last executing test programs: 55.521783286s ago: executing program 1 (id=96): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = dup(r1) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0xeffdffff, 0x0, 0x0, 0x0) 54.761443188s ago: executing program 1 (id=99): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101800) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_map={0xc, 0x7, 0x9, 0x8, 0x9, 0xf}}) ioctl$sock_proto_private(r0, 0x8b24, &(0x7f0000000080)) 54.441450934s ago: executing program 1 (id=103): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x3c, 0xfc, 0x0, 0x3}, {0x6, 0x2, 0x54, 0x7}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000004c0)={[{@favordynmods}]}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x56, 0xa, 0x0, "3205c54603ffffffe2090000022c1e070000000028981b20d6c8bfb8678f00"}) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0xf2}, 0x2) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000040)={0x0, 0x405, 0xfffffffe}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x7c5, 0x1, 0x0, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x6, 0x6, 0x4, 0xfc3, 0x7, 0x2b, 0xc, {0xffff945a}, 0x3, 0xf1}}) 50.177213626s ago: executing program 1 (id=112): syz_open_dev$hidraw(0x0, 0x0, 0x10f242) socket(0xa, 0x3, 0x3a) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x48}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x28) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x2004c8d5) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102376, 0x18fe8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) 47.702774337s ago: executing program 1 (id=120): socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180)=0x38, 0x4) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2002, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket(0x10, 0xa, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, 0x0, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0x2, 0x101000) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, r5, 0x0, &(0x7f0000000040)={0x98f903, 0x8000, '\x00', @value64=0x7fffffffffffffff}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000001c0)={0x0, 0xc}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000003bc0)={0x18, r8, 0x1, 0x0, &(0x7f0000000580)=[{0x4000000000009, 0xfffffffffffffff7}]}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r8, 0x0, &(0x7f00000002c0)='W', 0x1, 0xffffffff}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) socket(0x200000000000011, 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000080)={0x0, 0x16bc}) 46.357354673s ago: executing program 1 (id=123): socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$nl_netfilter(r2, 0x0, 0x1000) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) 45.331544048s ago: executing program 32 (id=123): socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmsg$nl_netfilter(r2, 0x0, 0x1000) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) 11.587175174s ago: executing program 4 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (fail_nth: 6) 9.838725881s ago: executing program 4 (id=236): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)=0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x1002808, 0x0) r7 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r8, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r7, 0x0}]) 9.257461387s ago: executing program 5 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e7465720004000280080003400000011014000000"], 0xcc}}, 0x20050800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x7f, 0x7, {}, {0xee01}, 0x2, 0x2}) syz_open_dev$admmidi(0x0, 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000002e6, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000280)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) syz_open_procfs(r4, &(0x7f00000000c0)='uid_map\x00') r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) 7.841431705s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000141000000180017040000000000faff6474683a76"], 0x34}}, 0x0) (fail_nth: 8) 7.8056629s ago: executing program 0 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r1, 0x201, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x44800) r3 = socket(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r3, 0x0, 0x0, 0x2, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x4, r3, 0x0, 0x0, 0x6, 0x0, 0x2}]) 7.299409542s ago: executing program 5 (id=243): ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{&(0x7f00000006c0)="d6b5", 0x2}, {&(0x7f0000000280)="d51f75267bbfca63471230134926041e819fbcbe0974c2084ed67aa2e8b39cd6c9f050c178f8dffd8a16d6a2357aaf72912636b2b7", 0x35}], 0x2}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f6", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c044}, 0x0) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r9, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x44814) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 6.825419384s ago: executing program 3 (id=245): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async, rerun: 32) r0 = syz_io_uring_setup(0x7d08, &(0x7f0000000400)={0x0, 0x20000, 0x8000, 0xffffffff, 0x3de}, 0x0, 0x0) (async, rerun: 32) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @local}) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) select(0x40, &(0x7f0000000000)={0xe, 0x92f, 0x9, 0x7, 0xd82b, 0x882b, 0x7, 0x3}, 0x0, 0x0, 0x0) (rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[]) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write$sndseq(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 64) inotify_init() (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x20, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 64) ioprio_set$uid(0x3, 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 6.749402409s ago: executing program 4 (id=246): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x1, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0xc5, 0x6, 0x2, 0x1, 0x0, "f700", '\x00\x00G\x00', "050000f2", "fcffffff", ["50d5c2a7c50200ace40000b6", "808e0000000000eb0f00", "0c436d743c97c443084000"]}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x4, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0x2400c850) 6.733697504s ago: executing program 0 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e7465720004000280080003400000011014000000"], 0xcc}}, 0x20050800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x7f, 0x7, {0x0}, {0xee01}, 0x2, 0x2}) syz_open_dev$admmidi(0x0, 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000002e6, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000280)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) syz_open_procfs(r4, &(0x7f00000000c0)='uid_map\x00') r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0xe24) move_pages(r2, 0x3, &(0x7f0000000140)=[&(0x7f00006d7000/0x2000)=nil, &(0x7f00004f6000/0x7000)=nil, &(0x7f0000284000/0x4000)=nil], 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getitimer(0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102393, 0xfffffeef, 0x1000000000) 6.109078693s ago: executing program 4 (id=248): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f010000000000000000000905820200020000d409050302000200000013f55bf3b024a1427979efac85b66ae48746761cf84ab2e679aefd1139c5ebe9b5c7c98d3a17b579a7e5ba7da8b7d3ca36ac4b4e5ccbeada676ecfad9f33858dc646815347ce144b86f0710abe6d9f2864b100c4424f53feaa4c7704c2e58aa2bbc578afe77513f91b3d027f58a9a174f37655938364db18fd6f5625887ea18fa8ef44171b8c6dd94d55bbf9fba4cd4125c02b019b04e7ced372014e0ec28b936b5eda0b6c7e9b43d400ee86851a3219e88a4ec8a6442697b7de52ac2d05514d8661d25239ace1c04452e334d081b688c725a71471306722"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000004a80)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0xa) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000002000000000000700000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb00000000"], 0x104}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) openat$cgroup_ro(r7, &(0x7f0000000400)='cgroup.stat\x00', 0x26e1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32], 0x2b) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 6.057555279s ago: executing program 3 (id=249): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) 6.036843152s ago: executing program 2 (id=250): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x0, 0x7, 0x1a, 0x4}, 0x9) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x244, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x1d, 0xffffffffffffffff}]}, 0x28}}, 0x0) 5.403453018s ago: executing program 0 (id=251): ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000005c0)={r1, 0x1, 0x6, @local}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff78c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 5.303273861s ago: executing program 3 (id=252): ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{&(0x7f00000006c0)="d6b5", 0x2}, {&(0x7f0000000280)="d51f75267bbfca63471230134926041e819fbcbe0974c2084ed67aa2e8b39cd6c9f050c178f8dffd8a16d6a2357aaf72912636b2b7", 0x35}], 0x2}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f6", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c044}, 0x0) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r9, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0xb4, r9, 0x482d3cb6909464d5, 0x78bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80002}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20044061}, 0x44814) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) 5.244065953s ago: executing program 5 (id=253): syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0), &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x93cea4bee562f1e5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc, 0xb5, &(0x7f0000000a80)=""/181, 0x41100, 0x4c, '\x00', r0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x9, 0xf}, 0x10, r1, 0xffffffffffffffff, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x4, 0x3, 0xd, 0x8}, {0x4, 0x1, 0xb, 0xa}, {0x4, 0x1, 0x3, 0x1}, {0x0, 0x4, 0xa, 0xc}, {0x5, 0x3, 0x9, 0xc}, {0x5, 0x1, 0xd, 0x7}], 0x10, 0x5, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x42, &(0x7f0000000600)=""/66, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x3, 0x7, 0x9a}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740), &(0x7f0000000780)=[{0x1, 0x2, 0xe, 0x7}, {0x1, 0x4, 0xe, 0x5}, {0x4, 0x5, 0xa, 0x1}, {0x4, 0x4, 0x10, 0x7}], 0x10, 0x6, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={0x0, 0x0, 0x8}, 0x18) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8341, 0x0) write$nbd(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000000000000020"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0xc, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000080)='GPL\x00', 0xffff0001, 0xf, &(0x7f00000001c0)=""/15, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2, 0x2, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000980)=[{0x4, 0x4, 0xe, 0x3}, {0x4, 0x1, 0x9, 0x9}], 0x10, 0xa, @void, @value}, 0x94) 4.869381686s ago: executing program 2 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e7465720004000280080003400000011014000000"], 0xcc}}, 0x20050800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x7f, 0x7, {}, {0xee01}, 0x2, 0x2}) syz_open_dev$admmidi(0x0, 0x100000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000002e6, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000280)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) syz_open_procfs(r4, &(0x7f00000000c0)='uid_map\x00') r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) 3.803924785s ago: executing program 5 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x80086601, 0x0) 3.680123234s ago: executing program 0 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001a40), 0x1003, r4, 0x7000000}, 0x38) 3.541265744s ago: executing program 5 (id=257): openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@gettaction={0xd0, 0x32, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1e}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf5f}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7672}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xe}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xe43}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x5ff7e458017ca0bf, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = dup(r0) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x5c8, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 2.501151665s ago: executing program 0 (id=258): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = io_uring_setup(0x355a, &(0x7f0000000140)={0x0, 0xd9dd, 0x100, 0x2, 0x4000020, 0x0, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000400), 0xe) listen(r4, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) socket$rds(0x15, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x73) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2.486226264s ago: executing program 3 (id=259): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x1000007, 0x8, 0x51424752, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3}}, 0x100}) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 2.443289548s ago: executing program 2 (id=260): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x12, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 1.55331211s ago: executing program 3 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e7465720004000280080003400000011014000000"], 0xcc}}, 0x20050800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x7f, 0x7, {0x0}, {0xee01}, 0x2, 0x2}) syz_open_dev$admmidi(0x0, 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000002e6, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000280)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) syz_open_procfs(r4, &(0x7f00000000c0)='uid_map\x00') r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0xe24) move_pages(r2, 0x3, &(0x7f0000000140)=[&(0x7f00006d7000/0x2000)=nil, &(0x7f00004f6000/0x7000)=nil, &(0x7f0000284000/0x4000)=nil], 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) getitimer(0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102393, 0xfffffeef, 0x1000000000) 1.552642491s ago: executing program 2 (id=262): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) (fail_nth: 7) 1.551421523s ago: executing program 5 (id=263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x15, 0x1, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0}, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f00000001c0)=0x9, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @gue={{0x1, 0x1, 0x1, 0x69, 0x100, @void}, "357fb5bb695e10ddb2677ed81a9ec0d8ab13009e4a8ef6be45745509e8a3bf2f70ea2c7d"}}}}}}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) io_setup(0x1a22, &(0x7f0000000000)=0x0) r6 = eventfd2(0x4, 0x1) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r4, &(0x7f0000000500)="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", 0x1000, 0x3, 0x0, 0x3, r6}]) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000400)=0x3, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000000180)={0x4, 0x8, '\x00', 0x1, &(0x7f0000000140)=[0x0]}) 1.444088099s ago: executing program 4 (id=264): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb00"], 0x48}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x228a40, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000340)=""/101, 0x65}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000000)=""/19, 0x13}], 0x3) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000002c0)="d60f005b410f201666baf80cb8eef04f8bef66bafc0cb000eef20f12489fb9e6020000b878b83e3fba000000000f30c4e129fbb7680000009a010000005e00f267f20f23d40f20e035000400000f22e0", 0x50}], 0x1, 0x74, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004094}, 0x0) 700.981342ms ago: executing program 3 (id=265): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) utime(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0xb, 0x100, 0x4, {0x101, 0x9, 0xff, 0x3}}) 633.37101ms ago: executing program 2 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='squashfs\x00', 0x88400, &(0x7f0000000100)='(\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = dup2(r4, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="99742bbd7000f7dbdf2515000000140001800e0001006574683a766c616e30000000"], 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) 18.678054ms ago: executing program 0 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (fail_nth: 8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ipvlan1\x00', {0x3}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xb486b5b2533a373f, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_0\x00', {0x3, 0x0, 