last executing test programs: 10.578338167s ago: executing program 3 (id=866): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x34, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x34}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r7 = socket(0x10, 0x80003, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020b404a1bc00000000000109022405000000000009040000010300000009210000040122050009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000440)={0x2c, &(0x7f0000000400)={0x0, 0x21, 0x29, {0x29, 0xf, "aba3e211a6dcedd40e5ab37b37fc06cd5ce667d6f28d771807e09d722dff219c12afe41bae802f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x1f, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) r11 = dup(0xffffffffffffffff) mmap(&(0x7f00002c0000/0x2000)=nil, 0x2000, 0x1000005, 0x20010, r11, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x80000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x4, 0x0, 0x1}}, {@canfd={0xd, {{0x4, 0x1}, 0x11, 0x1, 0x0, 0x0, "07600dc755a41a624a1e27a992d61a51baa4096dad58f66586d27f5dff251d374dd99d97fe5b7b42c55cbcd5a6c15f4443f47f489b5b06bb93fd383434f86140"}}}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r4) sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r12, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2001}, 0x20044081) 8.623928991s ago: executing program 4 (id=873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00\x00', @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001bf029f78004241544d414e5f56"], 0xfd12}}, 0x0) r1 = open(0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000300)='./cgroup\x00', r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = socket(0xf, 0x4, 0xffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102384, 0x18ff0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x8080000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x3, 0x2, 0x9, 0x4, 0x1, 0x81, 0x0, 0x6, 0x15}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x66, 0x2, 0xab, 0x6, 0x3, 0x8, 0x5}, {0x2, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0xff, 0x1, 0x4, 0x2e, 0x4b}, {0xa2000, 0xf000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0x1, 0xc, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0xfc, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x55, 0x9, 0x9}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x1, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x1, 0xc5]}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000740)={"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"}) 8.580263712s ago: executing program 1 (id=874): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1, 0xe9ec, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') getcwd(&(0x7f0000000140)=""/115, 0x73) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$getflags(r2, 0x401) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x242, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 7.53904299s ago: executing program 4 (id=877): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x0, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40020, &(0x7f0000000180)=ANY=[@ANYBLOB=',mode=00000000000000000000177,']) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r6, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 7.502937089s ago: executing program 1 (id=878): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x163c81) io_setup(0x3, &(0x7f0000001540)=0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @broadcast}, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@any, 0x2}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f0000000140)) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x75c, r1, 0x0}]) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000ec0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e25, @remote}, 0x3, 0x0, 0x3}}, 0x26) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010100}, 0x2, 0x2, 0x0, 0x3}}, 0x2e) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x88}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0xf, @remote, 0xfffffffd}], 0x3c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.566608224s ago: executing program 4 (id=880): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000020000100fcff1000000000120200000000000000120000000c001440800000000000000179ac3a06456022d2644d7c30c1dc90381225d79f54a28ad876e7044e1ffac4bf0b439ca5f219a225363a38ab0d2a04000000000000001e009ae843ab483d039b8e6606c8e9484cfe15a72d3d12b053ad9140e6ace0741d01fe57d5061f7a4d"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0xc0) 6.407116218s ago: executing program 4 (id=881): capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="203111"], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 6.356264344s ago: executing program 3 (id=882): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001bf029f78004241544d414e5f56"], 0xfd12}}, 0x0) r1 = open(0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000300)='./cgroup\x00', r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = socket(0xf, 0x4, 0xffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102384, 0x18ff0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x8080000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x3, 0x2, 0x9, 0x4, 0x1, 0x81, 0x0, 0x6, 0x15}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x66, 0x2, 0xab, 0x6, 0x3, 0x8, 0x5}, {0x2, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0xff, 0x1, 0x4, 0x2e, 0x4b}, {0xa2000, 0xf000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0x1, 0xc, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0xfc, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x55, 0x9, 0x9}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x1, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x1, 0xc5]}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000740)={"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"}) 5.485764018s ago: executing program 2 (id=884): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x103402, 0xd9) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "924eabf932463357", "73da0e44feb8788c01cff7a825ebf2f3", "947741f7", "b46e2c0c7b873bae"}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000240)={0xb, 0x7, [{0x1ff}, {0x1, 0x0, 0xe6da}, {0x7fffffff, 0x0, 0xe6}, {0x1, 0x0, 0x1}, {0x6b, 0x0, 0x7}, {0x5, 0x0, 0x2}, {0x7ff, 0x0, 0x9}, {0x3, 0x0, 0x2}, {0x2, 0x0, 0x2385}, {0x1, 0x0, 0x4}, {0x9, 0x0, 0x5}, {0x8, 0x0, 0x80000001}, {0x616933dc, 0x0, 0x100000000}, {0xec}, {0x7}, {0x0, 0x0, 0x2}]}) 5.271131145s ago: executing program 3 (id=885): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) syz_open_dev$evdev(&(0x7f0000000440), 0xc898, 0x101000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af83, &(0x7f0000000400)={0x1d}) 5.140952065s ago: executing program 3 (id=887): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fanotify_init(0x200, 0x0) dup(r0) (async) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000080)) fanotify_mark(r1, 0x2, 0x48001053, r1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) getsockname$unix(r2, &(0x7f0000000400)=@abs, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20180) ioctl$EVIOCGABS20(r6, 0x80184560, 0x0) (async) ioctl$EVIOCGABS20(r6, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x78f) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[], 0x28000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[], 0x10448) (async) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.525395511s ago: executing program 1 (id=888): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1, 0xe9ec, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') getcwd(&(0x7f0000000140)=""/115, 0x73) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$getflags(r2, 0x401) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x242, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 3.90248639s ago: executing program 1 (id=890): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000180)="c7e1599740c4b3a21de9935050895f380b0076b287960d50937502b3c97d2652f949a6a0d5d685e95a7ecc0ac3143e947d300f45d1856dfcfd92738648278ae07981f4729bd387d5d2b21a4a6121e756b3d52c4252c8a165219e3f346f36de2939be1abdc19e01fb3a88b7f58fc8e29b86d480c148750d766850c0e6b7405503bd33e56109dd98592111e07f33c3696c021ac38c7adaa20dd4b6b96d982a610ea5b25c1e5c5081988cb76bd6c18b471eac1ed09b23bc9218a527af1aac4fc7c1da") ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x3a, 0x8, &(0x7f0000000080)="b4165135571e96e4d1aaefc1ea7a6b4a12d4fb3ff4234eb2c94c4b0b745e93040622c185ba6e19600d0452e38400956afe9210b6a9d2a2a33c44", &(0x7f0000000100)=""/8, 0x8, 0x0, 0xa3, 0x84, &(0x7f00000001c0)="683f25bf5f9fd0da06f5df73026bc574753e92e7fedddb3d9ae3c997f693601818f6d10367cda2538508c2e1ef9cf4c99fdee98dd551d9b3b46f3bdb2f94ae01e537854e60b8cf7e0c4428531d10ee4661591a42f3f067d65378c0490261ebe6cc040f95437a8c252fadd26b65f03958999d99411ad4def2f66ca477c502efca8e043bf9198e88d128e0ada4a5c3d24081ab11740b692b2a4c7f141b992c7df2357ea7", &(0x7f0000000280)="883c35967baeb8873b0c56c28af1dc470fc0ea7268c0163bddd5f3833ce2798cf03cf52b1bec13995e0cfcf34e241a07f80116ad40c7414fe51d1015790c2dd87bd04d8db30a33c2369acaca3f58dea65ccc0381ffea65b45722a1ee3f87ae707aed1602d8584f4af4e340ae32850ee3b1daeea756208d5929f59a295eed1654858dd9fc", 0x0, 0x0, 0x3}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r1, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48090}, 0x20000004) 3.123953468s ago: executing program 4 (id=891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000020000100fcff1000000000120200000000000000120000000c001440800000000000000179ac3a06456022d2644d7c30c1dc90381225d79f54a28ad876e7044e1ffac4bf0b439ca5f219a225363a38ab0d2a04000000000000001e009ae843ab483d039b8e6606c8e9484cfe15a72d3d12b053ad9140e6ace0741d01fe57d5061f7a4d"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0xc0) 3.108363333s ago: executing program 0 (id=892): r0 = userfaultfd(0x1) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)={0xb73, 0xd, 0x5, "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"}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000362000/0x4000)=nil, &(0x7f0000099000/0x4000)=nil, 0x4000, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) syz_emit_ethernet(0xd6, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff0800470400c8006800000806907864010102ffffffff44144b91ac14142b00000003ffffffff00000009832798e0000002e00000010a010102ffffffff22be482358d826021f41ac141442ac1414bbac1414bb0a010102e0000001832750ac1e0101e0000002ffffffff00000000ffffffffffffffffe0000002e00000020000000044247f300000000700000006800000000000000500007fff00000010000002000000653e00000000000000000000000000000000000300004e2300004e22000000020000000000000001000000000000000065ca3cfaef6a5eb87c8b6c372207"], &(0x7f0000000100)={0x1, 0x1, [0x448, 0xe43, 0x723, 0xb9e]}) userfaultfd(0x1) (async) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) (async) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)={0xb73, 0xd, 0x5, "4c6bc09f5a156f1ee39b763ddcbb626052103c678ce02c7a8d4b2e9f978d936e8a9a8d0f9a91407364422c1d56a3e707f9c9f70834d1f8038e02de39c389c18c8876b10a4c8f557eec57bb5c8d195560a0faca27b9add7ae7b59194f00b8bc3044fa1280368bd07416af150ec7301dcb542e8a5ccdf5f2c329241f847af2830ebe128153212bd1c84e34b753d6dd973c2192996294aeb613b9de6742b061b16b7ca511e2345119fa2a3611f8372908e3d4f5458888de9a829ce21c0a6a02cc32040e169e7a198444211a4801892fe447a60d1bb278289d120dbdf4bc75a1d26ada1f7ffbe67e57c438e3d35e7e8a86acddcadf4013ad97b9447c2aedb83749edc15d2d1f7316d783d195388c5ae2e975dc9140b40401010a2ca1058bd6f50a51ac43a3efb27af73f54a4c611db0d464a55c4d071e8df9f30c85be8122afcc10a8a40bfd7d2ad4bacc6b89018054a9eb7d93db7d902cb32d6d1829b6dc725cb7e3eaede569e668f2847bd94667f734a652ac87243ed3bc7efbb3f0edfae2716699c27e250df98ea65b6c6c1c098de543434f38272e9389ec051f28c8ae45f2ef3bf8b36d9e9961e1fbd2261d0cbc7b6f3007d07bf3634faf96c8e10d546932c2a010d6805b7ca76536077b7f8883e588dcf9c908331c672660a2a5f993c9740385a457d44bd107ee958d8db85e06a3525e2921102dbbdb107f7f95a8d877b11329d892153ce210a90862c930613534cfbd534437bf38bc63bd72e046693ac1669c909f5a95b731b12ef02c2cb027db6d9574f09b88cb82b10840517b322a178b918807f4c85449558218c942631570c6fcb0de4be5895381a51d0a54a549276eb2399dc11ef71e9157147bf782829861d8f7a156b37cbe01d73755c2bf312e2d400b8d80cd42daf2c31e85d6583952f103394301622d79b786795ff844a596adcaae6fecf023eb68a180c4e19a339bfcfed89b3f086c1449a78d671628988f8faee13fe3d4b07a910a8829cd805645f81598c6a35fbaa8ea0787ffc32eb0b4d179f51efb1af038ec19bc17e3577d3d461caf4a712f2732437c8c01a8ce692d5b1cbf3754653f4b7db3e09f192b7905fe627e311aa3269a4a773a237fe08e085500aebd3bd9577cfe7561f2f8d9677f4bc77e4bb6ed2f98529d0e4be386cd5e890f9d64bef36e37c63f45764963da94e5583f7c192fa1dfed9d44b7a4c5e7a44cdcdf92c57d5301909af8a5c002d3d07537c634ee113f07c16b677d3966e337b3360336ac8e52e0a35c23a873839395d3799d029c0ec745d77881afa8761459fb950f36c03c46e836130f8ad05cfe811431a61c0009a3414880db47a153f6fb8fd7dcce0515616e98b570c3cf0d5d3ed23c26156eb7812f66550b7614a001ccdfba83cdc4acee50f4567394094103f40810a22c3d9ea4ec4dfb3274b6294a5c794ed01cd91a81192e25a2990e6539c85d62fd3b2ac7b4ded24694fdf3725e3ba61f390e9c975a8bc051e2a9bc03c606e54ed9a6f048308deda12b5b96c25d6b04e01f429797e50e2de01ac699fa2a1fbca230bd826ace7eb735d4ee4ec114edbebdea54b8fb405ae840568528ea0aa761a0110751fe29b6cf038b3f1f0ad43a6d15c710da9552f036b197942d613240dd2826aebf681103e8e3bd9eda9dab1f375b8181daf0581cc7e041c412bdf6eb46bc634b1c499fc88d532d642019746d335ddf673af72834a86cfcd2ca33fc58c48789337171c36345d00b4383003b7a7eedb9a6e2a19273e274dad1ce5e0302c018fd952ff216a5e77da66be8aee7b1bea6808f1c618a0d9dcec0241ef9c5475b41ea0f15452ecab0ab8cc8b196e4c9674e92d10feb3255d96a60628e59b846514ed5ec6e474044934841a5c86cc89770ea5dd4c1e0811c9799b91ea303ff9387b43a9061beca388ab9e1c384f317853c7be99512c1a64c32a7d4ee09b7c703403cff0507ef858ac21273d665a6e25fb8005d4cd0a97b282c21067418767a1ff1db517dfdfa3db58d350d8b1afabfcb506a8ce5921dafd7432e69f702a532807766d79ab18cc035aa1ca7f699fa6243b8264f38c86f5b20637608ed66f3e9f9950982bd8869fef9a01fea3639bd7baf9ed7be25b1d46276bf69788ed716a60ef40bf045b5a9f779fc74147357e2a7fe97df4fcdc166da5cc8f70886c8d7300bf364c28098bfb2d29e6906717815e5552f281fef2476b3c780317f5bd61ed5c6f59d540188910aa8aae4d0851290169800e50caa894c98449b06ec5af6dc50c0b823069b6366dccf17da1e7f37fd6068e257c103aaf2d7f85e2d42f028cebb74f829a7045cc7908892d795c86067f37d22893b8bac527b55dcb4cc2fda3bbdd7ae91a75d95112768c9477c9d3665d18f00112de915e2f85b95a80b9775451a7c6d91181f40608c571d181cb8c81792e14e51bb9095f1d7b8860091c0d0a4a1c3e3d92d9136f2161a23feb517f83b2e570f5c1a6d52db5a35bb37a407977bfe48c7b5766d9dd2e85b6a6d08431c7235dd6a859ddb460db6bf6a4e4827315ecdeeab0b2a5c17513f57bfe65b28904d347359d2cc0d77b0f45b4f8b3bd0b5646eb9eca85b9160f7e9f9978b75026c019944a4af3436b32b14fd2d85b6aed31592e6a10e7a3c9caff27fb24172c509de9e1f7748b2230ced746a8de7fe3d790d34bbbacc66e648d9bd88a3eae604971d8822b38afab6ff9f1d79f3034a241228ae54cbf86599d2eca70eae2e6a848c92d33eb20c66793e162dbef282562fa1360959333aa19fa7e02b8305776b808a9cca46e857263ae0f6bccf0ef20626709f2ad32e3d66b3702b7c99cb09d70777c2f459d441260e4aa21a423b2a62cd8e724b202260da18578080e77ab8b2cef257375eb354ab187b3daa3b79c4640af85ef2ad3442104f58164360cc0234d221a3a28614fa43e2cb6271a2ddb8d3c22c7a36d97cec90547776aaa46b29c1658e2113fd819ade1d65d37ea953000a4c2902109d50a4f4f9e0aa95016132091e817b043ac5f0cc3b9366fcbb76bac83b9c49da917439c94ae2bfc002c3945976436e6253e3cabb9b5d0c913dba2346cc236cd48db0079c8357fa37c85ec3885cc438b0bf39c892eed66b2132158a895160ed639b61c8a7c9d00ad5359911019e1d11aeebb1043e4c827fd879a05867945f4611b2609f5b7302717f4f96a4ba768e741c4d6c59b90315eb71595e8729b14335aaa2fb8b9ebb2f620ae399b7c7a9336ff14b315059e00b5fec269f764038040cd3a4efcb73eb790794c753968d3c228b40310effe2a6312fced9616dc31586c367865f428b7ae4e17ca59182d0cbfd4ac146359749e33fd1ac55ec1f2168e18c79dbb307f86be04e2ed9066b5326ce6edf8b12ee703af79759ff5fa9694a6d5f69bf45e05cd39cd2cebca1c1e35878d0bd2464404740fbe71b0f9dff750edab2184f0c3f5c2c8346f638c93f35a2cdbcb1893cf44e4fbe6cf7555e15626b72572f61bda4052f9ec8eae383885f83300efcdad413fba4b75475631d874e7aab41dd59b827ea872640088c64965d0ea1e768c54d6b464b121ffb6252d0c8dc9f3cc8d845c1e39befccfa2f77b91bb65416745caf51f4dcd14d210d65ffd778ef3cc92475d2eff1d026d2f19e0af6cad4de43cbfc060654d235c693b959bcfdcb5d6e6e7e75b362c1bdc989d348654ad87b2d3bd77550d61cff23b7d004505f4e487af3a70fbfa163c0b9270eaede13c018db2d205e1073999a8998ad7a764b85b10c13dd333dc8514b082601848b9aee0fd57ea989d318360e759c7585840fd2afaa3a00f494bec7a68b76295f64f33feebfa9d9da4cc1f001e05938d37b5ea4ee4a122e21ee2eea437e68975733f3e68691f56279ef98968b8451ae4bb3fbcd1a907114ad5ede64775738f776fd91e91da5b12463b34783b77dc2afab52706b866518dcd9feae4549e85a35eb3d8d155febf2a0d8b0c9f710ff0fb9f11a8ca3b7b1d625572bd4e7b682ba2e678de49a8e287a28b42f7271a8a0834a059f5600e690b45b578908d651856d3873c04b61e7aacab83778d94e430718010d09a870732e18c77630703827e2cd6fa7ad83cf3f93ac53f0ffbaf15fe7489d4ed6e22093bdcaf89449997"}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000362000/0x4000)=nil, &(0x7f0000099000/0x4000)=nil, 