last executing test programs: 11.608658544s ago: executing program 4 (id=499): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026fcf786b4a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e27, 0x7fff, @local, 0x8}, @in6={0xa, 0x4e20, 0x245, @ipv4={'\x00', '\xff\xff', @local}, 0x9b59}, @in6={0xa, 0x4e23, 0x7fffffff, @rand_addr=' \x01\x00', 0x3}], 0x64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x190, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x800002}, {0xffffffff, 0xfffffff7}, {0x0, 0x4}, {0x0, 0xfffffffa, 0x8}, 0x1, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x0, 0x0, 0x69, 0x34, 0x100, 0x3, 0xc}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}, 0x9, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @remote, 0x129}}, 0x2, 0x2, 0x611, 0xffffffff, 0xd, 0x7, 0x1}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x10, 0xfff1}, {0xe}}, [@TCA_STAB={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r8 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r8, 0xfffffff7) 10.590960362s ago: executing program 3 (id=502): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043", 0x312}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.676459477s ago: executing program 4 (id=507): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7}]}) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x40010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="63920e4bab53ed646a86ec4e752e33d53afde7c69dda23acd060870894c9591fc0279ff9e9384c29a4c086", 0x2b}, {&(0x7f00000005c0)="19308110af3511600877f87991da48f365a7c1030ee42e44a2173c304c16fac7196ed81d3a8bb34f486ae60b15fa1a59b2a420011a0f51428516c4787f1c8c40f3179aae364d0d122a8352c9a78b7ec7084f430bbda98fd77082a845635a7185346d94be1fb9870279b2f9d6c8de9048dedb68f7440d78d289769117e5c476d1ebd2a93e1e62a6bb01c3f3db2c330fe7588bdd0797c4dd09f8aa60b26f3c24fc4c86e485aa0d55", 0xa7}], 0x2, 0x1) 7.857529823s ago: executing program 1 (id=508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a01"], 0x40}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9b}]}}}]}, 0x3c}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000640)={{0x7, 0x5, 0x7, 0x9, 'syz1\x00', 0x3}, 0x1, [0x0, 0x7, 0x7, 0x4, 0x7, 0x4, 0x3, 0x36a81083, 0x1, 0x2, 0xc, 0x9, 0xfffffffffffffff7, 0x8, 0x5, 0xfffffffffffffffc, 0x705e, 0x3, 0xc96c, 0x7, 0x26, 0x5, 0x7, 0x6, 0x40fa, 0x3, 0xffffffffffffffc0, 0x7, 0x4d28f192, 0x5, 0x1, 0x4, 0x7, 0x6, 0xbb09, 0x0, 0x2f, 0x4, 0x8000, 0x0, 0x6be8, 0x9, 0x3, 0x6, 0x9, 0x5, 0x6, 0x0, 0x3, 0x3, 0x4ea54e02, 0x7, 0xa, 0x3, 0xffff, 0x8001, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7d1, 0x9, 0x1a, 0x6, 0x3, 0x100000000, 0x6, 0x6, 0xfffffffffffffffc, 0x65, 0x6, 0xf7a, 0xfffffffffffffff7, 0x4, 0x8000000000000001, 0x6, 0x6, 0x3, 0x356d, 0xcb5, 0x401, 0xffffffffffffffff, 0x9, 0xd4e, 0x9, 0x1, 0xcc4e, 0x279, 0x6, 0x6bd7, 0x87, 0x9, 0x9, 0x9de, 0x4e3, 0x8000000000000000, 0x7, 0x6, 0x6, 0x1, 0x5, 0x3, 0x4, 0x6, 0xb, 0x7, 0xfff, 0x2, 0x5, 0x5, 0x2, 0x1, 0x7, 0x0, 0x0, 0x8, 0x7, 0x9, 0x7fffffff, 0x5, 0xc2, 0x6, 0x4f, 0xf, 0x6, 0x4, 0x1]}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 7.607111375s ago: executing program 0 (id=509): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x29c}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7.575327758s ago: executing program 3 (id=510): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x7f}, 'port1\x00', 0xa0, 0x0, 0x3, 0x9, 0x8000210, 0x401, 0x1, 0x0, 0x4, 0x7}) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x0, 0x42474752, 0x140, 0xb4, 0x2, @stepwise={{0x1, 0x2}, {0x80, 0x5}, {0x3, 0xc433}}}) 7.476545406s ago: executing program 1 (id=511): syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') 7.417870058s ago: executing program 1 (id=512): socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0xf8ee34745f88a816, 0x300) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x2ce}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x4000) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f00000000c0)={{&(0x7f00000005c0)={'KERNEL\x00', {&(0x7f0000000380)=@adf_str={@format={'Cy', '3', 'NumConcurrentRequests\x00'}, {"8d5daefee3c71ffbe09dc5d04d7660b0f8628cc6380d71012c14b0ca4e92605f377ecd4afd39302f02a0a3dd8462ff261afaaa5ea202f5b47f5b33866cce3e7e"}}}, {&(0x7f0000000200)={'Accelerator0\x00', {&(0x7f0000000500)=@adf_str={@format={'Dc', '2', 'RingAsymRx\x00'}, {"98ce8f3acd251183106b0be57818b2655ac31fd7b5887a25834570fbc3777f5188191d136275bd3c68c17dbbfc725b544b17ecd45f90eeccbf15adb9afff50e5"}, {&(0x7f0000000440)=@adf_hex={@normal='NumberCyInstances\x00'}}}}}}}}, 0x81}) getdents64(0xffffffffffffffff, 0x0, 0x64) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f00000002c0)=0x2c2, 0x4) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0x20000000, 0x80, 0x0, 0x11}) 7.414690576s ago: executing program 3 (id=513): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfffd, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xd35}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.074043883s ago: executing program 4 (id=514): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 6.69130911s ago: executing program 3 (id=515): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, 0xee01, 0xee01) keyctl$setperm(0x5, r7, 0xc012817) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0xc, 0x5, 0x2}, 0x10) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 6.275836925s ago: executing program 4 (id=517): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e27, 0x7fff, @local, 0x8}, @in6={0xa, 0x4e20, 0x245, @ipv4={'\x00', '\xff\xff', @local}, 0x9b59}, @in6={0xa, 0x4e23, 0x7fffffff, @rand_addr=' \x01\x00', 0x3}], 0x64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x190, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x800002}, {0xffffffff, 0xfffffff7}, {0x0, 0x4}, {0x0, 0xfffffffa, 0x8}, 0x1, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x7, 0x0, 0x0, 0x69, 0x34, 0x100, 0x3, 0xc}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}, 0x9, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @remote, 0x129}}, 0x2, 0x2, 0x611, 0xffffffff, 0xd, 0x7, 0x1}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x10, 0xfff1}, {0xe}}, [@TCA_STAB={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0xfffffff7) 5.630815586s ago: executing program 1 (id=519): r0 = socket$can_bcm(0x1d, 0x2, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200400, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) 5.456764252s ago: executing program 1 (id=520): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043", 0x312}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.328467135s ago: executing program 2 (id=521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x343802, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c0910", 0x10, 0x4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='map_files\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='cubic\x00', 0x6) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setuid(0xee01) 5.069691646s ago: executing program 0 (id=522): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e1f, 0x2, @empty, 0x802}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0x80087601, 0x1000000000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x6, 0x4, 0x80000001}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) 5.06894322s ago: executing program 2 (id=523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="080403000021000008001b000000000034001a800800028004000180200002801c00018008001a000400000006"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=inte']) syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') 4.11091944s ago: executing program 2 (id=524): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7}]}) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x40010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="63920e4bab53ed646a86ec4e752e33d53afde7c69dda23acd060870894c9591fc0279ff9e9384c29a4c086", 0x2b}, {&(0x7f00000005c0)="19308110af3511600877f87991da48f365a7c1030ee42e44a2173c304c16fac7196ed81d3a8bb34f486ae60b15fa1a59b2a420011a0f51428516c4787f1c8c40f3179aae364d0d122a8352c9a78b7ec7084f430bbda98fd77082a845635a7185346d94be1fb9870279b2f9d6c8de9048dedb68f7440d78d289769117e5c476d1ebd2a93e1e62a6bb01c3f3db2c330fe7588bdd0797c4dd09f8aa60b26f3c24fc4c86e485aa0d55", 0xa7}], 0x2, 0x1) 3.932295185s ago: executing program 3 (id=525): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x2, 0xc00000, 0x1c900000, 0x436c, 0x4ce7}, &(0x7f0000000140)=0x98) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000040), &(0x7f0000000080)=r9}, 0x20) sched_setaffinity(0x0, 0x0, 0x0) r10 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000002740)='asymmetric\x00', 0x0, 0x0, r10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000000000008004f0001000000080003"], 0x30}}, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6315, 0x2}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={r3, 0x5, 0x1ff, 0x8, 0x7, 0x17c5, 0x8, 0x7, {r11, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x1000, 0x9, 0x31a8bc0a, 0x2, 0x800}}, &(0x7f0000000340)=0xb0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.113952911s ago: executing program 0 (id=526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="080403000021000008001b000000000034001a800800028004000180200002801c00018008001a000400000006"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=inte']) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') 3.012677086s ago: executing program 2 (id=527): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 2.974208361s ago: executing program 3 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) getgroups(0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0xfffffffffffffdca, &(0x7f0000000080)="c0") readv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1) 2.792387462s ago: executing program 4 (id=529): socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYRES16=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) 2.192525044s ago: executing program 1 (id=530): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="05020000000002000000120000001800018014000200626f6e645f736c6176655f310000000008000700100000000800060001000000"], 0x3c}}, 0x4000) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x27, 0x4, 0x4}, 0x6) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071106f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.057045196s ago: executing program 0 (id=531): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000400)="59916aedf23f6ed11c8890503d0b4a9457ffab0d0bd6fdeae51b367580f3dcf3753eb9e18d7e7ece32a0622e87c9f3ba7b79699d29355168d65d302b", 0x3c, 0x800, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000300)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000580)="cad776482e03f1417414e47546847a518e3bc98248105dc63919428340969278cb65fc0fba64bbb9c0c5cdf27ea8ef7cdab54e894b28123742e06de243d984c5277d4d0e28d481e6e731b480e4966f301d33f339586b124e5e8960b2d90cae9c5815eed6353db11065c1c7c1f9f44fe61bbcbc80ca8ca995986985ccb8f97a6457fdd449a775b473daab3b240f8810f3", 0x90, 0x4008890, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56"}) close_range(r1, r2, 0x0) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,us', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x1, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x5, 0x1fd, 0x0, {0x6, 0x0, 0x0, 0xf73a, 0x6a10, 0x2000000006, 0x204, 0xbaa3, 0xffffffff, 0x8000, 0x4, 0x0, 0x0, 0x3, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 989.882886ms ago: executing program 0 (id=532): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x800) 950.104769ms ago: executing program 2 (id=533): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0x5, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 792.134707ms ago: executing program 4 (id=534): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 215.858267ms ago: executing program 0 (id=535): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=536): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x4, 0x7, 0x4, 0x200, 0x20000005, 0x30000, 0xc5, 0x2, 0x80000000, 0x80000004, 0x100000000, 0xffffffffffffffff, 0x8, 0xe, 0xf6], 0x1001, 0x242610}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r8, 0x4008af75, &(0x7f0000000200)={0x0, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="f30f09f1e000f3640f0056c964ab0f170b0f181e9c9d440f20c0663507000000440f22c0260f65820018670f76cc0f09", 0x30}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r12, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r12, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_INIT(r12, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0xfffffffff12bd390, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x50) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@posixacl}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 58.316718][ T30] audit: type=1400 audit(1756416320.608:62): avc: denied { mounton } for pid=5838 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.319940][ T5838] cgroup: Unknown subsys name 'net' [ 58.344864][ T30] audit: type=1400 audit(1756416320.608:63): avc: denied { mount } for pid=5838 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.369417][ T30] audit: type=1400 audit(1756416320.668:64): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.532715][ T5838] cgroup: Unknown subsys name 'cpuset' [ 58.540203][ T5838] cgroup: Unknown subsys name 'rlimit' [ 58.647440][ T30] audit: type=1400 audit(1756416320.938:65): avc: denied { setattr } for pid=5838 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.679732][ T30] audit: type=1400 audit(1756416320.938:66): avc: denied { create } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.702731][ T30] audit: type=1400 audit(1756416320.938:67): avc: denied { write } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.724860][ T30] audit: type=1400 audit(1756416320.938:68): avc: denied { read } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.745318][ T30] audit: type=1400 audit(1756416320.948:69): avc: denied { mounton } for pid=5838 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.770580][ T30] audit: type=1400 audit(1756416320.948:70): avc: denied { mount } for pid=5838 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.775616][ T5840] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.794040][ T30] audit: type=1400 audit(1756416320.998:71): avc: denied { read } for pid=5520 