0x41, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766965056a0259248f8e81428166156fc022178b6421728ca2ae6a7906856c0e7b6255f0c9675cb5464b1a4784daeb8ec1b19f1409000000000000000", @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,k']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"1a17924ab218eacb15a3fccf929e2dd2497903c1f853d95b995c65e99449ff953fa11c7723b2149ecdaa7f833f60e13b19a66e963f7e8da4297ebbfdda5b36fb4d01bd02e6c652dc4d99e2cb82c2a1d4a45e4c89ba9994e82f854bbc34a40b3a58aa256c9b4512fbf91b9846446c4909e4ec53982e7d7fd11ee0bdeab0bb4c469c9665dde8cb58f0ca148223b6cc4e2f306cfbeccedec8db5212f2fc4e14f836c68bdace4db1afbde9d463e5ac24567925b5fdf0e3af1a52dbd7669fe9227302c8f635bc2ddbf5bd7dccd7b92a9bd5c7363375a57851c2bc72509f2005f138f5a59cf85e9ddb1c972c89d50806e8941b7059cd3eca77527a7f20af70841b4d6f026614bdbb276a6814cc74d91856b968c5fdb52674d892a90d01ab91841b6811def78bdac9bc6f9df2598569fbdfef75079832b2750801dc83fd1987713c61136ac9e5f2f7e67f302109bb9a7fea75290b506a89a19d7e0e472937a8c9ecfe16ef6eb88c7a88a060756196d55d6a3d3f7cdf9915d22b6b3af69ec55017b821ec0621e8a59414efc2b46977a85846b53ae75a350947afcafbdef7233cc371bc2a6f29c0315b352ac2741c81df534303ddb30a4408db5679d05d245259c245c9d7f861711cc287cfd0462b948512623b921060386c587fd166df29e71ecfc8ed90031e95b2af1406b5ae73f6084e39e88194e3d37dc801982656b5b66342d74100f9f5b8c94c1e91b626bbf426a07b4be91dbdb76a6e40d0b788f89359e462e69bc4499fd4f9aa1e7f0c3f73a996b6ecef606c7651286e1f18a6823eed7191cd542057eaaf09aa32e8ce370c09050278b85fd359b8ca23e66e9d294ec57b3ddd90409d9b1ca28c6993b244f8ca46f6bf478ff22fb1df53e33abdda4b2b1e5cff7de19957bdc8e7ca39e4762204b1f9f33b9375b7282422b91841706751038e42023ba45c1cd0998c1794c1c2a5ff65466189bbb27bcbf01e5a48bfd8b6845f7d5c87d977df4ded5273ebf56b96c50b4eadc44bfaa0994259eeb1031644415fa9d729753d2138b06f9b7b624d9eeb1ef71dfdff0b639078f058c7a070451c4670af0c6eb1202f77be82faba9b6287995066b5f7e59b7967706d8d8c5bde48137e13df537ae54664fe4e8460b1bdf5b92a1dcf39ee1726bc6690d0ac5f799bcfab918c59cb132c45054ba17b8a44d505ad3eaeee95b4275b25b2087da8902552727a1e739014df348cfa3a1102661c35a6a38df6c410f5343577955dd57de5af089e3f1bcdf96d4ef1d5944243470b0ed10616144cccc5cac44e36fefd9441120c5d047867af0ea353da21fc0ae73b78b84d53a62efeb94ea8d441cc698c92fd7b36cf41472d036c5093bbdf943620c29ffa3b21ef4a0bb9274912b046834ee6f855ceadf18fb488040d5829ab6e8bf69a90315f7f84d002ac4e929e9f1010a8486746bd316799ba3a65744980c388202324ba50768c77a8481ba74d135da7507048c82714a8234837b69922126e4084a68f7418bfd26417cade786c7f8185e2492e3b64eb9d2c2c721504c7b4aeb383503f745fd69315c56b5b0158decd1b1606a63366b7e2d2b9124b6efca4480c703c8f37d6ddff55b0ec15f2ce6be6c902d06aec2ccabeba13b442b608076c33d19e690ab66cf6678d679758d22fb5d8d963f25d00c45576f8b2938543080297b9cb6c305e3131d2f412f00370c285251909f8ebefc3d18a23e25a183997b08251450b29fff32781e6a70e6e070ab3921f3f809392deb732d6f30cc034b5f77d41218bca86d515b16da0457dbf7aaefdcef9d5358e7b4f1e5d1a410f55449e765609d122f938fd57b71482244dff0523067cabfd322fc47aca1c331112e3d969f5fe3594c3c7adea7c36e9b9af6754cdea5ccf05b139f783d4b24540c50a6a9f7dff472d47c87c151d8439b5740cd1f423335dae2680050bd44766159cba66666b7dbc9e190130494327a0d8c9dbed5c8b831ce2b2bb236353ff7175a48b61a0f3209fa3db44f07a21a485ef1682a33cdf632ac2d6ca993b6cd90913e31704bb851711e1f2b5ebb19baaba102dd42d550933e9dfc17311665fef4d0206d7debbcbbd97efafffb905bf9a77b8eeb67d5f8bef8526f6f8607672bb3c50b14e16c264265594e05fa481f724290abdc9f60a899f26033236e3b90548c24288a7b627b51c4d7c638c359ec6325b0d79e1d69cf18cd9136a263b6aa84ad062b9831fc7c201b7ccec7d3b7ea2132ee4579632bf614bcde285527c36ef8a8e12651ef34a677a8d2f84360afa2f2245e4e0d61a12e8e446045fae61375082f983363795f11848edad24b3f7ae53f0eeb329fa62b6d7b446e3b2c1257981f9c0c3ea371c71021af834a285203b2e3177ddf5251044ea215c048f78701dec36a94ca3c435278d1fd889996adf5ea7c8db62f2b1331bc22c4b7798d587a5c4e619b7b576e19d92996bc0bdc0c8c15374e11b6eeda0e18b35aac4b96db9cdba025080bf5bea4ffdf4fa3c93ec5feede0a140f7f6727ef255783565935d59d348aaa6d12c060afd5f6d084346309d8cbf54b33050ecccf30ae083c4034165880214a94a5296427e2fcb6d90692a82212b6b8d86c6d163f0643944aaba4af1171aed463994f1374e1ec1654b89b04e9d635074e8d131bc2443daf1caad455671470329a287f4c711cb907403d5c05184cd3a647823b5b9c6dc4451fdde92dc1cb87010197026458b40d4809ab60aca1af6bb3702a3e0506cdd21faa6d9909f4ed74723de75fc48d44314fa3cc0c8e8ea226ec1d5875b9595aeacdff0a9f75b4a60dde781c58179f997ecb6479c91ecacc65bfe293a2d26c21ae7c1d7be1241cc1c4ea86a6cf8d93012bd98508aae8db723ff167026298cab227b7d0062c27ccc8e81df7268423ad063638760b44e77147ee9bd84140166ae2bfd592f845ca68c719f7520ae3c9988cc89db73bf93ad6f2f7d9394b2288f0176723acd167081ade4e066a26832f7b655cd874aa5026a7369bb9912c90599d1407f0488a9c540a31997890f5433bd1df91ba13a9e0721c9a707eac7cff1c3efef6cd716779c7ad631c3560caa2031d9d2591329c1867d0d5f96b5897cac2c6a381f0ce5c27969c2b3e7d188e1e896d815b01a3e177933817325953140272ad718a36ae522d43de109ba92255ee66d2a14897f2b2014dc9a495c108727e0eef54df617e269e43a0c48d28a91aaf14d58719e21ea39c1c534e39a1dfabb61377b55d2f69fe79c7d5111b8b952c388925ea8ab1503ae68bce95a34a10a85aa0e5da52add14b93eaac5861a6504e23dda8034e809253c1071ddda934663faac454cd378c5725f5c6f4d943779994357185e512a4b6993156e624f25d86d24e7254d3e9b231aa80ed5a32e108cb528d402f93e58c25ac937420ff7dcd7d9ec2126c7fe7cefa47c038f23de40523d5e026fe3bb4cfd3040f9bd9631cf5a2cde1e20a6032703cd64c2ad97ea95d05a7aa3ea3b3b9d5a86961116dd1338c0a2caae0ceab3178ac7736dfa8a949cd81d261748e6678cb730b57468fb2b7e22c5eb08ad496e76775dce0c31950a596580ad7d6c3fd9ce90dded340f20b77fe53e81fb6e2a7a6c450b8ac9009c7c077893f704457a90401fb758c0769fbfd38e40ae692e410b889bbf0b09a32dc731b6768c0fa3963a5b6279b6a5db611174339f3218fff567f6cfb7377ddc8e2c730da35cc3ec680a6bc95010dd03834caab7afb2c0023ad9ce3aae3c0fd1ece42ea840bf5fc798a0b5fbe7692f13549cdba4a0b68f722ef6877856a76fc3c39f7cfd760675a9f341d9f09f381972be9171e50455ed13e665e61a03b0c2a79276a871c25fc5c486639a71a8dfdf36174373b8995014752aba3026045be6b43074ac3824d687bbf5f6544228cea52791828f54980ee9f728534ea32edd205aaace717adcf61ce28f92719048d44b09812bcfd2d22cc9d7a45ed6b4634756f6b3189908c71728c373ea94aa5c74ce4a73c20138b8cb21db6e2dfb35329b86b1805a5208dd370b8342ca8aa3cbd3e7a3ec79d7b8ee677b04e19c524ddc6de0b22443ac15de908f61719399d0f9890ca2b0283a7db914944f424af10ba0ec9e3e253c060d7b28552eaae5eed1e906f8f93c2195293deabdad6cb38ddab51603e4a96ef1e086de911fb716ffbca467294d9e66e5d0f8225bc28d6c074c4ffba76706f61b0b386b7e4b6500a15fad291f34f6c84f1596a97512f31196a529a7a5725437c038e17d531da3838c8aef3bade6bc1d4c7624560d4fba72e5f8be2c5dc905e1e4bcb2aa7eddb275408ef4288ac69c7a18ae58fb26c2f5a6964f051b81d2e426fc2a5d8617050341b96d5a746e3419fbe94bd3752403868b655c2dba6f48ef109a2e6ec0041842fae52bfab70481ecfe8d27f3d5e444f1b941d871c8057cbe35df68665bc3aadea02d203b106d1179a428daa7d9fea9dbddd8955bb289a92ec790de74cd6a1edf925ab85471633dedf8ba46abe456963a2381addce2aa16c06dd80bb54d8e53d7c82607916af175061da29122afde8687add6b6f42233b76a1164893dcc1ec3dcf935576d2d0f3ab3b1adbace086da915234b4f9bad0afc2915608fc4f6611dc3b91d7e0e48cb0a0f3fdc70ef70ef82043afbd3325f0f6186390ab28ca9f0009184637530d79f0c5a77c6e912afbe6533988f543fc6c02d3d44fbdb0e2ebfad2680184f1ed451991667df958a71fb41cf4367bdb931389ea8b6340e225b312a09dadd8e2ac2d200db6e75323d48c73c6b819e13f92b01bf405e796a2e10b863e773598abcbcc196987e18b19530337809b56480778207103a12acfff1c0ad62846088251a1a0d0d6b300059a99698c84ccac78d53eb32e3984001978db7679960b4d75d71b49696909826c66320526fe02a060265821d15b8b2337121a201402a118ec03ff0d4f3dfa48f2dadd20b510ecdf4e6440b5b2466b9bf28e32327189f0405245694a6371dbe4eae7a8293cdc15193c284123d64690120634f808096a8f3f7a04a5bac9dd86c09f2e4e87c7d7c98d0b370e84ea5f265730f5480eb1375d4f82c7d4efbb6e58c5a92848331b2becd2531f6c456b5d0e690b102dd8faec55bde56f95727f4abf52c58543faaeb9cefd39bba788bd7e2b02b27ecbc1679a1ac00823c83e1ae29690cd25544d3ae0a8db25e963e9fb5bd94987637ac3546b9b312bf04d5c6211c135e806525d423fde9ccb5ef7962ec1e056e6f29adaeebb331f6c234586d1fe21577f56d620c6942a29d4915772144cc60008d1236db21100d5a3112c29396b9e18cdb5b104bed2df2b6ea72c9aa03bb6082f3eb07f0eae359864967a749492d21005b0d39c9613c20b1e21700ab66a4f5ca03ec08d67b95f759252d758743820ba243032e1708447fbaebc27e1316af4cf547cef3ac4966a1f04dd07012f257a0204107c23a0046b12493d9784b24dc561c1f88e591056bcc3b338ab1de65e5ad578021f26f93e9b12f00b5f8c8ae2db6b7b8f254303c7ff06514735974e65fb9a93dc79b115a12310040490ca11ef315340af104e20a2e22dcd132f7d7a61d9d3a12e832ee048a2170dbe03d747ed7402180eb964fde0ecb77e778b18a4e5a83479bb7e0ea0a7d5145ffed4607bd7e6b8f961625d5e3dcac2d4a05e71dc9c2e52195bd55aed4e6749dc1c329e2cda966d18e9bf882c05db627c1047fc71533bbba2c8a83d04db5bad6da349a9ad1992eb88e0274d32a16137e2396ad973c0ecbbc2d243e68b6959bf9b", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(0xffffffffffffffff, r7, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$PTP_PIN_SETFUNC(r8, 0x40603d07, &(0x7f0000001580)={'\x00', 0xba60, 0x1, 0x4}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.203' (ED25519) to the list of known hosts. [ 57.537605][ T30] audit: type=1400 audit(1750651572.069:62): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.541451][ T5797] cgroup: Unknown subsys name 'net' [ 57.560416][ T30] audit: type=1400 audit(1750651572.069:63): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.589788][ T30] audit: type=1400 audit(1750651572.119:64): avc: denied { unmount } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.768476][ T5797] cgroup: Unknown subsys name 'cpuset' [ 57.776971][ T5797] cgroup: Unknown subsys name 'rlimit' [ 57.961748][ T30] audit: type=1400 audit(1750651572.489:65): avc: denied { setattr } for pid=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.994569][ T30] audit: type=1400 audit(1750651572.489:66): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.019877][ T30] audit: type=1400 audit(1750651572.489:67): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.041510][ T30] audit: type=1400 audit(1750651572.489:68): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.062107][ T30] audit: type=1400 audit(1750651572.499:69): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.070458][ T5799] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.087279][ T30] audit: type=1400 audit(1750651572.499:70): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.118734][ T30] audit: type=1400 audit(1750651572.539:71): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.019987][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.881093][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 62.881109][ T30] audit: type=1400 audit(1750651577.409:78): avc: denied { create } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.965375][ T30] audit: type=1400 audit(1750651577.409:79): avc: denied { read write } for pid=5807 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.978207][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.009899][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.033099][ T30] audit: type=1400 audit(1750651577.409:80): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.058152][ T30] audit: type=1400 audit(1750651577.459:81): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="socket:[4440]" dev="sockfs" ino=4440 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.083451][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.091345][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.103756][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.112041][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.120256][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.128382][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.136304][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.144472][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.152488][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.156191][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.164157][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.167785][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.175187][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.181665][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.187613][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.194886][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.202571][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.209428][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.217811][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.233709][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.234574][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.242015][ T30] audit: type=1400 audit(1750651577.759:82): avc: denied { read } for pid=5811 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.276157][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.276215][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.289754][ T30] audit: type=1400 audit(1750651577.759:83): avc: denied { open } for pid=5811 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.338342][ T30] audit: type=1400 audit(1750651577.759:84): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.606990][ T30] audit: type=1400 audit(1750651578.139:85): avc: denied { module_request } for pid=5811 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.686723][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 63.743244][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 63.848506][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.858441][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.865919][ T5811] bridge_slave_0: entered allmulticast mode [ 63.872923][ T5811] bridge_slave_0: entered promiscuous mode [ 63.908491][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.917130][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.924302][ T5811] bridge_slave_1: entered allmulticast mode [ 63.931286][ T5811] bridge_slave_1: entered promiscuous mode [ 63.969350][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 64.006641][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.014663][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.022120][ T5815] bridge_slave_0: entered allmulticast mode [ 64.029298][ T5815] bridge_slave_0: entered promiscuous mode [ 64.047288][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 64.061076][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.068499][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.077425][ T5815] bridge_slave_1: entered allmulticast mode [ 64.085033][ T5815] bridge_slave_1: entered promiscuous mode [ 64.101249][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.134948][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.169875][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.194405][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 64.206149][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.218012][ T5811] team0: Port device team_slave_0 added [ 64.246768][ T5811] team0: Port device team_slave_1 added [ 64.316885][ T5815] team0: Port device team_slave_0 added [ 64.323373][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.330407][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.356559][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.369565][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.376855][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.403576][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.422327][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.429487][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.436820][ T5814] bridge_slave_0: entered allmulticast mode [ 64.443485][ T5814] bridge_slave_0: entered promiscuous mode [ 64.454777][ T5815] team0: Port device team_slave_1 added [ 64.465216][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.472388][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.479544][ T5807] bridge_slave_0: entered allmulticast mode [ 64.486656][ T5807] bridge_slave_0: entered promiscuous mode [ 64.493507][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.500808][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.508066][ T5814] bridge_slave_1: entered allmulticast mode [ 64.514708][ T5814] bridge_slave_1: entered promiscuous mode [ 64.542619][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.549951][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.557219][ T5807] bridge_slave_1: entered allmulticast mode [ 64.563850][ T5807] bridge_slave_1: entered promiscuous mode [ 64.582637][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.589666][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.615807][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.628312][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.635251][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.661179][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.724082][ T5811] hsr_slave_0: entered promiscuous mode [ 64.730709][ T5811] hsr_slave_1: entered promiscuous mode [ 64.740186][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.751580][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.763384][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.781625][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.789385][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.796669][ T5819] bridge_slave_0: entered allmulticast mode [ 64.803620][ T5819] bridge_slave_0: entered promiscuous mode [ 64.812726][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.829927][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.837113][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.844222][ T5819] bridge_slave_1: entered allmulticast mode [ 64.851241][ T5819] bridge_slave_1: entered promiscuous mode [ 64.886821][ T5814] team0: Port device team_slave_0 added [ 64.924151][ T5814] team0: Port device team_slave_1 added [ 64.954071][ T5815] hsr_slave_0: entered promiscuous mode [ 64.960246][ T5815] hsr_slave_1: entered promiscuous mode [ 64.966846][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.974491][ T5815] Cannot create hsr debugfs directory [ 64.981959][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.994191][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.005552][ T5807] team0: Port device team_slave_0 added [ 65.013778][ T5807] team0: Port device team_slave_1 added [ 65.074799][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.081809][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.108140][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.134602][ T5819] team0: Port device team_slave_0 added [ 