0x4000, 0x2}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000400)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) (async) syz_emit_ethernet(0xd6, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff0800470400c8006800000806907864010102ffffffff44144b91ac14142b00000003ffffffff00000009832798e0000002e00000010a010102ffffffff22be482358d826021f41ac141442ac1414bbac1414bb0a010102e0000001832750ac1e0101e0000002ffffffff00000000ffffffffffffffffe0000002e00000020000000044247f300000000700000006800000000000000500007fff00000010000002000000653e00000000000000000000000000000000000300004e2300004e22000000020000000000000001000000000000000065ca3cfaef6a5eb87c8b6c372207"], &(0x7f0000000100)={0x1, 0x1, [0x448, 0xe43, 0x723, 0xb9e]}) (async) 3.009826164s ago: executing program 4 (id=893): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') fchdir(r3) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x180) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x8, 0x4, 0x1, 0x1, 0x2, 0x4, 0x568c, 0x0, 0xf, 0x13, 0x4, 0x5, 0x8, 0x400, 0x17, 0xa, {0x10, 0x7}, 0x8, 0x7}}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x10000000, 0x4, 0x4}) 2.943069401s ago: executing program 2 (id=894): r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000000c0), 0xffffff86}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x3}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) 2.862608763s ago: executing program 0 (id=895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x21000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x8380}]}}}]}, 0x3c}}, 0x4000000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 2.637914518s ago: executing program 1 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001bf029f78004241544d414e5f56"], 0xfd12}}, 0x0) r1 = open(0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000300)='./cgroup\x00', r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = socket(0xf, 0x4, 0xffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102384, 0x18ff0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x8080000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x3, 0x2, 0x9, 0x4, 0x1, 0x81, 0x0, 0x6, 0x15}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x66, 0x2, 0xab, 0x6, 0x3, 0x8, 0x5}, {0x2, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0xff, 0x1, 0x4, 0x2e, 0x4b}, {0xa2000, 0xf000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0x1, 0xc, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0xfc, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x55, 0x9, 0x9}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x1, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x1, 0xc5]}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000740)={"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"}) 2.18822065s ago: executing program 3 (id=897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af83, &(0x7f0000000400)={0x1d}) 1.936836816s ago: executing program 0 (id=898): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0xf) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x90000}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) 1.891209431s ago: executing program 2 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x10) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r7, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe, 0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000001c0)) 1.890451822s ago: executing program 3 (id=900): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x103402, 0xd9) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_128={{0x303}, "924eabf932463357", "73da0e44feb8788c01cff7a825ebf2f3", "947741f7", "b46e2c0c7b873bae"}, 0x28) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r5, 0x0, 0xfdef) sendto$inet6(r5, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a2203", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x78) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000240)={0xb, 0x7, [{0x1ff}, {0x1, 0x0, 0xe6da}, {0x7fffffff, 0x0, 0xe6}, {0x1, 0x0, 0x1}, {0x6b, 0x0, 0x7}, {0x5, 0x0, 0x2}, {0x7ff, 0x0, 0x9}, {0x3, 0x0, 0x2}, {0x2, 0x0, 0x2385}, {0x1, 0x0, 0x4}, {0x9, 0x0, 0x5}, {0x8, 0x0, 0x80000001}, {0x616933dc, 0x0, 0x100000000}, {0xec}, {0x7}, {0x0, 0x0, 0x2}]}) 882.655486ms ago: executing program 0 (id=901): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000080)="dcd7c1d5f0bf09399a7f39de26d0f7709fba56f5951f1432d6e06bd8336d47cee11f707bd8761b5bc1527cb03853d30479041476cd09d29d4f2573b7b7bd2222ac63f7cc54e7") (fail_nth: 4) 820.173275ms ago: executing program 2 (id=902): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) (async) chmod(&(0x7f0000000040)='./file1\x00', 0x71) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r4 = geteuid() quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, r4, &(0x7f0000000300)={0xa, 0xca6, 0x3, 0x2, 0x1, 0x6, 0x6, 0xa7, 0x8}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x141240, 0x1) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 745.792856ms ago: executing program 0 (id=903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)="e47f8541606c706fb9da8621bdeea641ce4a96782a1163fd3ef5a56e3d7adc382a7440d6df6f7e98533b544a2566835d8663658efbe952fdc80c95ecb37700e6ec75176be65ad1383f55cfd35ede7ace1da75885e7aac7530ea2eaabbe8e3770a65c23772953ec2eadfa20610b31fbed4af9f7ddd1de5521d4e01df3d0d82e81660c8dd68e01677d4ee75bd69e119b7e6f73879d3f7f065cf2809844f9da176f448008287d3bbe5171994b9ec13b5556cd268b8411e98d785b1227afc3a92b", 0xbf, 0x1, 0x0, {0x0, r5}}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) 416.497351ms ago: executing program 1 (id=904): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="f8ffffe4f2a2375e531c719ca5dc605a27b80ca1d5981c21a7036ac6eeb74511b8022049b1657449e7432a2181fbfeb250db1ef32844fb9822efd32b98e361b0c26bd8694666fc95418eff8bcc9a248abc69280463f666473b23f174862dc98edc6314ed9abefedb2d617fd55cf8eb97ab3e89f50e2a4fc2e08a1c50", 0x7c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) io_uring_setup(0x7238, &(0x7f0000000600)={0x0, 0xf68c, 0x800, 0x3, 0xa5, 0x0, r1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x11, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x802) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x138}], 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setfsgid(0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x406, r4) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) 368.133511ms ago: executing program 2 (id=905): unshare(0x400) sched_setaffinity(0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x200080d1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xfffffffffffffd04, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x2000c050) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r2, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r2, r2, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0xfffffffe}, 0xc3) r3 = socket(0x10, 0x80002, 0x0) getsockopt(r3, 0x1, 0x2f, &(0x7f0000000540)=""/67, &(0x7f0000000480)=0x43) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000540), 0x700000000000000) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f00000000c0)) 291.04211ms ago: executing program 0 (id=906): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0x4, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) syz_io_uring_setup(0x70ca, 0x0, &(0x7f0000000100), &(0x7f00000002c0)) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=907): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') getcwd(&(0x7f0000000140)=""/115, 0x73) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x242, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) kernel console output (not intermixed with test programs): it(1759354820.556:315): avc: denied { ioctl } for pid=6589 comm="syz.1.162" path="socket:[11066]" dev="sockfs" ino=11066 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.318115][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 108.431766][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.455634][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.813626][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 109.004439][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 109.038725][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 109.064600][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.078707][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.097732][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.109919][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.207939][ T5828] Bluetooth: hci2: command 0x0401 tx timeout [ 109.216652][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 109.225567][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 109.431269][ T30] audit: type=1400 audit(1759354822.016:316): avc: denied { ioctl } for pid=6612 comm="syz.4.168" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.459100][ T30] audit: type=1400 audit(1759354822.016:317): avc: denied { mount } for pid=6612 comm="syz.4.168" name="/" dev="ramfs" ino=11111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 109.577402][ T30] audit: type=1400 audit(1759354822.176:318): avc: denied { create } for pid=6610 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.011305][ T30] audit: type=1400 audit(1759354822.686:319): avc: denied { setopt } for pid=6625 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.014020][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 110.057687][ T5820] usb 4-1: USB disconnect, device number 3 [ 110.375493][ T6635] vxcan1: tx address claim with dest, not broadcast [ 111.346892][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'. [ 112.264068][ T30] audit: type=1400 audit(1759354824.886:320): avc: denied { connect } for pid=6652 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.730049][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 114.759856][ T5820] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 114.805861][ T6687] SELinux: Context Ü is not valid (left unmapped). [ 114.901901][ T5820] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.916686][ T6687] input: syz0 as /devices/virtual/input/input6 [ 115.375082][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 115.375093][ T30] audit: type=1400 audit(1759354827.626:323): avc: denied { read } for pid=5180 comm="acpid" name="event4" dev="devtmpfs" ino=2822 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.408873][ T6692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.425140][ T30] audit: type=1400 audit(1759354827.626:324): avc: denied { open } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2822 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.448894][ T30] audit: type=1400 audit(1759354827.626:325): avc: denied { ioctl } for pid=5180 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2822 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.756180][ T6696] kAFS: No cell specified [ 116.144729][ T6702] FAULT_INJECTION: forcing a failure. [ 116.144729][ T6702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.157959][ T6702] CPU: 0 UID: 0 PID: 6702 Comm: syz.3.188 Not tainted syzkaller #0 PREEMPT(full) [ 116.157979][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.157987][ T6702] Call Trace: [ 116.157992][ T6702] [ 116.157998][ T6702] dump_stack_lvl+0x16c/0x1f0 [ 116.158022][ T6702] should_fail_ex+0x512/0x640 [ 116.158044][ T6702] _copy_from_user+0x2e/0xd0 [ 116.158065][ T6702] ucma_write+0x128/0x330 [ 116.158087][ T6702] ? __pfx_ucma_write+0x10/0x10 [ 116.158106][ T6702] ? bpf_lsm_file_permission+0x9/0x10 [ 116.158123][ T6702] ? security_file_permission+0x71/0x210 [ 116.158145][ T6702] ? rw_verify_area+0xcf/0x6c0 [ 116.158168][ T6702] ? __pfx_ucma_write+0x10/0x10 [ 116.158188][ T6702] vfs_write+0x29d/0x11d0 [ 116.158216][ T6702] ? __pfx_vfs_write+0x10/0x10 [ 116.158243][ T6702] ? find_held_lock+0x2b/0x80 [ 116.158264][ T6702] ? __fget_files+0x204/0x3c0 [ 116.158290][ T6702] ? __fget_files+0x20e/0x3c0 [ 116.158320][ T6702] ksys_write+0x1f8/0x250 [ 116.158343][ T6702] ? __pfx_ksys_write+0x10/0x10 [ 116.158368][ T6702] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 116.158395][ T6702] do_syscall_64+0xcd/0x4e0 [ 116.158419][ T6702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.158436][ T6702] RIP: 0033:0x7fc1fdd8eec9 [ 116.158450][ T6702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.158466][ T6702] RSP: 002b:00007fc1feca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.158483][ T6702] RAX: ffffffffffffffda RBX: 00007fc1fdfe6090 RCX: 00007fc1fdd8eec9 [ 116.158493][ T6702] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000009 [ 116.158502][ T6702] RBP: 00007fc1feca9090 R08: 0000000000000000 R09: 0000000000000000 [ 116.158512][ T6702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.158521][ T6702] R13: 00007fc1fdfe6128 R14: 00007fc1fdfe6090 R15: 00007fffa253e658 [ 116.158543][ T6702] [ 117.075232][ T6715] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 117.085296][ T6715] cramfs: wrong magic [ 117.097006][ T6715] No control pipe specified [ 119.142954][ T30] audit: type=1400 audit(1759354831.766:326): avc: denied { getopt } for pid=6737 comm="syz.0.198" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.714727][ T6751] fuse: Unknown parameter '0x000000000000000a' [ 120.763596][ T30] audit: type=1400 audit(1759354833.436:327): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 120.926110][ T30] audit: type=1400 audit(1759354833.606:328): avc: denied { write } for pid=6764 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.096309][ T6773] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 121.105635][ T6773] cramfs: wrong magic [ 121.116061][ T6773] No control pipe specified [ 121.548647][ T6776] o2cb: This node has not been configured. [ 121.554696][ T6776] o2cb: Cluster check failed. Fix errors before retrying. [ 121.562588][ T6776] (syz.4.204,6776,0):user_dlm_register:674 ERROR: status = -22 [ 121.570311][ T6776] (syz.4.204,6776,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 121.665564][ T30] audit: type=1400 audit(1759354834.216:329): avc: denied { create } for pid=6764 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.758156][ T30] audit: type=1400 audit(1759354834.226:330): avc: denied { add_name } for pid=6764 comm="syz.4.204" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.904590][ T30] audit: type=1400 audit(1759354834.226:331): avc: denied { create } for pid=6764 comm="syz.4.204" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 122.019293][ T30] audit: type=1400 audit(1759354834.226:332): avc: denied { associate } for pid=6764 comm="syz.4.204" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 122.304001][ T30] audit: type=1400 audit(1759354834.586:333): avc: denied { ioctl } for pid=6775 comm="syz.1.207" path="socket:[12577]" dev="sockfs" ino=12577 ioctlcmd=0x52c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.582167][ T6780] 9pnet_fd: p9_fd_create_unix (6780): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.328777][ T6803] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.419854][ T30] audit: type=1400 audit(1759354835.976:334): avc: denied { getopt } for pid=6799 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.420035][ T30] audit: type=1400 audit(1759354836.006:335): avc: denied { ioctl } for pid=6799 comm="syz.4.216" path="/dev/sg0" dev="devtmpfs" ino=763 ioctlcmd=0x5319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 124.325713][ T30] audit: type=1400 audit(1759354837.006:336): avc: denied { mount } for pid=6799 comm="syz.4.216" name="/" dev="mqueue" ino=4923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.425950][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.219'. [ 125.155831][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 125.744700][ T6833] bond0: Removing last ns target with arp_interval on [ 125.757750][ T13] bond0: (slave bond_slave_0): interface is now down [ 125.809113][ T13] bond0: (slave bond_slave_1): interface is now down [ 125.838222][ T13] bond0: now running without any active interface! [ 125.872003][ T3519] bridge0: port 3(macvlan2) entered disabled state [ 126.041145][ T30] audit: type=1400 audit(1759354838.716:337): avc: denied { relabelfrom } for pid=6837 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 