last executing test programs: 9.178561198s ago: executing program 4 (id=260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(r1, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 8.085055866s ago: executing program 4 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) rmdir(&(0x7f0000000040)='./bus\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) 7.993367374s ago: executing program 0 (id=264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28060400) memfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x11000, 0x10}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000140)={0x5, r4, 0x1c, {0x9, 0x1}, 0x6}, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x40) 6.755997872s ago: executing program 0 (id=269): bpf$MAP_CREATE(0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 6.143716839s ago: executing program 2 (id=270): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x18, 0x0) fanotify_mark(r2, 0x105, 0x4800003a, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.842169062s ago: executing program 3 (id=272): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.705987013s ago: executing program 0 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(r1, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 5.700205981s ago: executing program 2 (id=274): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 5.612909725s ago: executing program 4 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_setup(0x669, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x200000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 5.41066674s ago: executing program 2 (id=276): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0xfffffecc}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r5, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) 4.61182968s ago: executing program 4 (id=277): r0 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', &(0x7f0000000680)='./file2\x00'}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.477629647s ago: executing program 2 (id=279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28060400) memfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x11000, 0x10}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000140)={0x5, r4, 0x1c, {0x9, 0x1}, 0x6}, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x40) 3.804170225s ago: executing program 4 (id=280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 3.501546993s ago: executing program 1 (id=281): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000340)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)={0x2, 0x0, [{0xeeef0000, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) openat(0xffffffffffffff9c, 0x0, 0x501483, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.50005564s ago: executing program 2 (id=282): r0 = socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.615426971s ago: executing program 3 (id=283): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000400)) 2.500780503s ago: executing program 1 (id=284): bpf$MAP_CREATE(0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000895}, 0x4000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 2.435132453s ago: executing program 3 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) 2.409637289s ago: executing program 0 (id=286): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380), 0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x8c880, 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.280208061s ago: executing program 1 (id=287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 2.185448798s ago: executing program 3 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_setup(0x669, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x200000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 2.184758356s ago: executing program 1 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 2.139749343s ago: executing program 2 (id=290): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000640)=ANY=[], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) write$cgroup_type(r4, 0x0, 0x51) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x800}, 0xe) 1.195677323s ago: executing program 3 (id=291): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.106351627s ago: executing program 0 (id=292): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x3, 0xfffffffd, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_disconnect(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x1) shutdown(r0, 0x2) 1.050006522s ago: executing program 1 (id=293): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x44000, 0x11) mknodat(r1, &(0x7f00000001c0)='./file2\x00', 0x1000, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, &(0x7f0000000000)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)=0xe) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) 996.296053ms ago: executing program 4 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_init_net_socket$llc(0x1a, 0x802, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x2c, r1, 0x11, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 92.935043ms ago: executing program 1 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 86.835711ms ago: executing program 0 (id=296): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0xc, @void}, 0x10) socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 0s ago: executing program 3 (id=297): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, 0x0, &(0x7f00000001c0)=r1}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 58.779069][ T30] audit: type=1400 audit(1750023659.726:62): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.782387][ T5804] cgroup: Unknown subsys name 'net' [ 58.801844][ T30] audit: type=1400 audit(1750023659.726:63): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.831230][ T30] audit: type=1400 audit(1750023659.786:64): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.972851][ T5804] cgroup: Unknown subsys name 'cpuset' [ 58.980721][ T5804] cgroup: Unknown subsys name 'rlimit' [ 59.117270][ T30] audit: type=1400 audit(1750023660.066:65): avc: denied { setattr } for pid=5804 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.140795][ T30] audit: type=1400 audit(1750023660.066:66): avc: denied { create } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.165168][ T30] audit: type=1400 audit(1750023660.066:67): avc: denied { write } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.187075][ T30] audit: type=1400 audit(1750023660.066:68): avc: denied { read } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.208232][ T30] audit: type=1400 audit(1750023660.096:69): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.233202][ T30] audit: type=1400 audit(1750023660.096:70): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.256770][ T30] audit: type=1400 audit(1750023660.116:71): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.267169][ T5806] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.152802][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.874676][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 63.874701][ T30] audit: type=1400 audit(1750023664.826:78): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.920664][ T30] audit: type=1400 audit(1750023664.826:79): avc: denied { read write } for pid=5815 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.954975][ T30] audit: type=1400 audit(1750023664.826:80): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.986477][ T30] audit: type=1400 audit(1750023664.856:81): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="socket:[3863]" dev="sockfs" ino=3863 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.035212][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.043146][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.050961][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.058301][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.066545][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.074047][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.079383][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.081379][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.090888][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.103134][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.103549][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.110944][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.118468][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.124702][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.132196][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.139459][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.144984][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.160910][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.168318][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.169450][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.175754][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.190249][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.193444][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.220598][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.228145][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.229549][ T30] audit: type=1400 audit(1750023665.146:82): avc: denied { read } for pid=5817 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.302903][ T30] audit: type=1400 audit(1750023665.146:83): avc: denied { open } for pid=5817 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.326731][ T30] audit: type=1400 audit(1750023665.146:84): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.589606][ T30] audit: type=1400 audit(1750023665.536:85): avc: denied { module_request } for pid=5815 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 64.676373][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 64.756312][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 64.772208][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 64.792314][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 64.888136][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 64.945508][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.953209][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.960681][ T5814] bridge_slave_0: entered allmulticast mode [ 64.967332][ T5814] bridge_slave_0: entered promiscuous mode [ 64.974813][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.983254][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.990408][ T5815] bridge_slave_0: entered allmulticast mode [ 64.996995][ T5815] bridge_slave_0: entered promiscuous mode [ 65.009604][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.016745][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.024039][ T5815] bridge_slave_1: entered allmulticast mode [ 65.031215][ T5815] bridge_slave_1: entered promiscuous mode [ 65.048864][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.056303][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.063627][ T5814] bridge_slave_1: entered allmulticast mode [ 65.070308][ T5814] bridge_slave_1: entered promiscuous mode [ 65.099876][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.108265][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.115710][ T5829] bridge_slave_0: entered allmulticast mode [ 65.123270][ T5829] bridge_slave_0: entered promiscuous mode [ 65.151970][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.169035][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.176721][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.184042][ T5829] bridge_slave_1: entered allmulticast mode [ 65.191184][ T5829] bridge_slave_1: entered promiscuous mode [ 65.208840][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.218122][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.225576][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.232986][ T5817] bridge_slave_0: entered allmulticast mode [ 65.239600][ T5817] bridge_slave_0: entered promiscuous mode [ 65.256791][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.281842][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.289208][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.297213][ T5817] bridge_slave_1: entered allmulticast mode [ 65.304004][ T5817] bridge_slave_1: entered promiscuous mode [ 65.328682][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.352741][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.359804][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.367364][ T5819] bridge_slave_0: entered allmulticast mode [ 65.375278][ T5819] bridge_slave_0: entered promiscuous mode [ 65.398399][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.409286][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.426551][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.433863][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.441238][ T5819] bridge_slave_1: entered allmulticast mode [ 65.447878][ T5819] bridge_slave_1: entered promiscuous mode [ 65.465248][ T5815] team0: Port device team_slave_0 added [ 65.472832][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.498117][ T5814] team0: Port device team_slave_0 added [ 65.514508][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.524884][ T5815] team0: Port device team_slave_1 added [ 65.541509][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.562076][ T5829] team0: Port device team_slave_0 added [ 65.569676][ T5814] team0: Port device team_slave_1 added [ 65.577893][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.604353][ T5829] team0: Port device team_slave_1 added [ 65.625890][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.633195][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.659483][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.672437][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.679375][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.705412][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.725068][ T5817] team0: Port device team_slave_0 added [ 65.758955][ T5817] team0: Port device team_slave_1 added [ 65.774590][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.781782][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.808037][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.821945][ T5819] team0: Port device team_slave_0 added [ 65.829671][ T5819] team0: Port device team_slave_1 added [ 65.853688][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.860882][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.887131][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.900210][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.907141][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.933087][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.944661][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.951870][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.977782][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.006876][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.014753][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.040979][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.052535][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.059466][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.085411][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.111543][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.118487][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.144670][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.187488][ T5815] hsr_slave_0: entered promiscuous mode [ 66.193579][ T5815] hsr_slave_1: entered promiscuous mode [ 66.201078][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.208026][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.234540][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.245514][ T5836] Bluetooth: hci4: command tx timeout [ 66.250361][ T5836] Bluetooth: hci3: command tx timeout [ 66.251293][ T5837] Bluetooth: hci1: command tx timeout [ 66.256378][ T5836] Bluetooth: hci0: command tx timeout [ 66.261762][ T5832] Bluetooth: hci2: command tx timeout [ 66.285794][ T5829] hsr_slave_0: entered promiscuous mode [ 66.291893][ T5829] hsr_slave_1: entered promiscuous mode [ 66.297707][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.305429][ T5829] Cannot create hsr debugfs directory [ 66.340253][ T5819] hsr_slave_0: entered promiscuous mode [ 66.346493][ T5819] hsr_slave_1: entered promiscuous mode [ 66.353261][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.361065][ T5819] Cannot create hsr debugfs directory [ 66.369918][ T5814] hsr_slave_0: entered promiscuous mode [ 66.375918][ T5814] hsr_slave_1: entered promiscuous mode [ 66.381841][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.389371][ T5814] Cannot create hsr debugfs directory [ 66.442247][ T5817] hsr_slave_0: entered promiscuous mode [ 66.448251][ T5817] hsr_slave_1: entered promiscuous mode [ 66.454427][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.462006][ T5817] Cannot create hsr debugfs directory [ 66.812667][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.824877][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.834254][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.845039][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.903830][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.913922][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.932329][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.949327][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.002229][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.020622][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.031605][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.046693][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.118728][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.142645][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.154813][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.173078][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.184014][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.205700][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.212873][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.224676][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.248209][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.255334][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.319275][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.337970][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.346019][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.355917][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.384931][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.442989][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.468233][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.478163][ T30] audit: type=1400 audit(1750023668.436:86): avc: denied { sys_module } for pid=5829 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.481442][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.506350][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.542406][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.549494][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.575434][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.594131][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.612288][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.619410][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.652081][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.659214][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.708491][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.717293][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.729367][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.755270][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.762364][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.804489][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.811643][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.836128][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.912680][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.953049][ T5829] veth0_vlan: entered promiscuous mode [ 67.969420][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.976572][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.010486][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.017620][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.053908][ T5829] veth1_vlan: entered promiscuous mode [ 68.094789][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.174371][ T5829] veth0_macvtap: entered promiscuous mode [ 68.219472][ T5829] veth1_macvtap: entered promiscuous mode [ 68.262790][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.287194][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.308794][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.325155][ T50] Bluetooth: hci2: command tx timeout [ 68.325181][ T5832] Bluetooth: hci0: command tx timeout [ 68.325208][ T5832] Bluetooth: hci4: command tx timeout [ 68.332106][ T5836] Bluetooth: hci1: command tx timeout [ 68.336474][ T5837] Bluetooth: hci3: command tx timeout [ 68.373043][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.406918][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.417246][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.429245][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.438233][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.537639][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.582016][ T5814] veth0_vlan: entered promiscuous mode [ 68.623007][ T5814] veth1_vlan: entered promiscuous mode [ 68.666870][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.677996][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.685040][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.736388][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.754666][ T5815] veth0_vlan: entered promiscuous mode [ 68.762086][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.766770][ T5815] veth1_vlan: entered promiscuous mode [ 68.788701][ T30] audit: type=1400 audit(1750023669.736:87): avc: denied { mounton } for pid=5829 comm="syz-executor" path="/root/syzkaller.pEWWjy/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.821393][ T5817] veth0_vlan: entered promiscuous mode [ 68.858714][ T5814] veth0_macvtap: entered promiscuous mode [ 68.872194][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.875484][ T5814] veth1_macvtap: entered promiscuous mode [ 68.899572][ T5817] veth1_vlan: entered promiscuous mode [ 68.918146][ T5819] veth0_vlan: entered promiscuous mode [ 68.955073][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 68.955088][ T30] audit: type=1400 audit(1750023669.906:99): avc: denied { read write } for pid=5829 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.998162][ T5815] veth0_macvtap: entered promiscuous mode [ 69.009015][ T5815] veth1_macvtap: entered promiscuous mode [ 69.016676][ T5819] veth1_vlan: entered promiscuous mode [ 69.039578][ T5817] veth0_macvtap: entered promiscuous mode [ 69.047072][ T30] audit: type=1400 audit(1750023669.906:100): avc: denied { open } for pid=5829 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.089949][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.103806][ T5817] veth1_macvtap: entered promiscuous mode [ 69.116721][ T30] audit: type=1400 audit(1750023669.906:101): avc: denied { ioctl } for pid=5829 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.143875][ T30] audit: type=1400 audit(1750023669.986:102): avc: denied { create } for pid=5933 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.166296][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.212299][ T30] audit: type=1400 audit(1750023669.986:103): avc: denied { prog_load } for pid=5933 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.234379][ T30] audit: type=1400 audit(1750023669.986:104): avc: denied { bpf } for pid=5933 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.236510][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.259196][ T30] audit: type=1400 audit(1750023669.986:105): avc: denied { write } for pid=5933 comm="syz.3.4" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.263827][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.291257][ T30] audit: type=1400 audit(1750023670.146:106): avc: denied { allowed } for pid=5937 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.296428][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.328133][ T30] audit: type=1400 audit(1750023670.146:107): avc: denied { create } for pid=5937 comm="syz.3.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 69.352530][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.366595][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.386673][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.407023][ T5819] veth0_macvtap: entered promiscuous mode [ 69.415063][ T30] audit: type=1400 audit(1750023670.356:108): avc: denied { append } for pid=5940 comm="syz.3.8" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.423518][ T5819] veth1_macvtap: entered promiscuous mode [ 69.454385][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.482974][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.500798][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.511333][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.526492][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.535556][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.569562][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.591150][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.599907][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.609417][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.632606][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.783455][ T5946] ======================================================= [ 69.783455][ T5946] WARNING: The mand mount option has been deprecated and [ 69.783455][ T5946] and is ignored by this kernel. Remove the mand [ 69.783455][ T5946] option from the mount to silence this warning. [ 69.783455][ T5946] ======================================================= [ 69.819011][ T5946] new mount options do not match the existing superblock, will be ignored [ 69.838166][ T5946] option changes via remount are deprecated (pid=5940 comm=syz.3.8) [ 70.049739][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.077363][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.087669][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.096875][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.106842][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.119763][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.128151][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.180576][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.188549][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.293660][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.329580][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.383418][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.400763][ T5837] Bluetooth: hci3: command tx timeout [ 70.400776][ T5836] Bluetooth: hci1: command tx timeout [ 70.406148][ T5837] Bluetooth: hci4: command tx timeout [ 70.411754][ T5836] Bluetooth: hci2: command tx timeout [ 70.416951][ T5832] Bluetooth: hci0: command tx timeout [ 70.438530][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.453420][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.471486][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.498419][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.516849][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.544889][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.588167][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.610035][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.616439][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.135047][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.151311][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.449366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.490535][ T5837] Bluetooth: hci2: command tx timeout [ 72.496195][ T5837] Bluetooth: hci4: command tx timeout [ 72.502990][ T5837] Bluetooth: hci3: command tx timeout [ 72.508822][ T5837] Bluetooth: hci0: command tx timeout [ 73.065123][ T5896] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.120686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.140269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.378983][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.417096][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 73.461627][ T5896] usb 1-1: config 1 has no interface number 0 [ 73.481355][ T5896] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.493612][ T5896] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 73.510926][ T5896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.527062][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.527096][ T5896] usb 1-1: Product: syz [ 73.527110][ T5896] usb 1-1: Manufacturer: syz [ 73.527123][ T5896] usb 1-1: SerialNumber: syz [ 73.870156][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.084325][ T5944] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.399503][ T5896] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 74.470233][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 74.479122][ T5896] cdc_ncm 1-1:1.1: bind() failure [ 74.486270][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 74.494130][ T5896] usb 1-1: USB disconnect, device number 2 [ 74.518507][ T10] usb 4-1: config 0 has no interface number 0 [ 74.543621][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.566261][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 74.578900][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 74.588203][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.597040][ T10] usb 4-1: Product: syz [ 74.652160][ T10] usb 4-1: Manufacturer: syz [ 74.656799][ T10] usb 4-1: SerialNumber: syz [ 74.663655][ T10] usb 4-1: config 0 descriptor?? [ 74.672142][ T5944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.686076][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.696635][ T5944] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.705909][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.714972][ T5944] usb 2-1: SerialNumber: syz [ 74.717369][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 74.717381][ T30] audit: type=1400 audit(1750023675.676:146): avc: denied { create } for pid=6022 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.777393][ T30] audit: type=1400 audit(1750023675.706:147): avc: denied { ioctl } for pid=6022 comm="syz.4.28" path="socket:[8130]" dev="sockfs" ino=8130 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.116129][ T5944] usb 2-1: 0:2 : does not exist [ 75.691220][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 75.900239][ T10] appletouch 4-1:0.85: Failed to request geyser raw mode [ 75.907494][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 75.940296][ T6031] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 76.007487][ T972] cfg80211: failed to load regulatory.db [ 76.132267][ T5944] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 76.133214][ T30] audit: type=1326 audit(1750023677.086:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6036 comm="syz.2.