last executing test programs: 48.089809345s ago: executing program 0 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4089, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, &(0x7f0000000100), 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 44.806472973s ago: executing program 0 (id=1576): r0 = syz_io_uring_setup(0x34b3, 0x0, &(0x7f0000000100), &(0x7f0000000140)) epoll_create(0xaf2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x27, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}}, 0x24000100) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) 43.229899836s ago: executing program 0 (id=1580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00000000f507843f344cfe4496554402dc2180dc48b141fffae5f385ed3dd4f23fbb2bdb80d09dc498ed330fe14ce98f84b380bed836d27ed44e1a3b064a4fdf47d70ddfc5d6fdf2534efde7c53733e59deb7d51d79c8c4e63d90dc4e9596d65f9483a63364332359dc92bd2589f288b8cbb06c6340d196732421e99a35520c08da41ced30b21aff6079352b082758618f43018c710be3f4fa6773a9763a185c23e1c9107d8002431f1285276a4f71da5e692a77c8519a448e6b9b67b9d2f4e19fd5f5354cb700b22fb6ede47aef42c0fec06802b35a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x1, 0x12, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000500020000000200000007000000", @ANYRES32=r9, @ANYBLOB="004002000000000014001a80100005800c000280080001"], 0x34}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x8, 0x410000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 42.102814789s ago: executing program 0 (id=1582): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400), 0x4) sendto(0xffffffffffffffff, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) 41.12227774s ago: executing program 0 (id=1584): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/75, 0x8e, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00'], 0x28}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf257f"], 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x8040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) 14.065068225s ago: executing program 0 (id=1584): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r5, &(0x7f0000000080)=""/75, 0x8e, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00'], 0x28}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf257f"], 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x8040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) 9.046427703s ago: executing program 4 (id=1676): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x3) 8.649580962s ago: executing program 4 (id=1678): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) kexec_load(0xfffffffffffffffe, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2008400, &(0x7f0000000400)) 7.898612029s ago: executing program 4 (id=1681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)="0cf2abedb6689499e8fe71e7ef16", 0xe}, {&(0x7f0000000480)="429c08", 0x3}], 0x2}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.934428652s ago: executing program 1 (id=1682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0xff], [], 'veth0_vlan\x00', '\x00', {0xff}, {}, 0x11, 0x0, 0x0, 0x44}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@multiport={{0x50}, {0x0, 0xfe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x0, 0xff, 0x1, 0x7, 0x7, 0xbb]}}}, {{@ipv6={@private0, @remote, [0x0, 0x0, 0x0, 0xff000000], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x62}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x4, 0x3}, {0x4, 0x0, 0x3}, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a00000005000100070000000900020073797a300000000005000400000000001400078008001340001f0000080006400000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, @bcast, @bpq0, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @bcast]}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x74100, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118400000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r8 = syz_io_uring_setup(0x4adb, &(0x7f0000000080)={0x0, 0x4622, 0x10100, 0x40000004, 0x27a}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRESOCT=r9], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000340)={r7, 0x3}, 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)) 6.925066952s ago: executing program 2 (id=1683): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r6 = socket$netlink(0x10, 0x3, 0xa) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000480)={@rand_addr, @loopback, 0x0}, &(0x7f0000000580)=0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000000)={0x1}, 0x2) r10 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000140)={0x3, 0x1}) r11 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x32c, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "0312f6e72ca6d07506fcdec5a543d238b17eaf983457caf0f806d2b4646b9bf89139e084ebb24e9c3f631f91e105577789f5d7cf12d8740555eda0cc99441fd380b949141c99582470ea31f90882a55eb5522980c432fd4b22e77ae7ff08994ebd31d317603c4075b06edcec48708da4a23a9b26df728a8a0cc9e774e00082f94052af7258624a12257eced635bc06b6007febde0454fb97f5a3cea0cb26b5073d6b5f94ef7274b63977f02b2b9092b4ace8177946a581edb5e154884fbe5db3061b67ae139c402ea77048dbaf1be657e094513a660a425a98404e97dd19cab812bd90570742"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "2eff7d7c54daa5af20fa69dfab729af6a61fc96afa613faafe411eda446fece1265ce19c7f65b9d6c0520e84a37afee214850711c976770c434867"}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdb54}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ec}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x91-\x8d]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffbff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'wireguard\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_MASK={0x7a, 0x5, "9f3867197317b001c4d6d8c3aa141de32cbbf27f73aa9b038cd7e2b599fad5a543fe3bbe7144d6913be0018365be9afcff792f04f4466f0df33e9665dc0772f91b0521456234d05758a60095f3dca74d5a3e24f91181a054d31f1604447f0e2c8117a13c8f013b6a3b31e1f02d779766497f52136b98"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x32c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv6_getroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000}}, 0x39}, 0x1, 0x0, 0x0, 0x1}, 0x24008000) futex(&(0x7f00000001c0), 0xb, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x1) 5.622023737s ago: executing program 2 (id=1688): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x82}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) llistxattr(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5.260044182s ago: executing program 1 (id=1689): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) 5.12706298s ago: executing program 3 (id=1690): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000048b000/0x3000)=nil, &(0x7f00000e5000/0x3000)=nil, 0x3000, 0x1}) 4.897426772s ago: executing program 1 (id=1691): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x30d803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) 3.564949331s ago: executing program 2 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x1ff, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x0, &(0x7f00000001c0)) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000000c0)='./file1\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) 2.809407536s ago: executing program 1 (id=1693): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xd}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_usb_control_io$hid(r0, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) 2.69272485s ago: executing program 4 (id=1694): io_uring_setup(0x4116, &(0x7f0000000140)={0x0, 0x3a16, 0x40, 0x1, 0x49}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x4, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x8) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, 0xfdfd}) 2.515121832s ago: executing program 2 (id=1695): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0xfffffffffffffffe, &(0x7f0000000000)) 2.502816087s ago: executing program 4 (id=1696): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000500)={0x1, r2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) poll(&(0x7f00000001c0)=[{r4, 0x102}], 0x1, 0x3) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.385240486s ago: executing program 2 (id=1697): syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x11, 0xe7, 0xba, 0x5a, 0x20, 0x157e, 0x3006, 0x274a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x9, 0x1, 0x60, 0x0, [{{0x9, 0x4, 0xe6, 0x8, 0x3, 0x57, 0x49, 0xd6, 0x9, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0xc, 0xa0}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x8e, 0x2, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x7, 0x9, 0x1}}]}}]}}]}}, 0x0) 2.261990058s ago: executing program 3 (id=1698): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xfff8, 0xf}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}}, 0x0) socketpair(0x1d, 0x2, 0x7, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.130409209s ago: executing program 3 (id=1699): connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @rand_addr=0x1}, 0x7) 2.129986797s ago: executing program 3 (id=1700): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 2.085037231s ago: executing program 3 (id=1701): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) 2.04382798s ago: executing program 3 (id=1702): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) poll(&(0x7f0000000040)=[{r1, 0x4000}, {r1, 0x4020}, {r1, 0x10000}], 0x3, 0xfffffffd) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 974.386178ms ago: executing program 1 (id=1703): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfffd, 0x1, @loopback, 0x472}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000400)='ext4_sync_file_enter\x00', r4, 0x0, 0xfffffd}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 718.463093ms ago: executing program 2 (id=1704): r0 = fsopen(&(0x7f0000000340)='f2fs\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$pptp(0x18, 0x1, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 79.771523ms ago: executing program 4 (id=1705): dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000080c0)="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", 0x2000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) 0s ago: executing program 1 (id=1706): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314241}}) kernel console output (not intermixed with test programs): s beyond EOD, truncated [ 559.285483][T11317] loop9: p3 start 2635344306 is beyond EOD, truncated [ 559.541261][ T29] audit: type=1326 audit(1737507698.586:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 559.564198][T11330] tmpfs: Unknown parameter 'qzÅÄö˜Ò' [ 559.737525][ T29] audit: type=1326 audit(1737507698.586:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 559.787448][ T29] audit: type=1326 audit(1737507698.586:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 559.811148][ T29] audit: type=1326 audit(1737507698.586:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 560.609163][ T29] audit: type=1326 audit(1737507698.586:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 560.650081][ T29] audit: type=1326 audit(1737507698.596:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faaab984690 code=0x7ffc0000 [ 560.891879][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 560.968849][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 560.984735][ T29] audit: type=1326 audit(1737507698.596:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.031349][ T5835] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 561.264283][ T29] audit: type=1326 audit(1737507698.606:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.287851][ T29] audit: type=1326 audit(1737507698.606:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.311246][ T29] audit: type=1326 audit(1737507698.606:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.335010][ T29] audit: type=1326 audit(1737507698.606:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.359684][ T29] audit: type=1326 audit(1737507698.606:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.383623][ T29] audit: type=1326 audit(1737507698.606:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.407589][ T29] audit: type=1326 audit(1737507698.606:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.411359][ T5835] usb 4-1: device descriptor read/64, error -71 [ 561.440784][ T29] audit: type=1326 audit(1737507698.606:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.501059][ T29] audit: type=1326 audit(1737507698.606:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11323 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab985d29 code=0x7ffc0000 [ 561.778887][T11356] FAULT_INJECTION: forcing a failure. [ 561.778887][T11356] name failslab, interval 1, probability 0, space 0, times 0 [ 561.808313][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.4.1353 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 561.818745][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 561.828801][T11356] Call Trace: [ 561.832080][T11356] [ 561.835011][T11356] dump_stack_lvl+0x16c/0x1f0 [ 561.839697][T11356] should_fail_ex+0x497/0x5b0 [ 561.844357][T11356] ? fs_reclaim_acquire+0xae/0x150 [ 561.849445][T11356] should_failslab+0xc2/0x120 [ 