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.709375][ T5838] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.795099][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.799023][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.811076][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.818498][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.831241][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.838448][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.841662][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.846229][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.854323][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.860600][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.873493][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.881118][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.881327][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.888865][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.902797][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.992041][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.998743][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.002361][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.008263][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.020115][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.020765][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.027803][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.034981][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.041663][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.048752][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.461898][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 62.494526][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 62.562093][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 62.600543][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 62.656956][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.664204][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.671797][ T5848] bridge_slave_0: entered allmulticast mode [ 62.678464][ T5848] bridge_slave_0: entered promiscuous mode [ 62.725492][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.733648][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.741700][ T5848] bridge_slave_1: entered allmulticast mode [ 62.748331][ T5848] bridge_slave_1: entered promiscuous mode [ 62.806668][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.815960][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 62.826272][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.833434][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.840599][ T5865] bridge_slave_0: entered allmulticast mode [ 62.847185][ T5865] bridge_slave_0: entered promiscuous mode [ 62.867088][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.886452][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.893847][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.900974][ T5865] bridge_slave_1: entered allmulticast mode [ 62.907557][ T5865] bridge_slave_1: entered promiscuous mode [ 62.959660][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.966859][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.974713][ T5849] bridge_slave_0: entered allmulticast mode [ 62.982842][ T5849] bridge_slave_0: entered promiscuous mode [ 62.990788][ T5848] team0: Port device team_slave_0 added [ 63.012603][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.019680][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.026987][ T5866] bridge_slave_0: entered allmulticast mode [ 63.034546][ T5866] bridge_slave_0: entered promiscuous mode [ 63.041372][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.048436][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.055558][ T5849] bridge_slave_1: entered allmulticast mode [ 63.062260][ T5849] bridge_slave_1: entered promiscuous mode [ 63.069543][ T5848] team0: Port device team_slave_1 added [ 63.089680][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.099027][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.106397][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.113578][ T5866] bridge_slave_1: entered allmulticast mode [ 63.120967][ T5866] bridge_slave_1: entered promiscuous mode [ 63.154131][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.178549][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.185708][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.212281][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.236371][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.248273][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.259012][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.268532][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.275603][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.301495][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.336316][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.367244][ T5865] team0: Port device team_slave_0 added [ 63.389459][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.396984][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.404315][ T5856] bridge_slave_0: entered allmulticast mode [ 63.411603][ T5856] bridge_slave_0: entered promiscuous mode [ 63.419337][ T5865] team0: Port device team_slave_1 added [ 63.439515][ T5866] team0: Port device team_slave_0 added [ 63.446927][ T5849] team0: Port device team_slave_0 added [ 63.453463][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.460996][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.468075][ T5856] bridge_slave_1: entered allmulticast mode [ 63.474884][ T5856] bridge_slave_1: entered promiscuous mode [ 63.498261][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.505337][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.531622][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.543592][ T5866] team0: Port device team_slave_1 added [ 63.557691][ T5849] team0: Port device team_slave_1 added [ 63.571072][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.578048][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.604422][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.651558][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.663870][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.688620][ T5848] hsr_slave_0: entered promiscuous mode [ 63.694712][ T5848] hsr_slave_1: entered promiscuous mode [ 63.712284][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.719206][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.745513][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.775726][ T5856] team0: Port device team_slave_0 added [ 63.781996][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.788930][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.815684][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.831184][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.838104][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.864047][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.882706][ T5856] team0: Port device team_slave_1 added [ 63.896869][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.903892][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.930063][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.950938][ T5176] Bluetooth: hci1: command tx timeout [ 63.956582][ T5176] Bluetooth: hci2: command tx timeout [ 63.962338][ T5853] Bluetooth: hci0: command tx timeout [ 63.979563][ T5865] hsr_slave_0: entered promiscuous mode [ 63.985796][ T5865] hsr_slave_1: entered promiscuous mode [ 63.991800][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 63.997544][ T5865] Cannot create hsr debugfs directory [ 64.043100][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.050038][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.076408][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.100342][ T5853] Bluetooth: hci4: command tx timeout [ 64.100366][ T5176] Bluetooth: hci3: command tx timeout [ 64.108345][ T5849] hsr_slave_0: entered promiscuous mode [ 64.118118][ T5849] hsr_slave_1: entered promiscuous mode [ 64.124301][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 64.130001][ T5849] Cannot create hsr debugfs directory [ 64.144616][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.151651][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.177615][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.233127][ T5866] hsr_slave_0: entered promiscuous mode [ 64.239107][ T5866] hsr_slave_1: entered promiscuous mode [ 64.245591][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 64.251343][ T5866] Cannot create hsr debugfs directory [ 64.323557][ T5856] hsr_slave_0: entered promiscuous mode [ 64.329691][ T5856] hsr_slave_1: entered promiscuous mode [ 64.336004][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 64.341869][ T5856] Cannot create hsr debugfs directory [ 64.565067][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.591520][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.618078][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.635882][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.675521][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.692352][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.712948][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.733976][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.781095][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.789994][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.817089][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.832387][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.879691][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.910145][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.927690][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.946790][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.960109][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.007668][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.019192][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.028797][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.038699][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.061985][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.072753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.079903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.094165][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.101317][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.193612][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.207513][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.234591][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.252294][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.259337][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.283898][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.291005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.318069][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.337935][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.366000][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.373107][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.386678][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.386699][ T30] audit: type=1400 audit(1756416327.678:86): avc: denied { sys_module } for pid=5848 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.444354][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.458765][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.488238][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.495366][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.509459][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.516556][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.548438][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.555535][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.567266][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.603873][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.610937][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.630919][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.637980][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.655255][ T5856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.666158][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.698244][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.857793][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.950179][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.985323][ T5848] veth0_vlan: entered promiscuous mode [ 66.021639][ T5176] Bluetooth: hci2: command tx timeout [ 66.021824][ T5853] Bluetooth: hci0: command tx timeout [ 66.027028][ T51] Bluetooth: hci1: command tx timeout [ 66.035664][ T5848] veth1_vlan: entered promiscuous mode [ 66.124331][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.141589][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.163181][ T5865] veth0_vlan: entered promiscuous mode [ 66.180986][ T5176] Bluetooth: hci3: command tx timeout [ 66.186432][ T51] Bluetooth: hci4: command tx timeout [ 66.207121][ T5848] veth0_macvtap: entered promiscuous mode [ 66.218030][ T5865] veth1_vlan: entered promiscuous mode [ 66.255033][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.265643][ T5848] veth1_macvtap: entered promiscuous mode [ 66.307660][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.339848][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.363288][ T5865] veth0_macvtap: entered promiscuous mode [ 66.375091][ T5856] veth0_vlan: entered promiscuous mode [ 66.404776][ T5865] veth1_macvtap: entered promiscuous mode [ 66.412276][ T3507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.424864][ T3507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.450180][ T3507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.460984][ T5856] veth1_vlan: entered promiscuous mode [ 66.476002][ T3507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.493447][ T5866] veth0_vlan: entered promiscuous mode [ 66.513443][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.532253][ T5866] veth1_vlan: entered promiscuous mode [ 66.557770][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.605972][ T3004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.615534][ T3004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.629578][ T5856] veth0_macvtap: entered promiscuous mode [ 66.629882][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.639912][ T5856] veth1_macvtap: entered promiscuous mode [ 66.649706][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.655622][ T3004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.669063][ T3004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.726448][ T5849] veth0_vlan: entered promiscuous mode [ 66.732558][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.744758][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.756020][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.769762][ T5866] veth0_macvtap: entered promiscuous mode [ 66.783814][ T30] audit: type=1400 audit(1756416329.058:87): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.jeAjyi/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.790868][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.808822][ T30] audit: type=1400 audit(1756416329.058:88): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.839405][ T30] audit: type=1400 audit(1756416329.058:89): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.jeAjyi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.864859][ T30] audit: type=1400 audit(1756416329.058:90): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.878235][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.895362][ T5866] veth1_macvtap: entered promiscuous mode [ 66.902714][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.916393][ T30] audit: type=1400 audit(1756416329.078:91): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.jeAjyi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.943920][ T30] audit: type=1400 audit(1756416329.078:92): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/root/syzkaller.jeAjyi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.949115][ T5849] veth1_vlan: entered promiscuous mode [ 66.976950][ T30] audit: type=1400 audit(1756416329.078:93): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.997189][ T30] audit: type=1400 audit(1756416329.118:94): avc: denied { mounton } for pid=5848 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.998286][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.023838][ T30] audit: type=1400 audit(1756416329.118:95): avc: denied { mount } for pid=5848 comm="syz-executor" name="/" dev="gadgetfs" ino=6914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.097138][ T3507] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.133046][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.143682][ T3507] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144172][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.164230][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.178194][ T3507] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.197679][ T3507] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.229015][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.286253][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.296056][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.409004][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.447452][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.461307][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.465585][ T5849] veth0_macvtap: entered promiscuous mode [ 67.470376][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.529085][ T5849] veth1_macvtap: entered promiscuous mode [ 67.605736][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.618815][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.629729][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.646125][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.678590][ T2943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.703102][ T2943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.718920][ T2943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.766602][ T2943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.890909][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.916183][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.928868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.947475][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.989891][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.025466][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.118259][ T51] Bluetooth: hci0: command tx timeout [ 68.124277][ T51] Bluetooth: hci1: command tx timeout [ 68.129667][ T51] Bluetooth: hci2: command tx timeout [ 68.151634][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.165437][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.183698][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 68.207498][ T5973] team0: Port device batadv1 added [ 68.260520][ T51] Bluetooth: hci4: command tx timeout [ 68.262090][ T5853] Bluetooth: hci3: command tx timeout [ 68.530626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.435297][ T5990] 9pnet_fd: Insufficient options for proto=fd [ 69.443326][ T5986] veth1_to_bridge: entered promiscuous mode [ 69.629031][ T5986] veth1_to_bridge: left promiscuous mode [ 69.882148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.209482][ T5853] Bluetooth: hci2: command tx timeout [ 70.209776][ T51] Bluetooth: hci1: command tx timeout [ 70.214962][ T5853] Bluetooth: hci0: command tx timeout [ 70.343342][ T5853] Bluetooth: hci4: command tx timeout [ 70.348754][ T5853] Bluetooth: hci3: command tx timeout [ 70.468256][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 70.468268][ T30] audit: type=1400 audit(1756416332.668:140): avc: denied { create } for pid=6002 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.701410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.710144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.740732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.803825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.812643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.900589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.905066][ T30] audit: type=1400 audit(1756416332.668:141): avc: denied { ioctl } for pid=6002 comm="syz.0.9" path="socket:[7819]" dev="sockfs" ino=7819 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.934410][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.981313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.001493][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.021865][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.083002][ T30] audit: type=1400 audit(1756416332.868:142): avc: denied { write } for pid=6002 comm="syz.0.9" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.247055][ T30] audit: type=1400 audit(1756416332.868:143): avc: denied { open } for pid=6002 comm="syz.0.9" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.280505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.313280][ T6007] FAULT_INJECTION: forcing a failure. [ 71.313280][ T6007] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.360359][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 71.360382][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.360391][ T6007] Call Trace: [ 71.360396][ T6007] [ 71.360402][ T6007] dump_stack_lvl+0x16c/0x1f0 [ 71.360426][ T6007] should_fail_ex+0x512/0x640 [ 71.360450][ T6007] _copy_to_user+0x32/0xd0 [ 71.360474][ T6007] simple_read_from_buffer+0xcb/0x170 [ 71.360494][ T6007] proc_fail_nth_read+0x197/0x240 [ 71.360516][ T6007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.360537][ T6007] ? rw_verify_area+0xcf/0x6c0 [ 71.360562][ T6007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.360582][ T6007] vfs_read+0x1e4/0xcf0 [ 71.360601][ T6007] ? __pfx___mutex_lock+0x10/0x10 [ 71.360619][ T6007] ? __pfx_vfs_read+0x10/0x10 [ 71.360641][ T6007] ? __fget_files+0x20e/0x3c0 [ 71.360667][ T6007] ksys_read+0x12a/0x250 [ 71.360683][ T6007] ? __pfx_ksys_read+0x10/0x10 [ 71.360699][ T6007] ? fput+0x9b/0xd0 [ 71.360725][ T6007] do_syscall_64+0xcd/0x4c0 [ 71.360745][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.360761][ T6007] RIP: 0033:0x7f522118d5fc [ 71.360775][ T6007] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.360790][ T6007] RSP: 002b:00007f5221f15030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.360807][ T6007] RAX: ffffffffffffffda RBX: 00007f52213b5fa0 RCX: 00007f522118d5fc [ 71.360818][ T6007] RDX: 000000000000000f RSI: 00007f5221f150a0 RDI: 0000000000000007 [ 71.360828][ T6007] RBP: 00007f5221f15090 R08: 0000000000000000 R09: 0000000000000000 [ 71.360838][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.360847][ T6007] R13: 00007f52213b6038 R14: 00007f52213b5fa0 R15: 00007ffe21dd05f8 [ 71.360869][ T6007] [ 71.720367][ T30] audit: type=1400 audit(1756416333.958:144): avc: denied { ioctl } for pid=6008 comm="syz.4.11" path="socket:[9022]" dev="sockfs" ino=9022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.850418][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 71.858461][ T6018] team0: Port device batadv1 added [ 72.262146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.458835][ T30] audit: type=1400 audit(1756416334.748:145): avc: denied { connect } for pid=6019 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.669364][ T30] audit: type=1400 audit(1756416334.778:146): avc: denied { setopt } for pid=6019 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.898795][ T6023] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 73.000699][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14'. [ 73.055912][ T6023] caif0: entered promiscuous mode [ 73.064375][ T6023] caif0: entered allmulticast mode [ 73.071217][ T30] audit: type=1400 audit(1756416335.368:147): avc: denied { read } for pid=6024 comm="syz.3.15" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.117420][ T30] audit: type=1400 audit(1756416335.368:148): avc: denied { open } for pid=6024 comm="syz.3.15" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.160952][ T30] audit: type=1400 audit(1756416335.388:149): avc: denied { ioctl } for pid=6024 comm="syz.3.15" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.502122][ T6046] veth1_to_bridge: entered promiscuous mode [ 74.508322][ T6046] veth1_to_bridge: left promiscuous mode [ 74.547264][ T6047] syz.3.20 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.558074][ T6047] netlink: 72 bytes leftover after parsing attributes in process `syz.3.20'. [ 75.420836][ T5963] Set syz1 is full, maxelem 65536 reached [ 76.319792][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 76.471997][ T6068] team0: Port device batadv1 added [ 76.722108][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 76.734944][ T6067] team0: Port device batadv1 added [ 77.277656][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 77.471280][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 77.505145][ T6079] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 77.531106][ T6082] vlan0: entered promiscuous mode [ 77.628788][ T6085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.30'. [ 77.638188][ T6075] Zero length message leads to an empty skb [ 77.711722][ T6085] veth0: entered promiscuous mode [ 77.741519][ T6085] veth0: entered allmulticast mode [ 77.829941][ T6089] No control pipe specified [ 77.839367][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 77.839381][ T30] audit: type=1400 audit(1756416340.128:171): avc: denied { unmount } for pid=6088 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.437427][ T6097] veth1_to_bridge: entered promiscuous mode [ 78.444641][ T6096] veth1_to_bridge: left promiscuous mode [ 78.555743][ T6100] veth1_to_bridge: entered promiscuous mode [ 78.638716][ T30] audit: type=1400 audit(1756416340.928:172): avc: denied { write } for pid=6105 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.309956][ T6098] veth1_to_bridge: left promiscuous mode [ 79.356560][ T6114] vlan0: left promiscuous mode [ 79.373382][ T6115] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 79.517810][ T6122] vlan0: entered promiscuous mode [ 79.826078][ T30] audit: type=1400 audit(1756416342.118:173): avc: denied { mount } for pid=6127 comm="syz.2.47" name="/" dev="autofs" ino=9227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 79.848152][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.899030][ T51] Bluetooth: Frame is too long (len 12, expected len 4) [ 80.036374][ T6126] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET) [ 80.045353][ T6126] block nbd0: Attempted send on invalid socket [ 80.051845][ T6126] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 81.151551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.819131][ T9] cfg80211: failed to load regulatory.db [ 81.998396][ T30] audit: type=1400 audit(1756416344.288:174): avc: denied { mount } for pid=6146 comm="syz.4.52" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 82.024138][ T6148] fuse: Invalid rootmode [ 82.098671][ T30] audit: type=1326 audit(1756416344.388:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6150 comm="syz.4.54" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x0 [ 82.217429][ T30] audit: type=1400 audit(1756416344.508:176): avc: denied { create } for pid=6150 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.256977][ T30] audit: type=1400 audit(1756416344.508:177): avc: denied { getopt } for pid=6150 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.452362][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 82.507043][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 83.368569][ T51] Bluetooth: Frame is too long (len 12, expected len 4) [ 83.441082][ T30] audit: type=1400 audit(1756416345.738:178): avc: denied { create } for pid=6171 comm="syz.4.