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fe38e929 code=0x7fc00000 [ 76.146641][ T5944] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 76.212459][ T10] usb 4-1: USB disconnect, device number 2 [ 76.240358][ T5949] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.270786][ T30] audit: type=1400 audit(1750023677.176:149): avc: denied { create } for pid=6040 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.290727][ T5944] usb 2-1: USB disconnect, device number 2 [ 76.465815][ T30] audit: type=1400 audit(1750023677.216:150): avc: denied { read } for pid=6040 comm="syz.4.33" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.573543][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.580869][ T5832] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 76.598104][ T5832] Bluetooth: hci1: Injecting HCI hardware error event [ 76.604221][ T5949] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 76.605757][ T5832] Bluetooth: hci1: hardware error 0x00 [ 76.685035][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.700323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.708628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.717081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.725497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.840290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.848583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.863712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.915791][ T30] audit: type=1400 audit(1750023677.216:151): avc: denied { open } for pid=6040 comm="syz.4.33" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 77.013950][ T5949] usb 1-1: config 0 descriptor?? [ 77.043867][ T5949] pwc: Askey VC010 type 2 USB webcam detected. [ 77.068437][ T6042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.075588][ T6042] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 77.083430][ T6042] audit: backlog limit exceeded [ 77.088659][ T6042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.212680][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.516666][ T5949] pwc: recv_control_msg error -32 req 02 val 2b00 [ 77.526975][ T5949] pwc: recv_control_msg error -32 req 02 val 2700 [ 77.534291][ T5949] pwc: recv_control_msg error -32 req 02 val 2c00 [ 77.541509][ T5949] pwc: recv_control_msg error -32 req 04 val 1000 [ 77.548387][ T5949] pwc: recv_control_msg error -32 req 04 val 1300 [ 77.558659][ T5949] pwc: recv_control_msg error -32 req 04 val 1400 [ 77.566471][ T5949] pwc: recv_control_msg error -32 req 02 val 2000 [ 77.575327][ T5949] pwc: recv_control_msg error -32 req 02 val 2100 [ 77.580125][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.582376][ T5949] pwc: recv_control_msg error -32 req 04 val 1500 [ 77.597606][ T5949] pwc: recv_control_msg error -32 req 02 val 2500 [ 77.606162][ T5949] pwc: recv_control_msg error -32 req 02 val 2400 [ 77.616518][ T5949] pwc: recv_control_msg error -32 req 02 val 2600 [ 77.623991][ T5949] pwc: recv_control_msg error -32 req 02 val 2900 [ 77.771547][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 77.785793][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.809670][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 77.840646][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.860247][ T9] usb 4-1: config 0 descriptor?? [ 77.879629][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 77.963153][ T6061] input: syz0 as /devices/virtual/input/input6 [ 77.991149][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.143033][ T5949] pwc: recv_control_msg error -71 req 04 val 1200 [ 78.152155][ T5949] pwc: Registered as video103. [ 78.157946][ T5949] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 78.727481][ T9] gspca_vc032x: reg_w err -110 [ 78.749832][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 78.769058][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 78.899803][ T5949] usb 1-1: USB disconnect, device number 3 [ 78.967791][ T5832] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 79.050080][ T5896] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 79.192396][ T5896] usb 5-1: config 0 has no interface number 0 [ 79.229033][ T5896] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 79.258156][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.299933][ T5896] usb 5-1: Product: syz [ 79.310198][ T5896] usb 5-1: Manufacturer: syz [ 79.324123][ T5896] usb 5-1: SerialNumber: syz [ 79.354549][ T5896] usb 5-1: config 0 descriptor?? [ 79.377627][ T5896] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 79.610163][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.762027][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.772402][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.782945][ T5905] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.792101][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 79.800571][ T5905] usb 3-1: SerialNumber: syz [ 80.026597][ T5905] usb 3-1: 0:2 : does not exist [ 80.047546][ T5905] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 80.249589][ T6079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.255779][ T6079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.282157][ T6079] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.289211][ T6079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.295194][ T6079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.301956][ T6079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.308621][ T6079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.314572][ T6079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.333570][ T6079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.340824][ T6079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.346737][ T6079] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.390694][ T5905] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 80.539150][ T5905] usb 3-1: USB disconnect, device number 2 [ 80.547873][ T6079] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.642739][ T9] usb 4-1: USB disconnect, device number 3 [ 80.666946][ T5896] gspca_topro: reg_w err -71 [ 80.711020][ T5896] gspca_topro: Sensor soi763a [ 80.728562][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 80.728577][ T30] audit: type=1400 audit(1750023681.676:359): avc: denied { create } for pid=6089 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.765514][ T5896] usb 5-1: USB disconnect, device number 2 [ 80.773040][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.820135][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.977279][ T30] audit: type=1400 audit(1750023682.926:360): avc: denied { connect } for pid=6104 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.048317][ T30] audit: type=1400 audit(1750023682.956:361): avc: denied { write } for pid=6104 comm="syz.4.53" path="socket:[8280]" dev="sockfs" ino=8280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.402536][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.412009][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.413189][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.780510][ T30] audit: type=1400 audit(1750023683.736:362): avc: denied { write } for pid=6121 comm="syz.2.59" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.113076][ T5881] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.696397][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.728000][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.739748][ T5881] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.756389][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.766724][ T5881] usb 4-1: SerialNumber: syz [ 83.884669][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.008006][ T5881] usb 4-1: 0:2 : does not exist [ 84.369628][ T5881] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 84.382644][ T5881] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 84.400371][ T5881] usb 4-1: USB disconnect, device number 4 [ 84.989478][ T5949] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.202083][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.208125][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.214166][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.256601][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.361114][ T30] audit: type=1400 audit(1750023686.316:363): avc: denied { read write } for pid=6151 comm="syz.0.68" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.475109][ T30] audit: type=1400 audit(1750023686.346:364): avc: denied { map } for pid=6151 comm="syz.0.68" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.540057][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 85.547545][ T5949] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 85.562820][ T30] audit: type=1400 audit(1750023686.346:365): avc: denied { execute } for pid=6151 comm="syz.0.68" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.639300][ T30] audit: type=1400 audit(1750023686.576:366): avc: denied { watch } for pid=6154 comm="syz.3.69" path="/14" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.705354][ T5949] usb 3-1: config 0 has no interface number 0 [ 85.715458][ T30] audit: type=1400 audit(1750023686.576:367): avc: denied { watch_sb watch_reads } for pid=6154 comm="syz.3.69" path="/14" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.743326][ T5949] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 85.752440][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.762401][ T5949] usb 3-1: Product: syz [ 85.766578][ T5949] usb 3-1: Manufacturer: syz [ 85.771624][ T5949] usb 3-1: SerialNumber: syz [ 85.820736][ T5949] usb 3-1: config 0 descriptor?? [ 85.833630][ T5949] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 85.890191][ T30] audit: type=1400 audit(1750023686.836:368): avc: denied { create } for pid=6158 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.930092][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.113593][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.136620][ T6172] input: syz0 as /devices/virtual/input/input8 [ 86.250183][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.276103][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 86.295449][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 86.343443][ T5881] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 86.367735][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.440217][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 86.456326][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.484688][ T10] usb 5-1: config 0 has no interfaces? [ 86.518365][ T5881] usb 1-1: config 0 descriptor?? [ 86.571547][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 86.581483][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.591077][ T10] usb 5-1: Product: syz [ 86.595508][ T10] usb 5-1: Manufacturer: syz [ 86.601841][ T10] usb 5-1: SerialNumber: syz [ 86.610736][ T10] usb 5-1: config 0 descriptor?? [ 86.826180][ T5896] usb 5-1: USB disconnect, device number 3 [ 87.210579][ T5881] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 87.241328][ T5949] gspca_topro: reg_w err -71 [ 87.241560][ T5881] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 87.281553][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.287760][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.290067][ T5949] gspca_topro: Sensor soi763a [ 87.293780][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.304524][ T5881] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 87.320103][ T5881] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 87.327078][ T5881] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 87.334505][ T5949] usb 3-1: USB disconnect, device number 3 [ 87.346565][ T5881] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 87.589190][ T5881] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 87.616624][ T5881] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 87.716680][ T30] audit: type=1400 audit(1750023688.646:369): avc: denied { write } for pid=6178 comm="syz.3.79" name="ip6_mr_vif" dev="proc" ino=4026533344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.078567][ T5881] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 88.090560][ T5881] usb 1-1: USB disconnect, device number 4 [ 88.824741][ T30] audit: type=1400 audit(1750023689.776:370): avc: denied { read write } for pid=6193 comm="syz.2.82" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.871692][ T6201] fuse: Bad value for 'fd' [ 88.897126][ T30] audit: type=1400 audit(1750023689.776:371): avc: denied { open } for pid=6193 comm="syz.2.82" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 88.933714][ T5832] Bluetooth: hci4: unexpected event for opcode 0x6e09 [ 88.970365][ T30] audit: type=1400 audit(1750023689.826:372): avc: denied { mounton } for pid=6200 comm="syz.1.84" path="/19/file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.116500][ T30] audit: type=1400 audit(1750023690.056:373): avc: denied { create } for pid=6204 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.127513][ T6212] 9pnet_fd: Insufficient options for proto=fd [ 89.508055][ T30] audit: type=1400 audit(1750023690.166:374): avc: denied { write } for pid=6211 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.549407][ T30] audit: type=1400 audit(1750023690.176:375): avc: denied { read } for pid=6211 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.690601][ T6222] Zero length message leads to an empty skb [ 90.859370][ T30] audit: type=1400 audit(1750023691.296:376): avc: denied { create } for pid=6219 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.438732][ T30] audit: type=1400 audit(1750023691.936:377): avc: denied { create } for pid=6219 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.523733][ T30] audit: type=1400 audit(1750023691.946:378): avc: denied { listen } for pid=6219 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.982289][ T30] audit: type=1400 audit(1750023692.006:379): avc: denied { getopt } for pid=6219 comm="syz.4.94" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.006276][ T6238] fuse: Bad value for 'fd' [ 92.011358][ T30] audit: type=1400 audit(1750023692.006:380): avc: denied { ioctl } for pid=6219 comm="syz.4.94" path="socket:[8566]" dev="sockfs" ino=8566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.118488][ T30] audit: type=1400 audit(1750023693.066:381): avc: denied { ioctl } for pid=6239 comm="syz.2.99" path="/dev/video3" dev="devtmpfs" ino=935 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.246216][ T6248] 9pnet_fd: Insufficient options for proto=fd [ 92.352785][ T30] audit: type=1400 audit(1750023693.106:382): avc: denied { setopt } for pid=6233 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.721279][ T30] audit: type=1400 audit(1750023693.106:383): avc: denied { write } for pid=6233 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.742664][ T30] audit: type=1400 audit(1750023693.116:384): avc: denied { connect } for pid=6233 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.766112][ T30] audit: type=1400 audit(1750023693.126:385): avc: denied { name_connect } for pid=6233 comm="syz.3.97" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.822596][ T30] audit: type=1400 audit(1750023693.396:386): avc: denied { create } for pid=6249 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.109351][ T6281] input: syz0 as /devices/virtual/input/input9 [ 95.773410][ T6285] fuse: Bad value for 'fd' [ 95.885843][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.113'. [ 95.944414][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.113'. [ 95.974474][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.113'. [ 96.565575][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.113'. [ 97.616660][ T5832] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 97.649597][ T6310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.121'. [ 97.690431][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'. [ 97.732845][ T6310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.121'. [ 97.779960][ T6310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.121'. [ 98.177603][ T6323] input: syz0 as /devices/virtual/input/input10 [ 98.309891][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 98.309905][ T30] audit: type=1400 audit(1750023699.256:396): avc: denied { create } for pid=6328 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.383377][ T5832] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 98.462744][ T6335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.128'. [ 98.472603][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.128'. [ 98.537905][ T30] audit: type=1400 audit(1750023699.486:397): avc: denied { mount } for pid=6332 comm="syz.2.130" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.786697][ T30] audit: type=1400 audit(1750023699.596:398): avc: denied { read } for pid=6334 comm="syz.0.131" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.989110][ T30] audit: type=1400 audit(1750023699.596:399): avc: denied { open } for pid=6334 comm="syz.0.131" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.269673][ T30] audit: type=1400 audit(1750023700.026:400): avc: denied { ioctl } for pid=6338 comm="syz.3.132" path="socket:[9676]" dev="sockfs" ino=9676 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.474740][ T30] audit: type=1400 audit(1750023700.426:401): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.586144][ T6348] batman_adv: batadv0: Adding interface: dummy0 [ 99.592606][ T6348] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.617916][ T6348] batman_adv: batadv0: Interface activated: dummy0 [ 100.400641][ T6359] overlayfs: failed to resolve './file1': -2 [ 101.172743][ T30] audit: type=1400 audit(1750023702.126:402): avc: denied { mount } for pid=6345 comm="syz.1.133" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.312139][ T30] audit: type=1400 audit(1750023702.246:403): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.424197][ T6378] input: syz0 as /devices/virtual/input/input11 [ 101.653277][ T30] audit: type=1400 audit(1750023702.596:404): avc: denied { write } for pid=6375 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.673655][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.695818][ T5832] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 101.713583][ T5881] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.721754][ T5832] Bluetooth: hci2: Injecting HCI hardware error event [ 101.729958][ T5832] Bluetooth: hci2: hardware error 0x00 [ 101.913358][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 101.936281][ T5881] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 101.969963][ T30] audit: type=1400 audit(1750023702.606:405): avc: denied { bind } for pid=6375 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.998165][ T5837] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 102.006768][ T5881] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.017286][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.027915][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.039079][ T5881] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.054310][ T6390] __nla_validate_parse: 2 callbacks suppressed [ 102.054325][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.146'. [ 102.066951][ T5881] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.069737][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.146'. [ 102.080976][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.111408][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.146'. [ 102.124177][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.146'. [ 102.400428][ T5837] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 102.409175][ T5837] Bluetooth: hci0: Injecting HCI hardware error event [ 102.417418][ T5837] Bluetooth: hci0: hardware error 0x00 [ 102.676514][ T5881] usb 4-1: usb_control_msg returned -32 [ 102.682231][ T5881] usbtmc 4-1:16.0: can't read capabilities [ 102.702814][ T5881] usb 4-1: USB disconnect, device number 5 [ 103.227309][ T6411] overlayfs: failed to resolve './file1': -2 [ 103.765712][ T6410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.771874][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 103.781062][ T6410] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.500114][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 104.629948][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 104.629975][ T30] audit: type=1400 audit(1750023705.576:407): avc: denied { ioctl } for pid=6424 comm="syz.4.160" path="socket:[9022]" dev="sockfs" ino=9022 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.660483][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.000221][ T5881] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.110974][ T975] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.282893][ T30] audit: type=1400 audit(1750023706.206:408): avc: denied { write } for pid=6432 comm="syz.2.163" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 105.345439][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 105.365949][ T5881] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 105.376207][ T30] audit: type=1326 audit(1750023706.326:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b38e929 code=0x7fc00000 [ 105.399028][ T5881] usb 2-1: config 0 has no interface number 0 [ 105.409278][ T5881] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.409932][ T30] audit: type=1326 audit(1750023706.326:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb65b38e929 code=0x7fc00000 [ 105.430210][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 105.448939][ T30] audit: type=1326 audit(1750023706.326:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b38e929 code=0x7fc00000 [ 105.449568][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.472244][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.486888][ T5881] usb 2-1: config 0 interface 85 has no altsetting 0 [ 105.495143][ T30] audit: type=1326 