561.854106][T11356] __kmalloc_cache_node_noprof+0x6e/0x420 [ 561.859811][T11356] ? mark_lock+0xb5/0xc60 [ 561.864130][T11356] ? __get_vm_area_node+0x101/0x2f0 [ 561.869336][T11356] __get_vm_area_node+0x101/0x2f0 [ 561.874369][T11356] __vmalloc_node_range_noprof+0x26a/0x1530 [ 561.880265][T11356] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 561.885823][T11356] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 561.891376][T11356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 561.897709][T11356] ? __pfx___lock_acquire+0x10/0x10 [ 561.902915][T11356] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 561.908465][T11356] __vmalloc_noprof+0x6d/0x90 [ 561.913149][T11356] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 561.918702][T11356] bpf_prog_alloc_no_stats+0x54/0x620 [ 561.924076][T11356] ? security_capable+0x7e/0x260 [ 561.929018][T11356] bpf_prog_alloc+0x3b/0x230 [ 561.933613][T11356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.939522][T11356] bpf_prog_load+0x1b3f/0x2660 [ 561.944302][T11356] ? __pfx_bpf_prog_load+0x10/0x10 [ 561.949416][T11356] ? avc_has_perm_noaudit+0x143/0x3a0 [ 561.954816][T11356] ? selinux_bpf+0xde/0x130 [ 561.959333][T11356] __sys_bpf+0x4043/0x49c0 [ 561.963757][T11356] ? __pfx_lock_release+0x10/0x10 [ 561.968781][T11356] ? __pfx___sys_bpf+0x10/0x10 [ 561.973551][T11356] ? vfs_write+0x306/0x1150 [ 561.978059][T11356] ? __mutex_unlock_slowpath+0x164/0x690 [ 561.983715][T11356] ? fput+0x67/0x440 [ 561.987634][T11356] ? ksys_write+0x1ba/0x250 [ 561.992137][T11356] ? __pfx_ksys_write+0x10/0x10 [ 561.996997][T11356] __x64_sys_bpf+0x78/0xc0 [ 562.001425][T11356] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.001655][ T5835] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 562.006619][T11356] do_syscall_64+0xcd/0x250 [ 562.006644][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.024538][T11356] RIP: 0033:0x7fb84b585d29 [ 562.028951][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.048566][T11356] RSP: 002b:00007fb84c479038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.056984][T11356] RAX: ffffffffffffffda RBX: 00007fb84b775fa0 RCX: 00007fb84b585d29 [ 562.064961][T11356] RDX: 0000000000000094 RSI: 00000000200003c0 RDI: 0000000000000005 [ 562.072936][T11356] RBP: 00007fb84c479090 R08: 0000000000000000 R09: 0000000000000000 [ 562.080910][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.088885][T11356] R13: 0000000000000000 R14: 00007fb84b775fa0 R15: 00007ffecdb72e68 [ 562.096873][T11356] [ 562.104408][T11356] warn_alloc: 1 callbacks suppressed [ 562.104419][T11356] syz.4.1353: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 562.127223][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.4.1353 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 562.137642][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 562.147699][T11356] Call Trace: [ 562.150981][T11356] [ 562.153913][T11356] dump_stack_lvl+0x16c/0x1f0 [ 562.158608][T11356] warn_alloc+0x24d/0x3a0 [ 562.162942][T11356] ? __pfx_warn_alloc+0x10/0x10 [ 562.167776][T11356] ? rcu_is_watching+0x12/0xc0 [ 562.172546][T11356] ? __kmalloc_cache_node_noprof+0x2ad/0x420 [ 562.178510][T11356] ? __kasan_kmalloc+0x8a/0xb0 [ 562.183269][T11356] ? __get_vm_area_node+0x1dc/0x2f0 [ 562.188469][T11356] __vmalloc_node_range_noprof+0xd27/0x1530 [ 562.194347][T11356] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 562.199877][T11356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 562.206184][T11356] ? __pfx___lock_acquire+0x10/0x10 [ 562.211379][T11356] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 562.216939][T11356] __vmalloc_noprof+0x6d/0x90 [ 562.221624][T11356] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 562.227180][T11356] bpf_prog_alloc_no_stats+0x54/0x620 [ 562.232559][T11356] ? security_capable+0x7e/0x260 [ 562.237499][T11356] bpf_prog_alloc+0x3b/0x230 [ 562.242084][T11356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 562.247971][T11356] bpf_prog_load+0x1b3f/0x2660 [ 562.252732][T11356] ? __pfx_bpf_prog_load+0x10/0x10 [ 562.257832][T11356] ? avc_has_perm_noaudit+0x143/0x3a0 [ 562.263215][T11356] ? selinux_bpf+0xde/0x130 [ 562.267713][T11356] __sys_bpf+0x4043/0x49c0 [ 562.272119][T11356] ? __pfx_lock_release+0x10/0x10 [ 562.277133][T11356] ? __pfx___sys_bpf+0x10/0x10 [ 562.281899][T11356] ? vfs_write+0x306/0x1150 [ 562.286394][T11356] ? __mutex_unlock_slowpath+0x164/0x690 [ 562.292031][T11356] ? fput+0x67/0x440 [ 562.295916][T11356] ? ksys_write+0x1ba/0x250 [ 562.300405][T11356] ? __pfx_ksys_write+0x10/0x10 [ 562.305248][T11356] __x64_sys_bpf+0x78/0xc0 [ 562.309656][T11356] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.314851][T11356] do_syscall_64+0xcd/0x250 [ 562.319341][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.325229][T11356] RIP: 0033:0x7fb84b585d29 [ 562.329627][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.349220][T11356] RSP: 002b:00007fb84c479038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.357617][T11356] RAX: ffffffffffffffda RBX: 00007fb84b775fa0 RCX: 00007fb84b585d29 [ 562.365585][T11356] RDX: 0000000000000094 RSI: 00000000200003c0 RDI: 0000000000000005 [ 562.373544][T11356] RBP: 00007fb84c479090 R08: 0000000000000000 R09: 0000000000000000 [ 562.381503][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.389460][T11356] R13: 0000000000000000 R14: 00007fb84b775fa0 R15: 00007ffecdb72e68 [ 562.397429][T11356] [ 562.402782][ T5835] usb 4-1: device descriptor read/64, error -71 [ 562.416559][T11356] Mem-Info: [ 562.419745][T11356] active_anon:12584 inactive_anon:0 isolated_anon:0 [ 562.419745][T11356] active_file:13059 inactive_file:38753 isolated_file:0 [ 562.419745][T11356] unevictable:768 dirty:541 writeback:0 [ 562.419745][T11356] slab_reclaimable:11606 slab_unreclaimable:99050 [ 562.419745][T11356] mapped:37953 shmem:10071 pagetables:739 [ 562.419745][T11356] sec_pagetables:0 bounce:0 [ 562.419745][T11356] kernel_misc_reclaimable:0 [ 562.419745][T11356] free:1313381 free_pcp:289 free_cma:0 [ 562.493669][T11356] Node 0 active_anon:38836kB inactive_anon:0kB active_file:52204kB inactive_file:154940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148180kB dirty:2164kB writeback:0kB shmem:27248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10908kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no [ 562.536942][T11356] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 562.579242][T11356] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.616588][T11356] lowmem_reserve[]: 0 2487 2487 0 0 [ 562.624483][T11356] Node 0 DMA32 free:1336608kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:45636kB inactive_anon:0kB active_file:52204kB inactive_file:154840kB unevictable:1536kB writepending:2164kB present:3129332kB managed:2547084kB mlocked:0kB bounce:0kB free_pcp:7440kB local_pcp:2320kB free_cma:0kB [ 562.670587][T11356] lowmem_reserve[]: 0 0 0 0 0 [ 562.678150][T11356] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 562.720794][T11356] lowmem_reserve[]: 0 0 0 0 0 [ 562.725876][T11356] Node 1 Normal free:3904160kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 562.754935][ T5835] usb usb4-port1: attempt power cycle [ 562.761059][T11356] lowmem_reserve[]: 0 0 0 0 0 [ 562.765950][T11356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 562.779278][T11356] Node 0 DMA32: 167*4kB (UME) 294*8kB (UME) 254*16kB (UME) 488*32kB (UME) 1604*64kB (UME) 669*128kB (UME) 293*256kB (UME) 138*512kB (UM) 57*1024kB (UM) 9*2048kB (UME) 221*4096kB (UM) = 1338668kB [ 562.800419][T11356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 562.812569][T11356] Node 1 Normal: 204*4kB (UME) 62*8kB (UE) 36*16kB (UME) 210*32kB (UME) 90*64kB (UME) 29*128kB (UE) 18*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 7*2048kB (UME) 942*4096kB (M) = 3904160kB [ 563.036255][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.056821][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.188563][T11356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.313437][T11356] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 563.322971][T11356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.332586][T11356] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 563.343466][T11356] 56076 total pagecache pages [ 563.348154][T11356] 0 pages in swap cache [ 563.352363][T11356] Free swap = 124400kB [ 563.356561][T11356] Total swap = 124996kB [ 563.360708][T11356] 2097051 pages RAM [ 563.364977][T11356] 0 pages HighMem/MovableOnly [ 563.369706][T11356] 428622 pages reserved [ 563.373908][T11356] 0 pages cma reserved [ 564.704470][T11384] FAULT_INJECTION: forcing a failure. [ 564.704470][T11384] name failslab, interval 1, probability 0, space 0, times 0 [ 564.717166][T11384] CPU: 1 UID: 0 PID: 11384 Comm: syz.2.1360 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 564.727575][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 564.737611][T11384] Call Trace: [ 564.740866][T11384] [ 564.743774][T11384] dump_stack_lvl+0x16c/0x1f0 [ 564.748437][T11384] should_fail_ex+0x497/0x5b0 [ 564.753106][T11384] ? fs_reclaim_acquire+0xae/0x150 [ 564.758219][T11384] should_failslab+0xc2/0x120 [ 564.762891][T11384] __kmalloc_noprof+0xcb/0x510 [ 564.767664][T11384] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 564.773308][T11384] tomoyo_realpath_from_path+0xb9/0x720 [ 564.778866][T11384] ? tomoyo_path_number_perm+0x235/0x590 [ 564.784501][T11384] ? tomoyo_path_number_perm+0x235/0x590 [ 564.790117][T11384] tomoyo_path_number_perm+0x248/0x590 [ 564.795568][T11384] ? tomoyo_path_number_perm+0x235/0x590 [ 564.801193][T11384] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 564.807155][T11384] ? __schedule+0x3d6c/0x5ad0 [ 564.811814][T11384] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.817001][T11384] ? __pfx_lock_release+0x10/0x10 [ 564.822007][T11384] ? trace_lock_acquire+0x14e/0x1f0 [ 564.827180][T11384] ? __pfx___schedule+0x10/0x10 [ 564.832011][T11384] ? lock_acquire+0x2f/0xb0 [ 564.836491][T11384] ? __fget_files+0x40/0x3a0 [ 564.841072][T11384] ? __fget_files+0x206/0x3a0 [ 564.845735][T11384] security_file_ioctl+0x9b/0x240 [ 564.850741][T11384] __x64_sys_ioctl+0xb7/0x200 [ 564.855406][T11384] do_syscall_64+0xcd/0x250 [ 564.859886][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.865763][T11384] RIP: 0033:0x7f4b92b85d29 [ 564.870153][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.889739][T11384] RSP: 002b:00007f4b93934038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.898128][T11384] RAX: ffffffffffffffda RBX: 00007f4b92d76080 RCX: 00007f4b92b85d29 [ 564.906076][T11384] RDX: 0000000020000380 RSI: 00000000c0845657 RDI: 0000000000000007 [ 564.914023][T11384] RBP: 00007f4b93934090 R08: 0000000000000000 R09: 0000000000000000 [ 564.921972][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.929919][T11384] R13: 0000000000000000 R14: 00007f4b92d76080 R15: 00007fffafa41908 [ 564.937873][T11384] [ 564.941898][T11384] ERROR: Out of memory at tomoyo_realpath_from_path. [ 566.176475][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 566.507010][T11398] fuse: Unknown parameter 'fd0x0000000000000004' [ 566.831094][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 566.831110][ T29] audit: type=1400 audit(1737507705.876:4346): avc: denied { mount } for pid=11400 comm="syz.4.1366" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 566.955161][ T29] audit: type=1326 audit(1737507705.876:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 567.776473][ T29] audit: type=1326 audit(1737507705.876:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 567.941556][ T29] audit: type=1326 audit(1737507705.876:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 568.276017][ T29] audit: type=1326 audit(1737507705.876:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 568.344706][ T5835] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 568.451074][ T5871] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 568.572748][T11416] xt_CT: No such helper "netbios-ns" [ 568.580618][ T29] audit: type=1326 audit(1737507705.876:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84b584690 code=0x7ffc0000 [ 568.610170][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 568.618133][ T5835] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 568.624697][ T29] audit: type=1326 audit(1737507705.876:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 568.653604][ T5835] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 568.672469][ T5835] usb 1-1: can't read configurations, error -61 [ 568.687338][ T29] audit: type=1326 audit(1737507705.876:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84b584690 code=0x7ffc0000 [ 568.715971][ T5871] usb 4-1: device descriptor read/64, error -71 [ 568.722997][ T29] audit: type=1326 audit(1737507705.876:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 568.753657][ T29] audit: type=1326 audit(1737507705.876:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.4.