][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.067104][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.144112][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.170028][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.245864][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.444258][ T7609] hsr_slave_0: entered promiscuous mode [ 190.460278][ T7609] hsr_slave_1: entered promiscuous mode [ 190.492651][ T7609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.501968][ T7609] Cannot create hsr debugfs directory [ 190.511442][ T5836] Bluetooth: hci0: command tx timeout [ 190.567668][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 190.567683][ T30] audit: type=1400 audit(1744295017.925:2324): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.618053][ T30] audit: type=1400 audit(1744295017.925:2325): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.645009][ T30] audit: type=1400 audit(1744295017.925:2326): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 190.749699][ T30] audit: type=1400 audit(1744295017.965:2327): avc: denied { allowed } for pid=7634 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 190.768906][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.831616][ T7677] vivid-000: disconnect [ 190.854535][ T7672] vivid-000: reconnect [ 191.300176][ T30] audit: type=1400 audit(1744295017.975:2328): avc: denied { create } for pid=7634 comm="syz.2.456" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 191.380437][ T30] audit: type=1400 audit(1744295018.045:2329): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 191.407586][ T30] audit: type=1400 audit(1744295018.055:2330): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.520383][ T30] audit: type=1400 audit(1744295018.055:2331): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.573816][ T7681] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 191.578809][ T30] audit: type=1400 audit(1744295018.055:2332): avc: denied { append open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.628974][ T30] audit: type=1400 audit(1744295018.055:2333): avc: denied { getattr } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.749080][ T7684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.466'. [ 191.817437][ T7689] FAULT_INJECTION: forcing a failure. [ 191.817437][ T7689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.833128][ T7609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.837632][ T7689] CPU: 1 UID: 0 PID: 7689 Comm: syz.0.468 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 191.837652][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.837661][ T7689] Call Trace: [ 191.837666][ T7689] [ 191.837671][ T7689] dump_stack_lvl+0x16c/0x1f0 [ 191.837693][ T7689] should_fail_ex+0x512/0x640 [ 191.837712][ T7689] _copy_from_iter+0x2a4/0x15b0 [ 191.837731][ T7689] ? __alloc_skb+0x200/0x380 [ 191.837748][ T7689] ? __pfx__copy_from_iter+0x10/0x10 [ 191.837766][ T7689] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 191.837792][ T7689] netlink_sendmsg+0x829/0xdd0 [ 191.837814][ T7689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.837840][ T7689] ____sys_sendmsg+0xa95/0xc70 [ 191.837861][ T7689] ? copy_msghdr_from_user+0x10a/0x160 [ 191.837881][ T7689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.837910][ T7689] ___sys_sendmsg+0x134/0x1d0 [ 191.837928][ T7689] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.837970][ T7689] __sys_sendmsg+0x16d/0x220 [ 191.837986][ T7689] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.838010][ T7689] ? rcu_is_watching+0x12/0xc0 [ 191.838033][ T7689] do_syscall_64+0xcd/0x260 [ 191.838053][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.838067][ T7689] RIP: 0033:0x7f5e4818d169 [ 191.838079][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.838092][ T7689] RSP: 002b:00007f5e48f2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.838106][ T7689] RAX: ffffffffffffffda RBX: 00007f5e483a5fa0 RCX: 00007f5e4818d169 [ 191.838115][ T7689] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 191.838123][ T7689] RBP: 00007f5e48f2c090 R08: 0000000000000000 R09: 0000000000000000 [ 191.838132][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.838140][ T7689] R13: 0000000000000000 R14: 00007f5e483a5fa0 R15: 00007fffc2d4f4f8 [ 191.838158][ T7689] [ 192.251784][ T47] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 192.284386][ T7609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.423577][ T7609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.590001][ T5836] Bluetooth: hci0: command tx timeout [ 192.671635][ T7609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.027355][ T7704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.471'. [ 193.808629][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.815719][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.834051][ T7706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.848592][ T5836] Bluetooth: hci0: command tx timeout [ 194.867768][ T7609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.285877][ T7609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.317269][ T7609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.352973][ T7609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.583587][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 195.583602][ T30] audit: type=1400 audit(1744295022.925:2519): avc: denied { prog_load } for pid=7710 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.804357][ T30] audit: type=1400 audit(1744295022.935:2520): avc: denied { bpf } for pid=7710 comm="syz.2.473" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.868961][ T7715] SELinux: ebitmap: truncated map [ 195.877787][ T30] audit: type=1400 audit(1744295022.935:2521): avc: denied { perfmon } for pid=7710 comm="syz.2.473" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.973947][ T7609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.082101][ T7715] SELinux: failed to load policy [ 196.166599][ T12] Bluetooth: (null): Invalid header checksum [ 196.225504][ T12] Bluetooth: (null): Invalid header checksum [ 196.297398][ T7609] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.325304][ T12] Bluetooth: (null): Invalid header checksum [ 196.393131][ T12] Bluetooth: (null): Invalid header checksum [ 196.399509][ T30] audit: type=1400 audit(1744295022.975:2523): avc: denied { create } for pid=7710 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.419023][ T30] audit: type=1400 audit(1744295022.975:2522): avc: denied { map_create } for pid=7713 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.431405][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.438273][ T30] audit: type=1400 audit(1744295022.995:2524): avc: denied { bind } for pid=7710 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.445095][ T5925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.465443][ T30] audit: type=1400 audit(1744295022.995:2525): avc: denied { name_bind } for pid=7710 comm="syz.2.473" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 196.500840][ T9] libceph: connect (1)[c::]:6789 error -101 [ 196.507196][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 196.513318][ T30] audit: type=1400 audit(1744295022.995:2526): avc: denied { node_bind } for pid=7710 comm="syz.2.473" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 196.540062][ T9] libceph: connect (1)[c::]:6789 error -101 [ 196.546169][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 196.554279][ T30] audit: type=1400 audit(1744295022.995:2527): avc: denied { create } for pid=7710 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.573863][ T30] audit: type=1400 audit(1744295023.005:2528): avc: denied { setopt } for pid=7710 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.691511][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.698609][ T5925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.757293][ T7719] ceph: No mds server is up or the cluster is laggy [ 196.775330][ T7728] kvm: MWAIT instruction emulated as NOP! [ 196.790090][ T7728] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.477' resets device [ 196.836707][ T7609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.212500][ T9] libceph: connect (1)[c::]:6789 error -101 [ 197.218553][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 197.228631][ T7609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.657860][ T7742] usb usb1: usbfs: process 7742 (syz.3.478) did not claim interface 0 before use [ 198.084005][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.182037][ T7609] veth0_vlan: entered promiscuous mode [ 198.198693][ T7748] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 198.260482][ T7609] veth1_vlan: entered promiscuous mode [ 198.334090][ T7609] veth0_macvtap: entered promiscuous mode [ 198.350439][ T972] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 198.361996][ T7609] veth1_macvtap: entered promiscuous mode [ 198.415032][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.439531][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.449354][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.464750][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.474754][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.485598][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.497964][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.508793][ T972] usb 5-1: device descriptor read/64, error -71 [ 198.515401][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.525442][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.536397][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.551929][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.589874][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.601909][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.614131][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.626159][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.636484][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.652624][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.662869][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.674252][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.684800][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.696995][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.712082][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.720521][ T7762] netlink: 60 bytes leftover after parsing attributes in process `syz.2.480'. [ 198.751273][ T972] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 198.751872][ T7609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.767578][ T7609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.778321][ T7609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.787059][ T7609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.879605][ T972] usb 5-1: device descriptor read/64, error -71 [ 199.023074][ T972] usb usb5-port1: attempt power cycle [ 199.366906][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.374925][ T972] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 199.392877][ T972] usb 