audit(1750023706.326:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b38e929 code=0x7fc00000 [ 105.523422][ T30] audit: type=1326 audit(1750023706.326:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b38e929 code=0x7fc00000 [ 105.547543][ T30] audit: type=1326 audit(1750023706.326:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b38e929 code=0x7fc00000 [ 105.570774][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.580342][ T975] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.588972][ T30] audit: type=1326 audit(1750023706.326:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b38e929 code=0x7fc00000 [ 105.589442][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.616286][ T30] audit: type=1326 audit(1750023706.326:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65b38e929 code=0x7fc00000 [ 105.621006][ T975] usb 1-1: Product: syz [ 105.643765][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.654758][ T5881] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 105.665204][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.673259][ T5881] usb 2-1: Product: syz [ 105.677424][ T5881] usb 2-1: Manufacturer: syz [ 105.683541][ T975] usb 1-1: Manufacturer: syz [ 105.688130][ T975] usb 1-1: SerialNumber: syz [ 105.692758][ T5881] usb 2-1: SerialNumber: syz [ 105.700275][ T5881] usb 2-1: config 0 descriptor?? [ 105.707150][ T975] usb 1-1: config 0 descriptor?? [ 105.720164][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 105.726800][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 105.738221][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 105.748571][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 105.764781][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 105.776714][ T5905] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 105.785854][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.793904][ T5905] usb 3-1: Product: syz [ 105.798203][ T5905] usb 3-1: Manufacturer: syz [ 105.802837][ T5905] usb 3-1: SerialNumber: syz [ 105.809391][ T5905] usb 3-1: config 0 descriptor?? [ 105.815869][ T6433] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 105.833088][ T5905] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 105.838928][ T5905] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 105.845654][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.852693][ T5905] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 105.858520][ T5905] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 105.865324][ T5905] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 105.921853][ T975] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.031536][ T9] usb 3-1: USB disconnect, device number 4 [ 106.051242][ T9] mcba_usb 3-1:0.0 can0: device disconnected [ 106.320830][ T5881] appletouch 2-1:0.85: Geyser mode initialized. [ 106.339781][ T5881] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input12 [ 106.649666][ T5881] usb 2-1: USB disconnect, device number 3 [ 106.649939][ T5905] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.694092][ T5881] appletouch 2-1:0.85: input: appletouch disconnected [ 106.759112][ T6475] overlayfs: failed to resolve './file1': -2 [ 107.251699][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.272928][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.297849][ T5905] usb 5-1: config 1 has no interface number 0 [ 107.311473][ T5905] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.331606][ T5905] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 107.464519][ T5905] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.487596][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.497812][ T5905] usb 5-1: Product: syz [ 107.502218][ T5905] usb 5-1: Manufacturer: syz [ 107.507341][ T5905] usb 5-1: SerialNumber: syz [ 107.628053][ T975] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 107.673865][ T975] usb 1-1: USB disconnect, device number 5 [ 108.118105][ T6484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.126074][ T6484] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.164765][ T5905] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 108.190092][ T5905] cdc_ncm 5-1:1.1: bind() failure [ 108.202917][ T5905] usb 5-1: USB disconnect, device number 4 [ 108.298855][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 109.664578][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.260656][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.130546][ T6526] overlayfs: failed to resolve './file1': -2 [ 112.990434][ T5905] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.260343][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 113.266632][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 113.266645][ T30] audit: type=1400 audit(1750023714.216:494): avc: denied { setopt } for pid=6543 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.339024][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.353900][ T5905] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 113.369630][ T5905] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 113.400130][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.414707][ T5905] usb 1-1: Product: syz [ 113.418886][ T5905] usb 1-1: Manufacturer: syz [ 113.455573][ T5905] usb 1-1: SerialNumber: syz [ 113.998619][ T972] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.047275][ T5881] usb 1-1: USB disconnect, device number 6 [ 114.181754][ T6551] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.188629][ T6551] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.580705][ T972] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 114.603570][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.620080][ T972] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.652235][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.670057][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.682412][ T972] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.693832][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.705434][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.730067][ T972] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 114.873751][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.885858][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 114.969231][ T972] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.158106][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.923277][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.010398][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.019424][ T972] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.042714][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.051190][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.061423][ T972] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.077024][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.084734][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.093986][ T972] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.105205][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.113118][ T972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.125662][ T972] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.137598][ T972] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.150226][ T972] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.202947][ T972] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.240090][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.246103][ T972] usb 4-1: Product: syz [ 116.246123][ T972] usb 4-1: Manufacturer: syz [ 116.246138][ T972] usb 4-1: SerialNumber: syz [ 116.723960][ T6583] mmap: syz.2.199 (6583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.727014][ T5905] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.196271][ T972] usb 4-1: config 0 descriptor?? [ 117.292199][ T30] audit: type=1400 audit(1750023717.222:495): avc: denied { read append } for pid=6575 comm="syz.2.199" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.315874][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.480208][ T975] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 117.663296][ T975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.776713][ T30] audit: type=1400 audit(1750023717.222:496): avc: denied { open } for pid=6575 comm="syz.2.199" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.800282][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.842725][ T975] usb 3-1: not running at top speed; connect to a high speed hub [ 118.011402][ T975] usb 3-1: config 7 has an invalid interface number: 19 but max is 0 [ 118.123688][ T975] usb 3-1: config 7 has no interface number 0 [ 118.230342][ T975] usb 3-1: config 7 interface 19 has no altsetting 0 [ 118.346256][ T30] audit: type=1400 audit(1750023717.222:497): avc: denied { map } for pid=6575 comm="syz.2.199" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.369619][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.395212][ T6585] fuse: Bad value for 'fd' [ 118.403754][ T975] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=6d.2d [ 118.505840][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.578240][ T972] usb 4-1: can't set config #0, error -71 [ 118.584259][ T30] audit: type=1400 audit(1750023717.232:498): avc: denied { write execute } for pid=6575 comm="syz.2.199" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.613421][ T972] usb 4-1: USB disconnect, device number 6 [ 118.623217][ T975] usb 3-1: Product: syz [ 118.627436][ T975] usb 3-1: Manufacturer: syz [ 118.649830][ T975] usb 3-1: SerialNumber: syz [ 118.730234][ T5905] usb 5-1: device descriptor read/64, error -71 [ 118.915898][ T975] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 118.922478][ T975] gspca_sn9c2028: read1 error -71 [ 118.927876][ T975] gspca_sn9c2028: read1 error -71 [ 118.933208][ T975] gspca_sn9c2028: read1 error -71 [ 118.938383][ T975] sn9c2028 3-1:7.19: probe with driver sn9c2028 failed with error -71 [ 118.948614][ T975] usb 3-1: USB disconnect, device number 5 [ 118.981512][ T5905] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.042759][ T5896] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.518207][ T30] audit: type=1400 audit(1750023720.462:499): avc: denied { create } for pid=6603 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.560430][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 119.575087][ T5896] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 119.685708][ T5896] usb 1-1: config 0 has no interface number 0 [ 119.692135][ T5896] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.713729][ T5896] usb 1-1: config 0 interface 85 has no altsetting 0 [ 119.728920][ T5896] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 