126.075479][ T5886] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.087270][ T30] audit: type=1400 audit(1759354838.716:338): avc: denied { relabelto } for pid=6837 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 126.134695][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.224267][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 126.230809][ T5886] usb 1-1: config 0 has an invalid interface number: 240 but max is 0 [ 126.239497][ T5886] usb 1-1: config 0 has no interface number 0 [ 126.248397][ T5886] usb 1-1: config 0 interface 240 has no altsetting 0 [ 126.267971][ T5886] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 126.280189][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.300490][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 126.323649][ T5886] usb 1-1: Product: syz [ 126.330966][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.332745][ T5886] usb 1-1: Manufacturer: syz [ 126.353659][ T24] usb 2-1: Product: syz [ 126.362986][ T24] usb 2-1: Manufacturer: syz [ 126.369649][ T5886] usb 1-1: SerialNumber: syz [ 126.374574][ T24] usb 2-1: SerialNumber: syz [ 126.440171][ T24] usb 2-1: config 0 descriptor?? [ 126.445958][ T5886] usb 1-1: config 0 descriptor?? [ 126.656077][ T24] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 126.662411][ T24] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 126.868569][ T6857] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 126.884175][ T79] IPVS: starting estimator thread 0... [ 127.174575][ T24] f81604 2-1:0.0: probe with driver f81604 failed with error -32 [ 127.174674][ T6858] IPVS: using max 78 ests per chain, 187200 per kthread [ 127.772932][ T30] audit: type=1800 audit(1759354840.436:339): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.231" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 128.012426][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 128.019462][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 129.029663][ T30] audit: type=1400 audit(1759354841.706:340): avc: denied { sqpoll } for pid=6877 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.447017][ T5886] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 129.484435][ T5886] gspca_sunplus: reg_w_riv err -71 [ 129.504780][ T5886] sunplus 1-1:0.240: probe with driver sunplus failed with error -71 [ 129.573299][ T5886] usb 1-1: USB disconnect, device number 7 [ 129.617246][ T5820] usb 2-1: USB disconnect, device number 2 [ 130.827446][ T30] audit: type=1400 audit(1759354843.506:341): avc: denied { lock } for pid=6902 comm="syz.1.239" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 131.022395][ T6909] overlayfs: failed to resolve './file0': -2 [ 131.186128][ T6912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.380381][ T30] audit: type=1400 audit(1759354843.506:342): avc: denied { ioctl } for pid=6902 comm="syz.1.239" path="socket:[12816]" dev="sockfs" ino=12816 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 131.404851][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.411671][ T6897] orangefs_mount: mount request failed with -4 [ 131.573218][ T6916] FAULT_INJECTION: forcing a failure. [ 131.573218][ T6916] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 131.593619][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.1.243 Not tainted syzkaller #0 PREEMPT(full) [ 131.593644][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.593653][ T6916] Call Trace: [ 131.593659][ T6916] [ 131.593665][ T6916] dump_stack_lvl+0x16c/0x1f0 [ 131.593693][ T6916] should_fail_ex+0x512/0x640 [ 131.593717][ T6916] should_fail_alloc_page+0xe7/0x130 [ 131.593735][ T6916] prepare_alloc_pages+0x3c2/0x610 [ 131.593754][ T6916] ? rcu_is_watching+0x12/0xc0 [ 131.593779][ T6916] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 131.593811][ T6916] ? __lock_acquire+0x62e/0x1ce0 [ 131.593838][ T6916] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 131.593871][ T6916] ? __lock_acquire+0x62e/0x1ce0 [ 131.593891][ T6916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.593914][ T6916] ? policy_nodemask+0xea/0x4e0 [ 131.593942][ T6916] alloc_pages_mpol+0x1fb/0x550 [ 131.593969][ T6916] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 131.593997][ T6916] ? __lock_acquire+0x62e/0x1ce0 [ 131.594016][ T6916] folio_alloc_mpol_noprof+0x36/0x2f0 [ 131.594035][ T6916] vma_alloc_folio_noprof+0xed/0x1e0 [ 131.594053][ T6916] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 131.594079][ T6916] do_pte_missing+0x2230/0x3ba0 [ 131.594101][ T6916] ? find_held_lock+0x2b/0x80 [ 131.594130][ T6916] __handle_mm_fault+0x152a/0x2a50 [ 131.594159][ T6916] ? __pfx___handle_mm_fault+0x10/0x10 [ 131.594183][ T6916] ? __pte_offset_map_lock+0x174/0x310 [ 131.594202][ T6916] ? find_held_lock+0x2b/0x80 [ 131.594229][ T6916] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 131.594254][ T6916] handle_mm_fault+0x589/0xd10 [ 131.594280][ T6916] __get_user_pages+0x550/0x34a0 [ 131.594306][ T6916] ? down_read_killable+0x220/0x4b0 [ 131.594329][ T6916] ? __lock_acquire+0x62e/0x1ce0 [ 131.594343][ T6916] ? __pfx___get_user_pages+0x10/0x10 [ 131.594362][ T6916] __gup_longterm_locked+0xa92/0x17e0 [ 131.594381][ T6916] ? try_get_folio+0x1d2/0x730 [ 131.594393][ T6916] ? __pfx___gup_longterm_locked+0x10/0x10 [ 131.594409][ T6916] ? try_get_folio+0x255/0x730 [ 131.594421][ T6916] ? find_held_lock+0x2b/0x80 [ 131.594437][ T6916] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 131.594454][ T6916] gup_fast_fallback+0xf78/0x23f0 [ 131.594482][ T6916] ? __pfx_gup_fast_fallback+0x10/0x10 [ 131.594499][ T6916] ? is_valid_gup_args+0x1b/0x1f0 [ 131.594518][ T6916] ? is_valid_gup_args+0x45/0x1f0 [ 131.594541][ T6916] pin_user_pages_fast+0xa7/0xf0 [ 131.594555][ T6916] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 131.594569][ T6916] ? __kmalloc_noprof+0x242/0x510 [ 131.594592][ T6916] rds_info_getsockopt+0x39f/0x4f0 [ 131.594611][ T6916] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 131.594626][ T6916] ? find_held_lock+0x2b/0x80 [ 131.594643][ T6916] ? __might_fault+0x13b/0x190 [ 131.594666][ T6916] rds_getsockopt+0x173/0x2d0 [ 131.594687][ T6916] ? __pfx_rds_getsockopt+0x10/0x10 [ 131.594705][ T6916] do_sock_getsockopt+0x34a/0x440 [ 131.594725][ T6916] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 131.594742][ T6916] ? __fget_files+0x204/0x3c0 [ 131.594771][ T6916] __sys_getsockopt+0x12f/0x260 [ 131.594795][ T6916] __x64_sys_getsockopt+0xbd/0x160 [ 131.594808][ T6916] ? do_syscall_64+0x91/0x4e0 [ 131.594824][ T6916] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.594839][ T6916] do_syscall_64+0xcd/0x4e0 [ 131.594856][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.594870][ T6916] RIP: 0033:0x7f4f8c58eec9 [ 131.594881][ T6916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.594893][ T6916] RSP: 002b:00007f4f8d3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 131.594907][ T6916] RAX: ffffffffffffffda RBX: 00007f4f8c7e5fa0 RCX: 00007f4f8c58eec9 [ 131.594915][ T6916] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003 [ 131.594922][ T6916] RBP: 00007f4f8d3a3090 R08: 0000200000000040 R09: 0000000000000000 [ 131.594930][ T6916] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 131.594937][ T6916] R13: 00007f4f8c7e6038 R14: 00007f4f8c7e5fa0 R15: 00007ffdbd772328 [ 131.594955][ T6916] [ 132.026332][ T30] audit: type=1400 audit(1759354843.506:343): avc: denied { write } for pid=6902 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 132.154600][ T30] audit: type=1400 audit(1759354843.506:344): avc: denied { ioctl } for pid=6902 comm="syz.1.239" path="socket:[12206]" dev="sockfs" ino=12206 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 132.408218][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.414954][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.588316][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.598543][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.644422][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.667456][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.775956][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.783491][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.792778][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.803931][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.813605][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.821367][ T5925] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.830186][ T5925] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 133.290657][ T6935] fido_id[6935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.056408][ T30] audit: type=1400 audit(1759354847.736:345): avc: denied { create } for pid=6954 comm="syz.0.252" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.101640][ T30] audit: type=1400 audit(1759354847.756:346): avc: denied { mounton } for pid=6954 comm="syz.0.252" path="/40/file0" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.124341][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.211038][ T30] audit: type=1400 audit(1759354847.886:347): avc: denied { getopt } for pid=6944 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.311808][ T30] audit: type=1400 audit(1759354847.946:348): avc: denied { execute } for pid=6944 comm="syz.4.251" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 135.327949][ T6960] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 135.337856][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.489861][ T6956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.056126][ T30] audit: type=1400 audit(1759354848.726:349): avc: denied { setopt } for pid=6954 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.811762][ T6982] bond0: Removing last ns target with arp_interval on [ 137.908512][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 138.172101][ T7010] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.556345][ T7023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.266'. [ 138.889305][ T5828] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 138.964309][ T5828] Bluetooth: hci2: command 0x0401 tx timeout [ 139.702499][ T7042] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 139.710177][ T7042] cramfs: wrong magic [ 139.715730][ T7042] autofs: Unknown parameter '0x0000000000000000' [ 140.944973][ T30] audit: type=1400 audit(1759354853.626:350): avc: denied { append } for pid=7051 comm="syz.4.272" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.148113][ T6648] Bluetooth: Error in BCSP hdr checksum [ 142.228752][ T7073] SELinux: ebitmap: empty map [ 142.311769][ T7073] SELinux: failed to load policy [ 142.329660][ T30] audit: type=1400 audit(1759354854.906:351): avc: denied { load_policy } for pid=7070 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 142.382516][ T7081] FAULT_INJECTION: forcing a failure. [ 142.382516][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.398540][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT(full) [ 142.398563][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.398573][ T7081] Call Trace: [ 142.398578][ T7081] [ 142.398585][ T7081] dump_stack_lvl+0x16c/0x1f0 [ 142.398611][ T7081] should_fail_ex+0x512/0x640 [ 142.398634][ T7081] _copy_from_iter+0x463/0x1720 [ 142.398661][ T7081] ? __pfx__copy_from_iter+0x10/0x10 [ 142.398674][ T7081] ? sock_alloc_send_pskb+0x755/0x980 [ 142.398692][ T7081] ip_generic_getfrag+0xf7/0x270 [ 142.398706][ T7081] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 142.398719][ T7081] ? __pfx___schedule+0x10/0x10 [ 142.398730][ T7081] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.398744][ T7081] __ip6_append_data+0x2e36/0x4750 [ 142.398759][ T7081] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 142.398777][ T7081] ? ip6_setup_cork+0xa11/0x1530 [ 142.398788][ T7081] ? __pfx___ip6_append_data+0x10/0x10 [ 142.398800][ T7081] ? __pfx_ip6_mtu+0x10/0x10 [ 142.398808][ T7081] ? ip6_setup_cork+0xc51/0x1530 [ 142.398820][ T7081] ip6_make_skb+0x2c8/0x3f0 [ 142.398833][ T7081] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 142.398848][ T7081] ? __pfx_ip6_make_skb+0x10/0x10 [ 142.398859][ T7081] ? find_held_lock+0x2b/0x80 [ 142.398877][ T7081] ? sk_dst_check+0x1da/0x540 [ 142.398891][ T7081] ? udpv6_sendmsg+0x235c/0x2d20 [ 142.398909][ T7081] udpv6_sendmsg+0x235c/0x2d20 [ 142.398925][ T7081] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 142.398942][ T7081] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 142.398956][ T7081] ? avc_has_perm_noaudit+0x149/0x3b0 [ 142.398974][ T7081] ? avc_has_perm+0x144/0x1f0 [ 142.398993][ T7081] ? __pfx___schedule+0x10/0x10 [ 142.399014][ T7081] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 142.399029][ T7081] ? inet6_sendmsg+0x105/0x140 [ 142.399043][ T7081] inet6_sendmsg+0x105/0x140 [ 142.399059][ T7081] ____sys_sendmsg+0x705/0xc70 [ 142.399075][ T7081] ? copy_msghdr_from_user+0x10a/0x160 [ 142.399087][ T7081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.399106][ T7081] ? kvm_sched_clock_read+0x11/0x20 [ 142.399119][ T7081] ___sys_sendmsg+0x134/0x1d0 [ 142.399131][ T7081] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.399150][ T7081] ? find_held_lock+0x2b/0x80 [ 142.399172][ T7081] __sys_sendmmsg+0x200/0x420 [ 142.399185][ T7081] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.399201][ T7081] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.399219][ T7081] ? fput+0x9b/0xd0 [ 142.399230][ T7081] ? ksys_write+0x1ac/0x250 [ 142.399244][ T7081] ? __pfx_ksys_write+0x10/0x10 [ 142.399261][ T7081] __x64_sys_sendmmsg+0x9c/0x100 [ 142.399273][ T7081] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.399285][ T7081] do_syscall_64+0xcd/0x4e0 [ 142.399298][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.399308][ T7081] RIP: 0033:0x7fc1fdd8eec9 [ 142.399317][ T7081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.399327][ T7081] RSP: 002b:00007fc1feca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.399337][ T7081] RAX: ffffffffffffffda RBX: 00007fc1fdfe6090 RCX: 00007fc1fdd8eec9 [ 142.399343][ T7081] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000008 [ 142.399349][ T7081] RBP: 00007fc1feca9090 R08: 0000000000000000 R09: 0000000000000000 [ 142.399354][ T7081] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 142.399360][ T7081] R13: 00007fc1fdfe6128 R14: 00007fc1fdfe6090 R15: 00007fffa253e658 [ 142.399373][ T7081] [ 142.935226][ T30] audit: type=1400 audit(1759354855.076:352): avc: denied { bind } for pid=7077 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.963207][ T30] audit: type=1400 audit(1759354855.426:353): avc: denied { write } for pid=7077 comm="syz.3.277" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 142.994343][ T30] audit: type=1400 audit(1759354855.436:354): avc: denied { open } for pid=7077 comm="syz.3.277" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 143.776493][ T30] audit: type=1400 audit(1759354856.416:355): avc: denied { mount } for pid=7084 comm="syz.0.279" name="/" dev="rpc_pipefs" ino=13275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 143.804439][ T7093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.071067][ T7100] syz.3.282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 144.164464][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 144.170757][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 144.222566][ T7100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.355966][ T30] audit: type=1400 audit(1759354857.026:356): avc: denied { bind } for pid=7107 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.499105][ T30] audit: type=1400 audit(1759354857.026:357): avc: denied { write } for pid=7107 comm="syz.0.283" path="socket:[13652]" dev="sockfs" ino=13652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.719030][ T30] audit: type=1400 audit(1759354857.396:358): avc: denied { read } for pid=7120 comm="syz.4.287" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 145.713028][ T7134] openvswitch: netlink: Flow key attr not present in new flow. [ 145.729049][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 146.765104][ T7144] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 146.772909][ T7144] netlink: 224 bytes leftover after parsing attributes in process `syz.1.293'. [ 147.122642][ T30] audit: type=1400 audit(1759354859.796:359): avc: denied { read } for pid=7146 comm="syz.3.294" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 147.198226][ T30] audit: type=1400 audit(1759354859.826:360): avc: denied { open } for pid=7146 comm="syz.3.294" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 147.268051][ T30] audit: type=1400 audit(1759354859.826:361): avc: denied { ioctl } for pid=7146 comm="syz.3.294" path="socket:[14734]" dev="sockfs" ino=14734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.897788][ T7164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 149.154340][ T30] audit: type=1400 audit(1759354861.756:362): avc: denied { associate } for pid=7176 comm="syz.4.303" name="63" dev="tmpfs" ino=353 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_log_t:s0" [ 149.468456][ T30] audit: type=1400 audit(1759354862.146:363): avc: denied { create } for pid=7182 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.866982][ T7197] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 149.879041][ T7197] macsec1: entered promiscuous mode [ 149.899773][ T7197] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 150.324502][ T1206] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.388087][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.312'. [ 150.779814][ T30] audit: type=1400 audit(1759354863.436:364): avc: denied { read } for pid=7205 comm="syz.3.311" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 151.197865][ T30] audit: type=1400 audit(1759354863.446:365): avc: denied { open } for pid=7205 comm="syz.3.311" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 151.430150][ T7218] fuseblk: Bad value for 'fd' [ 151.519896][ T1206] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.538189][ T7211] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.544463][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.559178][ T1206] usb 2-1: config 0 descriptor?? [ 151.565528][ T7211] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.588242][ T1206] cp210x 2-1:0.0: cp210x converter detected [ 151.876848][ T1206] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 151.903246][ T7211] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.914632][ T7211] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.914676][ T1206] cp210x 2-1:0.0: querying part number failed [ 151.945458][ T1206] usb 2-1: cp210x converter now attached to ttyUSB0 [ 152.007892][ T7211] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.042983][ T7211] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.058498][ T7211] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.086202][ T7211] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.092348][ T7221] fuseblk: Bad value for 'fd' [ 152.118560][ T7211] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 152.135993][ T7211] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 152.152240][ T7211] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 152.674274][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.690215][ T7240] vxcan1: tx address claim with dest, not broadcast [ 152.964367][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 152.971424][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.984962][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.044135][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 153.054719][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.078722][ T5925] usb 1-1: Product: syz [ 153.099176][ T5925] usb 1-1: Manufacturer: syz [ 153.116155][ T5925] usb 1-1: SerialNumber: syz [ 153.145473][ T5925] usb 1-1: config 0 descriptor?? [ 153.195036][ T5925] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 153.221562][ T5925] gspca_stv06xx: st6422 sensor detected [ 153.608690][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 153.924291][ T5828] Bluetooth: hci2: command 0x0401 tx timeout [ 154.084380][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.165229][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.555785][ T93] usb 2-1: USB disconnect, device number 3 [ 155.285508][ T30] audit: type=1326 audit(1759354867.456:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7253 comm="syz.4.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6f758eec9 code=0x0 [ 155.308671][ T93] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 155.316711][ T93] cp210x 2-1:0.0: device disconnected [ 155.374678][ T5925] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 155.419117][ T5925] usb 1-1: USB disconnect, device number 8 [ 156.045836][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 156.045844][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 156.133616][ T7273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.235658][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.244797][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.638152][ T7285] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 157.645226][ T7285] cramfs: wrong magic [ 157.651457][ T7285] autofs: Unknown parameter '0x0000000000000000' [ 158.420940][ T7289] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 158.429868][ T7289] cramfs: wrong magic [ 158.440324][ T7289] autofs: Unknown parameter '0x0000000000000000' [ 158.635735][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 158.644241][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 158.644907][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.287981][ T7325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.595221][ T7328] vxcan1: tx address claim with dest, not broadcast [ 162.944400][ T30] audit: type=1400 audit(1759354875.596:367): avc: denied { append } for pid=7350 comm="syz.1.345" name="v4l-subdev4" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.999774][ T30] audit: type=1400 audit(1759354875.656:368): avc: denied { create } for pid=7350 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 163.098229][ T30] audit: type=1400 audit(1759354875.656:369): avc: denied { setopt } for pid=7350 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 163.164557][ T5820] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.554321][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 163.567894][ T5820] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 253, using maximum allowed: 30 [ 163.579131][ T5820] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.588942][ T5820] usb 4-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 163.604267][ T5820] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.612204][ T5820] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 163.625930][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.639265][ T5820] usb 4-1: config 0 descriptor?? [ 164.125789][ T30] audit: type=1400 audit(1759354876.716:370): avc: denied { remount } for pid=7346 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.423876][ T5820] corsair 0003:1B1C:1B09.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.3-1/input0 [ 164.447797][ T5820] usb 4-1: USB disconnect, device number 4 [ 164.921371][ T7385] fido_id[7385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 165.704378][ T30] audit: type=1400 audit(1759354878.366:371): avc: denied { ioctl } for pid=7391 comm="syz.3.354" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.738270][ T30] audit: type=1400 audit(1759354878.366:372): avc: denied { set_context_mgr } for pid=7391 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 165.759452][ T30] audit: type=1400 audit(1759354878.366:373): avc: denied { map } for pid=7391 comm="syz.3.354" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.918877][ T30] audit: type=1400 audit(1759354878.586:374): avc: denied { write } for pid=7400 comm="syz.4.355" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.365900][ T7392] binder: 7391:7392 ioctl c0306201 200000000280 returned -14 [ 166.376237][ T30] audit: type=1400 audit(1759354879.036:375): avc: denied { call } for pid=7391 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 166.845385][ T7404] Invalid option length (65058) for dns_resolver key [ 167.823411][ T7432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7432 comm=syz.2.361 [ 168.940837][ T30] audit: type=1400 audit(1759354881.606:376): avc: denied { read } for pid=7449 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.100498][ T7459] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 169.111177][ T7459] cramfs: wrong magic [ 169.134639][ T7459] autofs: Unknown parameter '0x0000000000000000' [ 169.534978][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.909621][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 169.921828][ T30] audit: type=1400 audit(1759354882.496:377): avc: denied { getopt } for pid=7449 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.962313][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.982165][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.003603][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.035641][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.049917][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.076855][ T5886] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 170.109206][ T5886] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 170.120431][ T5886] usb 4-1: Manufacturer: syz [ 170.123528][ T7474] vxcan1: tx address claim with dest, not broadcast [ 170.130496][ T5886] usb 4-1: config 0 descriptor?? [ 170.500571][ T30] audit: type=1326 audit(1759354883.166:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78eec9 code=0x7ffc0000 [ 170.550161][ T30] audit: type=1326 audit(1759354883.166:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78eec9 code=0x7ffc0000 [ 170.634439][ T5886] rc_core: IR keymap rc-hauppauge not found [ 170.658887][ T5886] Registered IR keymap rc-empty [ 170.680047][ T30] audit: type=1326 audit(1759354883.166:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe1bf78eec9 code=0x7ffc0000 [ 170.704799][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.724840][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.732194][ T30] audit: type=1326 audit(1759354883.166:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78eec9 code=0x7ffc0000 [ 170.757760][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 170.773710][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 170.803066][ T30] audit: type=1326 audit(1759354883.166:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78eec9 code=0x7ffc0000 [ 171.402852][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.430322][ T30] audit: type=1326 audit(1759354883.166:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1bf78d97f code=0x7ffc0000 [ 171.570737][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.611073][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.633987][ T30] audit: type=1326 audit(1759354883.166:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78eec9 code=0x7ffc0000 [ 171.657345][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.665677][ T30] audit: type=1326 audit(1759354883.166:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7472 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78eec9 code=0x7ffc0000 [ 171.695539][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.781020][ T7487] pim6reg: entered allmulticast mode [ 171.786987][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.884384][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.914402][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.935155][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.954393][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 171.998658][ T5886] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 172.012498][ T5886] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 172.124266][ T5925] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 172.339394][ T7500] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 172.346741][ T7500] cramfs: wrong magic [ 172.352156][ T7500] autofs: Unknown parameter 'fd0x0000000000000000' [ 172.796851][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 173.248840][ T1206] usb 4-1: USB disconnect, device number 5 [ 173.425316][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.528601][ T5925] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 173.537913][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.584505][ T5925] usb 2-1: Product: syz [ 173.588701][ T5925] usb 2-1: Manufacturer: syz [ 173.618820][ T5925] usb 2-1: SerialNumber: syz [ 173.902475][ T7506] binder: 7505:7506 ioctl 400c620e 200000000300 returned -22 [ 173.911699][ T5925] usb 2-1: config 0 descriptor?? [ 174.150703][ T5925] usb 2-1: can't set config #0, error -71 [ 174.160541][ T7485] pim6reg: left allmulticast mode [ 174.171235][ T5925] usb 2-1: USB disconnect, device number 4 [ 174.977569][ T7523] netlink: 'syz.0.383': attribute type 1 has an invalid length. [ 174.985406][ T7523] netlink: 224 bytes leftover after parsing attributes in process `syz.0.383'. [ 175.645407][ T7534] FAULT_INJECTION: forcing a failure. [ 175.645407][ T7534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.835561][ T7534] CPU: 0 UID: 0 PID: 7534 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(full) [ 175.835588][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.835597][ T7534] Call Trace: [ 175.835602][ T7534] [ 175.835609][ T7534] dump_stack_lvl+0x16c/0x1f0 [ 175.835636][ T7534] should_fail_ex+0x512/0x640 [ 175.835659][ T7534] _copy_from_iter+0x29f/0x1720 [ 175.835684][ T7534] ? __alloc_skb+0x200/0x380 [ 175.835703][ T7534] ? __pfx__copy_from_iter+0x10/0x10 [ 175.835725][ T7534] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 175.835754][ T7534] netlink_sendmsg+0x829/0xdd0 [ 175.835781][ T7534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.835811][ T7534] ____sys_sendmsg+0xa98/0xc70 [ 175.835837][ T7534] ? copy_msghdr_from_user+0x10a/0x160 [ 175.835857][ T7534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.835893][ T7534] ___sys_sendmsg+0x134/0x1d0 [ 175.835914][ T7534] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.835962][ T7534] __sys_sendmsg+0x16d/0x220 [ 175.835983][ T7534] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.836019][ T7534] do_syscall_64+0xcd/0x4e0 [ 175.836042][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.836060][ T7534] RIP: 0033:0x7fc1fdd8eec9 [ 175.836073][ T7534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.836089][ T7534] RSP: 002b:00007fc1fecca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.836105][ T7534] RAX: ffffffffffffffda RBX: 00007fc1fdfe5fa0 RCX: 00007fc1fdd8eec9 [ 175.836115][ T7534] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 175.836125][ T7534] RBP: 00007fc1fecca090 R08: 0000000000000000 R09: 0000000000000000 [ 175.836134][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.836143][ T7534] R13: 00007fc1fdfe6038 R14: 00007fc1fdfe5fa0 R15: 00007fffa253e658 [ 175.836165][ T7534] [ 176.449039][ T7549] bond0: Removing last ns target with arp_interval on [ 176.452783][ T5830] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 176.456265][ T1097] bond0: (slave bond_slave_0): interface is now down [ 176.488222][ T1097] bond0: (slave bond_slave_1): interface is now down [ 176.497992][ T1097] bond0: now running without any active interface! [ 176.623563][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 176.724598][ T5886] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 177.436134][ T5886] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.488768][ T5886] usb 2-1: not running at top speed; connect to a high speed hub [ 177.506091][ T5886] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.522348][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.592625][ T5886] usb 2-1: string descriptor 0 read error: -22 [ 177.619678][ T5886] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.675582][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.489295][ T5146] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 178.489711][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 178.499687][ T5886] usb 2-1: 0:2 : does not exist [ 178.512072][ T7565] random: crng reseeded on system resumption [ 178.531071][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 178.531085][ T30] audit: type=1400 audit(1759354891.186:400): avc: denied { append } for pid=7562 comm="syz.4.395" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.740477][ T30] audit: type=1400 audit(1759354891.406:401): avc: denied { ioctl } for pid=7562 comm="syz.4.395" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 178.782153][ T30] audit: type=1326 audit(1759354891.456:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.4.395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6f758eec9 code=0x0 [ 179.091756][ T7574] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.117890][ T5886] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 179.137310][ T30] audit: type=1400 audit(1759354891.756:403): avc: denied { nosuid_transition } for pid=7573 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 179.210441][ T30] audit: type=1400 audit(1759354891.756:404): avc: denied { transition } for pid=7573 comm="syz.2.397" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 179.294007][ T7583] vxcan1: tx address claim with dest, not broadcast [ 179.482611][ T5886] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 179.496883][ T30] audit: type=1400 audit(1759354891.756:405): avc: denied { entrypoint } for pid=7573 comm="syz.2.397" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=58 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 179.527402][ T30] audit: type=1400 audit(1759354891.756:406): avc: denied { share } for pid=7573 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 179.564696][ T5886] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 179.579414][ T5886] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 179.595558][ T30] audit: type=1400 audit(1759354891.756:407): avc: denied { noatsecure } for pid=7573 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 179.709664][ T30] audit: type=1400 audit(1759354892.386:408): avc: denied { listen } for pid=7589 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.748036][ T5886] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 179.772874][ T5886] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 179.784555][ T30] audit: type=1400 audit(1759354892.386:409): avc: denied { accept } for pid=7589 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.871668][ T5886] usb 2-1: USB disconnect, device number 5 [ 181.364631][ T6898] Bluetooth: Error in BCSP hdr checksum [ 181.619338][ T7620] vxcan1: tx address claim with dest, not broadcast [ 182.274400][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 182.512208][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.409'. [ 183.088940][ T93] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 183.265363][ T93] usb 4-1: Using ep0 maxpacket: 32 [ 183.280304][ T93] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 183.288550][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 183.315669][ T93] usb 4-1: config 0 has no interface number 0 [ 183.325583][ T93] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 183.334769][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.342779][ T93] usb 4-1: Product: syz [ 183.347528][ T93] usb 4-1: Manufacturer: syz [ 183.352123][ T93] usb 4-1: SerialNumber: syz [ 183.367881][ T93] usb 4-1: config 0 descriptor?? [ 183.383593][ T93] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 183.516137][ T5825] cgroup: fork rejected by pids controller in /syz4 [ 183.602302][ T93] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 183.631440][ T93] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 183.800509][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 113 [ 184.008453][ T5820] usb 4-1: USB disconnect, device number 6 [ 184.010892][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 184.028848][ T5820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 184.050855][ T5820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 184.067656][ T5820] quatech2 4-1:0.51: device disconnected [ 185.126964][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.167064][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.709376][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.750530][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.962221][ T7669] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 185.969925][ T7669] netlink: 224 bytes leftover after parsing attributes in process `syz.3.421'. [ 186.254489][ T93] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 186.440194][ T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.440362][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.511396][ T93] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 186.590851][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.649871][ T93] usb 4-1: config 0 descriptor?? [ 186.669624][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.702747][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 186.702763][ T30] audit: type=1400 audit(1759355155.376:424): avc: denied { read } for pid=7679 comm="syz.0.425" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.776567][ T30] audit: type=1400 audit(1759355155.416:425): avc: denied { open } for pid=7679 comm="syz.0.425" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.870116][ T30] audit: type=1400 audit(1759355155.476:426): avc: denied { ioctl } for pid=7679 comm="syz.0.425" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 186.959828][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.972846][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.996573][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.110853][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.124237][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.135577][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.140075][ T93] hid_parser_main: 73 callbacks suppressed [ 187.140091][ T93] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 187.164400][ T93] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 187.282221][ T30] audit: type=1400 audit(1759355155.956:427): avc: denied { mounton } for pid=7681 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 187.303725][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.315473][ T93] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 187.322766][ T93] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 187.330222][ T93] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 187.337642][ T93] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 187.354257][ T93] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 187.423066][ T93] redragon 0003:0C45:760B.0006: hidraw0: USB HID vff.fc Device [HID 0c45:760b] on usb-dummy_hcd.3-1/input0 [ 187.764374][ T93] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 187.933941][ T7681] chnl_net:caif_netlink_parms(): no params data found [ 187.944631][ T93] usb 2-1: Using ep0 maxpacket: 32 [ 187.952813][ T93] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.974373][ T93] usb 2-1: config 0 has no interface number 0 [ 188.088517][ T50] bridge_slave_1: left allmulticast mode [ 188.110869][ T50] bridge_slave_1: left promiscuous mode [ 188.125139][ T93] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 188.134979][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.145311][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.158600][ T93] usb 2-1: Product: syz [ 188.162844][ T93] usb 2-1: Manufacturer: syz [ 188.170451][ T93] usb 2-1: SerialNumber: syz [ 188.171231][ T50] bridge_slave_0: left allmulticast mode [ 188.182730][ T50] bridge_slave_0: left promiscuous mode [ 188.189204][ T93] usb 2-1: config 0 descriptor?? [ 188.200342][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.212080][ T93] quatech2 2-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 188.510889][ T93] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 188.535264][ T93] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 188.854115][ T5886] usb 4-1: USB disconnect, device number 7 [ 189.365695][ T5146] Bluetooth: hci2: command tx timeout [ 189.661550][ T7713] kAFS: No cell specified [ 189.959245][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.995008][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.018372][ T50] bond0 (unregistering): Released all slaves [ 190.035838][ T50] bond1 (unregistering): Released all slaves [ 190.053407][ T50] bond2 (unregistering): Released all slaves [ 190.066581][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.066965][ T1206] usb 2-1: USB disconnect, device number 6 [ 190.079841][ T50] bond3 (unregistering): Released all slaves [ 190.110421][ T1206] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.149529][ T1206] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.177424][ T1206] quatech2 2-1:0.1: device disconnected [ 190.987902][ T7740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.454454][ T5146] Bluetooth: hci2: command tx timeout [ 192.249643][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.261522][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.269757][ T7681] bridge_slave_0: entered allmulticast mode [ 192.277530][ T7681] bridge_slave_0: entered promiscuous mode [ 192.286557][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.342917][ T7754] Bluetooth: MGMT ver 1.23 [ 192.760390][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.767627][ T7681] bridge_slave_1: entered allmulticast mode [ 192.774867][ T7681] bridge_slave_1: entered promiscuous mode [ 192.871577][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.944527][ T50] hsr_slave_0: left promiscuous mode [ 193.044249][ T50] hsr_slave_1: left promiscuous mode [ 193.049982][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.076593][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.185349][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.192950][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.684306][ T5146] Bluetooth: hci2: command tx timeout [ 193.751755][ T50] veth1_macvtap: left promiscuous mode [ 193.851327][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.862622][ T50] veth0_macvtap: left promiscuous mode [ 193.868838][ T50] veth1_vlan: left promiscuous mode [ 194.094634][ T7774] FAULT_INJECTION: forcing a failure. [ 194.094634][ T7774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.107728][ T7774] CPU: 0 UID: 0 PID: 7774 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT(full) [ 194.107749][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.107758][ T7774] Call Trace: [ 194.107764][ T7774] [ 194.107770][ T7774] dump_stack_lvl+0x16c/0x1f0 [ 194.107796][ T7774] should_fail_ex+0x512/0x640 [ 194.107819][ T7774] strncpy_from_user+0x3b/0x2e0 [ 194.107841][ T7774] getname_flags.part.0+0x8f/0x550 [ 194.107866][ T7774] getname_flags+0x93/0xf0 [ 194.107889][ T7774] do_sys_openat2+0xb8/0x1d0 [ 194.107908][ T7774] ? __pfx_do_sys_openat2+0x10/0x10 [ 194.107926][ T7774] ? find_held_lock+0x2b/0x80 [ 194.107949][ T7774] ? handle_mm_fault+0x2ab/0xd10 [ 194.107977][ T7774] __x64_sys_openat+0x174/0x210 [ 194.107996][ T7774] ? __pfx___x64_sys_openat+0x10/0x10 [ 194.108018][ T7774] ? do_user_addr_fault+0x843/0x1370 [ 194.108045][ T7774] do_syscall_64+0xcd/0x4e0 [ 194.108068][ T7774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.108084][ T7774] RIP: 0033:0x7f42b2d8d710 [ 194.108097][ T7774] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 194.108113][ T7774] RSP: 002b:00007f42b3c31b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 194.108130][ T7774] RAX: ffffffffffffffda RBX: 000000000004c000 RCX: 00007f42b2d8d710 [ 194.108140][ T7774] RDX: 000000000004c000 RSI: 00007f42b3c31c10 RDI: 00000000ffffff9c [ 194.108151][ T7774] RBP: 00007f42b3c31c10 R08: 0000000000000000 R09: 00236f656469762f [ 194.108161][ T7774] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 194.108171][ T7774] R13: 00007f42b2fe6218 R14: 00007f42b2fe6180 R15: 00007ffd14334598 [ 194.108194][ T7774] [ 194.301387][ T50] veth0_vlan: left promiscuous mode [ 194.787021][ T7779] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 194.794769][ T7779] netlink: 224 bytes leftover after parsing attributes in process `syz.2.446'. [ 195.765366][ T5146] Bluetooth: hci2: command tx timeout [ 196.295238][ T7798] vxcan1: tx address claim with dest, not broadcast [ 197.463573][ T50] team0 (unregistering): Port device team_slave_1 removed [ 197.559049][ T7810] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 197.566964][ T7810] netlink: 244 bytes leftover after parsing attributes in process `syz.0.453'. [ 197.575945][ T7810] NCSI netlink: No device for ifindex 0 [ 198.211009][ T50] team0 (unregistering): Port device team_slave_0 removed [ 198.878818][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.890822][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 198.997492][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 200.598445][ T7681] team0: Port device team_slave_0 added [ 200.606245][ T7681] team0: Port device team_slave_1 added [ 200.799552][ T30] audit: type=1400 audit(1759355169.466:428): avc: denied { read } for pid=7829 comm="syz.0.458" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 200.838395][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.848166][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.038181][ T7837] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.062434][ T7837] block device autoloading is deprecated and will be removed. [ 201.091282][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.094327][ T30] audit: type=1400 audit(1759355169.466:429): avc: denied { open } for pid=7829 comm="syz.0.458" path="/92/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 201.151984][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.176236][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.334405][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.563609][ T7844] kAFS: No cell specified [ 202.261237][ T7681] hsr_slave_0: entered promiscuous mode [ 202.326001][ T7681] hsr_slave_1: entered promiscuous mode [ 202.359340][ T7681] debugfs: 'hsr0' already exists in 'hsr' [ 202.467455][ T30] audit: type=1400 audit(1759355171.036:430): avc: denied { append } for pid=7850 comm="syz.3.462" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 202.494466][ T7681] Cannot create hsr debugfs directory [ 202.585062][ T30] audit: type=1400 audit(1759355171.086:431): avc: denied { create } for pid=7850 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 202.909840][ T30] audit: type=1400 audit(1759355171.576:432): avc: denied { read write } for pid=7856 comm="syz.2.463" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 202.946021][ T30] audit: type=1400 audit(1759355171.586:433): avc: denied { open } for pid=7856 comm="syz.2.463" path="/98/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 203.212374][ T30] audit: type=1400 audit(1759355171.886:434): avc: denied { create } for pid=7868 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 203.216676][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 203.370330][ T30] audit: type=1400 audit(1759355171.886:435): avc: denied { write } for pid=7868 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 203.530498][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 203.944631][ T93] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.106250][ T93] usb 2-1: Using ep0 maxpacket: 16 [ 204.410599][ T93] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.450065][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.474424][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 204.487303][ T93] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 204.498736][ T93] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.513919][ T93] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 204.527628][ T93] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 204.536112][ T93] usb 2-1: Manufacturer: syz [ 204.563650][ T93] usb 2-1: config 0 descriptor?? [ 205.655077][ T7904] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 206.601234][ T7681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.627250][ T7681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.644390][ T93] rc_core: IR keymap rc-hauppauge not found [ 206.650381][ T93] Registered IR keymap rc-empty [ 206.656763][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 206.665521][ T7681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.676851][ T7681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.698006][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 206.771223][ T93] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 206.884948][ T93] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 207.018088][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.058379][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.148069][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.277151][ T7936] kAFS: No cell specified [ 207.484980][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.567368][ T30] audit: type=1400 audit(1759355176.216:436): avc: denied { connect } for pid=7937 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.577113][ T7938] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 