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.492270][ T6175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'. [ 83.579909][ T30] audit: type=1400 audit(1756416345.778:179): avc: denied { setopt } for pid=6167 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.733446][ T30] audit: type=1400 audit(1756416345.778:180): avc: denied { bind } for pid=6167 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.801009][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 83.810792][ T6187] team0: Port device batadv2 added [ 83.819727][ T30] audit: type=1400 audit(1756416345.778:181): avc: denied { name_bind } for pid=6167 comm="syz.2.59" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.843687][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 83.921924][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.65'. [ 84.076415][ T30] audit: type=1400 audit(1756416345.778:182): avc: denied { node_bind } for pid=6167 comm="syz.2.59" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 84.757695][ T6199] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.109229][ T30] audit: type=1400 audit(1756416345.778:183): avc: denied { write } for pid=6167 comm="syz.2.59" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.131750][ T6210] netlink: 'syz.0.70': attribute type 29 has an invalid length. [ 85.148588][ T6210] netlink: 'syz.0.70': attribute type 29 has an invalid length. [ 85.257043][ T30] audit: type=1400 audit(1756416345.778:184): avc: denied { connect } for pid=6167 comm="syz.2.59" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.534382][ T30] audit: type=1400 audit(1756416345.778:185): avc: denied { name_connect } for pid=6167 comm="syz.2.59" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.556210][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.972941][ T30] audit: type=1400 audit(1756416345.788:186): avc: denied { ioctl } for pid=6174 comm="syz.1.62" path="socket:[9288]" dev="sockfs" ino=9288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.025861][ T30] audit: type=1400 audit(1756416345.808:187): avc: denied { read } for pid=6171 comm="syz.4.61" path="socket:[8067]" dev="sockfs" ino=8067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.686601][ T24] IPVS: starting estimator thread 0... [ 86.813993][ T6224] IPVS: using max 72 ests per chain, 172800 per kthread [ 89.432961][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 89.432976][ T30] audit: type=1400 audit(1756416351.728:198): avc: denied { setopt } for pid=6285 comm="syz.1.98" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.478713][ T6286] syz_tun: entered allmulticast mode [ 89.487840][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 89.559806][ T30] audit: type=1400 audit(1756416351.848:199): avc: denied { mount } for pid=6280 comm="syz.2.97" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.601225][ T6281] netlink: 2 bytes leftover after parsing attributes in process `syz.2.97'. [ 89.618326][ T6286] syz_tun (unregistering): left allmulticast mode [ 89.638688][ T30] audit: type=1400 audit(1756416351.898:200): avc: denied { connect } for pid=6280 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.639049][ T6281] batadv_slave_1: entered promiscuous mode [ 89.685209][ T6281] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.97'. [ 89.699681][ T6281] netlink: zone id is out of range [ 89.718191][ T6281] netlink: zone id is out of range [ 89.765107][ T6281] netlink: zone id is out of range [ 89.784267][ T6281] netlink: zone id is out of range [ 89.792602][ T6293] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 89.793406][ T6281] netlink: zone id is out of range [ 89.825867][ T6281] netlink: zone id is out of range [ 89.847308][ T6281] netlink: zone id is out of range [ 89.862889][ T6281] netlink: zone id is out of range [ 89.869697][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'. [ 89.879576][ T6296] macsec0: entered promiscuous mode [ 89.885612][ T6296] macsec0: entered allmulticast mode [ 89.891277][ T6296] veth1_macvtap: entered allmulticast mode [ 89.900651][ T6281] netlink: zone id is out of range [ 89.915587][ T6281] netlink: zone id is out of range [ 90.052707][ T6303] capability: warning: `syz.3.95' uses deprecated v2 capabilities in a way that may be insecure [ 90.431002][ T6308] IPv6: syztnl0: Disabled Multicast RS [ 90.851814][ T6315] netlink: 10 bytes leftover after parsing attributes in process `syz.3.106'. [ 90.863283][ T30] audit: type=1400 audit(1756416353.158:201): avc: denied { ioctl } for pid=6314 comm="syz.3.106" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.888047][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.198756][ T6319] ======================================================= [ 91.198756][ T6319] WARNING: The mand mount option has been deprecated and [ 91.198756][ T6319] and is ignored by this kernel. Remove the mand [ 91.198756][ T6319] option from the mount to silence this warning. [ 91.198756][ T6319] ======================================================= [ 91.233624][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.293699][ T30] audit: type=1400 audit(1756416353.588:202): avc: denied { mount } for pid=6318 comm="syz.2.107" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 91.574335][ T6326] overlayfs: missing 'lowerdir' [ 91.908338][ T6324] : entered promiscuous mode [ 91.923331][ T30] audit: type=1400 audit(1756416354.208:203): avc: denied { create } for pid=6330 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.001882][ T30] audit: type=1400 audit(1756416354.248:204): avc: denied { read write } for pid=6332 comm="syz.1.111" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.066592][ T30] audit: type=1400 audit(1756416354.248:205): avc: denied { open } for pid=6332 comm="syz.1.111" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.089647][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.544982][ T30] audit: type=1400 audit(1756416354.838:206): avc: denied { mounton } for pid=6332 comm="syz.1.111" path="/proc/63/task" dev="proc" ino=10377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 92.949457][ T30] audit: type=1400 audit(1756416355.238:207): avc: denied { append } for pid=6342 comm="syz.0.114" name="media2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.950043][ T6343] netlink: 120 bytes leftover after parsing attributes in process `syz.0.114'. [ 92.972145][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.991227][ T6333] trusted_key: syz.1.111 sent an empty control message without MSG_MORE. [ 94.128100][ T6358] input: syz0 as /devices/virtual/input/input5 [ 94.491839][ T6366] hsr0 speed is unknown, defaulting to 1000 [ 94.503475][ T6366] hsr0 speed is unknown, defaulting to 1000 [ 94.520627][ T6366] hsr0 speed is unknown, defaulting to 1000 [ 94.539505][ T6366] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.559695][ T6366] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 94.695302][ T6366] hsr0 speed is unknown, defaulting to 1000 [ 94.704555][ T6366] hsr0 speed is unknown, defaulting to 1000 [ 94.712177][ T6366] hsr0 speed is unknown, defaulting to 1000 [ 94.724005][ T6366] hsr0 speed is unknown, defaulting to 1000 [ 94.738569][ T6366] hsr0 speed is unknown, defaulting to 1000 [ 97.060067][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 97.060083][ T30] audit: type=1400 audit(1756416359.348:220): avc: denied { write } for pid=6391 comm="syz.1.128" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.141187][ C0] net_ratelimit: 89 callbacks suppressed [ 97.141198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.182479][ T30] audit: type=1400 audit(1756416359.388:221): avc: denied { write } for pid=6391 comm="syz.1.128" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.350828][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.360303][ T975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.383850][ T6405] netlink: 'syz.4.132': attribute type 32 has an invalid length. [ 97.391677][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 97.403892][ T6405] (unnamed net_device) (uninitialized): Setting coupled_control to on (1) [ 97.544617][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.561957][ T975] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.597558][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.616664][ T30] audit: type=1400 audit(1756416359.898:222): avc: denied { add_name } for pid=6407 comm="syz.0.134" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.617025][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.637931][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.637957][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.641323][ T24] usb 4-1: config 0 descriptor?? [ 97.720298][ T30] audit: type=1400 audit(1756416359.898:223): avc: denied { create } for pid=6407 comm="syz.0.134" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 97.771018][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 97.787835][ T30] audit: type=1400 audit(1756416359.898:224): avc: denied { associate } for pid=6407 comm="syz.0.134" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.833059][ T975] usb 2-1: config 0 descriptor?? [ 97.843170][ T30] audit: type=1400 audit(1756416360.068:225): avc: denied { unmount } for pid=5865 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.978995][ T30] audit: type=1400 audit(1756416360.268:226): avc: denied { connect } for pid=6410 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.051083][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 98.057059][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 98.163399][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.177933][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 98.186882][ T975] usb 2-1: USB disconnect, device number 2 [ 98.187713][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 98.201638][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 98.208690][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 98.220313][ T5935] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 98.321486][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 98.328514][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 98.341097][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 98.396012][ T5935] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 98.411839][ T5935] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 98.762206][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 98.769942][ T5935] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.785881][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 98.792608][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 98.800155][ T5935] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 98.812959][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 98.819954][ T5935] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 98.835990][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 98.846615][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 98.917601][ T5935] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.931095][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 98.939744][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 98.951919][ T24] pwc: Registered as video103. [ 98.976870][ T5935] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 98.993861][ T5935] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.074970][ T5935] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.098009][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 99.169295][ T5935] usb 1-1: string descriptor 0 read error: -22 [ 99.176491][ T5935] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.180910][ T975] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.205822][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.216128][ T24] usb 4-1: USB disconnect, device number 2 [ 99.242435][ T5935] adutux 1-1:168.0: interrupt endpoints not found [ 99.360827][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 99.372865][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.385940][ T975] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 99.400293][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.428695][ T975] usb 2-1: config 0 descriptor?? [ 99.448408][ T975] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 99.463064][ T30] audit: type=1400 audit(1756416361.758:227): avc: denied { create } for pid=6425 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.501667][ T975] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 99.518180][ T5869] usb 1-1: USB disconnect, device number 2 [ 99.554239][ T30] audit: type=1400 audit(1756416361.848:228): avc: denied { ioctl } for pid=6425 comm="syz.3.140" path="socket:[10797]" dev="sockfs" ino=10797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.578883][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.919909][ T30] audit: type=1400 audit(1756416361.888:229): avc: denied { ioctl } for pid=6425 comm="syz.3.140" path="socket:[10796]" dev="sockfs" ino=10796 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 99.945279][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.009149][ C1] ldusb 2-1:0.0: Ring buffer overflow, 32 bytes dropped [ 100.165546][ T6434] mmap: syz.3.141 (6434) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.218698][ T975] usb 2-1: USB disconnect, device number 3 [ 100.238639][ T975] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 100.442280][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 101.293184][ T6465] netlink: 'syz.1.145': attribute type 27 has an invalid length. [ 101.409353][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.417260][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.965672][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.984399][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.991941][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.043493][ T6465] vlan0: left promiscuous mode [ 102.200317][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 102.209267][ T5869] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.222070][ T5869] usb 2-1: config 0 has no interface number 0 [ 102.235056][ T5869] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 102.248582][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.278550][ T5869] usb 2-1: Product: syz [ 102.341202][ T5869] usb 2-1: Manufacturer: syz [ 102.386266][ T5869] usb 2-1: SerialNumber: syz [ 102.399229][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 102.399242][ T30] audit: type=1400 audit(1756416364.668:254): avc: denied { execute } for pid=6486 comm="syz.3.149" path="/30/memory.events" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.442792][ T5869] usb 2-1: config 0 descriptor?? [ 102.474438][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 102.740309][ T6500] process 'syz.0.150' launched './file0' with NULL argv: empty string added [ 102.772476][ T30] audit: type=1400 audit(1756416365.028:255): avc: denied { watch watch_reads } for pid=6491 comm="syz.0.150" path="/29/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.123858][ T5869] gspca_spca1528: reg_w err -110 [ 103.140347][ T5869] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 103.239362][ T30] audit: type=1400 audit(1756416365.038:256): avc: denied { execute_no_trans } for pid=6491 comm="syz.0.150" path="/29/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.690313][ T5927] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 103.833849][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.852494][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.943123][ T6473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.039743][ T5927] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 104.090212][ T5927] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.118004][ T3004] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.153081][ T3004] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.180271][ T5927] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.192610][ T3004] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.857615][ T3004] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.099298][ T30] audit: type=1400 audit(1756416367.068:257): avc: denied { create } for pid=6513 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.201485][ T30] audit: type=1400 audit(1756416367.078:258): avc: denied { write } for pid=6513 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.226423][ T5927] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 105.287178][ T5927] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.301644][ T6535] netlink: 'syz.2.158': attribute type 11 has an invalid length. [ 105.335340][ T6535] netlink: 96 bytes leftover after parsing attributes in process `syz.2.158'. [ 105.344345][ T5927] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.367195][ T5927] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 105.392008][ T5927] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.416025][ T5927] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.437509][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 105.447099][ T5927] usb 1-1: string descriptor 0 read error: -22 [ 105.453934][ T5927] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.478875][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.519227][ T5927] adutux 1-1:168.0: interrupt endpoints not found [ 105.635810][ T30] audit: type=1326 audit(1756416367.928:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.2.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522118ebe9 code=0x0 [ 105.728465][ T5927] usb 1-1: USB disconnect, device number 3 [ 106.222427][ T9] usb 2-1: USB disconnect, device number 4 [ 106.421876][ T6589] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 106.439466][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 107.278218][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 107.748653][ T30] audit: type=1400 audit(1756416369.888:260): avc: denied { connect } for pid=6606 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.795164][ T6618] hsr0 speed is unknown, defaulting to 1000 [ 107.830029][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 107.874568][ T30] audit: type=1400 audit(1756416370.168:261): avc: denied { execute } for pid=6621 comm="syz.0.169" dev="hugetlbfs" ino=10065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 107.912165][ T30] audit: type=1400 audit(1756416370.168:262): avc: denied { execute_no_trans } for pid=6621 comm="syz.0.169" path=2F6D656D66643A5B0BDB58AE5B1AA9F5FAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=10065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 107.983863][ T6616] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 108.032459][ T6624] capability: warning: `syz.2.171' uses 32-bit capabilities (legacy support in use) [ 108.259619][ T30] audit: type=1400 audit(1756416370.548:263): avc: denied { read write } for pid=6633 comm="syz.3.175" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.311972][ T5935] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.323950][ T30] audit: type=1400 audit(1756416370.558:264): avc: denied { open } for pid=6633 comm="syz.3.175" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 108.612147][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.626668][ T5935] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.637184][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.651002][ T5935] usb 1-1: config 0 descriptor?? [ 108.710207][ T5935] pwc: Askey VC010 type 2 USB webcam detected. [ 108.836093][ T30] audit: type=1800 audit(1756416371.018:265): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.175" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 108.868741][ T6646] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 108.895708][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 109.200384][ T5935] pwc: recv_control_msg error -32 req 02 val 2b00 [ 109.209060][ T5935] pwc: recv_control_msg error -32 req 02 val 2700 [ 109.217272][ T5935] pwc: recv_control_msg error -32 req 02 val 2c00 [ 109.268339][ T5935] pwc: recv_control_msg error -32 req 04 val 1000 [ 109.275710][ T5935] pwc: recv_control_msg error -32 req 04 val 1300 [ 109.283565][ T5935] pwc: recv_control_msg error -32 req 04 val 1400 [ 109.292649][ T5935] pwc: recv_control_msg error -32 req 02 val 2000 [ 109.300211][ T5935] pwc: recv_control_msg error -32 req 02 val 2100 [ 109.318898][ T30] audit: type=1400 audit(1756416371.608:266): avc: denied { create } for pid=6647 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.319372][ T5935] pwc: recv_control_msg error -71 req 04 val 1500 [ 109.448152][ T30] audit: type=1400 audit(1756416371.718:267): avc: denied { write } for pid=6647 comm="syz.1.178" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.480690][ T30] audit: type=1400 audit(1756416371.718:268): avc: denied { open } for pid=6647 comm="syz.1.178" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.559976][ T5935] pwc: recv_control_msg error -71 req 02 val 2500 [ 109.567188][ T5935] pwc: recv_control_msg error -71 req 02 val 2400 [ 109.579493][ T5935] pwc: recv_control_msg error -71 req 02 val 2600 [ 110.050333][ T30] audit: type=1400 audit(1756416371.968:269): avc: denied { ioctl } for pid=6647 comm="syz.1.178" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.201107][ T5935] pwc: recv_control_msg error -71 req 02 val 2900 [ 110.223659][ T5935] pwc: recv_control_msg error -71 req 02 val 2800 [ 110.243464][ T5935] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.260202][ T5935] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.274827][ T5935] pwc: Registered as video103. [ 110.343618][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'. [ 110.350956][ T5935] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 110.400637][ T5935] usb 1-1: USB disconnect, device number 4 [ 110.745540][ T6663] netlink: 48 bytes leftover after parsing attributes in process `syz.0.181'. [ 111.822101][ T6702] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.230520][ T5972] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.570331][ T5972] usb 1-1: device descriptor read/64, error -71 [ 112.737964][ T6739] ubi31: attaching mtd0 [ 112.743843][ T6739] ubi31: scanning is finished [ 112.748512][ T6739] ubi31: empty MTD device detected [ 112.843749][ T5972] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.857066][ T6739] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 112.864736][ T6739] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 112.872151][ T6739] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 112.879244][ T6739] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 112.886791][ T6739] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 112.893726][ T6739] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 112.901906][ T6739] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 813530032 [ 112.911981][ T6739] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.922864][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.930350][ T6741] ubi31: background thread "ubi_bgt31d" started, PID 6741 [ 113.060515][ T5972] usb 1-1: device descriptor read/64, error -71 [ 113.120381][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 113.187019][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 113.211256][ T5972] usb usb1-port1: attempt power cycle [ 113.228797][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.272077][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.293326][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.333966][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.378211][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.448573][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.610789][ T5972] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.646065][ T6758] hsr0 speed is unknown, defaulting to 1000 [ 113.664076][ T5972] usb 1-1: device descriptor read/8, error -71 [ 113.796646][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 113.806375][ T9] usbtmc 2-1:16.0: can't read capabilities [ 113.910310][ T5972] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.930743][ T5972] usb 1-1: device descriptor read/8, error -71 [ 114.018857][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 114.018869][ T30] audit: type=1400 audit(1756416632.312:278): avc: denied { write } for pid=6734 comm="syz.1.209" name="usbtmc0" dev="devtmpfs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.051198][ T5972] usb usb1-port1: unable to enumerate USB device [ 114.107883][ T6735] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 114.126612][ T5935] usb 2-1: USB disconnect, device number 5 [ 115.010052][ T6774] tmpfs: Bad value for 'mpol' [ 115.331532][ T30] audit: type=1400 audit(1756416633.302:279): avc: denied { mounton } for pid=6770 comm="syz.1.221" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 115.865257][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.067810][ T24] usb 2-1: device descriptor read/64, error -71 [ 116.140838][ T30] audit: type=1400 audit(1756416634.442:280): avc: denied { create } for pid=6786 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.182055][ T30] audit: type=1400 audit(1756416634.482:281): avc: denied { ioctl } for pid=6770 comm="syz.1.221" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.246991][ T6793] netlink: 'syz.4.226': attribute type 21 has an invalid length. [ 116.311063][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.331996][ T30] audit: type=1400 audit(1756416634.632:282): avc: denied { watch watch_reads } for pid=6792 comm="syz.4.226" path="/47" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.332855][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.226'. [ 116.390792][ T30] audit: type=1400 audit(1756416634.682:283): avc: denied { watch } for pid=6792 comm="syz.4.226" path="/47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.450376][ T24] usb 2-1: device descriptor read/64, error -71 [ 116.460512][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 116.463808][ T30] audit: type=1400 audit(1756416634.682:284): avc: denied { watch_sb } for pid=6792 comm="syz.4.226" path="/47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.563753][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 116.573145][ T24] usb usb2-port1: attempt power cycle [ 116.707397][ T6804] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 116.900469][ T30] audit: type=1400 audit(1756416635.082:285): avc: denied { read write } for pid=6805 comm="syz.0.232" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.987268][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.991955][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.022430][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.030067][ T30] audit: type=1400 audit(1756416635.082:286): avc: denied { open } for pid=6805 comm="syz.0.232" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.030546][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.063026][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'. [ 117.074404][ T24] usb 2-1: device descriptor read/8, error -71 [ 117.089132][ T30] audit: type=1400 audit(1756416635.372:287): avc: denied { name_bind } for pid=6811 comm="syz.4.231" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 117.158958][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.227373][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.237285][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.250343][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.271388][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.300951][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.315080][ T9] hid-generic 0000:0006:0007.0001: unknown main item tag 0x0 [ 117.340287][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.360817][ T9] hid-generic 0000:0006:0007.0001: hidraw0: HID v0.09 Device [syz0] on syz1 [ 117.396520][ T24] usb 2-1: device descriptor read/8, error -71 [ 117.518169][ T6819] fido_id[6819]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.539685][ T24] usb usb2-port1: unable to enumerate USB device [ 118.908643][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 118.961533][ T6845] FAULT_INJECTION: forcing a failure. [ 118.961533][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.002058][ T6845] CPU: 1 UID: 0 PID: 6845 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(full) [ 119.002083][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.002091][ T6845] Call Trace: [ 119.002095][ T6845] [ 119.002101][ T6845] dump_stack_lvl+0x16c/0x1f0 [ 119.002122][ T6845] should_fail_ex+0x512/0x640 [ 119.002142][ T6845] strncpy_from_user+0x3b/0x2e0 [ 119.002159][ T6845] getname_flags.part.0+0x8f/0x550 [ 119.002183][ T6845] getname_flags+0x93/0xf0 [ 119.002198][ T6845] user_path_at+0x24/0x60 [ 119.002213][ T6845] __x64_sys_mount+0x1fc/0x310 [ 119.002232][ T6845] ? __pfx___x64_sys_mount+0x10/0x10 [ 119.002257][ T6845] do_syscall_64+0xcd/0x4c0 [ 119.002274][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.002288][ T6845] RIP: 0033:0x7fdfd058ebe9 [ 119.002300][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.002313][ T6845] RSP: 002b:00007fdfd1378038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.002327][ T6845] RAX: ffffffffffffffda RBX: 00007fdfd07b5fa0 RCX: 00007fdfd058ebe9 [ 119.002336][ T6845] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 119.002344][ T6845] RBP: 00007fdfd1378090 R08: 0000200000000580 R09: 0000000000000000 [ 119.002353][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.002361][ T6845] R13: 00007fdfd07b6038 R14: 00007fdfd07b5fa0 R15: 00007ffeec7d10a8 [ 119.002379][ T6845] [ 119.229587][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 119.335701][ T6855] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 119.370789][ T6855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 119.622521][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 119.622550][ T30] audit: type=1400 audit(1756416637.912:290): avc: denied { name_connect } for pid=6852 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 119.691325][ T6866] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 119.756874][ T9] IPVS: starting estimator thread 0... [ 119.851434][ T6867] IPVS: using max 39 ests per chain, 93600 per kthread [ 120.512015][ T6874] overlayfs: failed to clone upperpath [ 120.834885][ T30] audit: type=1400 audit(1756416639.132:291): avc: denied { bind } for pid=6884 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.689239][ T30] audit: type=1400 audit(1756416639.982:292): avc: denied { getopt } for pid=6884 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.725716][ T30] audit: type=1400 audit(1756416639.982:293): avc: denied { getopt } for pid=6884 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.789684][ T30] audit: type=1400 audit(1756416640.052:294): avc: denied { read } for pid=6884 comm="syz.0.254" path="socket:[11808]" dev="sockfs" ino=11808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.949864][ T6906] overlayfs: failed to clone upperpath [ 123.013787][ T30] audit: type=1400 audit(1756416641.302:295): avc: denied { setopt } for pid=6927 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.723894][ T30] audit: type=1326 audit(1756416642.012:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd058ebe9 code=0x7ffc0000 [ 123.747093][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.763706][ T30] audit: type=1326 audit(1756416642.012:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6931 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd058ebe9 code=0x7ffc0000 [ 123.820466][ T30] audit: type=1400 audit(1756416642.022:298): avc: denied { read write } for pid=6931 comm="syz.0.268" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.844022][ T30] audit: type=1400 audit(1756416642.022:299): avc: denied { open } for pid=6931 comm="syz.0.268" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.867197][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.960373][ T5972] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.190558][ T5972] usb 1-1: Using ep0 maxpacket: 16 [ 124.274260][ T5972] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 124.310530][ T5972] usb 1-1: config 0 has no interface number 0 [ 124.327491][ T5972] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.441936][ T5972] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 124.454112][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 124.462638][ T5972] usb 1-1: Product: syz [ 124.466778][ T5972] usb 1-1: SerialNumber: syz [ 124.505565][ T5972] usb 1-1: config 0 descriptor?? [ 124.540180][ T5972] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 124.650555][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 124.650570][ T30] audit: type=1326 audit(1756416642.952:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x7ffc0000 [ 124.679747][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.718564][ T30] audit: type=1326 audit(1756416642.982:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x7ffc0000 [ 124.837248][ T6939] pim6reg: entered allmulticast mode [ 124.845905][ T6939] pim6reg: left allmulticast mode [ 124.897408][ T30] audit: type=1326 audit(1756416642.982:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x7ffc0000 [ 125.000507][ T30] audit: type=1326 audit(1756416642.982:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x7ffc0000 [ 125.080519][ T30] audit: type=1326 audit(1756416642.982:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31b652ade9 code=0x7ffc0000 [ 125.106981][ T30] audit: type=1326 audit(1756416642.982:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31b652ade9 code=0x7ffc0000 [ 125.130120][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.552065][ T30] audit: type=1326 audit(1756416642.982:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x7ffc0000 [ 125.583829][ T30] audit: type=1326 audit(1756416642.982:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31b652ade9 code=0x7ffc0000 [ 125.612527][ T30] audit: type=1326 audit(1756416642.982:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31b652ade9 code=0x7ffc0000 [ 125.663593][ T30] audit: type=1326 audit(1756416642.982:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6942 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x7ffc0000 [ 126.345955][ T5972] usb 1-1: USB disconnect, device number 9 [ 127.117768][ T6944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.505584][ T6991] veth1_to_bridge: entered promiscuous mode [ 127.546448][ T6991] veth1_to_bridge: left promiscuous mode [ 127.949804][ T6999] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 127.981588][ T6495] IPVS: starting estimator thread 0... [ 128.075984][ T7000] IPVS: using max 38 ests per chain, 91200 per kthread [ 128.592677][ T7009] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 129.782107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.047637][ T30] kauditd_printk_skb: 347 callbacks suppressed [ 130.047652][ T30] audit: type=1400 audit(1756416648.342:664): avc: denied { write } for pid=7019 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.460373][ T30] audit: type=1400 audit(1756416648.542:665): avc: denied { setopt } for pid=7036 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.061470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.070252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.282596][ T7056] veth1_to_bridge: entered promiscuous mode [ 131.288801][ T7056] veth1_to_bridge: left promiscuous mode [ 132.343301][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.349638][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.637214][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 132.710304][ T24] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 132.915151][ T30] audit: type=1400 audit(1756416651.212:666): avc: denied { mount } for pid=7066 comm="syz.2.305" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 132.938269][ T7068] overlayfs: failed to clone lowerpath [ 132.941576][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 132.962781][ T7068] overlayfs: failed to clone upperpath [ 132.978090][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 133.046739][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.101486][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.117215][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 133.130931][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 133.139183][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 133.151999][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.165774][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.184670][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 133.196887][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 133.205556][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 133.221948][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.234347][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 133.245828][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 135.616565][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 135.626075][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.639736][ T24] usb 4-1: can't set config #168, error -71 [ 135.830358][ T24] usb 4-1: USB disconnect, device number 3 [ 136.383659][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.071159][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 137.087632][ T24] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 137.540374][ T24] usb 4-1: config 0 has no interface number 0 [ 137.546485][ T24] usb 4-1: config 0 interface 20 has no altsetting 0 [ 138.154821][ T7098] sp0: Synchronizing with TNC [ 138.503201][ T24] usb 4-1: New USB device found, idVendor=082d, idProduct=0200, bcdDevice= e.96 [ 138.525454][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.546868][ T24] usb 4-1: Product: syz [ 138.561651][ T24] usb 4-1: Manufacturer: syz [ 138.569744][ T24] usb 4-1: SerialNumber: syz [ 138.599844][ T24] usb 4-1: config 0 descriptor?? [ 138.621162][ T24] usb 4-1: active config #0 != 1 ?? [ 138.628870][ T7093] [U] è` [ 138.708933][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 138.840791][ T7084] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 138.849843][ T7084] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 138.868774][ T30] audit: type=1400 audit(1756416657.162:667): avc: denied { append } for pid=7082 comm="syz.3.310" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.869726][ T7084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7084 comm=syz.3.310 [ 138.968145][ T24] usb 4-1: USB disconnect, device number 4 [ 138.990297][ T30] audit: type=1400 audit(1756416657.212:668): avc: denied { read } for pid=7113 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.056023][ T30] audit: type=1400 audit(1756416657.322:669): avc: denied { getopt } for pid=7113 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.260286][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.411924][ T9] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 139.427114][ T7122] netlink: 188 bytes leftover after parsing attributes in process `syz.4.321'. [ 139.453120][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.477300][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.501811][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.527393][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.541646][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.550956][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.561803][ T9] usb 2-1: config 0 descriptor?? [ 139.567349][ T7115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 140.039136][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 140.303974][ T30] audit: type=1400 audit(1756416658.302:670): avc: denied { setopt } for pid=7113 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.399986][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 140.406207][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 140.481434][ T30] audit: type=1400 audit(1756416658.622:671): avc: denied { mounton } for pid=7123 comm="syz.3.323" path="/59/file0" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.506988][ T9] usb 2-1: USB disconnect, device number 10 [ 140.509396][ T30] audit: type=1400 audit(1756416658.632:672): avc: denied { read } for pid=7123 comm="syz.3.323" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.856913][ T30] audit: type=1400 audit(1756416658.632:673): avc: denied { open } for pid=7123 comm="syz.3.323" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.034790][ T30] audit: type=1400 audit(1756416658.632:674): avc: denied { ioctl } for pid=7123 comm="syz.3.323" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.920879][ T30] audit: type=1400 audit(1756416660.222:675): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 142.052375][ T7146] veth1_to_bridge: entered promiscuous mode [ 142.058842][ T7146] veth1_to_bridge: left promiscuous mode [ 142.860511][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 143.264027][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.942548][ T7164] veth1_to_bridge: entered promiscuous mode [ 144.032572][ T7158] veth1_to_bridge: left promiscuous mode [ 144.789889][ T30] audit: type=1400 audit(1756416663.082:676): avc: denied { create } for pid=7172 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 144.863561][ T30] audit: type=1400 audit(1756416663.112:677): avc: denied { accept } for pid=7172 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 146.645739][ T9] IPVS: starting estimator thread 0... [ 146.750390][ T7205] IPVS: using max 71 ests per chain, 170400 per kthread [ 146.782453][ T7207] veth1_to_bridge: entered promiscuous mode [ 146.788599][ T7207] veth1_to_bridge: left promiscuous mode [ 147.014925][ T7212] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 147.341563][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'. [ 147.474413][ T7227] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 149.006989][ T7224] bond3: entered promiscuous mode [ 149.015768][ T7239] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.354'. [ 149.031149][ T7224] bond3: entered allmulticast mode [ 149.045068][ T7224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.544058][ T7260] tmpfs: Bad value for 'mpol' [ 150.956801][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 151.088995][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 151.189222][ T30] audit: type=1400 audit(1756416669.482:678): avc: denied { setopt } for pid=7268 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.211807][ T30] audit: type=1400 audit(1756416669.502:679): avc: denied { bind } for pid=7268 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.310319][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 151.450756][ T5906] usb 2-1: device descriptor read/64, error -71 [ 152.168981][ T5906] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 152.492872][ T5906] usb 2-1: device descriptor read/64, error -71 [ 152.610957][ T5906] usb usb2-port1: attempt power cycle [ 152.980475][ T5906] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 153.071026][ T5906] usb 2-1: device descriptor read/8, error -71 [ 153.846654][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 153.896489][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 153.988756][ T30] audit: type=1400 audit(1756416672.282:680): avc: denied { bind } for pid=7318 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.092272][ T7333] netlink: 'syz.0.372': attribute type 10 has an invalid length. [ 154.101758][ T30] audit: type=1400 audit(1756416672.282:681): avc: denied { setopt } for pid=7318 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.172404][ T7333] team0: Port device dummy0 added [ 154.238239][ T30] audit: type=1400 audit(1756416672.312:682): avc: denied { create } for pid=7318 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.643699][ T30] audit: type=1400 