119.742307][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.750397][ T5896] usb 1-1: Product: syz [ 119.754577][ T5896] usb 1-1: Manufacturer: syz [ 119.759204][ T5896] usb 1-1: SerialNumber: syz [ 119.769633][ T5896] usb 1-1: config 0 descriptor?? [ 119.794958][ T6607] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.814381][ T30] audit: type=1400 audit(1750023720.472:500): avc: denied { setopt } for pid=6603 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.833586][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.084871][ T6612] geneve2: entered promiscuous mode [ 120.117160][ T6612] geneve2: entered allmulticast mode [ 120.727589][ T5896] appletouch 1-1:0.85: Geyser mode initialized. [ 120.742067][ T5896] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input13 [ 121.194526][ T975] usb 1-1: USB disconnect, device number 7 [ 121.194610][ C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 122.265231][ T975] appletouch 1-1:0.85: input: appletouch disconnected [ 122.426343][ T6629] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 122.562949][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.742119][ T975] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.071061][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 123.137659][ T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.153710][ T975] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 123.166157][ T6635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.196610][ T6635] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.199902][ T975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 123.209170][ T6635] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 123.231465][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.249582][ T975] usb 4-1: Product: syz [ 123.255509][ T975] usb 4-1: Manufacturer: syz [ 123.264642][ T975] usb 4-1: SerialNumber: syz [ 123.505790][ T5905] usb 4-1: USB disconnect, device number 7 [ 123.592793][ T6637] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.598903][ T6637] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.750164][ T5881] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.780059][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 124.913759][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 125.377501][ T5881] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 125.390116][ T5881] usb 5-1: config 0 has no interface number 0 [ 125.401710][ T5881] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.440585][ T5881] usb 5-1: config 0 interface 85 has no altsetting 0 [ 125.451963][ T10] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 125.461040][ T10] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 125.469950][ T10] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 125.484522][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.494845][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 125.504089][ T10] usb 3-1: config 0 has no interface number 0 [ 125.510253][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.518305][ T10] usb 3-1: config 0 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.530244][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.577938][ T5881] usb 5-1: Product: syz [ 125.582539][ T5881] usb 5-1: Manufacturer: syz [ 125.587208][ T10] usb 3-1: config 0 interface 38 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 125.598922][ T5881] usb 5-1: SerialNumber: syz [ 125.609513][ T10] usb 3-1: config 0 interface 38 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 125.610087][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.621317][ T10] usb 3-1: config 0 interface 38 altsetting 0 endpoint 0x6 has invalid maxpacket 1560, setting to 64 [ 125.647361][ T5881] usb 5-1: config 0 descriptor?? [ 125.679020][ T10] usb 3-1: config 0 interface 38 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 125.692720][ T10] usb 3-1: config 0 interface 38 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 125.710270][ T5949] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.732457][ T10] usb 3-1: New USB device found, idVendor=05c6, idProduct=9009, bcdDevice=e6.dc [ 125.774014][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.791335][ T10] usb 3-1: Product: syz [ 125.796970][ T10] usb 3-1: Manufacturer: syz [ 125.802848][ T10] usb 3-1: SerialNumber: syz [ 125.827136][ T10] usb 3-1: config 0 descriptor?? [ 125.851598][ T6666] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 125.962945][ T5949] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 126.312244][ T5881] appletouch 5-1:0.85: Geyser mode initialized. [ 126.361296][ T5881] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input14 [ 126.556395][ T5881] usb 5-1: USB disconnect, device number 7 [ 126.758155][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.767448][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.778459][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.786558][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.796364][ T5881] appletouch 5-1:0.85: input: appletouch disconnected [ 126.813929][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.825077][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.834777][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.843928][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.854943][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.863983][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.873714][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.888602][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.898997][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.909059][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.920220][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.927812][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.937061][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.948015][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.956708][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.967162][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.978263][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.986880][ T5949] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.996764][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.008097][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.017100][ T5949] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.029874][ T5949] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.039709][ T5949] usb 2-1: Product: syz [ 127.045800][ T5949] usb 2-1: Manufacturer: syz [ 127.051691][ T5949] usb 2-1: SerialNumber: syz [ 127.100641][ T5949] usb 2-1: config 0 descriptor?? [ 127.152363][ T5949] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 127.429266][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 127.437476][ T5949] usb 2-1: USB disconnect, device number 4 [ 127.698569][ T5949] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 127.885890][ T5881] usb 3-1: USB disconnect, device number 6 [ 127.966187][ T30] audit: type=1400 audit(1750023728.922:501): avc: denied { read } for pid=6691 comm="syz.4.237" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.053688][ T30] audit: type=1400 audit(1750023728.922:502): avc: denied { open } for pid=6691 comm="syz.4.237" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.078507][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.119857][ T30] audit: type=1326 audit(1750023729.002:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682d38e929 code=0x7fc00000 [ 128.143063][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.834863][ T30] audit: type=1326 audit(1750023729.752:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f682d38e929 code=0x7fc00000 [ 128.873040][ T30] audit: type=1326 audit(1750023729.822:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682d38e929 code=0x7fc00000 [ 128.896251][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.967443][ T30] audit: type=1326 audit(1750023729.822:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682d38e929 code=0x7fc00000 [ 128.990677][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.125053][ T30] audit: type=1326 audit(1750023729.822:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682d38e929 code=0x7fc00000 [ 129.280260][ T30] audit: type=1326 audit(1750023729.822:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682d38e929 code=0x7fc00000 [ 129.316135][ T30] audit: type=1326 audit(1750023729.822:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682d38e929 code=0x7fc00000 [ 129.339604][ T30] audit: type=1326 audit(1750023729.822:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682d38e929 code=0x7fc00000 [ 130.446712][ T5949] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.983049][ T5949] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 131.008847][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.106244][ T5949] usb 3-1: config 0 descriptor?? [ 131.181087][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 131.230163][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.286644][ T6740] kvm: pic: non byte write [ 131.367497][ T5949] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 131.400140][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 131.411602][ T5881] usb 1-1: config 0 has an invalid interface number: 144 but max is 0 [ 131.437062][ T5881] usb 1-1: config 0 has no interface number 0 [ 131.445530][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=08c5, bcdDevice=45.6f [ 131.459591][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.483593][ T5881] usb 1-1: Product: syz [ 131.487832][ T5881] usb 1-1: Manufacturer: syz [ 131.493606][ T5881] usb 1-1: SerialNumber: syz [ 131.504199][ T5881] usb 1-1: config 0 descriptor?? [ 131.664273][ T5949] usb 3-1: USB disconnect, device number 7 [ 131.750148][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.333612][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.341249][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074364][ T5881] usb 1-1: Found UVC 0.00 device syz (046d:08c5) [ 133.080798][ T5881] usb 1-1: No valid video chain found. [ 133.107824][ T6752] overlayfs: failed to resolve './file1': -2 [ 133.151541][ T5881] usb 1-1: USB disconnect, device number 8 [ 133.324884][ T6763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'. [ 133.342912][ T6763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.261'. [ 133.352367][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 133.358130][ T6763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'. [ 133.367443][ T6763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.261'. [ 133.378167][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 