207.614331][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.644937][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.656085][ T30] audit: type=1400 audit(1759355176.246:437): avc: denied { read } for pid=7937 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.709448][ T7938] bond1: entered promiscuous mode [ 207.714741][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.761553][ T7938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.782290][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.785995][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.829828][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.834272][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.852629][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.859798][ T7737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.877314][ T5886] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 207.905098][ T5886] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.944419][ T93] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 207.969608][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.976773][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.020144][ T93] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 208.062161][ T93] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.604560][ T93] usb 2-1: USB disconnect, device number 7 [ 208.613300][ T7681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.784770][ T30] audit: type=1400 audit(1759355177.456:438): avc: denied { module_request } for pid=7681 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 208.927605][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'. [ 209.418895][ T7982] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 209.897685][ T1206] IPVS: starting estimator thread 0... [ 209.945360][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.004435][ T7983] IPVS: using max 77 ests per chain, 184800 per kthread [ 210.306457][ T5146] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 210.312179][ T5146] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 210.324608][ T5146] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 210.814746][ T5146] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 211.113510][ T7681] veth0_vlan: entered promiscuous mode [ 211.362664][ T8014] netlink: 'syz.2.484': attribute type 5 has an invalid length. [ 211.370909][ T8014] netlink: 'syz.2.484': attribute type 7 has an invalid length. [ 211.490607][ T8014] : entered promiscuous mode [ 211.940335][ T7681] veth1_vlan: entered promiscuous mode [ 212.173991][ T7681] veth0_macvtap: entered promiscuous mode [ 212.480026][ T7681] veth1_macvtap: entered promiscuous mode [ 212.838351][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.840015][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.863110][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.863195][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.863240][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.863340][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.377228][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.407122][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.582374][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.039895][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.073201][ T5820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 214.100526][ T5820] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.285159][ T79] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 214.606993][ T79] usb 3-1: Using ep0 maxpacket: 32 [ 214.632357][ T79] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.663810][ T79] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.787979][ T79] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 214.816089][ T79] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.869828][ T79] usb 3-1: config 0 descriptor?? [ 215.260689][ T30] audit: type=1400 audit(1759355183.906:439): avc: denied { create } for pid=8057 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 215.333754][ T8073] vxcan1: tx address claim with dest, not broadcast [ 216.385374][ T93] libceph: connect (1)[c::]:6789 error -101 [ 216.411402][ T93] libceph: mon0 (1)[c::]:6789 connect error [ 216.766178][ T93] libceph: connect (1)[c::]:6789 error -101 [ 216.804904][ T93] libceph: mon0 (1)[c::]:6789 connect error [ 217.004422][ T8096] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 217.015062][ T8096] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 217.404093][ T24] libceph: connect (1)[c::]:6789 error -101 [ 217.410290][ T5925] IPVS: starting estimator thread 0... [ 217.416210][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 217.514406][ T8097] IPVS: using max 78 ests per chain, 187200 per kthread [ 218.644395][ T8084] ceph: No mds server is up or the cluster is laggy [ 218.657425][ T93] libceph: connect (1)[c::]:6789 error -101 [ 218.663604][ T93] libceph: mon0 (1)[c::]:6789 connect error [ 218.977716][ T79] usbhid 3-1:0.0: can't add hid device: -71 [ 219.014478][ T79] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 219.057145][ T79] usb 3-1: USB disconnect, device number 4 [ 219.625839][ T5146] Bluetooth: hci3: Dropping invalid advertising data [ 219.633707][ T5146] Bluetooth: hci3: Dropping invalid advertising data [ 219.633725][ T5146] Bluetooth: hci3: Dropping invalid advertising data [ 219.633741][ T5146] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 219.633757][ T5146] Bluetooth: hci3: Malformed LE Event: 0x02 [ 220.933238][ T5820] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 221.497419][ T5820] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.515196][ T50] Bluetooth: Error in BCSP hdr checksum [ 221.740673][ T8144] fido_id[8144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.776772][ T30] audit: type=1400 audit(1759355190.436:440): avc: denied { setopt } for pid=8145 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.014422][ T8153] afs: Unknown parameter 'dy' [ 222.435701][ T5820] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 223.135193][ T5820] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 223.143399][ T5820] usb 3-1: config 7 has no interface number 0 [ 223.153864][ T5820] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 223.233936][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.258583][ T5820] usb 3-1: Product: syz [ 223.267966][ T5820] usb 3-1: Manufacturer: syz [ 223.273314][ T5820] usb 3-1: SerialNumber: syz [ 223.444378][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 223.712250][ T93] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 223.721336][ T93] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 223.798894][ T8178] fido_id[8178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.865351][ T93] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 224.268045][ T93] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.280776][ T93] usb 4-1: not running at top speed; connect to a high speed hub [ 224.292692][ T93] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.304353][ T93] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.317153][ T93] usb 4-1: string descriptor 0 read error: -22 [ 224.323417][ T93] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.332577][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.350787][ T93] usb 4-1: 0:2 : does not exist [ 224.433492][ T8187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8187 comm=syz.0.520 [ 224.466967][ T8189] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 224.478561][ T5820] as10x_usb: device has been detected [ 224.488054][ T5820] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 224.521029][ T5820] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 224.854969][ T30] audit: type=1400 audit(1759355193.496:441): avc: denied { firmware_load } for pid=5820 comm="kworker/0:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 224.862251][ T93] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 224.982908][ T93] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 225.003440][ T93] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 225.038991][ T93] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 225.064259][ T5820] as10x_usb: error during firmware upload part1 [ 225.356439][ T5820] Registered device Elgato EyeTV DTT Deluxe [ 225.377503][ T5820] usb 3-1: USB disconnect, device number 5 [ 225.382357][ T93] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 225.497103][ T93] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 225.527943][ T93] usb 4-1: USB disconnect, device number 8 [ 225.532759][ T5820] Unregistered device Elgato EyeTV DTT Deluxe [ 225.631737][ T8201] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 225.646119][ T8201] netlink: 224 bytes leftover after parsing attributes in process `syz.4.524'. [ 225.882015][ T5820] as10x_usb: device has been disconnected [ 227.429273][ T8228] netlink: 72 bytes leftover after parsing attributes in process `syz.3.530'. [ 227.690074][ T8240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.341153][ T6898] Bluetooth: Error in BCSP hdr checksum [ 228.800069][ T8256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.190795][ T8259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.807771][ T8265] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 229.856907][ T8265] netlink: 224 bytes leftover after parsing attributes in process `syz.0.541'. [ 230.325326][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 230.331972][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 231.787445][ T30] audit: type=1400 audit(1759355200.466:442): avc: denied { bind } for pid=8285 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.811914][ T30] audit: type=1400 audit(1759355200.486:443): avc: denied { write } for pid=8285 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 233.114051][ T8302] netlink: 92 bytes leftover after parsing attributes in process `syz.1.550'. [ 233.425080][ T8307] vxcan1: tx address claim with dest, not broadcast [ 234.242393][ T8318] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 235.436166][ T8322] netlink: 72 bytes leftover after parsing attributes in process `syz.1.557'. [ 235.639108][ T8324] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 235.647128][ T8324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.556'. [ 236.469060][ T8342] vxcan1: tx address claim with dest, not broadcast [ 237.782362][ T8361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'. [ 237.827690][ T8362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.566'. [ 238.932890][ T8372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.030063][ T30] audit: type=1400 audit(1759355207.706:444): avc: denied { map } for pid=8367 comm="syz.4.568" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.052844][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.108264][ T30] audit: type=1400 audit(1759355207.756:445): avc: denied { mounton } for pid=8367 comm="syz.4.568" path="/14/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 239.131022][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.424632][ T8381] kAFS: No cell specified [ 239.972767][ T8385] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 239.980618][ T8385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.572'. [ 241.144568][ T8401] FAULT_INJECTION: forcing a failure. [ 241.144568][ T8401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.158971][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.3.577 Not tainted syzkaller #0 PREEMPT(full) [ 241.158995][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.159003][ T8401] Call Trace: [ 241.159009][ T8401] [ 241.159014][ T8401] dump_stack_lvl+0x16c/0x1f0 [ 241.159041][ T8401] should_fail_ex+0x512/0x640 [ 241.159064][ T8401] _copy_from_user+0x2e/0xd0 [ 241.159086][ T8401] ucma_write+0x128/0x330 [ 241.159108][ T8401] ? __pfx_ucma_write+0x10/0x10 [ 241.159127][ T8401] ? bpf_lsm_file_permission+0x9/0x10 [ 241.159145][ T8401] ? security_file_permission+0x71/0x210 [ 241.159168][ T8401] ? rw_verify_area+0xcf/0x6c0 [ 241.159192][ T8401] ? __pfx_ucma_write+0x10/0x10 [ 241.159211][ T8401] vfs_write+0x29d/0x11d0 [ 241.159241][ T8401] ? __pfx_vfs_write+0x10/0x10 [ 241.159261][ T8401] ? find_held_lock+0x2b/0x80 [ 241.159285][ T8401] ? __fget_files+0x204/0x3c0 [ 241.159313][ T8401] ? __fget_files+0x20e/0x3c0 [ 241.159344][ T8401] ksys_write+0x1f8/0x250 [ 241.159367][ T8401] ? __pfx_ksys_write+0x10/0x10 [ 241.159398][ T8401] do_syscall_64+0xcd/0x4e0 [ 241.159420][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.159437][ T8401] RIP: 0033:0x7fc1fdd8eec9 [ 241.159453][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.159470][ T8401] RSP: 002b:00007fc1feca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.159485][ T8401] RAX: ffffffffffffffda RBX: 00007fc1fdfe6090 RCX: 00007fc1fdd8eec9 [ 241.159497][ T8401] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 241.159507][ T8401] RBP: 00007fc1feca9090 R08: 0000000000000000 R09: 0000000000000000 [ 241.159516][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.159525][ T8401] R13: 00007fc1fdfe6128 R14: 00007fc1fdfe6090 R15: 00007fffa253e658 [ 241.159546][ T8401] [ 241.350636][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.949395][ T8409] 9pnet_fd: Insufficient options for proto=fd [ 243.039309][ T8429] kAFS: No cell specified [ 243.568203][ T8435] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 244.324456][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.373302][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.587'. [ 244.423258][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.587'. [ 245.506991][ T30] audit: type=1400 audit(1759355214.136:446): avc: denied { create } for pid=8450 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 245.804569][ T93] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 245.813494][ T8459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.004750][ T93] usb 4-1: Using ep0 maxpacket: 32 [ 246.014892][ T93] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.023515][ T93] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 246.033503][ T93] usb 4-1: config 12 has no interface number 0 [ 246.070147][ T93] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 246.110470][ T93] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 246.119839][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.128839][ T93] usb 4-1: Product: syz [ 246.136056][ T93] usb 4-1: Manufacturer: syz [ 246.142764][ T93] usb 4-1: SerialNumber: syz [ 246.932945][ T93] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.993520][ T8469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8469 comm=syz.2.596 [ 247.009857][ T8467] netlink: 32 bytes leftover after parsing attributes in process `syz.1.595'. [ 247.060834][ T5884] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 247.109954][ T93] usb 4-1: USB disconnect, device number 9 [ 247.130167][ T5884] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.179187][ T8472] binder: 8466:8472 ioctl c00c620f 200000000540 returned -22 [ 247.454701][ T6893] udevd[6893]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.475061][ T30] audit: type=1400 audit(1759355474.151:447): avc: denied { read write } for pid=8492 comm="syz.3.602" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.595990][ T30] audit: type=1400 audit(1759355474.171:448): avc: denied { open } for pid=8492 comm="syz.3.602" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.690714][ T30] audit: type=1400 audit(1759355474.171:449): avc: denied { ioctl } for pid=8492 comm="syz.3.602" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x5418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.752252][ T30] audit: type=1400 audit(1759355474.351:450): avc: denied { ioctl } for pid=8495 comm="syz.0.603" path="socket:[20096]" dev="sockfs" ino=20096 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 252.035762][ T1206] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 252.054606][ T1206] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.540658][ T8496] batman_adv: batadv0: Adding interface: dummy0 [ 252.547170][ T8496] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.574041][ T8496] batman_adv: batadv0: Interface activated: dummy0 [ 252.582934][ T8514] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 254.294385][ T79] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 254.882572][ T79] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.919677][ T79] usb 2-1: config 0 has no interfaces? [ 254.970831][ T79] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.011046][ T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.104104][ T79] usb 2-1: Product: syz [ 255.134357][ T79] usb 2-1: Manufacturer: syz [ 255.169759][ T79] usb 2-1: SerialNumber: syz [ 255.193484][ T79] usb 2-1: config 0 descriptor?? [ 255.294705][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.352191][ T8566] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 256.117367][ T30] audit: type=1400 audit(1759355480.791:451): avc: denied { mount } for pid=8559 comm="syz.2.620" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 256.931317][ T8582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8582 comm=syz.3.625 [ 257.850605][ T93] usb 2-1: USB disconnect, device number 8 [ 257.928024][ T8595] 9pnet_fd: Insufficient options for proto=fd [ 258.109176][ T30] audit: type=1400 audit(1759355482.721:452): avc: denied { setopt } for pid=8594 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 258.685520][ T30] audit: type=1400 audit(1759355483.351:453): avc: denied { write } for pid=8600 comm="syz.3.630" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 258.976888][ T30] audit: type=1400 audit(1759355483.351:454): avc: denied { ioctl } for pid=8600 comm="syz.3.630" path="/132/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 259.017047][ T30] audit: type=1326 audit(1759355483.501:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c58eec9 code=0x7ffc0000 [ 259.181009][ T30] audit: type=1326 audit(1759355483.501:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c58eec9 code=0x7ffc0000 [ 259.660559][ T30] audit: type=1326 audit(1759355483.501:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4f8c58eec9 code=0x7ffc0000 [ 259.985076][ T30] audit: type=1326 audit(1759355483.501:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c58eec9 code=0x7ffc0000 [ 260.011977][ T30] audit: type=1326 audit(1759355483.501:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f4f8c58eec9 code=0x7ffc0000 [ 260.259627][ T30] audit: type=1326 audit(1759355483.501:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8609 comm="syz.1.