65.140948][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.148120][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.174864][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.187533][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.194486][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.220412][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.231668][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.238844][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.256468][ T5818] Bluetooth: hci1: command tx timeout [ 65.264860][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.290188][ T5819] team0: Port device team_slave_1 added [ 65.331667][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.338725][ T5818] Bluetooth: hci2: command tx timeout [ 65.344156][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.370034][ T5818] Bluetooth: hci4: command tx timeout [ 65.370090][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.375879][ T5818] Bluetooth: hci0: command tx timeout [ 65.386291][ T5822] Bluetooth: hci3: command tx timeout [ 65.400271][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.407401][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.433963][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.498456][ T5814] hsr_slave_0: entered promiscuous mode [ 65.504689][ T5814] hsr_slave_1: entered promiscuous mode [ 65.511363][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.519662][ T5814] Cannot create hsr debugfs directory [ 65.539018][ T5807] hsr_slave_0: entered promiscuous mode [ 65.545047][ T5807] hsr_slave_1: entered promiscuous mode [ 65.551249][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.558826][ T5807] Cannot create hsr debugfs directory [ 65.628994][ T5819] hsr_slave_0: entered promiscuous mode [ 65.635055][ T5819] hsr_slave_1: entered promiscuous mode [ 65.641423][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.649155][ T5819] Cannot create hsr debugfs directory [ 65.884202][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.913013][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.932918][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.947512][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.993020][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.018626][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.029854][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.041112][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.086452][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.109175][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.118712][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.129259][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.210156][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.237908][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.250206][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.264142][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.280297][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.325416][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.354263][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.361490][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.385613][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.407537][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.418960][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.426077][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.449407][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.459065][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.477817][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.523290][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.552902][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.564910][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.572026][ T3407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.593570][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.600705][ T3407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.621790][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.679341][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.691689][ T30] audit: type=1400 audit(1750651581.209:86): avc: denied { sys_module } for pid=5811 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.750300][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.761366][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.768569][ T3407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.780234][ T3407] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.787817][ T3407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.849748][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.856994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.879540][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.886674][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.910352][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.955095][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.042785][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.082956][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.090134][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.122695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.129846][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.162065][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.190443][ T5811] veth0_vlan: entered promiscuous mode [ 67.243817][ T5811] veth1_vlan: entered promiscuous mode [ 67.311825][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.336217][ T5822] Bluetooth: hci1: command tx timeout [ 67.343912][ T5815] veth0_vlan: entered promiscuous mode [ 67.374904][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.390891][ T5811] veth0_macvtap: entered promiscuous mode [ 67.399413][ T5815] veth1_vlan: entered promiscuous mode [ 67.416852][ T5822] Bluetooth: hci0: command tx timeout [ 67.416863][ T5823] Bluetooth: hci4: command tx timeout [ 67.422261][ T5822] Bluetooth: hci2: command tx timeout [ 67.430760][ T5818] Bluetooth: hci3: command tx timeout [ 67.450398][ T5811] veth1_macvtap: entered promiscuous mode [ 67.480394][ T5814] veth0_vlan: entered promiscuous mode [ 67.530883][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.554850][ T5814] veth1_vlan: entered promiscuous mode [ 67.565176][ T5815] veth0_macvtap: entered promiscuous mode [ 67.580533][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.594348][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.603681][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.612638][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.621614][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.634822][ T5815] veth1_macvtap: entered promiscuous mode [ 67.647601][ T5807] veth0_vlan: entered promiscuous mode [ 67.674035][ T5807] veth1_vlan: entered promiscuous mode [ 67.695232][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.705355][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.732550][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.837103][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.852679][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.861489][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.870312][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.889181][ T5814] veth0_macvtap: entered promiscuous mode [ 67.899767][ T5807] veth0_macvtap: entered promiscuous mode [ 67.912197][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.925391][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.940007][ T5814] veth1_macvtap: entered promiscuous mode [ 67.970342][ T5807] veth1_macvtap: entered promiscuous mode [ 68.004595][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.013645][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.038706][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.049636][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.067810][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.088250][ T30] audit: type=1400 audit(1750651582.619:87): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.txeGpU/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.096963][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.122819][ T30] audit: type=1400 audit(1750651582.619:88): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.154802][ T30] audit: type=1400 audit(1750651582.619:89): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.txeGpU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.186819][ T30] audit: type=1400 audit(1750651582.619:90): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.190474][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.222542][ T5819] veth0_vlan: entered promiscuous mode [ 68.232354][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.243411][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.244240][ T30] audit: type=1400 audit(1750651582.619:91): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.txeGpU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.252255][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.284159][ T30] audit: type=1400 audit(1750651582.619:92): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.txeGpU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.291522][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.320623][ T30] audit: type=1400 audit(1750651582.649:93): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.326463][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.347532][ T30] audit: type=1400 audit(1750651582.679:94): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.352651][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.384830][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.393624][ T30] audit: type=1400 audit(1750651582.679:95): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=6409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.393868][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.416314][ T30] audit: type=1400 audit(1750651582.679:96): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.442336][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.449913][ T5819] veth1_vlan: entered promiscuous mode [ 68.460588][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.588434][ T5819] veth0_macvtap: entered promiscuous mode [ 68.595233][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.609692][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.641951][ T5819] veth1_macvtap: entered promiscuous mode [ 68.710519][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.721962][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.734041][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.756999][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.773250][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.782932][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.792492][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.796319][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.803270][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.830519][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.838763][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.002538][ T24] usb 2-1: device descriptor read/64, error -71 [ 69.043712][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.053430][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.077387][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.103713][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.144457][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.163579][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.196160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.399920][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.401869][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.415901][ T5823] Bluetooth: hci1: command tx timeout [ 69.428774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.451462][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.496116][ T5818] Bluetooth: hci3: command tx timeout [ 69.496570][ T5822] Bluetooth: hci2: command tx timeout [ 69.501563][ T5818] Bluetooth: hci0: command tx timeout [ 69.512959][ T5823] Bluetooth: hci4: command tx timeout [ 69.576315][ T24] usb 2-1: device descriptor read/64, error -71 [ 69.593272][ T5942] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 69.617582][ T5941] mkiss: ax0: crc mode is auto. [ 69.686409][ T24] usb usb2-port1: attempt power cycle [ 69.738715][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.045949][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 70.076281][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 70.499104][ T5887] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 70.510321][ T24] usb 2-1: device descriptor read/8, error -71 [ 70.525786][ T5844] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.549471][ T5887] usb 4-1: config 8 has no interface number 0 [ 70.559309][ T5887] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 70.574357][ T5887] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 70.592770][ T5887] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 70.605986][ T5887] usb 4-1: config 8 interface 39 has no altsetting 0 [ 70.618155][ T5887] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 70.631287][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.717187][ T5887] usb 4-1: Product: syz [ 70.721402][ T5887] usb 4-1: Manufacturer: syz [ 70.743623][ T5887] usb 4-1: SerialNumber: syz [ 70.789775][ T5955] Zero length message leads to an empty skb [ 70.796658][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 70.796682][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 70.822773][ T5844] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 70.837944][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.846292][ T24] usb 2-1: device descriptor read/8, error -71 [ 70.849640][ T5844] usb 3-1: Product: syz [ 70.857766][ T5844] usb 3-1: Manufacturer: syz [ 70.867379][ T5844] usb 3-1: SerialNumber: syz [ 70.877715][ T5844] usb 3-1: config 0 descriptor?? [ 70.972023][ T24] usb usb2-port1: unable to enumerate USB device [ 71.059195][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.068911][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.092114][ T5844] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 71.327699][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.339774][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.497325][ T5823] Bluetooth: hci1: command tx timeout [ 71.926568][ T5970] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.470687][ T5823] Bluetooth: hci4: command tx timeout [ 72.476797][ T5818] Bluetooth: hci0: command tx timeout [ 72.482536][ T5818] Bluetooth: hci2: command tx timeout [ 72.488366][ T5823] Bluetooth: hci3: command tx timeout [ 72.498671][ T5887] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -110 [ 72.502743][ T5844] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 72.616747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.657533][ T5887] ipheth 4-1:8.39: probe with driver ipheth failed with error -110 [ 72.788748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.797522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.985024][ T5866] usb 4-1: USB disconnect, device number 2 [ 73.176041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.253440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.262844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 73.352189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.361132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.553604][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 73.553644][ T30] audit: type=1400 audit(1750651587.759:307): avc: denied { bind } for pid=5974 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.680827][ T5970] delete_channel: no stack [ 73.878681][ T30] audit: type=1400 audit(1750651587.759:308): avc: denied { setopt } for pid=5974 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.888195][ T5927] usb 3-1: USB disconnect, device number 2 [ 73.899166][ T30] audit: type=1400 audit(1750651587.759:309): avc: denied { accept } for pid=5974 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.923174][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.074977][ T30] audit: type=1400 audit(1750651587.759:310): avc: denied { write } for pid=5974 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.187326][ T30] audit: type=1400 audit(1750651587.769:311): avc: denied { read } for pid=5974 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.206342][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.408629][ T30] audit: type=1400 audit(1750651588.559:312): avc: denied { create } for pid=5977 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.568070][ T30] audit: type=1400 audit(1750651588.559:313): avc: denied { write } for pid=5977 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.587911][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.187099][ T30] audit: type=1400 audit(1750651588.559:314): avc: denied { nlmsg_write } for pid=5977 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.315914][ T30] audit: type=1400 audit(1750651588.789:315): avc: denied { create } for pid=5993 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.746339][ T30] audit: type=1400 audit(1750651588.799:316): avc: denied { write } for pid=5993 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.605457][ T6018] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 79.642093][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 79.642110][ T30] audit: type=1400 audit(1750651594.139:328): avc: denied { write } for pid=6028 