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 568.811757][ T5835] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 569.582140][ T5871] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 569.641035][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 569.652054][ T5835] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 569.661735][ T5835] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 569.669345][ T5835] usb 1-1: can't read configurations, error -61 [ 569.679005][ T5835] usb usb1-port1: attempt power cycle [ 569.893181][ T5871] usb 4-1: device descriptor read/64, error -71 [ 570.217391][ T5871] usb usb4-port1: attempt power cycle [ 571.521092][ T5835] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 572.503647][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.516001][ T5835] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 572.526413][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.534730][ T5835] usb 1-1: Product: syz [ 572.538948][ T5835] usb 1-1: Manufacturer: syz [ 572.882042][T11448] input: syz0 as /devices/virtual/input/input31 [ 573.516236][ T5835] usb 1-1: SerialNumber: syz [ 574.534696][ T5835] usb 1-1: config 0 descriptor?? [ 574.540064][ T5835] usb 1-1: can't set config #0, error -71 [ 574.555047][ T5835] usb 1-1: USB disconnect, device number 49 [ 574.853901][T11453] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 574.999124][T11453] syz.2.1377: attempt to access beyond end of device [ 574.999124][T11453] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 575.086996][T11461] fuse: Unknown parameter 'fd0x0000000000000004' [ 575.863841][ T900] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 576.241069][ T900] usb 5-1: Using ep0 maxpacket: 32 [ 576.251550][ T900] usb 5-1: too many configurations: 47, using maximum allowed: 8 [ 576.276012][ T900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 576.301417][ T900] usb 5-1: can't read configurations, error -61 [ 576.691174][ T5871] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 576.932613][ T5871] usb 4-1: device descriptor read/64, error -71 [ 576.995701][ T900] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 577.191245][ T5871] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 577.252760][ T900] usb 5-1: Using ep0 maxpacket: 32 [ 577.361368][ T5871] usb 4-1: device descriptor read/64, error -71 [ 577.368190][ T900] usb 5-1: too many configurations: 47, using maximum allowed: 8 [ 577.470696][ T900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 577.511175][ T5871] usb usb4-port1: attempt power cycle [ 577.517468][ T900] usb 5-1: can't read configurations, error -61 [ 577.536712][ T900] usb usb5-port1: attempt power cycle [ 577.774111][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 577.793406][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 577.793417][ T29] audit: type=1326 audit(1737507716.826:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0532985d29 code=0x7ffc0000 [ 577.845455][ T29] audit: type=1326 audit(1737507716.826:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0532985d29 code=0x7ffc0000 [ 577.873761][ T29] audit: type=1326 audit(1737507716.826:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f0532985d29 code=0x7ffc0000 [ 577.891032][ T900] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 577.897493][ T5871] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 577.909605][ T29] audit: type=1326 audit(1737507716.826:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0532985d29 code=0x7ffc0000 [ 577.943923][ T29] audit: type=1326 audit(1737507716.826:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0532985d29 code=0x7ffc0000 [ 577.975565][ T900] usb 5-1: Using ep0 maxpacket: 32 [ 577.981641][ T900] usb 5-1: too many configurations: 47, using maximum allowed: 8 [ 577.997353][ T29] audit: type=1326 audit(1737507716.826:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0532985d29 code=0x7ffc0000 [ 578.021843][ T900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 578.029415][ T900] usb 5-1: can't read configurations, error -61 [ 578.045433][ T29] audit: type=1326 audit(1737507716.826:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0532985d29 code=0x7ffc0000 [ 578.082924][ T29] audit: type=1326 audit(1737507716.826:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0532985d29 code=0x7ffc0000 [ 578.111784][ T29] audit: type=1326 audit(1737507716.826:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0532987bbc code=0x7ffc0000 [ 578.138149][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 578.145832][ T5917] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 578.165696][ T29] audit: type=1326 audit(1737507716.826:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11495 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0532987af4 code=0x7ffc0000 [ 578.240717][ T5871] usb 4-1: device descriptor read/8, error -71 [ 578.321338][ T5917] usb 3-1: device descriptor read/64, error -71 [ 578.342436][ T9] usb 1-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 578.352980][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.362900][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 578.372441][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.384660][ T9] usb 1-1: config 0 descriptor?? [ 578.503081][ T5871] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 578.533534][ T5871] usb 4-1: device descriptor read/8, error -71 [ 578.561181][ T5917] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 578.595648][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.608185][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.691162][ T5917] usb 3-1: device descriptor read/64, error -71 [ 578.794082][ T5871] usb usb4-port1: unable to enumerate USB device [ 578.807450][ T5917] usb usb3-port1: attempt power cycle [ 578.843771][T11511] kvm: pic: non byte write [ 579.881201][ T5917] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 579.904034][ T5917] usb 3-1: device descriptor read/8, error -71 [ 579.922176][T11501] Bluetooth: hci3: command 0x0406 tx timeout [ 579.933042][T11525] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 580.494503][ T5917] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 580.580995][ T5917] usb 3-1: device descriptor read/8, error -71 [ 580.728693][ T5917] usb usb3-port1: unable to enumerate USB device [ 580.964176][ T9] usb 1-1: string descriptor 0 read error: -71 [ 580.974557][ T9] usb 1-1: USB disconnect, device number 50 [ 581.097630][T11533] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 581.153601][T11533] syz.4.1399: attempt to access beyond end of device [ 581.153601][T11533] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 582.018175][T11545] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 582.155730][T11545] syz.3.1401: attempt to access beyond end of device [ 582.155730][T11545] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 585.082742][T11565] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 585.945844][ T5871] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 586.087553][ T5917] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 586.131157][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 586.138395][ T5871] usb 5-1: too many configurations: 47, using maximum allowed: 8 [ 586.191905][ T5871] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 586.199728][ T5871] usb 5-1: can't read configurations, error -61 [ 586.361262][ T5871] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 586.906322][ T5871] usb 5-1: device not accepting address 40, error -71 [ 586.913428][ T5871] usb usb5-port1: attempt power cycle [ 587.044261][T11588] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 587.246106][T11588] syz.1.1415: attempt to access beyond end of device [ 587.246106][T11588] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 587.286784][T11590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1417'. [ 587.344040][T11590] netlink: 'syz.4.1417': attribute type 19 has an invalid length. [ 587.421695][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 587.421710][ T29] audit: type=1326 audit(1737507726.486:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.4.1417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb84b585d29 code=0x0 [ 587.450652][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.522678][T11604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1420'. [ 587.538714][T11604] netlink: 'syz.0.1420': attribute type 19 has an invalid length. [ 587.612099][ T29] audit: type=1326 audit(1737507726.676:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11599 comm="syz.0.1420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0532985d29 code=0x0 [ 589.968200][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 590.201130][ T9] usb 4-1: device descriptor read/64, error -71 [ 590.881208][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 591.256767][ T9] usb 4-1: device descriptor read/64, error -71 [ 591.371242][ T9] usb usb4-port1: attempt power cycle [ 591.406700][T11651] kvm: pic: non byte write [ 591.547419][ T5900] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 591.590805][ T29] audit: type=1326 audit(1737507730.646:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 591.857107][ T5900] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 591.871695][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.077466][ T29] audit: type=1326 audit(1737507730.676:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 592.081984][ T5900] usb 3-1: config 0 descriptor?? [ 592.100947][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.188837][ T29] audit: type=1326 audit(1737507730.686:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 592.545434][ T29] audit: type=1326 audit(1737507730.706:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 592.569537][ T29] audit: type=1326 audit(1737507730.706:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 592.595959][ T29] audit: type=1326 audit(1737507730.736:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 592.662134][ T29] audit: type=1326 audit(1737507730.736:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 592.715262][ T29] audit: type=1326 audit(1737507730.746:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 592.759217][ T29] audit: type=1326 audit(1737507730.746:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 593.051702][ T29] audit: type=1326 audit(1737507730.746:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 593.691445][ T29] audit: type=1326 audit(1737507730.746:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 594.100687][ T29] audit: type=1326 audit(1737507730.746:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84b584690 code=0x7ffc0000 [ 594.479491][ T29] audit: type=1326 audit(1737507730.746:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11655 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 594.502981][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.520362][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.558708][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.598938][ T5900] usb 3-1: Cannot set autoneg [ 594.609971][ T5900] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 594.625120][ T5900] usb 3-1: USB disconnect, device number 54 [ 594.861182][ T5871] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 595.091253][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 595.100890][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 595.268084][ T5871] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 595.370400][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.397273][ T5871] usb 5-1: Product: syz [ 595.409389][ T5871] usb 5-1: Manufacturer: syz [ 595.430516][ T5871] usb 5-1: SerialNumber: syz [ 595.445943][ T5871] usb 5-1: config 0 descriptor?? [ 595.554931][T11691] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 595.683095][T11686] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 595.707921][T11686] syz.3.1441: attempt to access beyond end of device [ 595.707921][T11686] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 597.371129][ T5835] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 597.575026][T11712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1447'. [ 597.625536][T11712] netlink: 'syz.0.1447': attribute type 19 has an invalid length. [ 597.635341][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 597.635354][ T29] audit: type=1326 audit(1737507736.696:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11709 comm="syz.0.1447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0532985d29 code=0x0 [ 597.681963][ T5900] usb 5-1: USB disconnect, device number 42 [ 598.541499][ T5835] usb 4-1: device descriptor read/64, error -71 [ 599.005338][T11726] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 599.029365][T11726] syz.1.1451: attempt to access beyond end of device [ 599.029365][T11726] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 599.630979][ T5835] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 600.631189][ T5871] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 600.951839][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 600.969838][ T5871] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 601.225277][ T5871] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 601.234462][ T5871] usb 1-1: can't read configurations, error -61 [ 601.281029][ T29] audit: type=1400 audit(1737507740.336:4479): avc: denied { connect } for pid=11740 comm="syz.1.