5-1: device descriptor read/8, error -71 [ 199.401177][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.441260][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.453913][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.549438][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.571704][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.689660][ T972] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 199.763237][ T972] usb 5-1: device descriptor read/8, error -71 [ 199.882945][ T972] usb usb5-port1: unable to enumerate USB device [ 200.105650][ T7778] trusted_key: syz.2.488 sent an empty control message without MSG_MORE. [ 200.192818][ T7780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.489'. [ 200.377566][ T7788] netlink: 112 bytes leftover after parsing attributes in process `syz.2.490'. [ 200.607224][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 200.607239][ T30] audit: type=1400 audit(1744295027.965:2839): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.644291][ T30] audit: type=1400 audit(1744295027.965:2840): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.675223][ T30] audit: type=1400 audit(1744295027.965:2841): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.745546][ T30] audit: type=1400 audit(1744295028.005:2842): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 200.805673][ T30] audit: type=1400 audit(1744295028.005:2843): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.834548][ T30] audit: type=1400 audit(1744295028.005:2844): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.890074][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.908217][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.938819][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.977847][ T7793] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 201.035416][ T30] audit: type=1400 audit(1744295028.005:2845): avc: denied { open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.059801][ T30] audit: type=1400 audit(1744295028.005:2846): avc: denied { getattr } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.083226][ T30] audit: type=1400 audit(1744295028.075:2847): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.089686][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.107395][ T30] audit: type=1400 audit(1744295028.075:2848): avc: denied { read write open } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.115718][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.211227][ T7799] usb usb1: usbfs: process 7799 (syz.0.492) did not claim interface 0 before use [ 201.906601][ T7809] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 202.337603][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.497'. [ 202.346614][ T7818] netlink: 48 bytes leftover after parsing attributes in process `syz.4.497'. [ 202.773149][ T7818] bond1: entered promiscuous mode [ 202.819863][ T7818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.878902][ T7822] syz.3.498: attempt to access beyond end of device [ 202.878902][ T7822] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 202.892018][ T7822] hfsplus: unable to find HFS+ superblock [ 202.911853][ T7822] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 202.919057][ T7822] cramfs: wrong magic [ 203.079039][ T7794] chnl_net:caif_netlink_parms(): no params data found [ 203.193578][ T7829] tipc: Started in network mode [ 203.198478][ T7829] tipc: Node identity 7, cluster identity 4711 [ 203.205204][ T7829] tipc: Node number set to 7 [ 203.211523][ T7829] Bluetooth: MGMT ver 1.23 [ 203.770016][ T5836] Bluetooth: hci0: command tx timeout [ 203.847126][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.868593][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.926988][ T7794] bridge_slave_0: entered allmulticast mode [ 204.012014][ T7794] bridge_slave_0: entered promiscuous mode [ 204.044351][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.053028][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.061230][ T7794] bridge_slave_1: entered allmulticast mode [ 204.070546][ T7794] bridge_slave_1: entered promiscuous mode [ 204.627353][ T7854] usb usb1: usbfs: process 7854 (syz.3.505) did not claim interface 0 before use [ 204.673206][ T7794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.699327][ T7794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.076814][ T7794] team0: Port device team_slave_0 added [ 205.108388][ T7794] team0: Port device team_slave_1 added [ 205.271625][ T7863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 205.285654][ T7865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59425 sclass=netlink_route_socket pid=7865 comm=syz.4.509 [ 205.524283][ T7866] program syz.4.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.645654][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 205.645675][ T30] audit: type=1400 audit(1744295033.005:3119): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.691459][ T30] audit: type=1400 audit(1744295033.005:3120): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.717177][ T30] audit: type=1400 audit(1744295033.005:3121): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.773427][ T30] audit: type=1400 audit(1744295033.045:3122): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 205.775249][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.809334][ T5836] Bluetooth: hci0: command tx timeout [ 205.820397][ T30] audit: type=1400 audit(1744295033.045:3123): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.849642][ T30] audit: type=1400 