audit(1756416672.312:683): avc: denied { connect } for pid=7318 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.433010][ T30] audit: type=1400 audit(1756416673.692:684): avc: denied { read } for pid=7343 comm="syz.0.376" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.320397][ T30] audit: type=1400 audit(1756416674.592:685): avc: denied { read append } for pid=7365 comm="syz.1.381" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 156.707857][ T30] audit: type=1400 audit(1756416675.002:686): avc: denied { read } for pid=7374 comm="syz.3.383" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.748210][ T7376] veth1_to_bridge: entered promiscuous mode [ 156.748219][ T30] audit: type=1400 audit(1756416675.002:687): avc: denied { open } for pid=7374 comm="syz.3.383" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.779769][ T7376] veth1_to_bridge: left promiscuous mode [ 156.810452][ T30] audit: type=1400 audit(1756416675.002:688): avc: denied { ioctl } for pid=7374 comm="syz.3.383" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.836616][ T30] audit: type=1400 audit(1756416675.042:689): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 156.878419][ T30] audit: type=1400 audit(1756416675.162:690): avc: denied { read } for pid=7378 comm="syz.0.385" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.910424][ T30] audit: type=1400 audit(1756416675.162:691): avc: denied { open } for pid=7378 comm="syz.0.385" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.958655][ T30] audit: type=1400 audit(1756416675.162:692): avc: denied { ioctl } for pid=7378 comm="syz.0.385" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.140422][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 157.282735][ T9] usb 1-1: device descriptor read/64, error -71 [ 157.348720][ T30] audit: type=1400 audit(1756416675.632:693): avc: denied { ioctl } for pid=7380 comm="syz.3.386" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.793120][ T9] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 157.814384][ T30] audit: type=1400 audit(1756416676.112:694): avc: denied { bind } for pid=7380 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.940878][ T9] usb 1-1: device descriptor read/64, error -71 [ 158.060962][ T9] usb usb1-port1: attempt power cycle [ 159.490460][ T9] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 161.378284][ T9] usb 1-1: device descriptor read/8, error -71 [ 162.038506][ T30] audit: type=1400 audit(1756416680.332:695): avc: denied { connect } for pid=7449 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.117270][ T30] audit: type=1400 audit(1756416680.412:696): avc: denied { bind } for pid=7449 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.145633][ T30] audit: type=1400 audit(1756416680.422:697): avc: denied { listen } for pid=7449 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.165113][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.250265][ T30] audit: type=1400 audit(1756416680.432:698): avc: denied { accept } for pid=7449 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.271274][ T30] audit: type=1400 audit(1756416680.472:699): avc: denied { read } for pid=7449 comm="syz.0.399" path="socket:[13839]" dev="sockfs" ino=13839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.297310][ T30] audit: type=1400 audit(1756416680.542:700): avc: denied { write } for pid=7449 comm="syz.0.399" path="socket:[13844]" dev="sockfs" ino=13844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.359822][ T30] audit: type=1400 audit(1756416680.542:701): avc: denied { write } for pid=7449 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 163.332240][ T30] audit: type=1400 audit(1756416681.602:702): avc: denied { module_load } for pid=7466 comm="syz.0.402" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 163.700352][ T30] audit: type=1400 audit(1756416681.772:703): avc: denied { create } for pid=7469 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 164.663456][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.907212][ T7509] netlink: 216 bytes leftover after parsing attributes in process `syz.3.412'. [ 165.251254][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 165.690583][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 165.698394][ T9] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 165.739043][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.751956][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.763292][ T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 165.772658][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 165.786921][ T9] usb 4-1: config 0 has no interface number 0 [ 165.795536][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 165.808848][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.879266][ T9] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 165.889676][ T9] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.906608][ T9] usb 4-1: config 0 interface 125 has no altsetting 0 [ 165.913582][ T9] usb 4-1: config 0 interface 125 has no altsetting 2 [ 165.924471][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 165.934861][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.945655][ T9] usb 4-1: Product: syz [ 165.949813][ T9] usb 4-1: Manufacturer: syz [ 165.957182][ T9] usb 4-1: SerialNumber: syz [ 165.974050][ T9] usb 4-1: config 0 descriptor?? [ 165.993607][ T9] usb 4-1: selecting invalid altsetting 2 [ 166.022833][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 166.066586][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 166.285629][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 166.295590][ T30] audit: type=1400 audit(1756416684.592:704): avc: denied { map } for pid=7508 comm="syz.3.412" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 166.322646][ C0] usb 4-1: async_complete: urb error -71 [ 166.328379][ C0] usb 4-1: async_complete: urb error -71 [ 166.334070][ C0] usb 4-1: async_complete: urb error -71 [ 166.339744][ C0] usb 4-1: async_complete: urb error -71 [ 166.755557][ T9] get_1284_register: usb error -71 [ 166.762067][ T9] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 166.778128][ T9] usb 4-1: USB disconnect, device number 5 [ 167.598481][ T6495] IPVS: starting estimator thread 0... [ 167.931645][ T7558] IPVS: using max 33 ests per chain, 79200 per kthread [ 168.096638][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 168.096652][ T30] audit: type=1400 audit(1756416686.392:706): avc: denied { mounton } for pid=7561 comm="syz.3.422" path="/77/file0" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 169.925009][ T30] audit: type=1400 audit(1756416688.212:707): avc: denied { mount } for pid=7585 comm="syz.2.426" name="/" dev="ramfs" ino=14045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 169.979290][ T30] audit: type=1400 audit(1756416688.222:708): avc: denied { execute } for pid=7585 comm="syz.2.426" path="/file1" dev="ramfs" ino=14047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 170.039631][ T7593] : entered promiscuous mode [ 170.977945][ T30] audit: type=1400 audit(1756416689.262:709): avc: denied { map } for pid=7612 comm="syz.1.432" path="socket:[14405]" dev="sockfs" ino=14405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 171.216114][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 171.350799][ T7622] team0: Port device batadv3 added [ 171.599640][ T30] audit: type=1400 audit(1756416689.892:710): avc: denied { bind } for pid=7634 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.720571][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.850175][ T7636] tmpfs: Unknown parameter 'usrquotaÀ' [ 171.862860][ T7636] overlayfs: failed to resolve './file0/file0': -40 [ 172.100503][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 172.321089][ T5869] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 172.402530][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 172.414920][ T5869] usb 1-1: Product: syz [ 172.429469][ T5869] usb 1-1: Manufacturer: syz [ 172.504355][ T5869] usb 1-1: SerialNumber: syz [ 172.650442][ T5869] usb 1-1: config 0 descriptor?? [ 173.243476][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 173.252371][ T7675] team0: Port device batadv2 added [ 174.102623][ T30] audit: type=1400 audit(1756416692.302:711): avc: denied { setopt } for pid=7690 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 174.689955][ T24] usb 1-1: USB disconnect, device number 14 [ 175.821221][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 176.760334][ T30] audit: type=1400 audit(1756416695.022:712): avc: denied { ioctl } for pid=7728 comm="syz.3.449" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 176.927024][ T30] audit: type=1400 audit(1756416695.222:713): avc: denied { create } for pid=7744 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 177.240373][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 177.282191][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 177.291191][ T7764] team0: Port device batadv3 added [ 177.402371][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 177.423883][ T7767] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 177.430602][ T7767] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.446995][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 177.456512][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.467925][ T24] usb 1-1: Product: syz [ 177.473184][ T24] usb 1-1: Manufacturer: syz [ 177.477919][ T24] usb 1-1: SerialNumber: syz [ 177.494450][ T24] usb 1-1: config 0 descriptor?? [ 177.506548][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 177.534827][ T7767] vhci_hcd vhci_hcd.0: Device attached [ 177.535291][ T7774] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.689774][ T7775] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.730426][ T5967] vhci_hcd: vhci_device speed not set [ 177.779552][ T7767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.791069][ T5967] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 177.911587][ T7767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 178.578755][ T7767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 178.596150][ T7774] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24) [ 178.602757][ T7774] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 178.613839][ T7774] vhci_hcd vhci_hcd.0: Device attached [ 178.777726][ T7780] vhci_hcd: connection closed [ 178.779932][ T3004] vhci_hcd: stop threads [ 178.794299][ T7770] vhci_hcd: connection reset by peer [ 178.794695][ T3004] vhci_hcd: release socket [ 178.827365][ T3004] vhci_hcd: disconnect device [ 178.845066][ T3004] vhci_hcd: stop threads [ 178.858449][ T3004] vhci_hcd: release socket [ 178.906582][ T3004] vhci_hcd: disconnect device [ 179.343815][ T30] audit: type=1400 audit(1756416697.632:714): avc: denied { accept } for pid=7789 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 179.445662][ T30] audit: type=1400 audit(1756416697.742:715): avc: denied { setopt } for pid=7793 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.476656][ T30] audit: type=1400 audit(1756416697.772:716): avc: denied { write } for pid=7793 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.611375][ T24] gspca_ov534_9: reg_w failed -71 [ 179.879426][ T30] audit: type=1400 audit(1756416697.822:717): avc: denied { bind } for pid=7793 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.906430][ T30] audit: type=1400 audit(1756416697.822:718): avc: denied { node_bind } for pid=7793 comm="syz.1.462" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 179.927798][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.930314][ T24] gspca_ov534_9: Unknown sensor 0000 [ 179.934198][ T24] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 179.934908][ T30] audit: type=1400 audit(1756416697.882:719): avc: denied { getopt } for pid=7744 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 180.034155][ T24] usb 1-1: USB disconnect, device number 15 [ 180.317545][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 180.328402][ T7819] team0: Port device batadv4 added [ 182.026375][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 182.043191][ T7850] team0: Port device batadv2 added [ 182.400233][ T30] audit: type=1326 audit(1756416700.692:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7864 comm="syz.1.475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9560f8ebe9 code=0x0 [ 182.861704][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 182.871546][ T7878] veth1_to_bridge: entered promiscuous mode [ 182.877808][ T7878] veth1_to_bridge: left promiscuous mode [ 183.359118][ T5967] vhci_hcd: vhci_device speed not set [ 183.419161][ T30] audit: type=1400 audit(1756416701.712:721): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.447139][ T24] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 183.702542][ T24] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 183.714903][ T24] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 183.725363][ T24] usb 1-1: config 220 has no interface number 2 [ 183.732704][ T24] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 183.745908][ T24] usb 1-1: config 220 interface 0 has no altsetting 0 [ 183.752791][ T24] usb 1-1: config 220 interface 76 has no altsetting 0 [ 183.759705][ T24] usb 1-1: config 220 interface 1 has no altsetting 0 [ 185.582567][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.600059][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.633809][ T24] usb 1-1: can't set config #220, error -71 [ 185.655145][ T24] usb 1-1: USB disconnect, device number 16 [ 185.700576][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 185.708137][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 185.716142][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 185.722785][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 185.905875][ T7919] 9pnet_fd: Insufficient options for proto=fd [ 187.145494][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 187.216177][ T7932] : entered promiscuous mode [ 187.302037][ T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 187.311888][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.325011][ T10] usb 2-1: config 0 descriptor?? [ 187.493835][ T30] audit: type=1326 audit(1756416705.792:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7942 comm="syz.4.