comm="syz.0.24" name="tcp" dev="proc" ino=4026532980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.189207][ T30] audit: type=1400 audit(1750651594.169:329): avc: denied { create } for pid=6028 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.213648][ T6035] sctp: [Deprecated]: syz.1.25 (pid 6035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.213648][ T6035] Use struct sctp_sack_info instead [ 80.458809][ T30] audit: type=1400 audit(1750651594.169:330): avc: denied { bind } for pid=6028 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.498005][ T30] audit: type=1400 audit(1750651594.169:331): avc: denied { connect } for pid=6028 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.569508][ T30] audit: type=1400 audit(1750651594.959:332): avc: denied { write } for pid=6041 comm="syz.3.27" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.726678][ T6045] netlink: 2 bytes leftover after parsing attributes in process `syz.3.28'. [ 80.847819][ T30] audit: type=1400 audit(1750651595.379:333): avc: denied { create } for pid=6046 comm="syz.2.29" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.882618][ T30] audit: type=1400 audit(1750651595.399:334): avc: denied { ioctl } for pid=6046 comm="syz.2.29" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7817 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.334387][ T9] cfg80211: failed to load regulatory.db [ 81.342480][ T30] audit: type=1400 audit(1750651595.569:335): avc: denied { read write } for pid=6048 comm="syz.0.30" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.444543][ T30] audit: type=1400 audit(1750651595.569:336): avc: denied { open } for pid=6048 comm="syz.0.30" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.540226][ T30] audit: type=1400 audit(1750651595.679:337): avc: denied { setopt } for pid=6048 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.650601][ T6069] netlink: 2 bytes leftover after parsing attributes in process `syz.0.34'. [ 84.133371][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 85.928211][ T5932] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.972170][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 85.972185][ T30] audit: type=1400 audit(1750651600.499:350): avc: denied { name_bind } for pid=6122 comm="syz.0.49" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.197329][ T6127] ubi31: attaching mtd0 [ 86.202612][ T6127] ubi31: scanning is finished [ 86.207502][ T6127] ubi31: empty MTD device detected [ 86.575918][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.602743][ T6127] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 86.610572][ T6127] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 86.617918][ T6127] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 86.625092][ T6127] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 86.632614][ T6127] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 86.639567][ T6127] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 86.647660][ T6127] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2947655296 [ 86.657790][ T6127] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 86.668966][ T6130] ubi31: background thread "ubi_bgt31d" started, PID 6130 [ 86.678670][ T5932] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.688642][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.700504][ T5932] usb 4-1: Product: syz [ 86.707875][ T5932] usb 4-1: Manufacturer: syz [ 86.714072][ T5932] usb 4-1: SerialNumber: syz [ 86.724097][ T5932] usb 4-1: config 0 descriptor?? [ 86.886537][ T5932] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 86.967238][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.037491][ T30] audit: type=1400 audit(1750651601.559:351): avc: denied { write } for pid=6111 comm="syz.3.48" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.443160][ T30] audit: type=1400 audit(1750651601.569:352): avc: denied { map } for pid=6111 comm="syz.3.48" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.972371][ T5922] usb 4-1: USB disconnect, device number 3 [ 87.996433][ T30] audit: type=1400 audit(1750651602.429:353): avc: denied { map } for pid=6111 comm="syz.3.48" path="socket:[8020]" dev="sockfs" ino=8020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.044191][ T6121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.50'. [ 88.062741][ T30] audit: type=1400 audit(1750651602.429:354): avc: denied { accept } for pid=6111 comm="syz.3.48" path="socket:[8020]" dev="sockfs" ino=8020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.179397][ T6148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.56'. [ 88.189556][ T6148] netlink: 72 bytes leftover after parsing attributes in process `syz.0.56'. [ 88.488555][ T30] audit: type=1400 audit(1750651603.019:355): avc: denied { watch } for pid=6154 comm="syz.0.57" path="/13" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.510529][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.519987][ T6156] ALSA: mixer_oss: invalid OSS volume 'LI' [ 88.526331][ T30] audit: type=1400 audit(1750651603.019:356): avc: denied { watch_sb watch_reads } for pid=6154 comm="syz.0.57" path="/13" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.574513][ T6158] netlink: 'syz.3.58': attribute type 9 has an invalid length. [ 88.663329][ T30] audit: type=1400 audit(1750651603.189:357): avc: denied { map } for pid=6159 comm="syz.3.59" path="/proc/36/net/ip6_tables_matches" dev="proc" ino=4026533481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.136364][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 89.355740][ T30] audit: type=1400 audit(1750651603.879:358): avc: denied { read write } for pid=6169 comm="syz.0.62" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.379060][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.096242][ T30] audit: type=1400 audit(1750651603.879:359): avc: denied { open } for pid=6169 comm="syz.0.62" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.066734][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 93.380705][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 93.380720][ T30] audit: type=1400 audit(1750651607.909:364): avc: denied { create } for pid=6214 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.724534][ T6218] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.154475][ T30] audit: type=1400 audit(1750651607.949:365): avc: denied { connect } for pid=6214 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.688230][ T30] audit: type=1400 audit(1750651608.999:366): avc: denied { create } for pid=6223 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.708969][ T30] audit: type=1400 audit(1750651609.009:367): avc: denied { write } for pid=6223 comm="syz.1.77" path="socket:[8774]" dev="sockfs" ino=8774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.744278][ T6225] FAULT_INJECTION: forcing a failure. [ 94.744278][ T6225] name failslab, interval 1, probability 0, space 0, times 1 [ 95.143312][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.3.75 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 95.143339][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.143349][ T6225] Call Trace: [ 95.143354][ T6225] [ 95.143361][ T6225] dump_stack_lvl+0x16c/0x1f0 [ 95.143393][ T6225] should_fail_ex+0x512/0x640 [ 95.143415][ T6225] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 95.143441][ T6225] should_failslab+0xc2/0x120 [ 95.143467][ T6225] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 95.143489][ T6225] ? skb_clone+0x190/0x3f0 [ 95.143517][ T6225] skb_clone+0x190/0x3f0 [ 95.143542][ T6225] pfkey_broadcast_one+0xb9/0x380 [ 95.143569][ T6225] pfkey_broadcast+0x293/0x460 [ 95.143598][ T6225] pfkey_sendmsg+0x756/0x850 [ 95.143627][ T6225] ____sys_sendmsg+0xa98/0xc70 [ 95.143646][ T6225] ? copy_msghdr_from_user+0x10a/0x160 [ 95.143669][ T6225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.143698][ T6225] ___sys_sendmsg+0x134/0x1d0 [ 95.143723][ T6225] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.143745][ T6225] ? __lock_acquire+0x622/0x1c90 [ 95.143799][ T6225] __sys_sendmsg+0x16d/0x220 [ 95.143823][ T6225] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.143861][ T6225] do_syscall_64+0xcd/0x4c0 [ 95.143888][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.143904][ T6225] RIP: 0033:0x7fa68bd8e929 [ 95.143917][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.143933][ T6225] RSP: 002b:00007fa68cc5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.143950][ T6225] RAX: ffffffffffffffda RBX: 00007fa68bfb5fa0 RCX: 00007fa68bd8e929 [ 95.143961][ T6225] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 95.143971][ T6225] RBP: 00007fa68cc5a090 R08: 0000000000000000 R09: 0000000000000000 [ 95.143981][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.143990][ T6225] R13: 0000000000000000 R14: 00007fa68bfb5fa0 R15: 00007fff44d8eec8 [ 95.144012][ T6225] [ 95.346920][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.404034][ T30] audit: type=1400 audit(1750651609.919:368): avc: denied { create } for pid=6228 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.560878][ T30] audit: type=1400 audit(1750651610.089:369): avc: denied { sys_module } for pid=6233 comm="syz.3.78" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.688901][ T30] audit: type=1400 audit(1750651610.219:370): avc: denied { open } for pid=6241 comm="syz.2.80" path="/dev/ttyq8" dev="devtmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 95.736484][ T30] audit: type=1400 audit(1750651610.269:371): avc: denied { create } for pid=6241 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.736601][ T5932] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.759179][ T30] audit: type=1400 audit(1750651610.289:372): avc: denied { bind } for pid=6241 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.788966][ T30] audit: type=1400 audit(1750651610.289:373): avc: denied { setopt } for pid=6241 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.916264][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.037229][ T5932] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.048496][ T5932] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 1024 [ 96.059890][ T5932] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 96.070107][ T5932] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.079248][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.126221][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 96.133569][ T5927] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 96.141211][ T6229] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.144947][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.154395][ T5932] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.161771][ T5927] usb 5-1: config 0 descriptor?? [ 96.745140][ T5927] gspca_main: sunplus-2.14.0 probing 041e:400b [ 97.047633][ T6257] netlink: 'syz.1.83': attribute type 25 has an invalid length. [ 97.078342][ T9] usb 1-1: USB disconnect, device number 2 [ 97.465788][ T5927] gspca_sunplus: reg_w_riv err -110 [ 97.471102][ T5927] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 99.300344][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 99.300382][ T30] audit: type=1400 audit(1750651613.429:387): avc: denied { name_connect } for pid=6275 comm="syz.0.89" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 99.431421][ T5927] usb 5-1: USB disconnect, device number 2 [ 99.664453][ T30] audit: type=1400 audit(1750651614.189:388): avc: denied { name_bind } for pid=6284 comm="syz.0.92" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 99.685876][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.719069][ T30] audit: type=1400 audit(1750651614.189:389): avc: denied { node_bind } for pid=6284 comm="syz.0.92" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 100.528635][ T30] audit: type=1400 audit(1750651614.189:390): avc: denied { create } for pid=6284 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 100.599847][ T30] audit: type=1400 audit(1750651615.129:391): avc: denied { read open } for pid=6299 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.633964][ T30] audit: type=1400 audit(1750651615.159:392): avc: denied { getattr } for pid=6299 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.777145][ T6293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.783159][ T6293] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 100.806225][ T30] audit: type=1400 audit(1750651615.159:393): avc: denied { getattr } for pid=6299 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.839674][ T6307] FAULT_INJECTION: forcing a failure. [ 100.839674][ T6307] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.859116][ T6293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.865072][ T6293] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 100.874221][ T6293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.880255][ T6293] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 100.965718][ T5894] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 100.992846][ T6307] CPU: 1 UID: 0 PID: 6307 Comm: syz.0.95 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 100.992873][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.992883][ T6307] Call Trace: [ 100.992889][ T6307] [ 100.992896][ T6307] dump_stack_lvl+0x16c/0x1f0 [ 100.992926][ T6307] should_fail_ex+0x512/0x640 [ 100.992952][ T6307] _copy_from_iter+0x29f/0x16f0 [ 100.992979][ T6307] ? __alloc_skb+0x200/0x380 [ 100.993003][ T6307] ? __pfx__copy_from_iter+0x10/0x10 [ 100.993029][ T6307] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 100.993054][ T6307] netlink_sendmsg+0x829/0xdd0 [ 100.993076][ T6307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.993103][ T6307] ____sys_sendmsg+0xa98/0xc70 [ 100.993123][ T6307] ? copy_msghdr_from_user+0x10a/0x160 [ 100.993147][ T6307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.993182][ T6307] ___sys_sendmsg+0x134/0x1d0 [ 100.993208][ T6307] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.993230][ T6307] ? __lock_acquire+0x622/0x1c90 [ 100.993288][ T6307] __sys_sendmsg+0x16d/0x220 [ 100.993313][ T6307] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.993354][ T6307] do_syscall_64+0xcd/0x4c0 [ 100.993383][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.993401][ T6307] RIP: 0033:0x7fdf2c98e929 [ 100.993415][ T6307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.993431][ T6307] RSP: 002b:00007fdf2d7c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.993449][ T6307] RAX: ffffffffffffffda RBX: 00007fdf2cbb5fa0 RCX: 00007fdf2c98e929 [ 100.993460][ T6307] RDX: 0000000022000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 100.993475][ T6307] RBP: 00007fdf2d7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.993485][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.993495][ T6307] R13: 0000000000000000 R14: 00007fdf2cbb5fa0 R15: 00007ffe3b832ba8 [ 100.993517][ T6307] [ 101.055798][ T30] audit: type=1400 audit(1750651615.529:394): avc: denied { read } for pid=6304 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.241611][ T5894] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 101.252897][ T5894] usb 5-1: config 0 has no interface number 0 [ 101.275756][ T5894] usb 5-1: config 0 interface 29 has no altsetting 0 [ 101.300056][ T5894] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 101.343904][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.385000][ T30] audit: type=1400 audit(1750651615.529:395): avc: denied { open } for pid=6304 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.422506][ T30] audit: type=1400 audit(1750651615.949:396): avc: denied { create } for pid=6312 comm="syz.2.98" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.445807][ T5894] usb 5-1: Product: syz [ 101.450010][ T5894] usb 5-1: Manufacturer: syz [ 101.454612][ T5894] usb 5-1: SerialNumber: syz [ 101.460419][ T6293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.466782][ T6293] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 101.549996][ T5894] usb 5-1: config 0 descriptor?? [ 101.613503][ T6293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.621195][ T6293] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 102.441907][ T6337] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 102.542570][ T5866] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.768790][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 102.788806][ T6344] openvswitch: netlink: IPv4 tun info is not correct [ 102.841313][ T5866] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.860316][ T5866] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 102.942775][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.975264][ T5866] usb 1-1: Product: syz [ 102.985379][ T5866] usb 1-1: Manufacturer: syz [ 103.015831][ T5866] usb 1-1: SerialNumber: syz [ 103.570953][ T5866] usb 1-1: config 0 descriptor?? [ 103.587359][ T5866] gs_usb 1-1:0.0: Required endpoints not found [ 105.558785][ T5894] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 105.631905][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 105.631922][ T30] audit: type=1400 audit(1750651620.159:411): avc: denied { create } for pid=6368 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.684685][ T5866] usb 1-1: USB disconnect, device number 3 [ 105.756859][ T5894] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 106.050559][ T5894] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 106.200574][ T5894] usb 5-1: USB disconnect, device number 3 [ 106.292626][ T30] audit: type=1400 