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 602.481402][ T29] audit: type=1400 audit(1737507740.336:4480): avc: denied { listen } for pid=11740 comm="syz.1.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 602.505964][ T5871] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 602.655892][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1455'. [ 603.007814][ T29] audit: type=1400 audit(1737507742.066:4481): avc: denied { setopt } for pid=11756 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 603.587425][T11771] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1459'. [ 603.677216][T11776] netlink: 'syz.4.1459': attribute type 19 has an invalid length. [ 603.688649][ T29] audit: type=1326 audit(1737507742.746:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11755 comm="syz.4.1459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb84b585d29 code=0x0 [ 605.159661][ T5871] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 605.450047][ T5871] usb 3-1: device descriptor read/64, error -71 [ 605.861459][ T5871] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 606.287082][ T5871] usb 3-1: device descriptor read/64, error -71 [ 606.407775][ T29] audit: type=1326 audit(1737507745.466:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 606.481006][ T29] audit: type=1326 audit(1737507745.496:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 606.500819][ T5871] usb usb3-port1: attempt power cycle [ 606.511115][ T29] audit: type=1326 audit(1737507745.496:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 606.536787][ T29] audit: type=1326 audit(1737507745.496:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 606.560982][ T29] audit: type=1326 audit(1737507745.496:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 606.584733][ T29] audit: type=1326 audit(1737507745.496:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 607.494178][ T29] audit: type=1326 audit(1737507745.496:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 607.613188][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 607.678066][ T29] audit: type=1326 audit(1737507745.496:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11807 comm="syz.4.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84b585d29 code=0x7ffc0000 [ 607.761162][ T5155] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 607.971109][ T5155] usb 2-1: Using ep0 maxpacket: 32 [ 607.977852][ T5155] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 608.011788][ T5155] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 608.043044][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 608.043057][ T29] audit: type=1400 audit(1737507747.106:4505): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.143207][T11819] FAULT_INJECTION: forcing a failure. [ 608.143207][T11819] name failslab, interval 1, probability 0, space 0, times 0 [ 608.166363][T11819] CPU: 0 UID: 0 PID: 11819 Comm: syz.2.1474 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 608.170334][ T29] audit: type=1400 audit(1737507747.186:4506): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.176775][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 608.176821][T11819] Call Trace: [ 608.176828][T11819] [ 608.176836][T11819] dump_stack_lvl+0x16c/0x1f0 [ 608.200938][ T5155] usb 2-1: can't read configurations, error -61 [ 608.210884][T11819] should_fail_ex+0x497/0x5b0 [ 608.210915][T11819] ? fs_reclaim_acquire+0xae/0x150 [ 608.210939][T11819] should_failslab+0xc2/0x120 [ 608.242357][T11819] __kmalloc_cache_noprof+0x68/0x410 [ 608.247635][T11819] ? find_held_lock+0x2d/0x110 [ 608.252396][T11819] sctp_datamsg_from_user+0x8d/0x1320 [ 608.257759][T11819] ? lock_acquire+0x2f/0xb0 [ 608.262259][T11819] ? mark_held_locks+0x9f/0xe0 [ 608.267019][T11819] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 608.272306][T11819] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 608.278017][T11819] ? sctp_sendmsg+0xff0/0x1eb0 [ 608.282772][T11819] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 608.288135][T11819] ? __pfx_autoremove_wake_function+0x10/0x10 [ 608.294192][T11819] ? mark_held_locks+0x9f/0xe0 [ 608.298948][T11819] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 608.304745][T11819] sctp_sendmsg+0xf0a/0x1eb0 [ 608.309325][T11819] ? avc_has_perm+0x11b/0x1c0 [ 608.313994][T11819] ? __pfx_sctp_sendmsg+0x10/0x10 [ 608.319015][T11819] ? __pfx_sock_has_perm+0x10/0x10 [ 608.324119][T11819] ? import_ubuf+0x1b6/0x220 [ 608.328712][T11819] ? __pfx_sctp_sendmsg+0x10/0x10 [ 608.333732][T11819] inet_sendmsg+0x119/0x140 [ 608.338227][T11819] ____sys_sendmsg+0x98c/0xc90 [ 608.342985][T11819] ? copy_msghdr_from_user+0x10b/0x160 [ 608.348432][T11819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.353721][T11819] ___sys_sendmsg+0x135/0x1e0 [ 608.358392][T11819] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.363593][T11819] ? __pfx_lock_release+0x10/0x10 [ 608.368606][T11819] ? trace_lock_acquire+0x14e/0x1f0 [ 608.373795][T11819] ? __fget_files+0x206/0x3a0 [ 608.378468][T11819] __sys_sendmsg+0x16e/0x220 [ 608.383055][T11819] ? __pfx___sys_sendmsg+0x10/0x10 [ 608.388173][T11819] do_syscall_64+0xcd/0x250 [ 608.392662][T11819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.398550][T11819] RIP: 0033:0x7f4b92b85d29 [ 608.402950][T11819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.422542][T11819] RSP: 002b:00007f4b93955038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.430945][T11819] RAX: ffffffffffffffda RBX: 00007f4b92d75fa0 RCX: 00007f4b92b85d29 [ 608.438907][T11819] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 608.446862][T11819] RBP: 00007f4b93955090 R08: 0000000000000000 R09: 0000000000000000 [ 608.454818][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.462779][T11819] R13: 0000000000000000 R14: 00007f4b92d75fa0 R15: 00007fffafa41908 [ 608.470745][T11819] [ 608.473833][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.480610][ T29] audit: type=1400 audit(1737507747.186:4507): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.506825][ T29] audit: type=1400 audit(1737507747.546:4508): avc: denied { mounton } for pid=11820 comm="syz.3.1475" path="/298/file0" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 608.537450][ T29] audit: type=1400 audit(1737507747.556:4509): avc: denied { mount } for pid=11820 comm="syz.3.1475" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 608.566743][ T29] audit: type=1400 audit(1737507747.556:4510): avc: denied { mounton } for pid=11820 comm="syz.3.1475" path="/298/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 608.590052][ T29] audit: type=1400 audit(1737507747.556:4511): avc: denied { prog_load } for pid=11820 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 608.609375][ T29] audit: type=1400 audit(1737507747.556:4512): avc: denied { bpf } for pid=11820 comm="syz.3.1475" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.640271][ T29] audit: type=1400 audit(1737507747.556:4513): avc: denied { perfmon } for pid=11820 comm="syz.3.1475" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.672082][ T29] audit: type=1400 audit(1737507747.596:4514): avc: denied { bind } for pid=11789 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 608.783850][ T5155] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 608.794207][T11824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1475'. [ 608.951370][ T5155] usb 2-1: Using ep0 maxpacket: 32 [ 608.957722][ T5155] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 609.038915][ T5155] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 609.124892][ T5155] usb 2-1: can't read configurations, error -61 [ 609.191123][ T5155] usb usb2-port1: attempt power cycle [ 612.624098][T11867] input: syz0 as /devices/virtual/input/input32 [ 613.054536][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 613.054550][ T29] audit: type=1400 audit(1737507752.116:4574): avc: denied { create } for pid=11870 comm="syz.1.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 613.105987][ T5871] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 613.471005][ T5871] usb 4-1: device descriptor read/64, error -71 [ 613.547718][ T29] audit: type=1400 audit(1737507752.326:4575): avc: denied { read write } for pid=11849 comm="syz.2.1482" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 613.588294][ T29] audit: type=1400 audit(1737507752.326:4576): avc: denied { open } for pid=11849 comm="syz.2.1482" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 613.728131][ T29] audit: type=1400 audit(1737507752.326:4577): avc: denied { mount } for pid=11849 comm="syz.2.1482" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 613.751511][ T29] audit: type=1400 audit(1737507752.386:4578): avc: denied { create } for pid=11849 comm="syz.2.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 613.787569][ T29] audit: type=1400 audit(1737507752.386:4579): avc: denied { bind } for pid=11849 comm="syz.2.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 613.789367][ T29] audit: type=1400 audit(1737507752.386:4580): avc: denied { accept } for pid=11849 comm="syz.2.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 613.790946][ T29] audit: type=1400 audit(1737507752.546:4581): avc: denied { map_read map_write } for pid=11870 comm="syz.1.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 613.792973][ T29] audit: type=1400 audit(1737507752.606:4582): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 613.840975][ T5871] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 613.971223][ T5871] usb 4-1: device descriptor read/64, error -71 [ 614.082418][ T5871] usb usb4-port1: attempt power cycle [ 614.441148][ T5871] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 614.466231][ T5871] usb 4-1: device descriptor read/8, error -71 [ 614.522345][T11889] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1489'. [ 614.525434][ T29] audit: type=1326 audit(1737507753.586:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.1489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b92b85d29 code=0x0 [ 614.711025][ T5871] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 614.765790][ T5871] usb 4-1: device descriptor read/8, error -71 [ 614.871235][ T5871] usb usb4-port1: unable to enumerate USB device [ 618.111136][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 618.578960][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 618.579000][ T29] audit: type=1400 audit(1737507757.636:4617): avc: denied { read } for pid=5174 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 618.930176][ T9] usb 2-1: device descriptor read/64, error -71 [ 618.965438][ T29] audit: type=1400 audit(1737507757.686:4618): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.201252][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 619.561166][ T29] audit: type=1400 audit(1737507757.686:4619): avc: denied { append } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.597791][ T29] audit: type=1400 audit(1737507757.686:4620): avc: denied { open } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.627992][ T29] audit: type=1400 audit(1737507757.686:4621): avc: denied { getattr } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.291095][ T5871] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 620.464720][ T29] audit: type=1400 audit(1737507757.856:4622): avc: denied { create } for pid=11918 comm="syz.4.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 620.532562][T11948] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 620.545415][ T29] audit: type=1400 audit(1737507757.876:4623): avc: denied { ioctl } for pid=11918 comm="syz.4.1497" path="socket:[33212]" dev="sockfs" ino=33212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 620.646007][ T29] audit: type=1400 audit(1737507758.016:4624): avc: denied { write } for pid=11918 comm="syz.4.1497" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 620.681902][ T29] audit: type=1400 audit(1737507758.016:4625): avc: denied { open } for pid=11918 comm="syz.4.1497" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 620.682407][T11948] fuse: Bad value for 'fd' [ 620.724810][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 620.759861][ T5871] usb 3-1: too many configurations: 47, using maximum allowed: 8 [ 621.381876][ T29] audit: type=1400 audit(1737507758.966:4626): avc: denied { map_create } for pid=11940 comm="syz.2.