133.387648][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.397777][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.410102][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.428113][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.443896][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.494645][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.080505][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 134.086038][ T10] usbtmc 4-1:16.0: can't read capabilities [ 134.202987][ T6755] syz.2.258 (6755): drop_caches: 2 [ 134.690782][ T6745] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 134.698042][ T10] usb 4-1: USB disconnect, device number 8 [ 135.191912][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.266'. [ 135.321902][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 135.321918][ T30] audit: type=1400 audit(1750023736.272:553): avc: denied { bind } for pid=6785 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.263483][ T6790] warning: `syz.0.269' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.354370][ T30] audit: type=1400 audit(1750023737.312:554): avc: denied { connect } for pid=6791 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.373667][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.385173][ T5905] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.698111][ T30] audit: type=1400 audit(1750023738.652:555): avc: denied { name_bind } for pid=6816 comm="syz.1.278" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 137.798333][ T5905] usb 4-1: device descriptor read/64, error -71 [ 138.539365][ T5905] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.678393][ T30] audit: type=1400 audit(1750023739.632:556): avc: denied { map } for pid=6827 comm="syz.2.282" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 138.815955][ T5905] usb 4-1: device descriptor read/64, error -71 [ 138.947221][ T5905] usb usb4-port1: attempt power cycle [ 139.487474][ T6833] capability: warning: `syz.3.283' uses deprecated v2 capabilities in a way that may be insecure [ 139.990830][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 141.076901][ T30] audit: type=1400 audit(1750023742.032:557): avc: denied { execute } for pid=6846 comm="syz.2.290" path="/60/cpu.stat" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.199380][ T6868] ------------[ cut here ]------------ [ 142.205110][ T6868] WARNING: CPU: 0 PID: 6868 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 142.215388][ T6868] Modules linked in: [ 142.219897][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.1.295 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 142.232409][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.242520][ T6868] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 142.249184][ T6868] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6d 7a 0e 00 75 0b c6 05 7a 6d 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 142.258054][ T30] audit: type=1400 audit(1750023743.212:558): avc: denied { bind } for pid=6863 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.268980][ T6868] RSP: 0018:ffffc900031778d8 EFLAGS: 00010246 [ 142.294124][ T6868] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 142.302150][ T6868] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40 [ 142.310202][ T6868] RBP: 0020000000078000 R08: 0000000000000007 R09: 0000000000000000 [ 142.318235][ T6868] R10: 0020000000078000 R11: ffffffff8222bdb4 R12: 000000000000002a [ 142.327173][ T6868] R13: 1ffff9200062ef30 R14: 0020000000078000 R15: 000000000000002a [ 142.334427][ T30] audit: type=1400 audit(1750023743.292:559): avc: denied { ioctl } for pid=6870 comm="syz.0.296" path="/dev/usbmon7" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.335741][ T6868] FS: 00007fb654b936c0(0000) GS:ffff888124753000(0000) knlGS:0000000000000000 [ 142.360125][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.375254][ T6868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.381908][ T6868] CR2: 0000200000001000 CR3: 000000006c90d000 CR4: 00000000003526f0 [ 142.389942][ T6868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.397964][ T6868] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.406041][ T6868] Call Trace: [ 142.409352][ T6868] [ 142.412349][ T6868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.418722][ T6868] ? kasan_quarantine_put+0x10a/0x240 [ 142.425167][ T6868] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.430782][ T6868] ? kfree+0x2b4/0x4d0 [ 142.434861][ T6868] ? p9_client_clunk+0x12a/0x170 [ 142.439840][ T6868] ? p9_client_clunk+0x12f/0x170 [ 142.444799][ T6868] ? v9fs_fid_get_acl+0x7a/0x120 [ 142.449730][ T6868] __alloc_pages_noprof+0xb/0x1b0 [ 142.454775][ T6868] ___kmalloc_large_node+0x84/0x1e0 [ 142.460051][ T6868] ? v9fs_fid_get_acl+0x7a/0x120 [ 142.464992][ T6868] __kmalloc_large_node_noprof+0x1c/0x70 [ 142.470658][ T6868] __kmalloc_noprof.cold+0xc/0x61 [ 142.475703][ T6868] ? __pfx_iget5_locked+0x10/0x10 [ 142.480825][ T6868] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 142.486849][ T6868] v9fs_fid_get_acl+0x7a/0x120 [ 142.491690][ T6868] v9fs_get_acl+0xee/0x530 [ 142.496126][ T6868] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 142.501731][ T6868] v9fs_mount+0x4fd/0xa30 [ 142.506098][ T6868] ? __pfx_v9fs_mount+0x10/0x10 [ 142.511150][ T6868] ? cap_capable+0xb3/0x250 [ 142.515675][ T6868] ? __pfx_v9fs_mount+0x10/0x10 [ 142.520566][ T6868] legacy_get_tree+0x10c/0x220 [ 142.525913][ T6868] vfs_get_tree+0x8b/0x340 [ 142.530797][ T6868] path_mount+0x1414/0x2020 [ 142.535345][ T6868] ? kmem_cache_free+0x2d1/0x4d0 [ 142.540332][ T6868] ? __pfx_path_mount+0x10/0x10 [ 142.545205][ T6868] ? putname+0x154/0x1a0 [ 142.549492][ T6868] __x64_sys_mount+0x28d/0x310 [ 142.554301][ T6868] ? __pfx___x64_sys_mount+0x10/0x10 [ 142.559623][ T6868] do_syscall_64+0xcd/0x4c0 [ 142.565104][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.571038][ T6868] RIP: 0033:0x7fb653d8e929 [ 142.575475][ T6868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.595180][ T6868] RSP: 002b:00007fb654b93038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.603659][ T6868] RAX: ffffffffffffffda RBX: 00007fb653fb5fa0 RCX: 00007fb653d8e929 [ 142.611748][ T6868] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 142.619742][ T6868] RBP: 00007fb653e10b39 R08: 0000200000000580 R09: 0000000000000000 [ 142.628346][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.636677][ T6868] R13: 0000000000000000 R14: 00007fb653fb5fa0 R15: 00007ffd4491c518 [ 142.644718][ T6868] [ 142.647733][ T6868] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.654993][ T6868] CPU: 0 UID: 0 PID: 6868 Comm: syz.1.295 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 142.666863][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.676898][ T6868] Call Trace: [ 142.680154][ T6868] [ 142.683074][ T6868] dump_stack_lvl+0x3d/0x1f0 [ 142.687650][ T6868] panic+0x71c/0x800 [ 142.691538][ T6868] ? __pfx_panic+0x10/0x10 [ 142.695947][ T6868] ? show_trace_log_lvl+0x29b/0x3e0 [ 142.701140][ T6868] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 142.707202][ T6868] check_panic_on_warn+0xab/0xb0 [ 142.712130][ T6868] __warn+0xf6/0x3c0 [ 142.716018][ T6868] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 142.722086][ T6868] report_bug+0x3c3/0x580 [ 142.726398][ T6868] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 142.732447][ T6868] handle_bug+0x184/0x210 [ 142.736754][ T6868] exc_invalid_op+0x17/0x50 [ 142.741234][ T6868] asm_exc_invalid_op+0x1a/0x20 [ 142.746068][ T6868] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 142.752738][ T6868] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6d 7a 0e 00 75 0b c6 05 7a 6d 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 142.772331][ T6868] RSP: 0018:ffffc900031778d8 EFLAGS: 00010246 [ 142.778384][ T6868] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 142.786341][ T6868] RDX: 0000000000000000 RSI: 000000000000002a RDI: 0000000000040d40 [ 142.794295][ T6868] RBP: 0020000000078000 R08: 0000000000000007 R09: 0000000000000000 [ 142.802240][ T6868] R10: 0020000000078000 R11: ffffffff8222bdb4 R12: 000000000000002a [ 142.810188][ T6868] R13: 1ffff9200062ef30 R14: 0020000000078000 R15: 000000000000002a [ 142.818138][ T6868] ? kasan_save_track+0x14/0x30 [ 142.822982][ T6868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.829293][ T6868] ? kasan_quarantine_put+0x10a/0x240 [ 142.834647][ T6868] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.839828][ T6868] ? kfree+0x2b4/0x4d0 [ 142.843884][ T6868] ? p9_client_clunk+0x12a/0x170 [ 142.848810][ T6868] ? p9_client_clunk+0x12f/0x170 [ 142.853736][ T6868] ? v9fs_fid_get_acl+0x7a/0x120 [ 142.858648][ T6868] __alloc_pages_noprof+0xb/0x1b0 [ 142.863652][ T6868] ___kmalloc_large_node+0x84/0x1e0 [ 142.868855][ T6868] ? v9fs_fid_get_acl+0x7a/0x120 [ 142.873768][ T6868] __kmalloc_large_node_noprof+0x1c/0x70 [ 142.879382][ T6868] __kmalloc_noprof.cold+0xc/0x61 [ 142.884393][ T6868] ? __pfx_iget5_locked+0x10/0x10 [ 142.889395][ T6868] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 142.895364][ T6868] v9fs_fid_get_acl+0x7a/0x120 [ 142.900108][ T6868] v9fs_get_acl+0xee/0x530 [ 142.904502][ T6868] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 142.910037][ T6868] v9fs_mount+0x4fd/0xa30 [ 142.914346][ T6868] ? __pfx_v9fs_mount+0x10/0x10 [ 142.919174][ T6868] ? cap_capable+0xb3/0x250 [ 142.923669][ T6868] ? __pfx_v9fs_mount+0x10/0x10 [ 142.928508][ T6868] legacy_get_tree+0x10c/0x220 [ 142.933262][ T6868] vfs_get_tree+0x8b/0x340 [ 142.937655][ T6868] path_mount+0x1414/0x2020 [ 142.942143][ T6868] ? kmem_cache_free+0x2d1/0x4d0 [ 142.947059][ T6868] ? __pfx_path_mount+0x10/0x10 [ 142.951903][ T6868] ? putname+0x154/0x1a0 [ 142.956137][ T6868] __x64_sys_mount+0x28d/0x310 [ 142.960883][ T6868] ? __pfx___x64_sys_mount+0x10/0x10 [ 142.966153][ T6868] do_syscall_64+0xcd/0x4c0 [ 142.970640][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.976525][ T6868] RIP: 0033:0x7fb653d8e929 [ 142.980934][ T6868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.000520][ T6868] RSP: 002b:00007fb654b93038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.008910][ T6868] RAX: ffffffffffffffda RBX: 00007fb653fb5fa0 RCX: 00007fb653d8e929 [ 143.016863][ T6868] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 143.024844][ T6868] RBP: 00007fb653e10b39 R08: 0000200000000580 R09: 0000000000000000 [ 143.032792][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.040741][ T6868] R13: 0000000000000000 R14: 00007fb653fb5fa0 R15: 00007ffd4491c518 [ 143.048712][ T6868] [ 143.051918][ T6868] Kernel Offset: disabled [ 143.056221][ T6868] Rebooting in 86400 seconds..