audit(1750651620.819:412): avc: denied { create } for pid=6378 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.353803][ T6372] kvm: kvm [6371]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 106.388613][ T30] audit: type=1400 audit(1750651620.909:413): avc: denied { setopt } for pid=6371 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.509677][ T6380] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.549905][ T30] audit: type=1400 audit(1750651620.909:414): avc: denied { write } for pid=6371 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.635786][ T5894] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 106.645131][ T6390] bridge0: entered promiscuous mode [ 106.662066][ T6390] bond0: entered promiscuous mode [ 106.668930][ T30] audit: type=1400 audit(1750651620.919:415): avc: denied { connect } for pid=6383 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.712896][ T6390] bond_slave_0: entered promiscuous mode [ 106.744724][ T30] audit: type=1400 audit(1750651620.919:416): avc: denied { create } for pid=6383 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.746705][ T6390] bond_slave_1: entered promiscuous mode [ 106.818503][ T30] audit: type=1400 audit(1750651621.149:417): avc: denied { mount } for pid=6388 comm="syz.1.112" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 106.841130][ T5894] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.876538][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.888625][ T6390] hsr1: entered allmulticast mode [ 106.907839][ T5894] usb 5-1: Product: syz [ 106.912087][ T5894] usb 5-1: Manufacturer: syz [ 106.914151][ T30] audit: type=1400 audit(1750651621.239:418): avc: denied { block_suspend } for pid=6391 comm="syz.0.114" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.949778][ T5894] usb 5-1: SerialNumber: syz [ 106.975328][ T5894] usb 5-1: config 0 descriptor?? [ 106.981081][ T6390] bridge0: entered allmulticast mode [ 107.016519][ T6390] bond0: entered allmulticast mode [ 107.022177][ T6390] bond_slave_0: entered allmulticast mode [ 107.022348][ T6390] bond_slave_1: entered allmulticast mode [ 107.094266][ T30] audit: type=1400 audit(1750651621.269:419): avc: denied { ioctl } for pid=6368 comm="syz.4.108" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.095100][ T30] audit: type=1400 audit(1750651621.269:420): avc: denied { mounton } for pid=6388 comm="syz.1.112" path="/27/file0/file1" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 107.260528][ T5894] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.521376][ T6406] netlink: 'syz.0.117': attribute type 2 has an invalid length. [ 107.529416][ T6406] netlink: 'syz.0.117': attribute type 8 has an invalid length. [ 107.537201][ T6406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'. [ 110.459384][ T5894] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 110.596347][ T3407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.712732][ T5927] usb 5-1: USB disconnect, device number 4 [ 110.899297][ T3407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.031521][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 111.031537][ T30] audit: type=1400 audit(1750651625.559:427): avc: denied { ioctl } for pid=6458 comm="syz.3.127" path="socket:[9928]" dev="sockfs" ino=9928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.152783][ T3407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.986036][ T3407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.212307][ T30] audit: type=1400 audit(1750651627.719:428): avc: denied { read write } for pid=6483 comm="syz.2.132" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.252685][ T30] audit: type=1400 audit(1750651627.719:429): avc: denied { open } for pid=6483 comm="syz.2.132" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.437496][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.504492][ T6492] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 113.668852][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 113.680898][ T5927] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 113.704364][ T3407] bridge_slave_1: left allmulticast mode [ 113.708956][ T5927] usb 3-1: config 0 has no interface number 0 [ 113.713883][ T3407] bridge_slave_1: left promiscuous mode [ 113.729571][ T3407] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.738143][ T5927] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 113.754805][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.754931][ T3407] bridge_slave_0: left allmulticast mode [ 113.772422][ T5927] usb 3-1: Product: syz [ 113.777821][ T30] audit: type=1400 audit(1750651628.299:430): avc: denied { getopt } for pid=6495 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.785880][ T3407] bridge_slave_0: left promiscuous mode [ 113.801783][ T5927] usb 3-1: Manufacturer: syz [ 113.814291][ T5927] usb 3-1: SerialNumber: syz [ 113.822546][ T3407] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.835553][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.837133][ T5927] usb 3-1: config 0 descriptor?? [ 113.848957][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.857599][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.866875][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.873357][ T5927] hub 3-1:0.145: bad descriptor, ignoring hub [ 113.878745][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.894987][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.902726][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.911481][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.922214][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.930677][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.934262][ T5927] hub 3-1:0.145: probe with driver hub failed with error -5 [ 113.945453][ T30] audit: type=1400 audit(1750651628.469:431): avc: denied { mounton } for pid=6500 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 114.013858][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input5 [ 114.034602][ T30] audit: type=1400 audit(1750651628.559:432): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=2817 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.061797][ T30] audit: type=1400 audit(1750651628.559:433): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2817 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.180389][ T5927] usb 3-1: USB disconnect, device number 3 [ 114.977716][ T30] audit: type=1400 audit(1750651629.509:434): avc: denied { bind } for pid=6516 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.023689][ T30] audit: type=1400 audit(1750651629.509:435): avc: denied { node_bind } for pid=6516 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 115.140227][ T3407] bridge0 (unregistering): left promiscuous mode [ 115.178290][ T30] audit: type=1400 audit(1750651629.679:436): avc: denied { read } for pid=6518 comm="syz.4.139" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.219011][ T6519] input: syz0 as /devices/virtual/input/input6 [ 115.403488][ T3407] bond0 (unregistering): left promiscuous mode [ 115.405753][ T5887] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.410939][ T3407] bond_slave_0: left promiscuous mode [ 115.434303][ T3407] bond_slave_1: left promiscuous mode [ 115.471602][ T3407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.492931][ T3407] bond_slave_0: left allmulticast mode [ 115.508920][ T3407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.537494][ T3407] bond_slave_1: left allmulticast mode [ 115.554271][ T3407] bond0 (unregistering): Released all slaves [ 115.617064][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 115.635029][ T5887] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 115.671260][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.731684][ T5887] pvrusb2: Hardware description: Terratec Grabster AV400 [ 115.753921][ T5887] pvrusb2: ********** [ 115.758054][ T5887] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 115.775210][ T5887] pvrusb2: Important functionality might not be entirely working. [ 115.783713][ T5887] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 115.795192][ T5887] pvrusb2: ********** [ 115.976748][ T5823] Bluetooth: hci1: command tx timeout [ 116.102293][ T2333] pvrusb2: Invalid write control endpoint [ 116.375462][ T6525] pvrusb2: Invalid write control endpoint [ 116.493693][ T2333] pvrusb2: Invalid write control endpoint [ 116.815938][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 116.825481][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 117.257398][ T6554] kexec: Could not allocate control_code_buffer [ 117.266902][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 117.266912][ T30] audit: type=1400 audit(1750651631.369:449): avc: denied { kexec_image_load } for pid=6536 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 117.292824][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 117.302910][ T2333] pvrusb2: Device being rendered inoperable [ 117.310502][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 117.320803][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 117.332008][ T2333] pvrusb2: Attached sub-driver cx25840 [ 117.337879][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 117.387676][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 117.848272][ T5866] usb 1-1: USB disconnect, device number 4 [ 117.855915][ T30] audit: type=1400 audit(1750651632.369:450): avc: denied { create } for pid=6565 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.939693][ T30] audit: type=1400 audit(1750651632.409:451): avc: denied { write } for pid=6565 comm="syz.3.147" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 117.999117][ T3407] hsr_slave_0: left promiscuous mode [ 118.006667][ T30] audit: type=1400 audit(1750651632.409:452): avc: denied { ioctl } for pid=6565 comm="syz.3.147" path="socket:[11296]" dev="sockfs" ino=11296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.031539][ T3407] hsr_slave_1: left promiscuous mode [ 118.052941][ T3407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.056585][ T5823] Bluetooth: hci1: command tx timeout [ 118.073251][ T3407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.074107][ T30] audit: type=1400 audit(1750651632.419:453): avc: denied { setopt } for pid=6565 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.101318][ T30] audit: type=1400 audit(1750651632.429:454): avc: denied { write } for pid=6565 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.120639][ T30] audit: type=1400 audit(1750651632.439:455): avc: denied { append } for pid=6565 comm="syz.3.147" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.145371][ T3407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.165979][ T3407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.221500][ T3407] veth1_macvtap: left promiscuous mode [ 118.226010][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.239806][ T3407] veth0_macvtap: left promiscuous mode [ 118.245449][ T3407] veth1_vlan: left promiscuous mode [ 118.271718][ T3407] veth0_vlan: left promiscuous mode [ 118.400830][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 118.407920][ T5873] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.416491][ T5873] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.436308][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.445323][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.475384][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.503570][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.600940][ T6580] binfmt_misc: register: failed to install interpreter file ./file0 [ 118.747777][ T5873] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.902310][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.328871][ T5873] usb 5-1: config 0 descriptor?? [ 119.731943][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.793743][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.818209][ T5873] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.857831][ T30] audit: type=1400 audit(1750651634.379:456): avc: denied { write } for pid=6567 comm="syz.4.148" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.902811][ T6566] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 119.909381][ T5887] usb 5-1: USB disconnect, device number 5 [ 119.975326][ T5887] usblp0: removed [ 120.135818][ T5823] Bluetooth: hci1: command tx timeout [ 120.602937][ T3407] team0 (unregistering): Port device team_slave_1 removed [ 120.739271][ T6598] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 120.768515][ T3407] team0 (unregistering): Port device team_slave_0 removed [ 120.793731][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 121.152002][ T30] audit: type=1400 audit(1750651635.669:457): avc: denied { create } for pid=6606 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.160644][ T6607] autofs: Unknown parameter 'À' [ 121.171461][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.593395][ T6598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.621262][ T6599] vlan2: entered promiscuous mode [ 121.627096][ T6599] bond1: entered promiscuous mode [ 121.643182][ T6600] dummy0: entered promiscuous mode [ 121.665434][ T6600] bond1: (slave dummy0): making interface the new active one [ 121.676468][ T6600] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 121.795150][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 122.466227][ T5823] Bluetooth: hci1: command tx timeout [ 122.493603][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 122.499805][ T30] audit: type=1400 audit(1750651636.799:458): avc: denied { write } for pid=6617 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.551422][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 122.760283][ T6624] ceph: No mds server is up or the cluster is laggy [ 123.057380][ T30] audit: type=1400 audit(1750651637.579:459): avc: denied { append } for pid=6634 comm="syz.4.160" name="v4l-subdev6" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.243010][ T30] audit: type=1400 audit(1750651637.709:460): avc: denied { map } for pid=6637 comm="syz.2.161" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.266654][ T30] audit: type=1400 audit(1750651637.709:461): avc: denied { execute } for pid=6637 comm="syz.2.161" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.289760][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.358091][ T30] audit: type=1400 audit(1750651637.829:462): avc: denied { ioctl } for pid=6637 comm="syz.2.161" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.399159][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.416920][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.432449][ T6500] bridge_slave_0: entered allmulticast mode [ 123.443965][ T6500] bridge_slave_0: entered promiscuous mode [ 123.455135][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.462581][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.475991][ T6500] bridge_slave_1: entered allmulticast mode [ 123.485582][ T6500] bridge_slave_1: entered promiscuous mode [ 123.600508][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.768768][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.425821][ T6500] team0: Port device team_slave_0 added [ 124.435226][ T6665] openvswitch: netlink: Message has 4 unknown bytes. [ 124.453098][ T6500] team0: Port device team_slave_1 added [ 124.483932][ T6665] af_packet: tpacket_rcv: packet too big, clamped from 626 to 4294967286. macoff=82 [ 124.730707][ T30] audit: type=1400 audit(1750651639.259:463): avc: denied { map } for pid=6673 comm="syz.4.167" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.762133][ T30] audit: type=1400 audit(1750651639.289:464): avc: denied { call } for pid=6673 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 124.828962][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.222084][ T30] audit: type=1400 audit(1750651639.749:465): avc: denied { link } for pid=6679 comm="syz.3.170" name="#b" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.305797][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.405097][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.420440][ T30] audit: type=1400 audit(1750651639.879:466): avc: denied { rename } for pid=6679 comm="syz.3.170" name="#c" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.442439][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.477198][ T30] audit: type=1400 audit(1750651639.999:467): avc: denied { read write } for pid=6679 comm="syz.3.170" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.480866][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.575821][ T5873] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 125.582236][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.703712][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.756966][ T5873] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.769691][ T5873] usb 5-1: config 0 has no interface number 0 [ 125.778943][ T5873] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 125.788396][ T6682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.794706][ T6682] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.804273][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.816195][ T5873] usb 5-1: config 0 descriptor?? [ 125.834219][ T5873] usb 5-1: selecting invalid altsetting 1 [ 125.843329][ T5873] dvb_ttusb_budget: ttusb_init_controller: error [ 125.853303][ T6682] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.884714][ T5873] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 126.109805][ T5873] DVB: Unable to find symbol cx22700_attach() [ 126.136408][ T6500] hsr_slave_0: entered promiscuous mode [ 126.142810][ T6500] hsr_slave_1: entered promiscuous mode [ 126.180107][ T5873] DVB: Unable to find symbol tda10046_attach() [ 126.186596][ T5873] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 126.203147][ T5873] usb 5-1: USB disconnect, device number 6 [ 126.476520][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.033878][ T6713] netlink: 2 bytes leftover after parsing attributes in process `syz.3.176'. [ 127.286883][ T6718] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 127.294574][ T6718] netlink: 144 bytes leftover after parsing attributes in process `syz.4.178'. [ 127.303587][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'. [ 127.315733][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 127.332247][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.332744][ T6500] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.403485][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.433211][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 127.461595][ T6729] batadv_slave_1: entered promiscuous mode [ 127.470389][ T6729] batadv_slave_1: left promiscuous mode [ 127.536870][ T6500] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.570691][ T5922] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 127.703563][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.705590][ T6500] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.718689][ T5894] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.815917][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.425523][ T5922] usb 3-1: config 0 descriptor?? [ 128.432508][ T6500] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.505984][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 128.530893][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.594452][ T5894] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 128.625701][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.634998][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.678873][ T5894] usb 4-1: config 0 descriptor?? [ 128.710439][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 128.710454][ T30] audit: type=1400 audit(1750651643.239:475): avc: denied { read } for pid=6747 comm="syz.4.183" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.751144][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.781347][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.788535][ T3407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.859495][ T6500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.870151][ T6500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.889430][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.896632][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.073537][ T30] audit: type=1400 audit(1750651643.599:476): avc: denied { mount } for pid=6701 comm="syz.2.174" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 129.130463][ T5922] usbhid 3-1:0.0: can't add hid device: -71 [ 129.148858][ T5922] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 129.160965][ T5922] usb 3-1: USB disconnect, device number 4 [ 129.219148][ T30] audit: type=1400 audit(1750651643.599:477): avc: denied { search } for pid=6701 comm="syz.2.174" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.287200][ T6738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31117 sclass=netlink_route_socket pid=6738 comm=syz.0.182 [ 129.341382][ T30] audit: type=1400 audit(1750651643.599:478): avc: denied { search } for pid=6701 comm="syz.2.174" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.366697][ T6738] ======================================================= [ 129.366697][ T6738] WARNING: The mand mount option has been deprecated and [ 129.366697][ T6738] and is ignored by this kernel. Remove the mand [ 129.366697][ T6738] option from the mount to silence this warning. [ 129.366697][ T6738] ======================================================= [ 129.397340][ T30] audit: type=1400 audit(1750651643.599:479): avc: denied { mounton } for pid=6701 comm="syz.2.174" path="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.433305][ T6761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.453250][ T6763] fuse: Bad value for 'rootmode' [ 129.500459][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 129.525850][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 129.578858][ T30] audit: type=1400 audit(1750651643.659:480): avc: denied { search } for pid=6701 comm="syz.2.174" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.603002][ T5894] usb 4-1: USB disconnect, device number 4 [ 129.672861][ T30] audit: type=1400 audit(1750651643.659:481): avc: denied { search } for pid=6701 comm="syz.2.174" name="/" dev="configfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.701512][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.749035][ T30] audit: type=1400 audit(1750651643.779:482): avc: denied { setattr } for pid=6759 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 129.864691][ T30] audit: type=1400 audit(1750651643.899:483): avc: denied { remount } for pid=6737 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.900176][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.922370][ T30] audit: type=1400 audit(1750651643.959:484): avc: denied { ioctl } for pid=6737 comm="syz.0.182" path="socket:[10942]" dev="sockfs" ino=10942 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.952027][ T5844] hid (null): global environment stack underflow [ 129.987520][ T5844] hid (null): unknown global tag 0xc [ 130.003077][ T5844] hid (null): unknown global tag 0x77 [ 130.029238][ T5844] hid (null): unknown global tag 0xe [ 130.055023][ T5844] hid (null): unknown global tag 0xc [ 130.075854][ T5844] hid (null): unknown global tag 0xe [ 130.118419][ T5844] hid (null): unknown global tag 0xc [ 130.168895][ T5844] hid-generic 0006:0007:0005.0001: global environment stack underflow [ 130.184236][ T5844] hid-generic 0006:0007:0005.0001: item 0 1 1 11 parsing failed [ 130.197790][ T5844] hid-generic 0006:0007:0005.0001: probe with driver hid-generic failed with error -22 [ 130.972969][ T5844] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.185882][ T5844] usb 1-1: device descriptor read/64, error -71 [ 131.291694][ T6804] FAULT_INJECTION: forcing a failure. [ 131.291694][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 131.304432][ T6804] CPU: 1 UID: 0 PID: 6804 Comm: syz.3.189 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 131.304457][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.304467][ T6804] Call Trace: [ 131.304472][ T6804] [ 131.304479][ T6804] dump_stack_lvl+0x16c/0x1f0 [ 131.304509][ T6804] should_fail_ex+0x512/0x640 [ 131.304530][ T6804] ? fs_reclaim_acquire+0xae/0x150 [ 131.304550][ T6804] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 131.304574][ T6804] should_failslab+0xc2/0x120 [ 131.304598][ T6804] __kmalloc_noprof+0xd2/0x510 [ 131.304626][ T6804] tomoyo_realpath_from_path+0xc2/0x6e0 [ 131.304652][ T6804] ? tomoyo_profile+0x47/0x60 [ 131.304680][ T6804] tomoyo_path_number_perm+0x245/0x580 [ 131.304699][ T6804] ? tomoyo_path_number_perm+0x237/0x580 [ 131.304718][ T6804] ? finish_task_switch.isra.0+0x174/0xc10 [ 131.304741][ T6804] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.304760][ T6804] ? rcu_is_watching+0x12/0xc0 [ 131.304782][ T6804] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.304834][ T6804] ? find_held_lock+0x2b/0x80 [ 131.304855][ T6804] ? hook_file_ioctl_common+0x145/0x410 [ 131.304887][ T6804] ? __fget_files+0x20e/0x3c0 [ 131.304914][ T6804] security_file_ioctl+0x9b/0x240 [ 131.304939][ T6804] __x64_sys_ioctl+0xb7/0x210 [ 131.304960][ T6804] do_syscall_64+0xcd/0x4c0 [ 131.304987][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.305004][ T6804] RIP: 0033:0x7fa68bd8e929 [ 131.305019][ T6804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.305034][ T6804] RSP: 002b:00007fa68cc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.305050][ T6804] RAX: ffffffffffffffda RBX: 00007fa68bfb6160 RCX: 00007fa68bd8e929 [ 131.305061][ T6804] RDX: 0000200000001200 RSI: 00000000c0d05605 RDI: 0000000000000007 [ 131.305071][ T6804] RBP: 00007fa68cc18090 R08: 0000000000000000 R09: 0000000000000000 [ 131.305080][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.305090][ T6804] R13: 0000000000000000 R14: 00007fa68bfb6160 R15: 00007fff44d8eec8 [ 131.305113][ T6804] [ 131.517699][ T6804] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.695862][ T5844] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.764632][ T6500] veth0_vlan: entered promiscuous mode [ 131.824564][ T6500] veth1_vlan: entered promiscuous mode [ 131.917653][ T5844] usb 1-1: device descriptor read/64, error -71 [ 131.941858][ T6500] veth0_macvtap: entered promiscuous mode [ 131.967041][ T6500] veth1_macvtap: entered promiscuous mode [ 131.976072][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.038767][ T5844] usb usb1-port1: attempt power cycle [ 132.039230][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.063301][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.081052][ T6500] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.118707][ T6500] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.136071][ T6500] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.144861][ T6500] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.530881][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.537309][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.628975][ T5844] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.682165][ T5844] usb 1-1: device descriptor read/8, error -71 [ 132.904110][ T3407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.928770][ T3407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.034486][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.060256][ T5844] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.062750][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.076616][ T5887] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.137675][ T5844] usb 1-1: device descriptor read/8, error -71 [ 133.261168][ T5844] usb usb1-port1: unable to enumerate USB device [ 133.355744][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 133.394630][ T5887] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 133.419728][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.567433][ T5887] usb 5-1: Product: syz [ 133.778382][ T5887] usb 5-1: Manufacturer: syz [ 133.801147][ T5887] usb 5-1: SerialNumber: syz [ 133.882899][ T5887] usb 5-1: config 0 descriptor?? [ 134.012057][ T5822] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 134.116232][ T5887] gspca_main: sq930x-2.14.0 probing 2770:930c [ 134.346882][ T5887] gspca_sq930x: reg_r 001f failed -32 [ 134.357830][ T5887] sq930x 5-1:0.0: probe with driver sq930x failed with error -32 [ 134.699214][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 134.699232][ T30] audit: type=1400 audit(1750651649.219:495): avc: denied { mount } for pid=6849 comm="syz.2.197" name="/" dev="autofs" ino=11226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 134.988627][ T6854] FAULT_INJECTION: forcing a failure. [ 134.988627][ T6854] name failslab, interval 1, probability 0, space 0, times 0 [ 135.035941][ T30] audit: type=1400 audit(1750651649.549:496): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 135.105836][ T6854] CPU: 0 UID: 0 PID: 6854 Comm: syz.5.198 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 135.105863][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.105872][ T6854] Call Trace: [ 135.105878][ T6854] [ 135.105884][ T6854] dump_stack_lvl+0x16c/0x1f0 [ 135.105915][ T6854] should_fail_ex+0x512/0x640 [ 135.105937][ T6854] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 135.105959][ T6854] should_failslab+0xc2/0x120 [ 135.105983][ T6854] __kmalloc_cache_noprof+0x6a/0x3e0 [ 135.106002][ T6854] ? nfnl_err_add+0x4e/0x350 [ 135.106024][ T6854] nfnl_err_add+0x4e/0x350 [ 135.106044][ T6854] nfnetlink_rcv_batch+0xc95/0x2330 [ 135.106076][ T6854] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 135.106116][ T6854] ? avc_has_perm_noaudit+0x149/0x3b0 [ 135.106172][ T6854] ? __nla_parse+0x40/0x60 [ 135.106201][ T6854] nfnetlink_rcv+0x3c1/0x430 [ 135.106220][ T6854] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 135.106247][ T6854] netlink_unicast+0x53a/0x7f0 [ 135.106267][ T6854] ? __pfx_netlink_unicast+0x10/0x10 [ 135.106290][ T6854] netlink_sendmsg+0x8d1/0xdd0 [ 135.106315][ T6854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.106342][ T6854] ____sys_sendmsg+0xa98/0xc70 [ 135.106361][ T6854] ? copy_msghdr_from_user+0x10a/0x160 [ 135.106385][ T6854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.106414][ T6854] ___sys_sendmsg+0x134/0x1d0 [ 135.106439][ T6854] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.106460][ T6854] ? __lock_acquire+0x622/0x1c90 [ 135.106516][ T6854] __sys_sendmsg+0x16d/0x220 [ 135.106540][ T6854] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.106579][ T6854] do_syscall_64+0xcd/0x4c0 [ 135.106605][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.106623][ T6854] RIP: 0033:0x7f820078e929 [ 135.106636][ T6854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.106651][ T6854] RSP: 002b:00007f820168e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.106668][ T6854] RAX: ffffffffffffffda RBX: 00007f82009b5fa0 RCX: 00007f820078e929 [ 135.106679][ T6854] RDX: 0000000000008050 RSI: 0000200000000000 RDI: 0000000000000003 [ 135.106689][ T6854] RBP: 00007f820168e090 R08: 0000000000000000 R09: 0000000000000000 [ 135.106699][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.106708][ T6854] R13: 0000000000000000 R14: 00007f82009b5fa0 R15: 00007ffc581eae08 [ 135.106732][ T6854] [ 135.685941][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.874277][ T5887] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 135.887831][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 135.919237][ T5887] usb 1-1: SerialNumber: syz [ 135.956468][ T5887] usb 1-1: config 0 descriptor?? [ 136.298789][ T30] audit: type=1400 audit(1750651650.829:497): avc: denied { read } for pid=6856 comm="syz.0.199" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 136.299258][ T5887] hackrf 1-1:0.0: usb_control_msg() failed -32 request 0e [ 136.347268][ T5927] usb 5-1: USB disconnect, device number 7 [ 136.472932][ T30] audit: type=1400 audit(1750651650.829:498): avc: denied { open } for pid=6856 comm="syz.0.199" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 136.531264][ T5887] hackrf 1-1:0.0: Could not detect board [ 137.101710][ T5887] hackrf 1-1:0.0: probe with driver hackrf failed with error -32 [ 138.594179][ T5887] usb 1-1: USB disconnect, device number 9 [ 140.051951][ T6921] FAULT_INJECTION: forcing a failure. [ 140.051951][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 140.093062][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.5.216 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 140.093089][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.093098][ T6921] Call Trace: [ 140.093104][ T6921] [ 140.093110][ T6921] dump_stack_lvl+0x16c/0x1f0 [ 140.093140][ T6921] should_fail_ex+0x512/0x640 [ 140.093162][ T6921] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 140.093189][ T6921] should_failslab+0xc2/0x120 [ 140.093214][ T6921] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 140.093235][ T6921] ? __alloc_skb+0x2b2/0x380 [ 140.093261][ T6921] __alloc_skb+0x2b2/0x380 [ 140.093283][ T6921] ? __pfx___alloc_skb+0x10/0x10 [ 140.093303][ T6921] ? arch_stack_walk+0xa6/0x100 [ 140.093321][ T6921] ? __lock_acquire+0x622/0x1c90 [ 140.093350][ T6921] virtio_transport_alloc_skb+0x68/0xe20 [ 140.093377][ T6921] virtio_transport_send_pkt_info+0x7d7/0x1020 [ 140.093412][ T6921] virtio_transport_notify_buffer_size+0x157/0x1e0 [ 140.093436][ T6921] ? __pfx_virtio_transport_notify_buffer_size+0x10/0x10 [ 140.093460][ T6921] ? __might_fault+0xe3/0x190 [ 140.093481][ T6921] ? __might_fault+0xe3/0x190 [ 140.093511][ T6921] ? __pfx_virtio_transport_notify_buffer_size+0x10/0x10 [ 140.093535][ T6921] vsock_update_buffer_size+0x183/0x220 [ 140.093555][ T6921] ? __pfx_vsock_update_buffer_size+0x10/0x10 [ 140.093576][ T6921] ? __local_bh_enable_ip+0xa4/0x120 [ 140.093597][ T6921] vsock_connectible_setsockopt+0x646/0x770 [ 140.093621][ T6921] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 140.093640][ T6921] ? __lock_acquire+0x622/0x1c90 [ 140.093668][ T6921] ? selinux_socket_setsockopt+0x6a/0x80 [ 140.093690][ T6921] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 140.093713][ T6921] do_sock_setsockopt+0x224/0x470 [ 140.093730][ T6921] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 140.093761][ T6921] __sys_setsockopt+0x1a0/0x230 [ 140.093788][ T6921] __x64_sys_setsockopt+0xbd/0x160 [ 140.093809][ T6921] ? do_syscall_64+0x91/0x4c0 [ 140.093832][ T6921] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.093863][ T6921] do_syscall_64+0xcd/0x4c0 [ 140.093889][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.093906][ T6921] RIP: 0033:0x7f820078e929 [ 140.093921][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.093937][ T6921] RSP: 002b:00007f820168e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.093954][ T6921] RAX: ffffffffffffffda RBX: 00007f82009b5fa0 RCX: 00007f820078e929 [ 140.093965][ T6921] RDX: 0000000000000001 RSI: 0000000000000028 RDI: 0000000000000004 [ 140.093975][ T6921] RBP: 