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 621.429294][ T5871] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 621.533839][ T5871] usb 3-1: can't read configurations, error -61 [ 621.685033][ T5871] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 622.381030][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 622.389224][ T5871] usb 3-1: too many configurations: 47, using maximum allowed: 8 [ 622.409682][ T5871] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 622.430002][ T5871] usb 3-1: can't read configurations, error -61 [ 622.468055][ T5871] usb usb3-port1: attempt power cycle [ 623.631567][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 623.631582][ T29] audit: type=1400 audit(1737507762.696:4651): avc: denied { read } for pid=11978 comm="syz.1.1512" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 624.039233][T11981] input: syz0 as /devices/virtual/input/input33 [ 624.109905][ T29] audit: type=1400 audit(1737507762.696:4652): avc: denied { open } for pid=11978 comm="syz.1.1512" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 624.250861][ T29] audit: type=1400 audit(1737507762.796:4653): avc: denied { ioctl } for pid=11978 comm="syz.1.1512" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 624.276145][ T29] audit: type=1400 audit(1737507763.126:4654): avc: denied { read } for pid=5177 comm="acpid" name="event4" dev="devtmpfs" ino=3288 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 624.298711][ T29] audit: type=1400 audit(1737507763.126:4655): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3288 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 624.402907][ T29] audit: type=1400 audit(1737507763.126:4656): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3288 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 625.319883][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.326548][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.650995][ T5900] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 625.711068][ T29] audit: type=1400 audit(1737507764.746:4657): avc: denied { create } for pid=11991 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 626.174883][ T29] audit: type=1400 audit(1737507764.746:4658): avc: denied { getopt } for pid=11991 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 626.469360][T12000] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 626.504535][T12000] fuse: Bad value for 'fd' [ 626.522734][ T5900] usb 1-1: device descriptor read/64, error -71 [ 626.771630][ T5900] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 627.500050][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1520'. [ 627.516855][ T5900] usb 1-1: device descriptor read/64, error -71 [ 627.556210][ T29] audit: type=1400 audit(1737507766.616:4659): avc: denied { ioctl } for pid=12005 comm="syz.2.1520" path="socket:[32501]" dev="sockfs" ino=32501 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 627.699905][ T5900] usb usb1-port1: attempt power cycle [ 627.918962][ T29] audit: type=1400 audit(1737507766.976:4660): avc: denied { create } for pid=12014 comm="syz.0.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 628.020869][T12010] fuse: Bad value for 'fd' [ 628.654934][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 628.654967][ T29] audit: type=1400 audit(1737507767.716:4665): avc: denied { write } for pid=12014 comm="syz.0.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 630.278296][T12035] FAULT_INJECTION: forcing a failure. [ 630.278296][T12035] name failslab, interval 1, probability 0, space 0, times 0 [ 630.408747][T12035] CPU: 1 UID: 0 PID: 12035 Comm: syz.0.1526 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 630.419186][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 630.420939][ T29] audit: type=1400 audit(1737507769.466:4666): avc: denied { map_read map_write } for pid=12030 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 630.429230][T12035] Call Trace: [ 630.429239][T12035] [ 630.429248][T12035] dump_stack_lvl+0x16c/0x1f0 [ 630.459956][T12035] should_fail_ex+0x497/0x5b0 [ 630.464619][T12035] ? fs_reclaim_acquire+0xae/0x150 [ 630.469707][T12035] should_failslab+0xc2/0x120 [ 630.474365][T12035] __kmalloc_noprof+0xcb/0x510 [ 630.479111][T12035] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 630.484729][T12035] tomoyo_realpath_from_path+0xb9/0x720 [ 630.490256][T12035] ? tomoyo_path_number_perm+0x235/0x590 [ 630.495868][T12035] ? tomoyo_path_number_perm+0x235/0x590 [ 630.501478][T12035] tomoyo_path_number_perm+0x248/0x590 [ 630.506910][T12035] ? tomoyo_path_number_perm+0x235/0x590 [ 630.512540][T12035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 630.518538][T12035] ? __pfx_lock_release+0x10/0x10 [ 630.523563][T12035] ? trace_lock_acquire+0x14e/0x1f0 [ 630.528755][T12035] ? lock_acquire+0x2f/0xb0 [ 630.533250][T12035] ? __fget_files+0x40/0x3a0 [ 630.537829][T12035] ? __fget_files+0x206/0x3a0 [ 630.542498][T12035] security_file_ioctl+0x9b/0x240 [ 630.547516][T12035] __x64_sys_ioctl+0xb7/0x200 [ 630.552190][T12035] do_syscall_64+0xcd/0x250 [ 630.556681][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.562569][T12035] RIP: 0033:0x7f0532985d29 [ 630.566967][T12035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.586564][T12035] RSP: 002b:00007f05307f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.594964][T12035] RAX: ffffffffffffffda RBX: 00007f0532b75fa0 RCX: 00007f0532985d29 [ 630.602922][T12035] RDX: 0000000020000580 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 630.610875][T12035] RBP: 00007f05307f6090 R08: 0000000000000000 R09: 0000000000000000 [ 630.618831][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.626784][T12035] R13: 0000000000000000 R14: 00007f0532b75fa0 R15: 00007ffef124b738 [ 630.634750][T12035] [ 630.674409][T12035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 631.355253][T12051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1527'. [ 631.365966][ T29] audit: type=1400 audit(1737507770.416:4667): avc: denied { write } for pid=12044 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 632.184463][ T29] audit: type=1326 audit(1737507770.476:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.0.1527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0532985d29 code=0x0 [ 632.208550][T12058] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 632.216656][T12058] fuse: Bad value for 'fd' [ 632.259355][ T29] audit: type=1400 audit(1737507770.516:4669): avc: denied { setopt } for pid=12046 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 632.337015][T12062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1532'. [ 632.349634][T12062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1532'. [ 632.447171][ T29] audit: type=1400 audit(1737507770.516:4670): avc: denied { bind } for pid=12046 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 632.770888][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'. [ 632.863040][ T29] audit: type=1400 audit(1737507770.516:4671): avc: denied { bind } for pid=12046 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 633.147620][ T29] audit: type=1400 audit(1737507770.516:4672): avc: denied { write } for pid=12046 comm="syz.2.1529" path="socket:[33520]" dev="sockfs" ino=33520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 633.183348][T12071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1534'. [ 633.225868][ T29] audit: type=1400 audit(1737507770.516:4673): avc: denied { create } for pid=12046 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 633.269278][ T29] audit: type=1400 audit(1737507770.516:4674): avc: denied { setopt } for pid=12046 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 633.705508][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 633.705520][ T29] audit: type=1400 audit(1737507772.476:4688): avc: denied { read write } for pid=12074 comm="syz.0.1537" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 633.735319][ T29] audit: type=1400 audit(1737507772.486:4689): avc: denied { open } for pid=12074 comm="syz.0.1537" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 633.759496][ T29] audit: type=1400 audit(1737507772.756:4690): avc: denied { mount } for pid=12074 comm="syz.0.1537" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 633.776783][T12078] FAULT_INJECTION: forcing a failure. [ 633.776783][T12078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.783149][T12079] FAULT_INJECTION: forcing a failure. [ 633.783149][T12079] name failslab, interval 1, probability 0, space 0, times 0 [ 633.798939][T12078] CPU: 1 UID: 0 PID: 12078 Comm: syz.3.1536 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 633.808520][ T29] audit: type=1400 audit(1737507772.866:4691): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 633.817489][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 633.817501][T12078] Call Trace: [ 633.817508][T12078] [ 633.817516][T12078] dump_stack_lvl+0x16c/0x1f0 [ 633.858019][T12078] should_fail_ex+0x497/0x5b0 [ 633.862711][T12078] copy_fpstate_to_sigframe+0x894/0xb20 [ 633.868277][T12078] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 633.874351][T12078] ? posixtimer_deliver_signal+0x1ad/0x650 [ 633.880165][T12078] ? posixtimer_deliver_signal+0x1ad/0x650 [ 633.885969][T12078] ? find_held_lock+0x2d/0x110 [ 633.890738][T12078] get_sigframe+0x4aa/0x9c0 [ 633.895245][T12078] ? __pfx_get_sigframe+0x10/0x10 [ 633.900273][T12078] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.905484][T12078] ? siginfo_layout+0x177/0x290 [ 633.910339][T12078] x64_setup_rt_frame+0x129/0xcf0 [ 633.915372][T12078] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 633.920923][T12078] ? __pfx_do_splice+0x10/0x10 [ 633.925681][T12078] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 633.931155][T12078] arch_do_signal_or_restart+0x5e6/0x7e0 [ 633.936795][T12078] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 633.942953][T12078] ? __do_splice+0x1dd/0x360 [ 633.947559][T12078] syscall_exit_to_user_mode+0x150/0x2a0 [ 633.953196][T12078] do_syscall_64+0xda/0x250 [ 633.957697][T12078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.963602][T12078] RIP: 0033:0x7f01ee385d27 [ 633.968016][T12078] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 633.987615][T12078] RSP: 002b:00007f01ef21d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 633.996021][T12078] RAX: 0000000000000113 RBX: 00007f01ee575fa0 RCX: 00007f01ee385d29 [ 634.003985][T12078] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 634.011950][T12078] RBP: 00007f01ef21d090 R08: 0010000000000016 R09: 0000000000000000 [ 634.019912][T12078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.027873][T12078] R13: 0000000000000000 R14: 00007f01ee575fa0 R15: 00007ffdbeb513d8 [ 634.035850][T12078] [ 634.038861][T12079] CPU: 0 UID: 0 PID: 12079 Comm: syz.1.1538 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 634.049272][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 634.059312][T12079] Call Trace: [ 634.062580][T12079] [ 634.065495][T12079] dump_stack_lvl+0x16c/0x1f0 [ 634.070168][T12079] should_fail_ex+0x497/0x5b0 [ 634.074837][T12079] ? fs_reclaim_acquire+0xae/0x150 [ 634.079936][T12079] should_failslab+0xc2/0x120 [ 634.084605][T12079] __kmalloc_node_noprof+0xd1/0x510 [ 634.089790][T12079] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 634.095240][T12079] __kvmalloc_node_noprof+0xad/0x1a0 [ 634.100512][T12079] vmemdup_user+0x25/0x100 [ 634.104916][T12079] __sys_bpf+0x4580/0x49c0 [ 634.109332][T12079] ? __pfx___sys_bpf+0x10/0x10 [ 634.114088][T12079] ? vfs_write+0x306/0x1150 [ 634.118581][T12079] ? __mutex_unlock_slowpath+0x164/0x690 [ 634.124217][T12079] ? fput+0x67/0x440 [ 634.128103][T12079] ? ksys_write+0x1ba/0x250 [ 634.132591][T12079] ? __pfx_ksys_write+0x10/0x10 [ 634.137430][T12079] __x64_sys_bpf+0x78/0xc0 [ 634.141837][T12079] ? lockdep_hardirqs_on+0x7c/0x110 [ 634.147026][T12079] do_syscall_64+0xcd/0x250 [ 634.151513][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.157400][T12079] RIP: 0033:0x7faaab985d29 [ 634.161799][T12079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.181391][T12079] RSP: 002b:00007faaac86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 634.189789][T12079] RAX: ffffffffffffffda RBX: 00007faaabb75fa0 RCX: 00007faaab985d29 [ 634.197743][T12079] RDX: 000000000000001d RSI: 00000000200000c0 RDI: 0000000000000001 [ 634.205696][T12079] RBP: 00007faaac86e090 R08: 0000000000000000 R09: 0000000000000000 [ 634.213652][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.221609][T12079] R13: 0000000000000000 R14: 00007faaabb75fa0 R15: 00007fff19cfc4d8 [ 634.229575][T12079] [ 636.531139][ T5900] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 637.055640][ T29] audit: type=1400 audit(1737507775.816:4692): avc: denied { write } for pid=12107 comm="syz.4.1546" name="ip_mr_vif" dev="proc" ino=4026533007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 637.078835][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 637.088629][ T5900] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.106865][ T5900] usb 3-1: config 0 has no interface number 0 [ 637.127094][ T5900] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.144360][ T5900] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.154424][ T29] audit: type=1400 audit(1737507776.216:4693): avc: denied { mount } for pid=12107 comm="syz.4.1546" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 637.176605][ T5900] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 637.186998][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.199419][ T29] audit: type=1400 audit(1737507776.246:4694): avc: denied { setopt } for pid=12109 comm="syz.0.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 637.248229][ T5900] usb 3-1: config 0 descriptor?? [ 637.535704][ T29] audit: type=1400 audit(1737507776.586:4695): avc: denied { create } for pid=12098 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 637.818674][ T29] audit: type=1400 audit(1737507776.876:4696): avc: denied { write } for pid=12098 comm="syz.2.