audit(1744295033.045:3124): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.877197][ T30] audit: type=1400 audit(1744295033.045:3125): avc: denied { open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.880299][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 205.900618][ T30] audit: type=1400 audit(1744295033.045:3126): avc: denied { getattr } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.913553][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 205.931931][ T30] audit: type=1400 audit(1744295033.055:3127): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.975362][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.002543][ T30] audit: type=1400 audit(1744295033.055:3128): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.017365][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.513'. [ 206.093485][ T7794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.153112][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.195654][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.567912][ T7794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.626618][ T7892] netlink: 60 bytes leftover after parsing attributes in process `syz.2.516'. [ 206.799651][ T7794] hsr_slave_0: entered promiscuous mode [ 206.826201][ T7794] hsr_slave_1: entered promiscuous mode [ 206.873115][ T7794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.931133][ T7794] Cannot create hsr debugfs directory [ 207.870899][ T5836] Bluetooth: hci0: command tx timeout [ 208.204189][ T7794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.421766][ T7794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.817289][ T7794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.934638][ T7794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.612239][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.860943][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.054778][ T7934] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 210.191910][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.196932][ T5836] Bluetooth: hci0: command tx timeout [ 210.200205][ T7934] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.331245][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 210.408328][ T7933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.528'. [ 210.562948][ T7794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.627546][ T7794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.661732][ T30] kauditd_printk_skb: 256 callbacks suppressed [ 210.661745][ T30] audit: type=1400 audit(1744295038.025:3385): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 214.661418][ T30] audit: type=1400 audit(1744295038.025:3386): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.683764][ C1] sched: DL replenish lagged too much [ 228.562679][ T30] audit: type=1400 audit(1744295038.025:3387): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 335.829443][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 335.836402][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7940/1:b..l [ 335.844648][ C0] rcu: (detected by 0, t=10502 jiffies, g=19917, q=702 ncpus=2) [ 335.852354][ C0] task:syz.2.530 state:R running task stack:27608 pid:7940 tgid:7938 ppid:5831 task_flags:0x40044c flags:0x00004004 [ 335.866542][ C0] Call Trace: [ 335.869819][ C0] [ 335.872743][ C0] __schedule+0x116f/0x5de0 [ 335.877248][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 335.882452][ C0] ? __pfx___schedule+0x10/0x10 [ 335.887303][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 335.892238][ C0] ? mark_held_locks+0x49/0x80 [ 335.896994][ C0] preempt_schedule_irq+0x51/0x90 [ 335.902015][ C0] irqentry_exit+0x36/0x90 [ 335.906424][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.912395][ C0] RIP: 0010:stack_access_ok+0x166/0x200 [ 335.917936][ C0] Code: 0f 85 95 00 00 00 48 8b 43 10 49 39 ee 77 29 48 39 e8 76 24 4c 01 e5 48 39 e8 0f 93 c0 49 39 ee 0f 92 c2 21 d0 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 83 c4 08 31 c0 5b 5d [ 335.937542][ C0] RSP: 0018:ffffc90002ef7508 EFLAGS: 00000296 [ 335.943600][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc90002ef8000 [ 335.951560][ C0] RDX: ffffc90002ef7b01 RSI: ffffc90002ef7b98 RDI: ffffc90002ef75a8 [ 335.959520][ C0] RBP: ffffc90002ef7b98 R08: 0000000000000001 R09: 0000000000000000 [ 335.967482][ C0] R10: 0000000000000001 R11: 00000000000079fe R12: 0000000000000008 [ 335.975443][ C0] R13: ffffc90002ef75b8 R14: ffffc90002ef75b0 R15: ffffc90002ef0000 [ 335.983424][ C0] unwind_next_frame+0x15c5/0x20a0 [ 335.988533][ C0] ? __mmput+0x12a/0x410 [ 335.992775][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.998928][ C0] arch_stack_walk+0x94/0x100 [ 336.003611][ C0] ? mmput+0x62/0x70 [ 336.007511][ C0] stack_trace_save+0x8e/0xc0 [ 336.012185][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 336.017569][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 336.022507][ C0] kasan_save_stack+0x33/0x60 [ 336.027177][ C0] ? kasan_save_stack+0x33/0x60 [ 336.032021][ C0] ? kasan_record_aux_stack+0xb8/0xd0 [ 336.037392][ C0] ? __call_rcu_common.constprop.0+0x9a/0x9f0 [ 336.043456][ C0] ? kmem_cache_free+0x173/0x4d0 [ 336.048388][ C0] ? exit_mmap+0x511/0xb90 [ 336.052800][ C0] ? __mmput+0x12a/0x410 [ 336.057083][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 336.063236][ C0] kasan_record_aux_stack+0xb8/0xd0 [ 336.068434][ C0] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 336.074327][ C0] kmem_cache_free+0x173/0x4d0 [ 336.079085][ C0] ? exit_mmap+0x511/0xb90 [ 336.083503][ C0] exit_mmap+0x511/0xb90 [ 336.087757][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 336.092526][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 336.097477][ C0] __mmput+0x12a/0x410 [ 336.101546][ C0] mmput+0x62/0x70 [ 336.105266][ C0] do_exit+0x9d1/0x2c30 [ 336.109417][ C0] ? __pfx_do_exit+0x10/0x10 [ 336.113996][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 336.119012][ C0] ? find_held_lock+0x2b/0x80 [ 336.123695][ C0] do_group_exit+0xd3/0x2a0 [ 336.128191][ C0] get_signal+0x2673/0x26d0 [ 336.132701][ C0] ? __pfx_get_signal+0x10/0x10 [ 336.137548][ C0] ? sched_core_share_pid+0x23b/0x9f0 [ 336.142923][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 336.148473][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 336.154633][ C0] ? __pfx___do_sys_prctl+0x10/0x10 [ 336.159829][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 336.165461][ C0] do_syscall_64+0xda/0x260 [ 336.169966][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.175852][ C0] RIP: 0033:0x7f037278d169 [ 336.180257][ C0] RSP: 002b:00007f0373504038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 336.188659][ C0] RAX: 0000000000000000 RBX: 00007f03729a6080 RCX: 00007f037278d169 [ 336.196619][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 336.204578][ C0] RBP: 00007f037280e730 R08: 0000000000000000 R09: 0000000000000000 [ 336.212541][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 336.220501][ C0] R13: 0000000000000001 R14: 00007f03729a6080 R15: 00007ffe2fbd92f8 [ 336.228478][ C0] [ 336.231489][ C0] rcu: rcu_preempt kthread starved for 9647 jiffies! g19917 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 336.242583][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 336.252541][ C0] rcu: RCU grace-period kthread stack dump: [ 336.258416][ C0] task:rcu_preempt state:R running task stack:28728 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 336.271902][ C0] Call Trace: [ 336.275170][ C0] [ 336.278095][ C0] __schedule+0x116f/0x5de0 [ 336.282610][ C0] ? __pfx___schedule+0x10/0x10 [ 336.287457][ C0] ? find_held_lock+0x2b/0x80 [ 336.292133][ C0] ? schedule+0x2d7/0x3a0 [ 336.296458][ C0] schedule+0xe7/0x3a0 [ 336.300523][ C0] schedule_timeout+0x123/0x290 [ 336.305365][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 336.310727][ C0] ? __pfx_process_timeout+0x10/0x10 [ 336.316012][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 336.321809][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 336.327273][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 336.332033][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 336.337312][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 336.342160][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 336.347969][ C0] rcu_gp_kthread+0x270/0x380 [ 336.352639][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 336.357826][ C0] ? rcu_is_watching+0x12/0xc0 [ 336.362583][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.367775][ C0] ? __kthread_parkme+0x19e/0x250 [ 336.372797][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 336.377984][ C0] kthread+0x3c2/0x780 [ 336.382045][ C0] ? __pfx_kthread+0x10/0x10 [ 336.386621][ C0] ? __pfx_kthread+0x10/0x10 [ 336.391202][ C0] ? __pfx_kthread+0x10/0x10 [ 336.395780][ C0] ? __pfx_kthread+0x10/0x10 [ 336.400361][ C0] ? rcu_is_watching+0x12/0xc0 [ 336.405119][ C0] ? __pfx_kthread+0x10/0x10 [ 336.409699][ C0] ret_from_fork+0x45/0x80 [ 336.414104][ C0] ? __pfx_kthread+0x10/0x10 [ 336.418686][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.423460][ C0] [ 336.426466][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 336.432785][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) [ 336.444402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.454447][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 336.460078][ C0] Code: 95 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bc 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 336.479680][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 336.485736][ C0] RAX: 0000000001838949 RBX: 0000000000000000 RCX: ffffffff8b723439 [ 336.493696][ C0] RDX: 0000000000000000 RSI: ffffffff8dbeef8e RDI: ffffffff8bf465c0 [ 336.501655][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 336.509615][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 336.517574][ C0] R13: ffffffff8e097740 R14: ffffffff90865310 R15: 0000000000000000 [ 336.525539][ C0] FS: 0000000000000000(0000) GS:ffff8881249b3000(0000) knlGS:0000000000000000 [ 336.534463][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.541039][ C0] CR2: 00002000002d8030 CR3: 000000002d866000 CR4: 00000000003526f0 [ 336.549002][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 336.556969][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 336.564930][ C0] Call Trace: [ 336.568200][ C0] [ 336.571118][ C0] default_idle+0x13/0x20 [ 336.575448][ C0] default_idle_call+0x6d/0xb0 [ 336.580207][ C0] do_idle+0x391/0x510 [ 336.584274][ C0] ? __pfx_do_idle+0x10/0x10 [ 336.588860][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 336.594061][ C0] cpu_startup_entry+0x4f/0x60 [ 336.598821][ C0] rest_init+0x16b/0x2b0 [ 336.603058][ C0] ? acpi_subsystem_init+0x133/0x180 [ 336.608335][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 336.613878][ C0] start_kernel+0x3e9/0x4d0 [ 336.618379][ C0] x86_64_start_reservations+0x18/0x30 [ 336.623834][ C0] x86_64_start_kernel+0xb0/0xc0 [ 336.628768][ C0] common_startup_64+0x13e/0x148 [ 336.633710][ C0] [ 337.537559][ T1293] ieee802154 phy0 wpan0: encryption failed: -22