00007f820168e090 R08: 0000000000000112 R09: 0000000000000000 [ 140.093985][ T6921] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 140.093995][ T6921] R13: 0000000000000000 R14: 00007f82009b5fa0 R15: 00007ffc581eae08 [ 140.094018][ T6921] [ 140.805718][ T5873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.975779][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 140.995350][ T5873] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 141.035788][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.044327][ T5873] usb 4-1: Product: syz [ 141.062458][ T5873] usb 4-1: Manufacturer: syz [ 141.275164][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 141.711766][ T30] audit: type=1400 audit(1750651655.799:499): avc: denied { bind } for pid=6938 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.736409][ T5873] usb 4-1: SerialNumber: syz [ 141.744571][ T5873] usb 4-1: config 0 descriptor?? [ 141.770281][ T5873] gspca_main: sq930x-2.14.0 probing 2770:930c [ 141.977546][ T5873] gspca_sq930x: reg_r 001f failed -32 [ 141.996951][ T5873] sq930x 4-1:0.0: probe with driver sq930x failed with error -32 [ 142.754121][ T30] audit: type=1400 audit(1750651657.279:500): avc: denied { connect } for pid=6954 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.127361][ T5866] usb 4-1: USB disconnect, device number 5 [ 143.375749][ T5844] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 143.758928][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 143.785970][ T5844] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 143.824745][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.957889][ T5844] pvrusb2: Hardware description: Terratec Grabster AV400 [ 143.967483][ T5844] pvrusb2: ********** [ 143.971465][ T5844] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 143.989981][ T5844] pvrusb2: Important functionality might not be entirely working. [ 144.311210][ T5844] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 144.332272][ T5844] pvrusb2: ********** [ 144.352112][ T2333] pvrusb2: Invalid write control endpoint [ 145.353381][ T5873] usb 6-1: USB disconnect, device number 2 [ 145.366733][ T6997] FAULT_INJECTION: forcing a failure. [ 145.366733][ T6997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.474826][ T2333] pvrusb2: Invalid write control endpoint [ 145.492420][ T6997] CPU: 0 UID: 0 PID: 6997 Comm: syz.4.233 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 145.492444][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.492454][ T6997] Call Trace: [ 145.492460][ T6997] [ 145.492467][ T6997] dump_stack_lvl+0x16c/0x1f0 [ 145.492496][ T6997] should_fail_ex+0x512/0x640 [ 145.492522][ T6997] _copy_from_user+0x2e/0xd0 [ 145.492545][ T6997] generic_map_update_batch+0x380/0x610 [ 145.492576][ T6997] ? __pfx_generic_map_update_batch+0x10/0x10 [ 145.492604][ T6997] ? __pfx_generic_map_update_batch+0x10/0x10 [ 145.492628][ T6997] bpf_map_do_batch+0x5b1/0x680 [ 145.492649][ T6997] __sys_bpf+0x15f3/0x4d80 [ 145.492676][ T6997] ? __pfx___sys_bpf+0x10/0x10 [ 145.492699][ T6997] ? ksys_write+0x190/0x250 [ 145.492724][ T6997] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 145.492765][ T6997] ? fput+0x70/0xf0 [ 145.492790][ T6997] ? ksys_write+0x1ac/0x250 [ 145.492811][ T6997] ? __pfx_ksys_write+0x10/0x10 [ 145.492836][ T6997] __x64_sys_bpf+0x78/0xc0 [ 145.492859][ T6997] ? lockdep_hardirqs_on+0x7c/0x110 [ 145.492883][ T6997] do_syscall_64+0xcd/0x4c0 [ 145.492920][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.492937][ T6997] RIP: 0033:0x7f7e55f8e929 [ 145.492951][ T6997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.492967][ T6997] RSP: 002b:00007f7e56daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.492983][ T6997] RAX: ffffffffffffffda RBX: 00007f7e561b5fa0 RCX: 00007f7e55f8e929 [ 145.492994][ T6997] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 145.493004][ T6997] RBP: 00007f7e56daa090 R08: 0000000000000000 R09: 0000000000000000 [ 145.493013][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.493022][ T6997] R13: 0000000000000000 R14: 00007f7e561b5fa0 R15: 00007ffc80190428 [ 145.493044][ T6997] [ 145.695909][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 145.705258][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 145.714045][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 145.724089][ T2333] pvrusb2: Device being rendered inoperable [ 145.730072][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 145.737852][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 145.747044][ T2333] pvrusb2: Attached sub-driver cx25840 [ 145.752807][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 145.762954][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 145.847441][ T30] audit: type=1400 audit(1750651660.369:501): avc: denied { write } for pid=7001 comm="syz.2.234" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.858396][ T30] audit: type=1400 audit(1750651661.369:502): avc: denied { mounton } for pid=7006 comm="syz.4.236" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 147.025773][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.185750][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 147.222224][ T5873] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 147.250071][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.278366][ T5873] usb 3-1: Product: syz [ 147.292535][ T5873] usb 3-1: Manufacturer: syz [ 147.312015][ T5873] usb 3-1: SerialNumber: syz [ 147.338571][ T5873] usb 3-1: config 0 descriptor?? [ 147.454430][ T5873] gspca_main: sq930x-2.14.0 probing 2770:930c [ 147.990103][ T5873] gspca_sq930x: reg_r 001f failed -110 [ 148.005436][ T5873] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 148.503694][ T7042] FAULT_INJECTION: forcing a failure. [ 148.503694][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 148.525134][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.4.241 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 148.525159][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.525168][ T7042] Call Trace: [ 148.525174][ T7042] [ 148.525181][ T7042] dump_stack_lvl+0x16c/0x1f0 [ 148.525208][ T7042] should_fail_ex+0x512/0x640 [ 148.525229][ T7042] ? __kmalloc_noprof+0xbf/0x510 [ 148.525251][ T7042] ? __tipc_nl_compat_doit+0xe4/0x3d0 [ 148.525268][ T7042] should_failslab+0xc2/0x120 [ 148.525290][ T7042] __kmalloc_noprof+0xd2/0x510 [ 148.525307][ T7042] ? avc_has_perm_noaudit+0x149/0x3b0 [ 148.525339][ T7042] __tipc_nl_compat_doit+0xe4/0x3d0 [ 148.525355][ T7042] ? __dev_queue_xmit+0x7eb/0x43e0 [ 148.525376][ T7042] ? __pfx___tipc_nl_compat_doit+0x10/0x10 [ 148.525392][ T7042] ? ___sys_sendmsg+0x134/0x1d0 [ 148.525424][ T7042] ? bpf_lsm_capable+0x9/0x10 [ 148.525440][ T7042] ? security_capable+0x7e/0x260 [ 148.525462][ T7042] tipc_nl_compat_doit+0x11e/0x290 [ 148.525481][ T7042] tipc_nl_compat_recv+0x95b/0xc50 [ 148.525501][ T7042] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 148.525518][ T7042] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 148.525540][ T7042] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 148.525562][ T7042] ? __mutex_trylock_common+0xe9/0x250 [ 148.525594][ T7042] ? rcu_is_watching+0x12/0xc0 [ 148.525616][ T7042] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 148.525641][ T7042] genl_family_rcv_msg_doit+0x206/0x2f0 [ 148.525661][ T7042] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 148.525680][ T7042] ? genl_get_cmd+0x194/0x580 [ 148.525705][ T7042] ? __radix_tree_lookup+0x21f/0x2c0 [ 148.525732][ T7042] genl_rcv_msg+0x55c/0x800 [ 148.525757][ T7042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.525777][ T7042] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 148.525803][ T7042] netlink_rcv_skb+0x155/0x420 [ 148.525820][ T7042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.525840][ T7042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.525869][ T7042] ? netlink_deliver_tap+0x1ae/0xd30 [ 148.525900][ T7042] genl_rcv+0x28/0x40 [ 148.525917][ T7042] netlink_unicast+0x53a/0x7f0 [ 148.525938][ T7042] ? __pfx_netlink_unicast+0x10/0x10 [ 148.525964][ T7042] netlink_sendmsg+0x8d1/0xdd0 [ 148.525986][ T7042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.526013][ T7042] ____sys_sendmsg+0xa98/0xc70 [ 148.526032][ T7042] ? copy_msghdr_from_user+0x10a/0x160 [ 148.526055][ T7042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.526091][ T7042] ___sys_sendmsg+0x134/0x1d0 [ 148.526118][ T7042] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.526139][ T7042] ? __lock_acquire+0x622/0x1c90 [ 148.526198][ T7042] __sys_sendmsg+0x16d/0x220 [ 148.526222][ T7042] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.526264][ T7042] do_syscall_64+0xcd/0x4c0 [ 148.526291][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.526308][ T7042] RIP: 0033:0x7f7e55f8e929 [ 148.526322][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.526337][ T7042] RSP: 002b:00007f7e56daa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.526355][ T7042] RAX: ffffffffffffffda RBX: 00007f7e561b5fa0 RCX: 00007f7e55f8e929 [ 148.526365][ T7042] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 148.526375][ T7042] RBP: 00007f7e56daa090 R08: 0000000000000000 R09: 0000000000000000 [ 148.526384][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.526393][ T7042] R13: 0000000000000000 R14: 00007f7e561b5fa0 R15: 00007ffc80190428 [ 148.526417][ T7042] [ 150.194054][ T5844] usb 3-1: USB disconnect, device number 5 [ 150.855846][ T5927] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 151.034776][ T5927] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.043407][ T7083] batadv_slave_1: entered promiscuous mode [ 151.060440][ T7083] batadv_slave_1: left promiscuous mode [ 151.455874][ T5927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.464963][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.498242][ T5927] usb 5-1: SerialNumber: syz [ 152.550778][ T7103] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 152.595215][ T7103] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 153.065983][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.248'. [ 153.793134][ T5927] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 154.297276][ T30] audit: type=1400 audit(1750651668.819:503): avc: denied { connect } for pid=7123 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.594006][ T7122] Bluetooth: MGMT ver 1.23 [ 154.602600][ T30] audit: type=1400 audit(1750651669.119:504): avc: denied { write } for pid=7120 comm="syz.3.259" path="socket:[12630]" dev="sockfs" ino=12630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.749033][ T7133] FAULT_INJECTION: forcing a failure. [ 154.749033][ T7133] name failslab, interval 1, probability 0, space 0, times 0 [ 154.813441][ T5844] usb 5-1: USB disconnect, device number 8 [ 154.837119][ T5844] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 154.858758][ T7133] CPU: 1 UID: 0 PID: 7133 Comm: syz.2.262 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 154.858785][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.858795][ T7133] Call Trace: [ 154.858800][ T7133] [ 154.858814][ T7133] dump_stack_lvl+0x16c/0x1f0 [ 154.858843][ T7133] should_fail_ex+0x512/0x640 [ 154.858866][ T7133] ? __kvmalloc_node_noprof+0x124/0x620 [ 154.858889][ T7133] should_failslab+0xc2/0x120 [ 154.858914][ T7133] __kvmalloc_node_noprof+0x137/0x620 [ 154.858936][ T7133] ? alloc_netdev_mqs+0xd2/0x1570 [ 154.858966][ T7133] ? __pfx_macvlan_setup+0x10/0x10 [ 154.858990][ T7133] ? alloc_netdev_mqs+0xd2/0x1570 [ 154.859014][ T7133] alloc_netdev_mqs+0xd2/0x1570 [ 154.859044][ T7133] rtnl_create_link+0xc08/0xf90 [ 154.859073][ T7133] rtnl_newlink+0xb69/0x2000 [ 154.859106][ T7133] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.859128][ T7133] ? find_held_lock+0x2b/0x80 [ 154.859149][ T7133] ? avc_has_perm_noaudit+0x117/0x3b0 [ 154.859180][ T7133] ? avc_has_perm_noaudit+0x149/0x3b0 [ 154.859211][ T7133] ? cred_has_capability.isra.0+0x193/0x2f0 [ 154.859253][ T7133] ? find_held_lock+0x2b/0x80 [ 154.859270][ T7133] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.859293][ T7133] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.859315][ T7133] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 154.859338][ T7133] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.859360][ T7133] rtnetlink_rcv_msg+0x95e/0xe90 [ 154.859384][ T7133] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.859411][ T7133] ? ref_tracker_free+0x37c/0x830 [ 154.859432][ T7133] netlink_rcv_skb+0x155/0x420 [ 154.859447][ T7133] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.859467][ T7133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.859489][ T7133] ? netlink_deliver_tap+0x1ae/0xd30 [ 154.859514][ T7133] netlink_unicast+0x53a/0x7f0 [ 154.859530][ T7133] ? __pfx_netlink_unicast+0x10/0x10 [ 154.859549][ T7133] netlink_sendmsg+0x8d1/0xdd0 [ 154.859567][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.859589][ T7133] ____sys_sendmsg+0xa98/0xc70 [ 154.859605][ T7133] ? copy_msghdr_from_user+0x10a/0x160 [ 154.859623][ T7133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.859647][ T7133] ___sys_sendmsg+0x134/0x1d0 [ 154.859667][ T7133] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.859683][ T7133] ? __lock_acquire+0x622/0x1c90 [ 154.859730][ T7133] __sys_sendmsg+0x16d/0x220 [ 154.859749][ T7133] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.859781][ T7133] do_syscall_64+0xcd/0x4c0 [ 154.859827][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.859841][ T7133] RIP: 0033:0x7f13c578e929 [ 154.859852][ T7133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.859865][ T7133] RSP: 002b:00007f13c6621038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.859879][ T7133] RAX: ffffffffffffffda RBX: 00007f13c59b5fa0 RCX: 00007f13c578e929 [ 154.859888][ T7133] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 154.859896][ T7133] RBP: 00007f13c6621090 R08: 0000000000000000 R09: 0000000000000000 [ 154.859904][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.859912][ T7133] R13: 0000000000000000 R14: 00007f13c59b5fa0 R15: 00007ffcb9856558 [ 154.859931][ T7133] [ 155.639617][ T30] audit: type=1400 audit(1750651670.159:505): avc: denied { listen } for pid=7123 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.785999][ T5866] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 155.836038][ T5844] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.985683][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 156.195394][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.220026][ T5866] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 156.285746][ T5866] usb 6-1: config 0 has no interface number 0 [ 156.291902][ T5866] usb 6-1: config 0 interface 12 has no altsetting 0 [ 156.305676][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.336167][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.355601][ T7154] xt_hashlimit: Unknown mode mask 533A373F, kernel too old? [ 156.366645][ T5866] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 156.386280][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.405819][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.413837][ T5866] usb 6-1: Product: syz [ 156.422407][ T5844] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.434582][ T7154] 9pnet_fd: Insufficient options for proto=fd [ 156.445732][ T5866] usb 6-1: Manufacturer: syz [ 156.450400][ T5866] usb 6-1: SerialNumber: syz [ 156.456007][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.477611][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.486905][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 156.594291][ T7154] binder: 7153:7154 ioctl 4018620d 200000000040 returned -16 [ 156.630880][ T5866] usb 6-1: config 0 descriptor?? [ 156.639579][ T5844] usb 5-1: config 0 descriptor?? [ 156.742182][ T7162] FAULT_INJECTION: forcing a failure. [ 156.742182][ T7162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.743117][ T7162] [ 156.743125][ T7162] ====================================================== [ 156.743131][ T7162] WARNING: possible circular locking dependency detected [ 156.743138][ T7162] 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 Not tainted [ 156.743147][ T7162] ------------------------------------------------------ [ 156.743153][ T7162] syz.0.267/7162 is trying to acquire lock: [ 156.743161][ T7162] ffffffff8e4d1ee0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 156.743205][ T7162] [ 156.743205][ T7162] but task is already holding lock: [ 156.743209][ T7162] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 156.743246][ T7162] [ 156.743246][ T7162] which lock already depends on the new lock. [ 156.743246][ T7162] [ 156.743251][ T7162] [ 156.743251][ T7162] the existing dependency chain (in reverse order) is: [ 156.743256][ T7162] [ 156.743256][ T7162] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 156.743275][ T7162] _raw_spin_lock_nested+0x31/0x40 [ 156.743296][ T7162] raw_spin_rq_lock_nested+0x29/0x130 [ 156.743314][ T7162] task_rq_lock+0xcf/0x490 [ 156.743331][ T7162] cgroup_move_task+0x81/0x2a0 [ 156.743352][ T7162] css_set_move_task+0x288/0x5f0 [ 156.743366][ T7162] cgroup_post_fork+0x201/0x9e0 [ 156.743384][ T7162] copy_process+0x5cfc/0x76a0 [ 156.743403][ T7162] kernel_clone+0xfc/0x960 [ 156.743422][ T7162] user_mode_thread+0xc7/0x110 [ 156.743441][ T7162] rest_init+0x23/0x2b0 [ 156.743455][ T7162] start_kernel+0x3ee/0x4d0 [ 156.743476][ T7162] x86_64_start_reservations+0x18/0x30 [ 156.743497][ T7162] x86_64_start_kernel+0x130/0x190 [ 156.743516][ T7162] common_startup_64+0x13e/0x148 [ 156.743531][ T7162] [ 156.743531][ T7162] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 156.743550][ T7162] _raw_spin_lock_irqsave+0x3a/0x60 [ 156.743569][ T7162] try_to_wake_up+0xb2/0x1680 [ 156.743586][ T7162] __wake_up_common+0x135/0x1f0 [ 156.743608][ T7162] __wake_up+0x31/0x60 [ 156.743627][ T7162] tty_port_default_wakeup+0x2a/0x40 [ 156.743652][ T7162] serial8250_tx_chars+0x68e/0x860 [ 156.743675][ T7162] serial8250_handle_irq+0x761/0xcb0 [ 156.743700][ T7162] serial8250_default_handle_irq+0x9a/0x210 [ 156.743714][ T7162] serial8250_interrupt+0x103/0x210 [ 156.743729][ T7162] __handle_irq_event_percpu+0x229/0x7d0 [ 156.743748][ T7162] handle_irq_event+0xab/0x1e0 [ 156.743765][ T7162] handle_edge_irq+0x28e/0xab0 [ 156.743780][ T7162] __common_interrupt+0xdf/0x250 [ 156.743799][ T7162] common_interrupt+0xba/0xe0 [ 156.743815][ T7162] asm_common_interrupt+0x26/0x40 [ 156.743830][ T7162] pv_native_safe_halt+0xf/0x20 [ 156.743849][ T7162] default_idle+0x13/0x20 [ 156.743861][ T7162] default_idle_call+0x6d/0xb0 [ 156.743884][ T7162] do_idle+0x391/0x510 [ 156.743901][ T7162] cpu_startup_entry+0x4f/0x60 [ 156.743920][ T7162] start_secondary+0x21d/0x2b0 [ 156.743939][ T7162] common_startup_64+0x13e/0x148 [ 156.743952][ T7162] [ 156.743952][ T7162] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 156.743972][ T7162] _raw_spin_lock_irqsave+0x3a/0x60 [ 156.743991][ T7162] __wake_up+0x1c/0x60 [ 156.744010][ T7162] tty_port_default_wakeup+0x2a/0x40 [ 156.744032][ T7162] serial8250_tx_chars+0x68e/0x860 [ 156.744055][ T7162] serial8250_handle_irq+0x761/0xcb0 [ 156.744078][ T7162] serial8250_default_handle_irq+0x9a/0x210 [ 156.744093][ T7162] serial8250_interrupt+0x103/0x210 [ 156.744111][ T7162] __handle_irq_event_percpu+0x229/0x7d0 [ 156.744129][ T7162] handle_irq_event+0xab/0x1e0 [ 156.744146][ T7162] handle_edge_irq+0x28e/0xab0 [ 156.744161][ T7162] __common_interrupt+0xdf/0x250 [ 156.744178][ T7162] common_interrupt+0xba/0xe0 [ 156.744193][ T7162] asm_common_interrupt+0x26/0x40 [ 156.744207][ T7162] pv_native_safe_halt+0xf/0x20 [ 156.744227][ T7162] default_idle+0x13/0x20 [ 156.744239][ T7162] default_idle_call+0x6d/0xb0 [ 156.744252][ T7162] do_idle+0x391/0x510 [ 156.744268][ T7162] cpu_startup_entry+0x4f/0x60 [ 156.744286][ T7162] start_secondary+0x21d/0x2b0 [ 156.744305][ T7162] common_startup_64+0x13e/0x148 [ 156.744317][ T7162] [ 156.744317][ T7162] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 156.744336][ T7162] _raw_spin_lock_irqsave+0x3a/0x60 [ 156.744355][ T7162] serial8250_console_write+0x181/0x1890 [ 156.744369][ T7162] console_flush_all+0x801/0xc60 [ 156.744385][ T7162] console_unlock+0xd8/0x210 [ 156.744402][ T7162] vprintk_emit+0x418/0x6d0 [ 156.744419][ T7162] _printk+0xc7/0x100 [ 156.744430][ T7162] register_console+0xc2d/0x11b0 [ 156.744448][ T7162] univ8250_console_init+0x5f/0x90 [ 156.744468][ T7162] console_init+0x14f/0x680 [ 156.744488][ T7162] start_kernel+0x29f/0x4d0 [ 156.744506][ T7162] x86_64_start_reservations+0x18/0x30 [ 156.744525][ T7162] x86_64_start_kernel+0x130/0x190 [ 156.744545][ T7162] common_startup_64+0x13e/0x148 [ 156.744558][ T7162] [ 156.744558][ T7162] -> #0 (console_owner){-...}-{0:0}: [ 156.744577][ T7162] __lock_acquire+0x126f/0x1c90 [ 156.744600][ T7162] lock_acquire+0x179/0x350 [ 156.744621][ T7162] console_lock_spinning_enable+0xb0/0xd0 [ 156.744638][ T7162] console_flush_all+0x7aa/0xc60 [ 156.744655][ T7162] console_unlock+0xd8/0x210 [ 156.744671][ T7162] vprintk_emit+0x418/0x6d0 [ 156.744688][ T7162] _printk+0xc7/0x100 [ 156.744699][ T7162] should_fail_ex+0x4e7/0x640 [ 156.744718][ T7162] strncpy_from_user+0x3b/0x2e0 [ 156.744735][ T7162] strncpy_from_user_nofault+0x7f/0x180 [ 156.744759][ T7162] bpf_bprintf_prepare+0xe6e/0x14a0 [ 156.744782][ T7162] bpf_trace_printk+0xda/0x190 [ 156.744805][ T7162] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 156.744818][ T7162] bpf_trace_run2+0x230/0x590 [ 156.744832][ T7162] __bpf_trace_contention_begin+0xc9/0x110 [ 156.744854][ T7162] trace_contention_begin.constprop.0+0xde/0x160 [ 156.744871][ T7162] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 156.744894][ T7162] do_raw_spin_lock+0x20e/0x2b0 [ 156.744909][ T7162] raw_spin_rq_lock_nested+0x29/0x130 [ 156.744927][ T7162] __schedule+0x301/0x5de0 [ 156.744945][ T7162] preempt_schedule_irq+0x51/0x90 [ 156.744966][ T7162] irqentry_exit+0x36/0x90 [ 156.744986][ T7162] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 156.745002][ T7162] lock_acquire+0x62/0x350 [ 156.745024][ T7162] fs_reclaim_acquire+0x102/0x150 [ 156.745039][ T7162] __kmalloc_cache_noprof+0x50/0x3e0 [ 156.745056][ T7162] ceph_init_fs_context+0x4b/0x530 [ 156.745076][ T7162] alloc_fs_context+0x54a/0x9c0 [ 156.745103][ T7162] __x64_sys_fsopen+0xeb/0x240 [ 156.745117][ T7162] do_syscall_64+0xcd/0x4c0 [ 156.745139][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.745155][ T7162] [ 156.745155][ T7162] other info that might help us debug this: [ 156.745155][ T7162] [ 156.745159][ T7162] Chain exists of: [ 156.745159][ T7162] console_owner --> &p->pi_lock --> &rq->__lock [ 156.745159][ T7162] [ 156.745181][ T7162] Possible unsafe locking scenario: [ 156.745181][ T7162] [ 156.745185][ T7162] CPU0 CPU1 [ 156.745189][ T7162] ---- ---- [ 156.745193][ T7162] lock(&rq->__lock); [ 156.745202][ T7162] lock(&p->pi_lock); [ 156.745213][ T7162] lock(&rq->__lock); [ 156.745223][ T7162] lock(console_owner); [ 156.745232][ T7162] [ 156.745232][ T7162] *** DEADLOCK *** [ 156.745232][ T7162] [ 156.745236][ T7162] 5 locks held by syz.0.267/7162: [ 156.745245][ T7162] #0: ffffffff8e764080 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x50/0x3e0 [ 156.745282][ T7162] #1: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 156.745321][ T7162] #2: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1b6/0x590 [ 156.745356][ T7162] #3: ffffffff8e5b2320 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 156.745389][ T7162] #4: ffffffff8e5b2390 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 156.745426][ T7162] [ 156.745426][ T7162] stack backtrace: [ 156.745433][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.0.267 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 156.745453][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.745463][ T7162] Call Trace: [ 156.745468][ T7162] [ 156.745474][ T7162] dump_stack_lvl+0x116/0x1f0 [ 156.745499][ T7162] print_circular_bug+0x275/0x350 [ 156.745523][ T7162] check_noncircular+0x14c/0x170 [ 156.745549][ T7162] __lock_acquire+0x126f/0x1c90 [ 156.745577][ T7162] lock_acquire+0x179/0x350 [ 156.745600][ T7162] ? console_lock_spinning_enable+0x9f/0xd0 [ 156.745617][ T7162] ? console_lock_spinning_enable+0x88/0xd0 [ 156.745633][ T7162] console_lock_spinning_enable+0xb0/0xd0 [ 156.745648][ T7162] ? console_lock_spinning_enable+0x9f/0xd0 [ 156.745665][ T7162] console_flush_all+0x7aa/0xc60 [ 156.745686][ T7162] ? __pfx_console_flush_all+0x10/0x10 [ 156.745707][ T7162] ? is_printk_cpu_sync_owner+0x32/0x40 [ 156.745730][ T7162] console_unlock+0xd8/0x210 [ 156.745748][ T7162] ? __pfx_console_unlock+0x10/0x10 [ 156.745766][ T7162] ? do_raw_spin_unlock+0x120/0x230 [ 156.745784][ T7162] ? _printk+0xc7/0x100 [ 156.745797][ T7162] ? __down_trylock_console_sem+0xb0/0x140 [ 156.745814][ T7162] vprintk_emit+0x418/0x6d0 [ 156.745833][ T7162] ? __pfx_vprintk_emit+0x10/0x10 [ 156.745856][ T7162] _printk+0xc7/0x100 [ 156.745869][ T7162] ? __pfx__printk+0x10/0x10 [ 156.745885][ T7162] ? __pfx____ratelimit+0x10/0x10 [ 156.745909][ T7162] should_fail_ex+0x4e7/0x640 [ 156.745930][ T7162] strncpy_from_user+0x3b/0x2e0 [ 156.745950][ T7162] strncpy_from_user_nofault+0x7f/0x180 [ 156.745975][ T7162] bpf_bprintf_prepare+0xe6e/0x14a0 [ 156.746002][ T7162] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 156.746025][ T7162] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 156.746056][ T7162] ? bpf_trace_run2+0x3db/0x590 [ 156.746071][ T7162] bpf_trace_printk+0xda/0x190 [ 156.746100][ T7162] ? __pfx_bpf_trace_printk+0x10/0x10 [ 156.746128][ T7162] ? bpf_trace_run2+0x3db/0x590 [ 156.746148][ T7162] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 156.746161][ T7162] bpf_trace_run2+0x230/0x590 [ 156.746177][ T7162] ? __pfx_bpf_trace_run2+0x10/0x10 [ 156.746195][ T7162] ? rcu_is_watching+0x12/0xc0 [ 156.746214][ T7162] ? finish_task_switch.isra.0+0x221/0xc10 [ 156.746234][ T7162] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.746257][ T7162] __bpf_trace_contention_begin+0xc9/0x110 [ 156.746283][ T7162] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 156.746309][ T7162] ? __schedule+0x1181/0x5de0 [ 156.746338][ T7162] trace_contention_begin.constprop.0+0xde/0x160 [ 156.746357][ T7162] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 156.746382][ T7162] ? __lock_acquire+0xb8a/0x1c90 [ 156.746407][ T7162] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 156.746436][ T7162] do_raw_spin_lock+0x20e/0x2b0 [ 156.746452][ T7162] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.746469][ T7162] ? rcu_qs+0x2b/0xe0 [ 156.746486][ T7162] ? rcu_note_context_switch+0x192/0x1e00 [ 156.746506][ T7162] ? preempt_schedule_irq+0x51/0x90 [ 156.746528][ T7162] ? preempt_schedule_irq+0x51/0x90 [ 156.746549][ T7162] raw_spin_rq_lock_nested+0x29/0x130 [ 156.746568][ T7162] ? preempt_schedule_irq+0x51/0x90 [ 156.746590][ T7162] ? preempt_schedule_irq+0x51/0x90 [ 156.746611][ T7162] __schedule+0x301/0x5de0 [ 156.746630][ T7162] ? unwind_get_return_address+0x59/0xa0 [ 156.746657][ T7162] ? arch_stack_walk+0xa6/0x100 [ 156.746677][ T7162] ? __pfx___schedule+0x10/0x10 [ 156.746697][ T7162] ? stack_depot_save_flags+0x28/0xa40 [ 156.746722][ T7162] ? mark_held_locks+0x49/0x80 [ 156.746747][ T7162] preempt_schedule_irq+0x51/0x90 [ 156.746768][ T7162] irqentry_exit+0x36/0x90 [ 156.746790][ T7162] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 156.746807][ T7162] RIP: 0010:lock_acquire+0x62/0x350 [ 156.746832][ T7162] Code: 53 34 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 94 0f 0f 0f 82 74 02 00 00 8b 35 4a c6 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 52 34 12 0f 85 c7 02 00 00 48 83 c4 [ 156.746848][ T7162] RSP: 0018:ffffc900034e7d80 EFLAGS: 00000206 [ 156.746859][ T7162] RAX: 0000000000000046 RBX: ffffffff8e764080 RCX: ffffffff93d3d080 [ 156.746870][ T7162] RDX: 0000000000000000 RSI: ffffffff8ddf4c93 RDI: ffffffff8c157aa0 [ 156.746880][ T7162] RBP: 0000000000000000 R08: aefc1e06051c011e R09: 0000000000000000 [ 156.746890][ T7162] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 156.746900][ T7162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.746918][ T7162] fs_reclaim_acquire+0x102/0x150 [ 156.746933][ T7162] ? __kmalloc_cache_noprof+0x50/0x3e0 [ 156.746951][ T7162] __kmalloc_cache_noprof+0x50/0x3e0 [ 156.746969][ T7162] ? ceph_init_fs_context+0x4b/0x530 [ 156.746991][ T7162] ceph_init_fs_context+0x4b/0x530 [ 156.747011][ T7162] ? __pfx_ceph_init_fs_context+0x10/0x10 [ 156.747032][ T7162] alloc_fs_context+0x54a/0x9c0 [ 156.747057][ T7162] __x64_sys_fsopen+0xeb/0x240 [ 156.747073][ T7162] do_syscall_64+0xcd/0x4c0 [ 156.747102][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.747118][ T7162] RIP: 0033:0x7fdf2c98e929 [ 156.747130][ T7162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.747145][ T7162] RSP: 002b:00007fdf2d784038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 156.747159][ T7162] RAX: ffffffffffffffda RBX: 00007fdf2cbb6160 RCX: 00007fdf2c98e929 [ 156.747169][ T7162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 156.747179][ T7162] RBP: 00007fdf2d784090 R08: 0000000000000000 R09: 0000000000000000 [ 156.747188][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.747197][ T7162] R13: 0000000000000000 R14: 00007fdf2cbb6160 R15: 00007ffe3b832ba8 [ 156.747213][ T7162] [ 158.099942][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.0.267 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 158.099962][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.099971][ T7162] Call Trace: [ 158.099975][ T7162] [ 158.099981][ T7162] dump_stack_lvl+0x116/0x1f0 [ 158.100005][ T7162] should_fail_ex+0x512/0x640 [ 158.100023][ T7162] strncpy_from_user+0x3b/0x2e0 [ 158.100040][ T7162] strncpy_from_user_nofault+0x7f/0x180 [ 158.100060][ T7162] bpf_bprintf_prepare+0xe6e/0x14a0 [ 158.100082][ T7162] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 158.100101][ T7162] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 158.100125][ T7162] ? bpf_trace_run2+0x3db/0x590 [ 158.100138][ T7162] bpf_trace_printk+0xda/0x190 [ 158.100157][ T7162] ? __pfx_bpf_trace_printk+0x10/0x10 [ 158.100178][ T7162] ? bpf_trace_run2+0x3db/0x590 [ 158.100193][ T7162] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 158.100204][ T7162] bpf_trace_run2+0x230/0x590 [ 158.100216][ T7162] ? __pfx_bpf_trace_run2+0x10/0x10 [ 158.100230][ T7162] ? rcu_is_watching+0x12/0xc0 [ 158.100245][ T7162] ? finish_task_switch.isra.0+0x221/0xc10 [ 158.100262][ T7162] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.100280][ T7162] __bpf_trace_contention_begin+0xc9/0x110 [ 158.100300][ T7162] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 158.100320][ T7162] ? __schedule+0x1181/0x5de0 [ 158.100338][ T7162] trace_contention_begin.constprop.0+0xde/0x160 [ 158.100353][ T7162] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 158.100373][ T7162] ? __lock_acquire+0xb8a/0x1c90 [ 158.100392][ T7162] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 158.100414][ T7162] do_raw_spin_lock+0x20e/0x2b0 [ 158.100427][ T7162] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 158.100440][ T7162] ? rcu_qs+0x2b/0xe0 [ 158.100453][ T7162] ? rcu_note_context_switch+0x192/0x1e00 [ 158.100468][ T7162] ? preempt_schedule_irq+0x51/0x90 [ 158.100485][ T7162] ? preempt_schedule_irq+0x51/0x90 [ 158.100502][ T7162] raw_spin_rq_lock_nested+0x29/0x130 [ 158.100517][ T7162] ? preempt_schedule_irq+0x51/0x90 [ 158.100533][ T7162] ? preempt_schedule_irq+0x51/0x90 [ 158.100549][ T7162] __schedule+0x301/0x5de0 [ 158.100564][ T7162] ? unwind_get_return_address+0x59/0xa0 [ 158.100584][ T7162] ? arch_stack_walk+0xa6/0x100 [ 158.100600][ T7162] ? __pfx___schedule+0x10/0x10 [ 158.100615][ T7162] ? stack_depot_save_flags+0x28/0xa40 [ 158.100634][ T7162] ? mark_held_locks+0x49/0x80 [ 158.100653][ T7162] preempt_schedule_irq+0x51/0x90 [ 158.100669][ T7162] irqentry_exit+0x36/0x90 [ 158.100686][ T7162] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 158.100699][ T7162] RIP: 0010:lock_acquire+0x62/0x350 [ 158.100719][ T7162] Code: 53 34 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 94 0f 0f 0f 82 74 02 00 00 8b 35 4a c6 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 52 34 12 0f 85 c7 02 00 00 48 83 c4 [ 158.100732][ T7162] RSP: 0018:ffffc900034e7d80 EFLAGS: 00000206 [ 158.100743][ T7162] RAX: 0000000000000046 RBX: ffffffff8e764080 RCX: ffffffff93d3d080 [ 158.100752][ T7162] RDX: 0000000000000000 RSI: ffffffff8ddf4c93 RDI: ffffffff8c157aa0 [ 158.100760][ T7162] RBP: 0000000000000000 R08: aefc1e06051c011e R09: 0000000000000000 [ 158.100768][ T7162] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 158.100775][ T7162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.100790][ T7162] fs_reclaim_acquire+0x102/0x150 [ 158.100803][ T7162] ? __kmalloc_cache_noprof+0x50/0x3e0 [ 158.100818][ T7162] __kmalloc_cache_noprof+0x50/0x3e0 [ 158.100832][ T7162] ? ceph_init_fs_context+0x4b/0x530 [ 158.100850][ T7162] ceph_init_fs_context+0x4b/0x530 [ 158.100869][ T7162] ? __pfx_ceph_init_fs_context+0x10/0x10 [ 158.100885][ T7162] alloc_fs_context+0x54a/0x9c0 [ 158.100906][ T7162] __x64_sys_fsopen+0xeb/0x240 [ 158.100919][ T7162] do_syscall_64+0xcd/0x4c0 [ 158.100938][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.100950][ T7162] RIP: 0033:0x7fdf2c98e929 [ 158.100960][ T7162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.100972][ T7162] RSP: 002b:00007fdf2d784038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 158.100983][ T7162] RAX: ffffffffffffffda RBX: 00007fdf2cbb6160 RCX: 00007fdf2c98e929 [ 158.100992][ T7162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 158.100999][ T7162] RBP: 00007fdf2d784090 R08: 0000000000000000 R09: 0000000000000000 [ 158.101007][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.101014][ T7162] R13: 0000000000000000 R14: 00007fdf2cbb6160 R15: 00007ffe3b832ba8 [ 158.101026][ T7162] [ 158.547237][ T30] audit: type=1400 audit(1750651671.269:506): avc: denied { connect } for pid=7155 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.574992][ T5866] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 158.583342][ T5866] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 158.591481][ T5866] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 158.595921][ T30] audit: type=1400 audit(1750651671.269:507): avc: denied { write } for pid=7155 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.599167][ T5866] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 158.635105][ T5866] usb 6-1: USB disconnect, device number 3 [ 158.704576][ T7160] ceph: No mds server is up or the cluster is laggy [ 158.712034][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 158.720901][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 158.871980][ T5844] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 158.884619][ T5844] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 160.946919][ T5844] usb 5-1: USB disconnect, device number 9