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 637.863578][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1550'. [ 638.047880][ T29] audit: type=1326 audit(1737507776.986:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.4.1550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb84b585d29 code=0x0 [ 640.077879][ T5900] usbhid 3-1:0.1: can't add hid device: -71 [ 640.107066][ T5900] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 640.149790][ T5900] usb 3-1: USB disconnect, device number 61 [ 640.372944][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 640.372976][ T29] audit: type=1400 audit(1737507779.366:4699): avc: denied { setopt } for pid=12156 comm="syz.0.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 640.789275][ T29] audit: type=1400 audit(1737507779.426:4700): avc: denied { read } for pid=12156 comm="syz.0.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 641.015203][ T29] audit: type=1400 audit(1737507780.076:4701): avc: denied { create } for pid=12167 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 641.097099][ T29] audit: type=1400 audit(1737507780.146:4702): avc: denied { audit_write } for pid=12167 comm="syz.0.1557" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 641.123904][ T29] audit: type=1400 audit(1737507780.146:4703): avc: denied { read } for pid=12167 comm="syz.0.1557" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 641.230137][ T29] audit: type=1400 audit(1737507780.146:4704): avc: denied { open } for pid=12167 comm="syz.0.1557" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 641.261668][ T29] audit: type=1400 audit(1737507780.146:4705): avc: denied { execute } for pid=12167 comm="syz.0.1557" path="/301/pids.events" dev="tmpfs" ino=1774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 641.518766][ T29] audit: type=1400 audit(1737507780.576:4706): avc: denied { mount } for pid=12175 comm="syz.0.1559" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 641.541828][ T29] audit: type=1400 audit(1737507780.596:4707): avc: denied { create } for pid=12175 comm="syz.0.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 642.031699][ T29] audit: type=1400 audit(1737507781.096:4708): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 643.890521][T12189] syz.4.1560: attempt to access beyond end of device [ 643.890521][T12189] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 643.921678][T12190] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 648.389502][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 648.389516][ T29] audit: type=1400 audit(1737507787.446:4714): avc: denied { read } for pid=12247 comm="syz.4.1578" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 648.494207][T12251] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 649.151021][ T5155] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 649.477666][ T29] audit: type=1400 audit(1737507787.446:4715): avc: denied { open } for pid=12247 comm="syz.4.1578" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 649.578571][ T29] audit: type=1400 audit(1737507787.446:4716): avc: denied { ioctl } for pid=12247 comm="syz.4.1578" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 649.639349][ T5155] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 649.781645][T12260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'. [ 649.791048][T12260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'. [ 649.997623][ T29] audit: type=1400 audit(1737507788.246:4717): avc: denied { read } for pid=12246 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 650.040982][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.049146][ T29] audit: type=1400 audit(1737507788.336:4718): avc: denied { append } for pid=12246 comm="syz.3.1577" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 650.072430][ T29] audit: type=1400 audit(1737507788.346:4719): avc: denied { ioctl } for pid=12246 comm="syz.3.1577" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 650.106336][ T5155] usb 5-1: config 0 descriptor?? [ 650.196386][ T29] audit: type=1400 audit(1737507788.366:4720): avc: denied { name_bind } for pid=12246 comm="syz.3.1577" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 650.539619][ T29] audit: type=1400 audit(1737507788.366:4721): avc: denied { node_bind } for pid=12246 comm="syz.3.1577" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 650.563108][ T29] audit: type=1400 audit(1737507788.416:4722): avc: denied { execute } for pid=12246 comm="syz.3.1577" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=34267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 650.590529][ T29] audit: type=1400 audit(1737507788.906:4723): avc: denied { create } for pid=12258 comm="syz.0.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 651.110356][T12267] bridge_slave_0: left allmulticast mode [ 651.143727][T12267] bridge_slave_0: left promiscuous mode [ 651.154777][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.229399][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.238137][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.252938][T12267] bridge_slave_1: left allmulticast mode [ 651.258769][ T5155] usb 5-1: Cannot set autoneg [ 651.266210][T12267] bridge_slave_1: left promiscuous mode [ 651.275408][ T5155] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 651.302334][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.314668][ T5155] usb 5-1: USB disconnect, device number 43 [ 651.364657][T12267] bond0: (slave bond_slave_0): Releasing backup interface [ 651.426191][T12267] bond0: (slave bond_slave_1): Releasing backup interface [ 651.467974][T12267] team0: Port device team_slave_0 removed [ 651.569965][T12267] team0: Port device team_slave_1 removed [ 651.593339][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.717587][T12275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'. [ 651.819719][T12267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.991218][T12267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.014247][T12267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.181855][ T6527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.359800][T11501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.463112][T11501] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.471514][T11501] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.601170][T11501] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.610313][T11501] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 653.617700][T11501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 653.631061][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 653.631073][ T29] audit: type=1400 audit(1737507792.696:4730): avc: denied { mounton } for pid=12286 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 653.658587][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.309980][ T6527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.148493][T12301] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 655.164189][ T6527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.460949][ T6527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.662469][T11501] Bluetooth: hci0: command tx timeout [ 655.996222][T12286] chnl_net:caif_netlink_parms(): no params data found [ 656.975309][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 656.984558][T12324] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 657.231136][ T5869] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 657.419292][ T5869] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 657.642316][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.652340][ T5869] usb 3-1: config 0 descriptor?? [ 657.669955][T12286] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.684033][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.696882][T12286] bridge_slave_0: entered allmulticast mode [ 657.708119][ T29] audit: type=1400 audit(1737507796.756:4731): avc: denied { create } for pid=12329 comm="syz.3.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 657.741358][T11501] Bluetooth: hci0: command tx timeout [ 657.741403][T12286] bridge_slave_0: entered promiscuous mode [ 657.808490][ T29] audit: type=1326 audit(1737507796.866:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ee385d29 code=0x7ffc0000 [ 657.858802][T12286] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.888316][T12286] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.905156][ T29] audit: type=1326 audit(1737507796.866:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ee385d29 code=0x7ffc0000 [ 657.955825][T12286] bridge_slave_1: entered allmulticast mode [ 658.007785][T12286] bridge_slave_1: entered promiscuous mode [ 658.086718][ T29] audit: type=1326 audit(1737507796.866:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01ee385d29 code=0x7ffc0000 [ 658.260431][ T29] audit: type=1326 audit(1737507796.866:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ee385d29 code=0x7ffc0000 [ 658.284479][ T29] audit: type=1326 audit(1737507796.866:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.3.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ee385d29 code=0x7ffc0000 [ 658.287140][T12286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.353716][T12286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.399076][ T6527] bridge_slave_1: left allmulticast mode [ 658.407493][ T6527] bridge_slave_1: left promiscuous mode [ 658.415647][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 658.416031][ T29] audit: type=1326 audit(1737507797.466:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ee385d29 code=0x7ffc0000 [ 658.426741][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.455434][ T29] audit: type=1326 audit(1737507797.466:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f01ee385d29 code=0x7ffc0000 [ 658.482067][ T29] audit: type=1326 audit(1737507797.466:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12339 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01ee385d29 code=0x7ffc0000 [ 658.507646][ T6527] bridge_slave_0: left allmulticast mode [ 658.519214][ T6527] bridge_slave_0: left promiscuous mode [ 658.525655][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.541021][T11749] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 658.694787][T11749] usb 2-1: Using ep0 maxpacket: 16 [ 658.716671][T11749] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 658.734206][T11749] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 658.743985][T11749] usb 2-1: Product: syz [ 658.753028][T11749] usb 2-1: Manufacturer: syz [ 658.758462][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.771887][T11749] usb 2-1: SerialNumber: syz [ 658.778774][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.792253][T11749] usb 2-1: config 0 descriptor?? [ 658.819791][ T5869] usb 3-1: Cannot set autoneg [ 658.824554][ T5869] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 658.857506][ T5869] usb 3-1: USB disconnect, device number 62 [ 659.119342][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 659.119410][ T29] audit: type=1400 audit(1737507798.176:4754): avc: denied { ioctl } for pid=12341 comm="syz.4.1601" path="socket:[35074]" dev="sockfs" ino=35074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 659.491626][ T29] audit: type=1400 audit(1737507798.526:4755): avc: denied { create } for pid=12341 comm="syz.4.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 659.511487][ T6527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.681052][ T5917] usb 2-1: USB disconnect, device number 40 [ 659.702355][ T6527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.730138][ T6527] bond0 (unregistering): Released all slaves [ 659.749091][T12286] team0: Port device team_slave_0 added [ 659.765967][T12349] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.773102][T12349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.780474][T12349] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.787612][T12349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.803890][T12349] bridge0: entered promiscuous mode [ 659.821064][T11501] Bluetooth: hci0: command tx timeout [ 659.852110][T12348] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.859268][T12348] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.874059][T12348] bridge0: left promiscuous mode [ 659.896909][T12286] team0: Port device team_slave_1 added [ 659.932898][ T29] audit: type=1400 audit(1737507798.986:4756): avc: denied { create } for pid=12347 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 659.954303][ T29] audit: type=1400 audit(1737507798.986:4757): avc: denied { ioctl } for pid=12347 comm="syz.2.1602" path="socket:[34623]" dev="sockfs" ino=34623 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 659.983050][ T29] audit: type=1400 audit(1737507798.986:4758): avc: denied { shutdown } for pid=12347 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 660.004446][T12352] overlayfs: overlapping lowerdir path [ 660.005524][ T29] audit: type=1400 audit(1737507798.986:4759): avc: denied { name_connect } for pid=12347 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 660.099864][T12286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.118344][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.151842][T12286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.180463][T12286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.195676][ T29] audit: type=1400 audit(1737507799.256:4760): avc: denied { bind } for pid=12351 comm="syz.3.