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x0 [ 187.518229][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 187.747325][ T10] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 188.340541][ T5967] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.436468][ T30] audit: type=1400 audit(1756416706.732:723): avc: denied { create } for pid=7969 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 188.550450][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 188.562436][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.604781][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.738962][ T5967] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 188.749837][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.782828][ T5967] usb 1-1: config 0 descriptor?? [ 188.986487][ T10] gspca_cpia1: usb_control_msg 02, error -110 [ 189.228518][ T7980] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 189.235437][ T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 189.249601][ T7980] team0: Port device batadv2 added [ 190.542707][ T5967] hid_parser_main: 43 callbacks suppressed [ 190.547641][ T5967] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 190.599134][ T5967] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 190.647893][ T5869] usb 2-1: USB disconnect, device number 15 [ 192.155562][ T30] audit: type=1326 audit(1756416710.452:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31b658ebe9 code=0x0 [ 192.326698][ T5967] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 192.341584][ T5967] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 192.419193][ T5967] usb 1-1: USB disconnect, device number 17 [ 192.868742][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 193.110632][ T30] audit: type=1400 audit(1756416711.372:725): avc: denied { read } for pid=8067 comm="syz.1.512" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.110682][ T30] audit: type=1400 audit(1756416711.372:726): avc: denied { open } for pid=8067 comm="syz.1.512" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.110721][ T30] audit: type=1400 audit(1756416711.372:727): avc: denied { ioctl } for pid=8067 comm="syz.1.512" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.272579][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 193.316893][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.740266][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 193.784569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.803209][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.809498][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.834597][ T30] audit: type=1400 audit(1756416712.132:728): avc: denied { sqpoll } for pid=8100 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 193.911899][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.995649][ T5927] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 194.040923][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.147762][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 194.159282][ T8116] team0: Port device batadv3 added [ 194.201787][ T5927] usb 4-1: config 0 descriptor?? [ 194.216375][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 194.616754][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 194.862176][ T30] audit: type=1400 audit(1756416713.162:729): avc: denied { write } for pid=8141 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 194.881566][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.919189][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 194.932615][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 195.113428][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 195.125044][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 195.146786][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 195.245414][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 195.252552][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 195.261848][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 195.279717][ T5927] pwc: recv_control_msg error -71 req 02 val 2500 [ 195.885580][ T5927] pwc: recv_control_msg error -71 req 02 val 2400 [ 195.912383][ T5927] pwc: recv_control_msg error -71 req 02 val 2600 [ 196.024122][ T5927] pwc: recv_control_msg error -71 req 02 val 2900 [ 196.032047][ T30] audit: type=1326 audit(1756416714.322:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.2.524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522118ebe9 code=0x0 [ 196.055148][ T5927] pwc: recv_control_msg error -71 req 02 val 2800 [ 196.073346][ T5927] pwc: recv_control_msg error -71 req 04 val 1100 [ 196.090660][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 196.182370][ T5927] pwc: Registered as video103. [ 196.239368][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 196.967096][ T5927] usb 4-1: USB disconnect, device number 6 [ 197.489594][ T8193] tmpfs: Bad value for 'mpol' [ 197.855611][ T8199] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 197.878061][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.529'. [ 198.360282][ T5967] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 198.902166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.180324][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 199.190340][ T5967] usb 4-1: no configurations [ 199.194937][ T5967] usb 4-1: can't read configurations, error -22 [ 199.350865][ T5967] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.760252][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 199.766321][ T5967] usb 4-1: no configurations [ 199.773103][ T5967] usb 4-1: can't read configurations, error -22 [ 199.787718][ T5967] usb usb4-port1: attempt power cycle [ 200.210442][ T5967] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.245101][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 200.256174][ T5967] usb 4-1: no configurations [ 200.263588][ T5967] usb 4-1: can't read configurations, error -22 [ 200.353084][ T8236] ------------[ cut here ]------------ [ 200.358678][ T8236] WARNING: CPU: 1 PID: 8236 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 200.368858][ T8236] Modules linked in: [ 200.372844][ T8236] CPU: 1 UID: 0 PID: 8236 Comm: syz.2.536 Not tainted syzkaller #0 PREEMPT(full) [ 200.382051][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.392157][ T8236] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 200.398836][ T8236] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f bd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d af aa 7e 0e 00 75 0b c6 05 a6 aa 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 200.400304][ T5967] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.418866][ T8236] RSP: 0018:ffffc9001bee77f0 EFLAGS: 00010246 [ 200.432469][ T8236] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 200.440465][ T8236] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40 [ 200.448434][ T8236] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009 [ 200.456487][ T8236] R10: 000000000000002a R11: ffffffff8b9350cd R12: 0000000000040d40 [ 200.464476][ T8236] R13: 1ffff920037dcf13 R14: ffffffff9ae7ba24 R15: 000000000000002a [ 200.472462][ T8236] FS: 00007f5221f156c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 200.481429][ T8236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.488008][ T8236] CR2: 0000200000060030 CR3: 00000000576ee000 CR4: 00000000003526f0 [ 200.496011][ T8236] Call Trace: [ 200.499280][ T8236] [ 200.502213][ T8236] ? do_syscall_64+0xcd/0x4c0 [ 200.506870][ T8236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.512937][ T8236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.519244][ T8236] ? kasan_quarantine_put+0x10a/0x240 [ 200.524608][ T8236] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.529787][ T8236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.535684][ T8236] ? policy_nodemask+0xea/0x4e0 [ 200.540579][ T8236] alloc_pages_mpol+0x1fb/0x550 [ 200.545406][ T8236] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 200.550778][ T8236] ? v9fs_fid_get_acl+0x7a/0x120 [ 200.555704][ T8236] ___kmalloc_large_node+0xed/0x160 [ 200.560907][ T8236] ? v9fs_fid_get_acl+0x7a/0x120 [ 200.565829][ T8236] __kmalloc_large_node_noprof+0x1c/0x70 [ 200.571459][ T8236] __kmalloc_noprof.cold+0xc/0x61 [ 200.576469][ T8236] ? __pfx_iget5_locked+0x10/0x10 [ 200.581485][ T8236] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 200.587448][ T8236] v9fs_fid_get_acl+0x7a/0x120 [ 200.592206][ T8236] v9fs_get_acl+0xee/0x530 [ 200.596603][ T8236] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 200.602139][ T8236] v9fs_mount+0x4fd/0xa90 [ 200.606442][ T8236] ? __pfx_v9fs_mount+0x10/0x10 [ 200.611308][ T8236] ? cap_capable+0xb3/0x250 [ 200.615890][ T8236] ? __pfx_v9fs_mount+0x10/0x10 [ 200.620727][ T8236] legacy_get_tree+0x109/0x220 [ 200.625468][ T8236] vfs_get_tree+0x8b/0x340 [ 200.629869][ T8236] path_mount+0x1513/0x2000 [ 200.634375][ T8236] ? __pfx_path_mount+0x10/0x10 [ 200.639207][ T8236] ? kmem_cache_free+0x2d1/0x4d0 [ 200.644130][ T8236] ? putname+0x154/0x1a0 [ 200.648354][ T8236] ? putname+0x154/0x1a0 [ 200.652594][ T8236] ? __x64_sys_mount+0x28d/0x310 [ 200.657515][ T8236] __x64_sys_mount+0x28d/0x310 [ 200.662270][ T8236] ? __pfx___x64_sys_mount+0x10/0x10 [ 200.667542][ T8236] do_syscall_64+0xcd/0x4c0 [ 200.672037][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.677902][ T8236] RIP: 0033:0x7f522118ebe9 [ 200.682323][ T8236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.701951][ T8236] RSP: 002b:00007f5221f15038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.710355][ T8236] RAX: ffffffffffffffda RBX: 00007f52213b5fa0 RCX: 00007f522118ebe9 [ 200.718296][ T8236] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 200.726256][ T8236] RBP: 00007f5221211e19 R08: 0000200000000500 R09: 0000000000000000 [ 200.734231][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.742197][ T8236] R13: 00007f52213b6038 R14: 00007f52213b5fa0 R15: 00007ffe21dd05f8 [ 200.750153][ T8236] [ 200.753171][ T8236] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.760422][ T8236] CPU: 1 UID: 0 PID: 8236 Comm: syz.2.536 Not tainted syzkaller #0 PREEMPT(full) [ 200.769598][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.779629][ T8236] Call Trace: [ 200.782886][ T8236] [ 200.785790][ T8236] dump_stack_lvl+0x3d/0x1f0 [ 200.790353][ T8236] vpanic+0x6e8/0x7a0 [ 200.794325][ T8236] ? __pfx_vpanic+0x10/0x10 [ 200.798817][ T8236] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 200.804857][ T8236] panic+0xca/0xd0 [ 200.808564][ T8236] ? __pfx_panic+0x10/0x10 [ 200.812961][ T8236] check_panic_on_warn+0xab/0xb0 [ 200.817869][ T8236] __warn+0xf6/0x3c0 [ 200.821733][ T8236] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 200.827772][ T8236] report_bug+0x3c3/0x580 [ 200.832075][ T8236] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 200.838113][ T8236] handle_bug+0x184/0x210 [ 200.842428][ T8236] exc_invalid_op+0x17/0x50 [ 200.846904][ T8236] asm_exc_invalid_op+0x1a/0x20 [ 200.851730][ T8236] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 200.858385][ T8236] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 3f bd 81 09 83 fe 0a 0f 86 0a fe ff ff 80 3d af aa 7e 0e 00 75 0b c6 05 a6 aa 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 200.877963][ T8236] RSP: 0018:ffffc9001bee77f0 EFLAGS: 00010246 [ 200.884000][ T8236] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 200.891942][ T8236] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40 [ 200.899884][ T8236] RBP: 000000000000002a R08: 0000000000000005 R09: 0000000000000009 [ 200.907823][ T8236] R10: 000000000000002a R11: ffffffff8b9350cd R12: 0000000000040d40 [ 200.915766][ T8236] R13: 1ffff920037dcf13 R14: ffffffff9ae7ba24 R15: 000000000000002a [ 200.923709][ T8236] ? do_syscall_64+0xcd/0x4c0 [ 200.928362][ T8236] ? do_syscall_64+0xcd/0x4c0 [ 200.933019][ T8236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.939060][ T8236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.945363][ T8236] ? kasan_quarantine_put+0x10a/0x240 [ 200.950715][ T8236] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.955881][ T8236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.961750][ T8236] ? policy_nodemask+0xea/0x4e0 [ 200.966575][ T8236] alloc_pages_mpol+0x1fb/0x550 [ 200.971398][ T8236] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 200.976742][ T8236] ? v9fs_fid_get_acl+0x7a/0x120 [ 200.981655][ T8236] ___kmalloc_large_node+0xed/0x160 [ 200.986829][ T8236] ? v9fs_fid_get_acl+0x7a/0x120 [ 200.991739][ T8236] __kmalloc_large_node_noprof+0x1c/0x70 [ 200.997347][ T8236] __kmalloc_noprof.cold+0xc/0x61 [ 201.002344][ T8236] ? __pfx_iget5_locked+0x10/0x10 [ 201.007340][ T8236] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 201.013299][ T8236] v9fs_fid_get_acl+0x7a/0x120 [ 201.018042][ T8236] v9fs_get_acl+0xee/0x530 [ 201.022434][ T8236] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 201.027954][ T8236] v9fs_mount+0x4fd/0xa90 [ 201.032252][ T8236] ? __pfx_v9fs_mount+0x10/0x10 [ 201.037072][ T8236] ? cap_capable+0xb3/0x250 [ 201.041546][ T8236] ? __pfx_v9fs_mount+0x10/0x10 [ 201.046365][ T8236] legacy_get_tree+0x109/0x220 [ 201.051102][ T8236] vfs_get_tree+0x8b/0x340 [ 201.055493][ T8236] path_mount+0x1513/0x2000 [ 201.059971][ T8236] ? __pfx_path_mount+0x10/0x10 [ 201.064797][ T8236] ? kmem_cache_free+0x2d1/0x4d0 [ 201.069704][ T8236] ? putname+0x154/0x1a0 [ 201.073924][ T8236] ? putname+0x154/0x1a0 [ 201.078152][ T8236] ? __x64_sys_mount+0x28d/0x310 [ 201.083059][ T8236] __x64_sys_mount+0x28d/0x310 [ 201.087794][ T8236] ? __pfx___x64_sys_mount+0x10/0x10 [ 201.093054][ T8236] do_syscall_64+0xcd/0x4c0 [ 201.097532][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.103392][ T8236] RIP: 0033:0x7f522118ebe9 [ 201.107777][ T8236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.127353][ T8236] RSP: 002b:00007f5221f15038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 201.135734][ T8236] RAX: ffffffffffffffda RBX: 00007f52213b5fa0 RCX: 00007f522118ebe9 [ 201.143675][ T8236] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 201.151616][ T8236] RBP: 00007f5221211e19 R08: 0000200000000500 R09: 0000000000000000 [ 201.159555][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.167494][ T8236] R13: 00007f52213b6038 R14: 00007f52213b5fa0 R15: 00007ffe21dd05f8 [ 201.175441][ T8236] [ 201.178623][ T8236] Kernel Offset: disabled [ 201.182923][ T8236] Rebooting in 86400 seconds..