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8c58eec9 code=0x7ffc0000 [ 262.020728][ T8650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8650 comm=syz.4.642 [ 262.407838][ T8655] netlink: 9 bytes leftover after parsing attributes in process `syz.0.643'. [ 262.559384][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 262.559401][ T30] audit: type=1400 audit(1759355487.211:466): avc: denied { append } for pid=8657 comm="syz.1.644" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 262.819318][ T8655] gretap0: entered promiscuous mode [ 265.283480][ T8684] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 265.291366][ T8684] netlink: 224 bytes leftover after parsing attributes in process `syz.4.651'. [ 266.373044][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.654'. [ 266.597496][ T8703] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 267.040418][ T8699] netlink: 9 bytes leftover after parsing attributes in process `syz.0.655'. [ 268.879737][ T8719] trusted_key: syz.4.661 sent an empty control message without MSG_MORE. [ 269.232981][ T8725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.971457][ T8745] vxcan1: tx address claim with dest, not broadcast [ 271.194456][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 271.479484][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 271.498914][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 271.509190][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.907278][ T8764] kAFS: No cell specified [ 272.100949][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.145597][ T24] usb 4-1: string descriptor 0 read error: -22 [ 272.171741][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.604036][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.730604][ T8772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.965484][ T24] usb 4-1: 0:2 : does not exist [ 273.629110][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 273.988531][ T8782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.112983][ T24] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 274.293148][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 274.329368][ T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 274.491047][ T8789] o2cb: This node has not been configured. [ 274.497112][ T8789] o2cb: Cluster check failed. Fix errors before retrying. [ 274.504809][ T8789] (syz.4.677,8789,0):user_dlm_register:674 ERROR: status = -22 [ 274.512437][ T8789] (syz.4.677,8789,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 274.525929][ T30] audit: type=1400 audit(1759355499.161:467): avc: denied { associate } for pid=8785 comm="syz.4.677" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 274.580197][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 274.782188][ T24] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 274.989388][ T8797] vxcan1: tx address claim with dest, not broadcast [ 275.462587][ T24] usb 4-1: USB disconnect, device number 10 [ 277.272560][ T8812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.940815][ T8829] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 277.948783][ T8829] netlink: 224 bytes leftover after parsing attributes in process `syz.1.688'. [ 278.503310][ T8833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.044362][ T1206] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 279.224560][ T1206] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.259787][ T1206] usb 3-1: not running at top speed; connect to a high speed hub [ 279.300647][ T1206] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.319007][ T1206] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.359558][ T1206] usb 3-1: string descriptor 0 read error: -22 [ 279.373101][ T1206] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.385509][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.408643][ T1206] usb 3-1: 0:2 : does not exist [ 280.148420][ T8856] No control pipe specified [ 281.244102][ T1206] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 281.254659][ T8865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.664941][ T1206] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 281.679146][ T1206] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 281.690848][ T1206] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 281.722528][ T1206] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 281.845129][ T1206] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 281.863357][ T1206] usb 3-1: USB disconnect, device number 6 [ 283.557856][ T8909] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 284.155368][ T8914] No control pipe specified [ 286.455917][ T5925] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 286.652191][ T5925] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.672088][ T8942] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 287.704111][ T30] audit: type=1400 audit(1759355512.371:468): avc: denied { ioctl } for pid=8933 comm="syz.0.716" path="socket:[22106]" dev="sockfs" ino=22106 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.631582][ T8952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8952 comm=syz.3.720 [ 289.011126][ T8961] FAULT_INJECTION: forcing a failure. [ 289.011126][ T8961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.117127][ T8963] No control pipe specified [ 289.581766][ T8961] CPU: 0 UID: 0 PID: 8961 Comm: syz.2.721 Not tainted syzkaller #0 PREEMPT(full) [ 289.581791][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.581801][ T8961] Call Trace: [ 289.581807][ T8961] [ 289.581813][ T8961] dump_stack_lvl+0x16c/0x1f0 [ 289.581842][ T8961] should_fail_ex+0x512/0x640 [ 289.581866][ T8961] _copy_from_user+0x2e/0xd0 [ 289.581888][ T8961] __sys_bpf+0x248/0x4980 [ 289.581918][ T8961] ? __pfx___sys_bpf+0x10/0x10 [ 289.581939][ T8961] ? rcu_is_watching+0x12/0xc0 [ 289.581959][ T8961] ? irqentry_exit+0x3b/0x90 [ 289.581978][ T8961] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.582003][ T8961] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 289.582027][ T8961] ? __mutex_unlock_slowpath+0x2f6/0x7b0 [ 289.582063][ T8961] ? fput+0x9b/0xd0 [ 289.582082][ T8961] ? ksys_write+0x1ac/0x250 [ 289.582108][ T8961] ? __pfx_ksys_write+0x10/0x10 [ 289.582135][ T8961] __x64_sys_bpf+0x78/0xc0 [ 289.582149][ T8961] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.582167][ T8961] do_syscall_64+0xcd/0x4e0 [ 289.582198][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.582215][ T8961] RIP: 0033:0x7f42b2d8eec9 [ 289.582228][ T8961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.582244][ T8961] RSP: 002b:00007f42b3c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.582260][ T8961] RAX: ffffffffffffffda RBX: 00007f42b2fe6090 RCX: 00007f42b2d8eec9 [ 289.582271][ T8961] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 289.582281][ T8961] RBP: 00007f42b3c53090 R08: 0000000000000000 R09: 0000000000000000 [ 289.582290][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.582299][ T8961] R13: 00007f42b2fe6128 R14: 00007f42b2fe6090 R15: 00007ffd14334598 [ 289.582320][ T8961] [ 290.147743][ T8976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.163523][ T30] audit: type=1400 audit(1759355514.821:469): avc: denied { read } for pid=8978 comm="syz.2.727" path="socket:[22230]" dev="sockfs" ino=22230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.604286][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 290.696460][ T8990] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 290.704567][ T8990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.731'. [ 290.964292][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 291.002873][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 291.040281][ T24] usb 4-1: config 7 has an invalid interface number: 62 but max is 0 [ 291.057536][ T24] usb 4-1: config 7 has no interface number 0 [ 291.103244][ T24] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=61.95 [ 291.122228][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.140145][ T24] usb 4-1: Product: syz [ 291.153683][ T24] usb 4-1: SerialNumber: syz [ 291.411560][ T8985] openvswitch: netlink: Geneve option length err (len 5651, max 255). [ 291.537862][ T24] esd_usb 4-1:7.62: sending version message failed [ 291.544989][ T24] esd_usb 4-1:7.62: probe with driver esd_usb failed with error -22 [ 291.565810][ T24] usb 4-1: USB disconnect, device number 11 [ 292.810566][ T9012] No control pipe specified [ 293.305863][ T5820] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 293.400964][ T5820] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.959485][ T30] audit: type=1400 audit(1759355519.571:470): avc: denied { override_creds } for pid=9029 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 295.288184][ T9047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.412432][ T58] Bluetooth: Error in BCSP hdr checksum [ 296.996959][ T9068] No control pipe specified [ 297.444627][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 297.444641][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.223943][ T30] audit: type=1400 audit(1759355522.891:471): avc: denied { map } for pid=9080 comm="syz.4.752" path="socket:[22470]" dev="sockfs" ino=22470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 298.400605][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 299.107390][ T9089] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 299.129809][ T9090] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 299.171142][ T24] IPVS: starting estimator thread 0... [ 299.183927][ T79] IPVS: starting estimator thread 0... [ 299.336949][ T9096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.354874][ T9092] IPVS: using max 78 ests per chain, 187200 per kthread [ 299.475228][ T9093] IPVS: using max 38 ests per chain, 91200 per kthread [ 299.753296][ T9104] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 300.493717][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.759'. [ 302.195639][ T9128] bond2: entered allmulticast mode [ 302.201084][ T9128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.208161][ T9128] bridge0: port 4(bond2) entered blocking state [ 302.214484][ T9128] bridge0: port 4(bond2) entered disabled state [ 302.221779][ T9128] bond2: entered promiscuous mode [ 302.227220][ T9128] bridge0: port 4(bond2) entered blocking state [ 302.233495][ T9128] bridge0: port 4(bond2) entered forwarding state [ 302.249602][ T8947] bridge0: port 4(bond2) entered disabled state [ 302.481793][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 302.491573][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.281039][ T9149] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 303.914733][ T9150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.771'. [ 304.643735][ T9169] vxcan1: tx address claim with dest, not broadcast [ 305.187577][ T9176] input: syz1 as /devices/virtual/input/input10 [ 305.441349][ T9180] FAULT_INJECTION: forcing a failure. [ 305.441349][ T9180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.495223][ T9180] CPU: 1 UID: 0 PID: 9180 Comm: syz.0.778 Not tainted syzkaller #0 PREEMPT(full) [ 305.495240][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.495246][ T9180] Call Trace: [ 305.495250][ T9180] [ 305.495254][ T9180] dump_stack_lvl+0x16c/0x1f0 [ 305.495272][ T9180] should_fail_ex+0x512/0x640 [ 305.495287][ T9180] _copy_from_user+0x2e/0xd0 [ 305.495302][ T9180] copy_msghdr_from_user+0x98/0x160 [ 305.495315][ T9180] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 305.495334][ T9180] ___sys_sendmsg+0xfe/0x1d0 [ 305.495347][ T9180] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.495374][ T9180] __sys_sendmsg+0x16d/0x220 [ 305.495387][ T9180] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.495407][ T9180] do_syscall_64+0xcd/0x4e0 [ 305.495421][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.495432][ T9180] RIP: 0033:0x7fe1bf78eec9 [ 305.495441][ T9180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.495451][ T9180] RSP: 002b:00007fe1c0677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.495461][ T9180] RAX: ffffffffffffffda RBX: 00007fe1bf9e5fa0 RCX: 00007fe1bf78eec9 [ 305.495467][ T9180] RDX: 0000000020008024 RSI: 0000200000001040 RDI: 0000000000000003 [ 305.495473][ T9180] RBP: 00007fe1c0677090 R08: 0000000000000000 R09: 0000000000000000 [ 305.495479][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.495485][ T9180] R13: 00007fe1bf9e6038 R14: 00007fe1bf9e5fa0 R15: 00007ffcd9e6a5a8 [ 305.495497][ T9180] [ 305.748062][ T9163] Bluetooth: MGMT ver 1.23 [ 305.767654][ T9163] bond0: Removing last ns target with arp_interval on [ 305.814219][ T79] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 305.984562][ T79] usb 4-1: Using ep0 maxpacket: 16 [ 306.029164][ T79] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 306.042310][ T79] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.051812][ T79] usb 4-1: Product: syz [ 306.056988][ T79] usb 4-1: Manufacturer: syz [ 306.062424][ T79] usb 4-1: SerialNumber: syz [ 306.147646][ T79] r8152-cfgselector 4-1: Unknown version 0x0000 [ 306.166893][ T79] r8152-cfgselector 4-1: config 0 descriptor?? [ 306.415964][ T9195] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 306.857437][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.866284][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.929196][ T1206] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 306.974580][ T5927] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 307.134323][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 307.190675][ T5927] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 307.222235][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.328564][ T5927] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 307.338580][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 307.464791][ T9207] tipc: Started in network mode [ 307.470044][ T9207] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 307.478809][ T9207] tipc: Enabled bearer , priority 10 [ 307.496693][ T9207] lo speed is unknown, defaulting to 1000 [ 307.504688][ T9207] lo speed is unknown, defaulting to 1000 [ 307.521671][ T9207] lo speed is unknown, defaulting to 1000 [ 307.549638][ T9207] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 307.600725][ T9207] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 307.761767][ T9207] lo speed is unknown, defaulting to 1000 [ 307.767732][ T30] audit: type=1400 audit(1759355532.401:472): avc: denied { connect } for pid=9202 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.769040][ T9207] lo speed is unknown, defaulting to 1000 [ 307.794204][ T9207] lo speed is unknown, defaulting to 1000 [ 307.803278][ T9207] lo speed is unknown, defaulting to 1000 [ 307.812030][ T9207] lo speed is unknown, defaulting to 1000 [ 307.824228][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 307.854361][ T5146] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 307.874361][ T5927] usb 1-1: Product: syz [ 307.902625][ T5927] usb 1-1: config 0 descriptor?? [ 308.175996][ T30] audit: type=1400 audit(1759355532.841:473): avc: denied { setopt } for pid=9190 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.217265][ T9193] FAULT_INJECTION: forcing a failure. [ 308.217265][ T9193] name failslab, interval 1, probability 0, space 0, times 1 [ 308.226555][ T30] audit: type=1400 audit(1759355532.881:474): avc: denied { connect } for pid=9190 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.472266][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.0.782 Not tainted syzkaller #0 PREEMPT(full) [ 308.472290][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.472300][ T9193] Call Trace: [ 308.472305][ T9193] [ 308.472311][ T9193] dump_stack_lvl+0x16c/0x1f0 [ 308.472339][ T9193] should_fail_ex+0x512/0x640 [ 308.472357][ T9193] ? fs_reclaim_acquire+0xae/0x150 [ 308.472377][ T9193] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.472397][ T9193] should_failslab+0xc2/0x120 [ 308.472413][ T9193] __kmalloc_noprof+0xd2/0x510 [ 308.472440][ T9193] tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.472464][ T9193] ? tomoyo_profile+0x47/0x60 [ 308.472488][ T9193] tomoyo_path_number_perm+0x245/0x580 [ 308.472503][ T9193] ? tomoyo_path_number_perm+0x237/0x580 [ 308.472519][ T9193] ? io_schedule_timeout+0x74/0x150 [ 308.472538][ T9193] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.472556][ T9193] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.472592][ T9193] ? hook_file_ioctl_common+0x36/0x410 [ 308.472616][ T9193] ? hook_file_ioctl_common+0xac/0x410 [ 308.472639][ T9193] ? hook_file_ioctl_common+0x145/0x410 [ 308.472667][ T9193] ? __fget_files+0x20e/0x3c0 [ 308.472697][ T9193] security_file_ioctl+0x9b/0x240 [ 308.472718][ T9193] __x64_sys_ioctl+0xb7/0x210 [ 308.472741][ T9193] do_syscall_64+0xcd/0x4e0 [ 308.472764][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.472781][ T9193] RIP: 0033:0x7fe1bf78eec9 [ 308.472796][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.472812][ T9193] RSP: 002b:00007fe1c0677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.472830][ T9193] RAX: ffffffffffffffda RBX: 00007fe1bf9e5fa0 RCX: 00007fe1bf78eec9 [ 308.472839][ T9193] RDX: 0000200000000040 RSI: 00000000c0386105 RDI: 0000000000000006 [ 308.472848][ T9193] RBP: 00007fe1c0677090 R08: 0000000000000000 R09: 0000000000000000 [ 308.472856][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.472864][ T9193] R13: 00007fe1bf9e6038 R14: 00007fe1bf9e5fa0 R15: 00007ffcd9e6a5a8 [ 308.472886][ T9193] [ 308.472893][ T9193] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.605677][ T79] tipc: Node number set to 10005162 [ 308.608353][ T5820] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 308.984250][ T1206] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 309.073511][ T79] usb 1-1: USB disconnect, device number 9 [ 309.148874][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 309.157236][ T5820] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 309.184276][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.192321][ T5820] usb 3-1: Product: syz [ 309.196549][ T5820] usb 3-1: Manufacturer: syz [ 309.201135][ T5820] usb 3-1: SerialNumber: syz [ 309.211879][ T5820] usb 3-1: config 0 descriptor?? [ 309.322210][ T9221] CUSE: info not properly terminated [ 309.618355][ T5820] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 309.626384][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.636842][ T1206] usb 2-1: config 0 has no interfaces? [ 309.644029][ T1206] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 309.656978][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.665129][ T1206] usb 2-1: Product: syz [ 309.669321][ T1206] usb 2-1: Manufacturer: syz [ 309.673931][ T1206] usb 2-1: SerialNumber: syz [ 309.684728][ T1206] usb 2-1: config 0 descriptor?? [ 310.153510][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'. [ 310.324498][ T5820] gspca_sonixj: reg_r err -32 [ 310.656031][ T5820] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 310.772159][ T30] audit: type=1400 audit(1759355535.441:475): avc: denied { watch watch_reads } for pid=9232 comm="syz.0.794" path="/proc/629/map_files" dev="proc" ino=23771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 310.912358][ T9240] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 311.377035][ T5886] usb 2-1: USB disconnect, device number 9 [ 311.712877][ T9252] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 312.378051][ T30] audit: type=1400 audit(1759355537.041:476): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 312.578545][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.803'. [ 313.446942][ T5886] usb 3-1: USB disconnect, device number 7 [ 314.071451][ T1206] libceph: connect (1)[c::]:6789 error -101 [ 314.092251][ T1206] libceph: mon0 (1)[c::]:6789 connect error [ 314.104049][ T5146] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 314.113756][ T9279] bond0: Removing last ns target with arp_interval on [ 314.121630][ T7737] bond0: (slave bond_slave_0): interface is now down [ 314.143504][ T7737] bond0: (slave bond_slave_1): interface is now down [ 314.198574][ T9288] ceph: No mds server is up or the cluster is laggy [ 314.244496][ T5146] Bluetooth: hci2: command 0x0401 tx timeout [ 314.252096][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 314.273441][ T7737] bond0: now running without any active interface! [ 315.112747][ T9305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9305 comm=syz.0.811 [ 315.647962][ T9313] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 316.328100][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 316.764775][ T9322] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 316.875811][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.164560][ T9329] vxcan1: tx address claim with dest, not broadcast [ 317.240995][ T9332] lo speed is unknown, defaulting to 1000 [ 318.987034][ T9349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9349 comm=syz.2.822 [ 320.283689][ T9360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.740966][ T30] audit: type=1400 audit(1759355545.411:477): avc: denied { map } for pid=9374 comm="syz.4.828" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 322.300397][ T9391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.338238][ T9410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.393857][ T9431] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 326.672428][ T9436] veth3: entered promiscuous mode [ 326.744308][ T30] audit: type=1400 audit(1759355551.401:478): avc: denied { read write } for pid=9417 comm="syz.3.842" dev="sockfs" ino=24043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 327.100515][ T9445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.323580][ T30] audit: type=1400 audit(1759355551.991:479): avc: denied { listen } for pid=9450 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.514301][ T9456] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 327.856681][ T30] audit: type=1400 audit(1759355552.021:480): avc: denied { read } for pid=9450 comm="syz.2.852" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 329.125319][ T30] audit: type=1400 audit(1759355553.791:481): avc: denied { bind } for pid=9478 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.162993][ T30] audit: type=1400 audit(1759355553.791:482): avc: denied { listen } for pid=9478 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.273367][ T30] audit: type=1400 audit(1759355553.791:483): avc: denied { connect } for pid=9478 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.399178][ T30] audit: type=1400 audit(1759355553.801:484): avc: denied { accept } for pid=9478 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.472330][ T30] audit: type=1400 audit(1759355554.141:485): avc: denied { append } for pid=9491 comm="syz.1.864" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.514397][ T5927] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 330.573854][ T9506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.623310][ T30] audit: type=1400 audit(1759355555.291:486): avc: denied { bind } for pid=9505 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 330.678964][ T30] audit: type=1400 audit(1759355555.321:487): avc: denied { name_bind } for pid=9505 comm="syz.0.867" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 330.874425][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 330.889586][ T5927] usb 4-1: config index 0 descriptor too short (expected 1316, got 36) [ 331.021058][ T9512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.038931][ T5927] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 331.077097][ T9518] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 331.083179][ T5927] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 331.155782][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.168880][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.191954][ T9518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.201173][ T5927] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 331.293964][ T9519] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 331.315901][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.379148][ T5927] usb 4-1: config 0 descriptor?? [ 332.069370][ T9527] netlink: 256 bytes leftover after parsing attributes in process `syz.2.872'. [ 332.157177][ T5927] cypress 0003:04B4:BCA1.000F: item fetching failed at offset 2/5 [ 332.170793][ T9532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9532 comm=syz.4.873 [ 332.196672][ T5927] cypress 0003:04B4:BCA1.000F: parse failed [ 332.207496][ T5927] cypress 0003:04B4:BCA1.000F: probe with driver cypress failed with error -22 [ 333.067808][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 333.067823][ T30] audit: type=1400 audit(1759355557.701:489): avc: denied { write } for pid=9545 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 333.285850][ T30] audit: type=1400 audit(1759355557.751:490): avc: denied { view } for pid=9545 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 333.321475][ T30] audit: type=1400 audit(1759355557.941:491): avc: denied { ioctl } for pid=9542 comm="syz.0.875" path="socket:[24468]" dev="sockfs" ino=24468 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 333.352337][ T5820] usb 4-1: USB disconnect, device number 13 [ 333.607157][ T9557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.877'. [ 335.802463][ T9590] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 336.960031][ T9600] vxcan1: tx address claim with dest, not broadcast [ 337.133807][ T9601] lo speed is unknown, defaulting to 1000 [ 337.397117][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 337.444671][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 337.700394][ T9610] program syz.0.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.880366][ T9611] program syz.0.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.475239][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 340.805731][ T9666] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 340.817825][ T9666] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 340.826301][ T9666] CPU: 1 UID: 0 PID: 9666 Comm: syz.1.904 Not tainted syzkaller #0 PREEMPT(full) [ 340.835481][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.845509][ T9666] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 340.850602][ T9666] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 ea d5 84 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 340.870189][ T9666] RSP: 0018:ffffc90005607bf0 EFLAGS: 00010283 [ 340.876243][ T9666] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffc9000f0b2000 [ 340.884297][ T9666] RDX: 0000000000080000 RSI: ffffffff88364326 RDI: 0000000000000005 [ 340.892249][ T9666] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 340.900198][ T9666] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90005607d88 [ 340.908153][ T9666] R13: ffffc90005607d88 R14: 0000000000000001 R15: ffff888057623000 [ 340.916103][ T9666] FS: 00007f4f8d3616c0(0000) GS:ffff888124f71000(0000) knlGS:0000000000000000 [ 340.925014][ T9666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.931577][ T9666] CR2: 00007f42b3b156c0 CR3: 0000000058824000 CR4: 00000000003526f0 [ 340.939530][ T9666] Call Trace: [ 340.942789][ T9666] [ 340.945700][ T9666] ? __pfx_bcsp_recv+0x10/0x10 [ 340.950460][ T9666] hci_uart_tty_receive+0x254/0x7e0 [ 340.955647][ T9666] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 340.961351][ T9666] tty_ioctl+0x580/0x1680 [ 340.965661][ T9666] ? __pfx_tty_ioctl+0x10/0x10 [ 340.970406][ T9666] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 340.977247][ T9666] ? hook_file_ioctl_common+0x145/0x410 [ 340.982780][ T9666] ? selinux_file_ioctl+0x180/0x270 [ 340.987963][ T9666] ? selinux_file_ioctl+0xb4/0x270 [ 340.993065][ T9666] ? __pfx_tty_ioctl+0x10/0x10 [ 340.997813][ T9666] __x64_sys_ioctl+0x18b/0x210 [ 341.002559][ T9666] do_syscall_64+0xcd/0x4e0 [ 341.007046][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.012936][ T9666] RIP: 0033:0x7f4f8c58eec9 [ 341.017334][ T9666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.036928][ T9666] RSP: 002b:00007f4f8d361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.045320][ T9666] RAX: ffffffffffffffda RBX: 00007f4f8c7e6180 RCX: 00007f4f8c58eec9 [ 341.053267][ T9666] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 000000000000000d [ 341.061218][ T9666] RBP: 00007f4f8c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 341.069190][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.077136][ T9666] R13: 00007f4f8c7e6218 R14: 00007f4f8c7e6180 R15: 00007ffdbd772328 [ 341.085089][ T9666] [ 341.088085][ T9666] Modules linked in: [ 341.092799][ T9666] ---[ end trace 0000000000000000 ]--- [ 341.115111][ T9666] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 341.314348][ T9666] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 ea d5 84 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 341.315711][ T30] audit: type=1400 audit(1759355565.981:492): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 341.374183][ T9666] RSP: 0018:ffffc90005607bf0 EFLAGS: 00010283 [ 341.389585][ T9666] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffc9000f0b2000 [ 341.434536][ T9666] RDX: 0000000000080000 RSI: ffffffff88364326 RDI: 0000000000000005 [ 341.484327][ T30] audit: type=1400 audit(1759355565.981:493): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.507045][ T30] audit: type=1400 audit(1759355565.981:494): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.528620][ T30] audit: type=1400 audit(1759355565.981:495): avc: denied { add_name } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.590205][ T9666] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 341.666428][ T9666] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90005607d88 [ 341.676591][ T9666] R13: ffffc90005607d88 R14: 0000000000000001 R15: ffff888057623000 [ 341.686375][ T30] audit: type=1400 audit(1759355565.981:496): avc: denied { create } for pid=5177 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 341.708996][ T30] audit: type=1400 audit(1759355565.981:497): avc: denied { append open } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 341.736602][ T9666] FS: 00007f4f8d3616c0(0000) GS:ffff888124e71000(0000) knlGS:0000000000000000 [ 341.745844][ T30] audit: type=1400 audit(1759355565.981:498): avc: denied { getattr } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 341.769173][ T9666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.776082][ T9666] CR2: 00005555560c3608 CR3: 0000000058824000 CR4: 00000000003526f0 [ 341.784958][ T9666] Kernel panic - not syncing: Fatal exception [ 341.791217][ T9666] Kernel Offset: disabled [ 341.795523][ T9666] Rebooting in 86400 seconds..