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 660.349021][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.374961][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.615941][ T29] audit: type=1400 audit(1737507799.256:4761): avc: denied { setopt } for pid=12351 comm="syz.3.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 660.628739][T12286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.804382][ T29] audit: type=1400 audit(1737507799.856:4762): avc: denied { wake_alarm } for pid=12351 comm="syz.3.1603" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 661.469016][T12360] delete_channel: no stack [ 661.513682][ T29] audit: type=1400 audit(1737507799.936:4763): avc: denied { create } for pid=12360 comm="syz.4.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 661.758695][T12286] hsr_slave_0: entered promiscuous mode [ 661.778990][T12286] hsr_slave_1: entered promiscuous mode [ 661.792271][T12286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.840006][T12286] Cannot create hsr debugfs directory [ 661.903539][T11501] Bluetooth: hci0: command tx timeout [ 661.998032][T11501] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 662.019864][ T6527] hsr_slave_0: left promiscuous mode [ 662.104135][ T6527] hsr_slave_1: left promiscuous mode [ 662.146489][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.150065][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'. [ 662.225210][ T6527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.284889][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.326668][ T6527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.428646][ T6527] veth1_macvtap: left promiscuous mode [ 662.444343][ T6527] veth0_macvtap: left promiscuous mode [ 662.462477][ T6527] veth1_vlan: left promiscuous mode [ 662.481842][ T6527] veth0_vlan: left promiscuous mode [ 665.997984][ T6527] team0 (unregistering): Port device team_slave_1 removed [ 666.141219][T11501] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 666.150777][T11501] Bluetooth: hci1: Injecting HCI hardware error event [ 666.161331][T11501] Bluetooth: hci1: hardware error 0x00 [ 666.483796][ T6527] team0 (unregistering): Port device team_slave_0 removed [ 666.491273][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 666.491286][ T29] audit: type=1400 audit(1737507805.546:4774): avc: denied { setopt } for pid=12416 comm="syz.1.1624" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 666.576045][ T29] audit: type=1400 audit(1737507805.546:4775): avc: denied { connect } for pid=12416 comm="syz.1.1624" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 666.646772][ T29] audit: type=1400 audit(1737507805.546:4776): avc: denied { write } for pid=12416 comm="syz.1.1624" laddr=172.20.20.18 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 667.518371][ T29] audit: type=1400 audit(1737507806.566:4777): avc: denied { connect } for pid=12423 comm="syz.1.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 667.903846][T12431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1628'. [ 667.913253][T12431] netlink: 'syz.4.1628': attribute type 7 has an invalid length. [ 667.921687][T12431] netlink: 'syz.4.1628': attribute type 8 has an invalid length. [ 667.929592][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 668.047518][T12404] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 668.324753][T11501] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 669.212162][ T29] audit: type=1400 audit(1737507807.386:4778): avc: denied { read } for pid=12434 comm="syz.1.1630" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 669.248875][T12444] Bluetooth: MGMT ver 1.23 [ 669.471909][ T29] audit: type=1400 audit(1737507807.386:4779): avc: denied { open } for pid=12434 comm="syz.1.1630" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 669.497256][ T29] audit: type=1400 audit(1737507807.386:4780): avc: denied { ioctl } for pid=12434 comm="syz.1.1630" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 669.522522][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.934095][ T29] audit: type=1400 audit(1737507808.986:4781): avc: denied { read } for pid=5177 comm="acpid" name="event7" dev="devtmpfs" ino=3297 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 670.581942][ T29] audit: type=1400 audit(1737507808.986:4782): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=3297 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 670.605326][ T29] audit: type=1400 audit(1737507808.986:4783): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=3297 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 671.207973][ T6527] IPVS: stop unused estimator thread 0... [ 671.471013][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 671.489853][T12286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 671.527026][T12286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 671.550296][T12286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 671.573550][T12286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 671.627196][T12467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 671.676499][T12467] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 671.732723][T12467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 671.748125][T12286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.758241][T12467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 671.773188][ T9] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 671.790474][T12286] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.791604][ T9] usb 5-1: config 0 has no interface number 0 [ 671.804130][T12467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 671.810841][ T9] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.905257][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 671.905288][ T29] audit: type=1400 audit(1737507810.936:4787): avc: denied { ioctl } for pid=12469 comm="syz.3.1641" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 672.087913][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.095056][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.325008][ T9] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.335343][ T9] usb 5-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 672.348341][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 672.349913][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.357398][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.365135][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.407528][ T9] usb 5-1: config 0 descriptor?? [ 672.524068][ T29] audit: type=1400 audit(1737507811.586:4788): avc: denied { sys_module } for pid=12286 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 672.704964][T12286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.781792][T12286] veth0_vlan: entered promiscuous mode [ 672.799014][T12286] veth1_vlan: entered promiscuous mode [ 672.840849][T12286] veth0_macvtap: entered promiscuous mode [ 672.907194][ T9] uclogic 0003:28BD:0905.0008: interface is invalid, ignoring [ 672.992547][T12490] netlink: 'syz.2.1646': attribute type 10 has an invalid length. [ 673.009206][T12286] veth1_macvtap: entered promiscuous mode [ 673.043031][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.054442][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.064550][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.075757][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.086717][T12286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.094847][T12490] bridge0: left allmulticast mode [ 673.100970][T12490] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.108107][T12490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.115653][T12490] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.122768][T12490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.143826][T12490] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 673.177997][T12492] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 673.577008][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.599483][T11501] Bluetooth: hci3: command 0x0406 tx timeout [ 673.666335][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.686409][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.707460][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.740948][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.769778][ T9] usb 5-1: USB disconnect, device number 44 [ 673.779437][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.795095][T11501] Bluetooth: hci0: command 0x0405 tx timeout [ 673.823512][T12286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.843707][T12286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.858918][T12286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.867854][T12286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.876749][T12286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.931997][T12498] No control pipe specified [ 674.101092][ T5917] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 674.110819][T12499] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 674.120505][T12499] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 674.131673][T12499] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 674.141503][T12499] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 674.161226][T12499] geneve2: entered promiscuous mode [ 674.166696][T12499] geneve2: entered allmulticast mode [ 674.263681][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.324793][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.380096][ T5917] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 674.395062][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.560247][ T5917] usb 3-1: Product: syz [ 674.582190][ T5917] usb 3-1: Manufacturer: syz [ 674.596385][ T6527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.199726][ T5917] usb 3-1: SerialNumber: syz [ 675.214280][ T6527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.223686][ T5917] usb 3-1: config 0 descriptor?? [ 675.243436][ T29] audit: type=1400 audit(1737507814.296:4789): avc: denied { mounton } for pid=12286 comm="syz-executor" path="/root/syzkaller.mwrBQp/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 675.293970][ T29] audit: type=1400 audit(1737507814.296:4790): avc: denied { mount } for pid=12286 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 675.346708][ T29] audit: type=1400 audit(1737507814.296:4791): avc: denied { mount } for pid=12286 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 675.415677][ T29] audit: type=1400 audit(1737507814.306:4792): avc: denied { mounton } for pid=12286 comm="syz-executor" path="/root/syzkaller.mwrBQp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 675.464265][ T29] audit: type=1400 audit(1737507814.306:4793): avc: denied { mounton } for pid=12286 comm="syz-executor" path="/root/syzkaller.mwrBQp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 675.528421][ T9] usb 3-1: USB disconnect, device number 63 [ 675.541396][ T29] audit: type=1400 audit(1737507814.466:4794): avc: denied { mounton } for pid=12286 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 675.576201][ T29] audit: type=1400 audit(1737507814.466:4795): avc: denied { mount } for pid=12286 comm="syz-executor" name="/" dev="gadgetfs" ino=6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 675.599152][ T29] audit: type=1400 audit(1737507814.466:4796): avc: denied { mount } for pid=12286 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 675.664980][T11501] Bluetooth: hci3: command 0x0406 tx timeout [ 675.746479][T12507] serio: Serial port pts0 [ 676.021085][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 676.181202][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 676.192644][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 676.208974][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 676.219350][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 676.383806][T12520] netdevsim netdevsim4: Direct firmware load for . [ 676.383806][T12520] failed with error -2 [ 676.394644][T12520] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 676.394644][T12520] [ 677.039472][ T9] usb 2-1: Product: syz [ 677.043707][ T9] usb 2-1: Manufacturer: syz [ 677.048306][ T9] usb 2-1: SerialNumber: syz [ 677.055367][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 677.055380][ T29] audit: type=1400 audit(1737507815.436:4798): avc: denied { ioctl } for pid=12516 comm="syz.4.1654" path="socket:[35743]" dev="sockfs" ino=35743 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 677.058026][ T9] usb 2-1: config 0 descriptor?? [ 677.204567][T12511] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 677.871118][ T5155] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 678.049642][T12509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.060451][T12509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.079722][T12509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.095082][T12509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.122531][ T5155] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.136164][ T5155] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.145476][ T5155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.319744][T12509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.328217][ T5155] usb 5-1: Product: syz [ 678.332462][ T5155] usb 5-1: Manufacturer: syz [ 678.337064][ T5155] usb 5-1: SerialNumber: syz [ 678.349096][T12509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.367601][T11749] usb 2-1: USB disconnect, device number 41 [ 678.970948][ T29] audit: type=1400 audit(1737507817.466:4799): avc: denied { write } for pid=12535 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 679.177296][ T6520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.187930][ T29] audit: type=1400 audit(1737507817.526:4800): avc: denied { bind } for pid=12533 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.187965][ T29] audit: type=1400 audit(1737507817.536:4801): avc: denied { listen } for pid=12533 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.187994][ T29] audit: type=1400 audit(1737507817.536:4802): avc: denied { connect } for pid=12533 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.188063][ T29] audit: type=1400 audit(1737507817.626:4803): avc: denied { accept } for pid=12533 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.188094][ T29] audit: type=1400 audit(1737507817.716:4804): avc: denied { write } for pid=12533 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 679.764324][ T6520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.795023][T11501] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 680.232418][ T6520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.477310][ T5155] cdc_ncm 5-1:1.0: failed to get mac address [ 680.555086][ T5155] cdc_ncm 5-1:1.0: bind() failure [ 680.627090][ T5155] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 680.700680][ T5155] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 680.746300][ T5155] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 680.902330][ T5155] usb 5-1: USB disconnect, device number 45 [ 680.975560][ T6520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.759485][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 681.782977][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 681.790818][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 681.798847][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 681.807214][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 681.815536][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.827101][ T29] audit: type=1400 audit(1737507820.886:4805): avc: denied { ioctl } for pid=12566 comm="syz.2.1669" path="socket:[35802]" dev="sockfs" ino=35802 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 681.872946][ T29] audit: type=1400 audit(1737507820.916:4806): avc: denied { write } for pid=12566 comm="syz.2.1669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 681.992056][ T6520] bridge_slave_1: left allmulticast mode [ 682.010324][ T6520] bridge_slave_1: left promiscuous mode [ 682.032031][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.099976][ T6520] bridge_slave_0: left allmulticast mode [ 682.105936][ T6520] bridge_slave_0: left promiscuous mode [ 682.112900][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.121285][ T5917] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 682.312316][T12577] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1668'. [ 682.321596][ T29] audit: type=1400 audit(1737507821.366:4807): avc: denied { ioctl } for pid=12568 comm="syz.4.1668" path="socket:[36351]" dev="sockfs" ino=36351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 682.371110][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 682.571791][ T5917] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 682.737999][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.751183][ T5917] usb 4-1: Product: syz [ 682.755415][ T5917] usb 4-1: Manufacturer: syz [ 682.760016][ T5917] usb 4-1: SerialNumber: syz [ 682.782919][ T5917] usb 4-1: config 0 descriptor?? [ 682.789669][ T5917] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 682.822194][ T5917] usb 4-1: Detected FT-X [ 682.825881][ T29] audit: type=1400 audit(1737507821.886:4808): avc: denied { ioctl } for pid=12582 comm="syz.1.1673" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 683.031274][ T5917] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 683.149114][ T6520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.160587][ T6520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.171305][ T6520] bond0 (unregistering): Released all slaves [ 683.694076][ T5917] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 683.764704][T12562] chnl_net:caif_netlink_parms(): no params data found [ 683.911653][ T5818] Bluetooth: hci0: command tx timeout [ 683.945859][ T29] audit: type=1400 audit(1737507822.936:4809): avc: denied { mount } for pid=12601 comm="syz.4.1678" name="/" dev="autofs" ino=36378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 684.183543][T12591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.192306][T12591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.353093][ T6520] hsr_slave_0: left promiscuous mode [ 684.368066][ T6520] hsr_slave_1: left promiscuous mode [ 684.409025][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.425372][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.438697][ T29] audit: type=1400 audit(1737507823.486:4810): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 684.489743][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.509700][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.620751][ T6520] veth1_macvtap: left promiscuous mode [ 684.641010][ T6520] veth0_macvtap: left promiscuous mode [ 684.660414][ T6520] veth1_vlan: left promiscuous mode [ 684.674470][ T6520] veth0_vlan: left promiscuous mode [ 685.441359][ T9] usb 4-1: USB disconnect, device number 56 [ 685.554402][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 685.578178][ T9] ftdi_sio 4-1:0.0: device disconnected [ 685.912762][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.919098][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.981064][ T5818] Bluetooth: hci0: command tx timeout [ 686.059079][ T6520] team0 (unregistering): Port device team_slave_1 removed [ 686.100795][ T6520] team0 (unregistering): Port device team_slave_0 removed [ 686.480299][T12620] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.487412][T12620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.494806][T12620] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.501940][T12620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.513138][T12620] bridge0: entered promiscuous mode [ 686.641363][T12562] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.648473][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.689673][T12562] bridge_slave_0: entered allmulticast mode [ 686.796975][ T29] audit: type=1400 audit(1737507825.846:4811): avc: denied { getopt } for pid=12633 comm="syz.3.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 686.821341][T12562] bridge_slave_0: entered promiscuous mode [ 687.079085][T12562] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.089629][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.113575][T12562] bridge_slave_1: entered allmulticast mode [ 687.120403][T12562] bridge_slave_1: entered promiscuous mode [ 687.151868][ T29] audit: type=1400 audit(1737507826.216:4812): avc: denied { read write } for pid=12636 comm="syz.2.1688" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 687.221155][ T29] audit: type=1400 audit(1737507826.216:4813): avc: denied { open } for pid=12636 comm="syz.2.1688" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 687.255044][ T29] audit: type=1400 audit(1737507826.266:4814): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 687.401144][T12562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.749745][ T5818] Bluetooth: hci0: command tx timeout [ 688.874101][T12562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.101071][ T29] audit: type=1400 audit(1737507828.096:4815): avc: denied { bind } for pid=12646 comm="syz.1.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 689.261362][ T29] audit: type=1400 audit(1737507828.096:4816): avc: denied { name_bind } for pid=12646 comm="syz.1.1691" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 689.357455][ T29] audit: type=1400 audit(1737507828.096:4817): avc: denied { node_bind } for pid=12646 comm="syz.1.1691" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 689.420766][T12562] team0: Port device team_slave_0 added [ 689.438765][T12562] team0: Port device team_slave_1 added [ 689.450850][T12646] dccp_close: ABORT with 15584 bytes unread [ 689.460005][ T29] audit: type=1400 audit(1737507828.126:4818): avc: denied { listen } for pid=12646 comm="syz.1.1691" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 689.533905][ T29] audit: type=1400 audit(1737507828.136:4819): avc: denied { connect } for pid=12646 comm="syz.1.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 689.578275][T12562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.591528][T12562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.622639][ T29] audit: type=1400 audit(1737507828.136:4820): avc: denied { name_connect } for pid=12646 comm="syz.1.1691" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 689.646922][T12562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.657573][ T29] audit: type=1400 audit(1737507828.196:4821): avc: denied { accept } for pid=12646 comm="syz.1.1691" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 689.694731][T12562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.704072][T12562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.734744][ T29] audit: type=1400 audit(1737507828.206:4822): avc: denied { write } for pid=12646 comm="syz.1.1691" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=43726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 689.774047][T12562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.861070][ T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 689.895575][T12562] hsr_slave_0: entered promiscuous mode [ 689.921347][T12562] hsr_slave_1: entered promiscuous mode [ 690.028620][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.044814][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.055885][ T25] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 690.069616][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.085880][ T25] usb 2-1: config 0 descriptor?? [ 690.095715][ T29] audit: type=1400 audit(1737507829.156:4823): avc: denied { write } for pid=12665 comm="syz.3.1698" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 690.119743][ T29] audit: type=1400 audit(1737507829.176:4824): avc: denied { create } for pid=12665 comm="syz.3.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 690.131107][T11749] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 690.251598][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 690.331129][T11749] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 690.350384][T11749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.374447][T11749] usb 5-1: Product: syz [ 690.378651][T11749] usb 5-1: Manufacturer: syz [ 690.405533][T11749] usb 5-1: SerialNumber: syz [ 690.443607][T12562] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 690.462336][T11749] usb 5-1: config 0 descriptor?? [ 690.469956][T12562] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 690.496257][T12562] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 690.505717][T12562] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 690.563002][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 690.568605][T12562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.578499][ T9] usb 3-1: config 9 has an invalid interface number: 230 but max is 0 [ 690.594664][ T9] usb 3-1: config 9 has no interface number 0 [ 690.603736][ T9] usb 3-1: config 9 interface 230 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 690.619773][T12562] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.626507][ T9] usb 3-1: config 9 interface 230 altsetting 8 endpoint 0x1 has an invalid bInterval 142, changing to 7 [ 690.643751][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 690.648918][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.656747][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.657357][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 690.664620][ T9] usb 3-1: config 9 interface 230 has no altsetting 0 [ 690.679414][ T25] usb 2-1: USB disconnect, device number 42 [ 690.679710][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.692450][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.701045][ T900] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 690.710602][ T9] usb 3-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=27.4a [ 690.720869][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.728897][ T9] usb 3-1: Product: syz [ 690.751061][ T9] usb 3-1: Manufacturer: syz [ 690.755672][ T9] usb 3-1: SerialNumber: syz [ 690.767068][T12562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.777976][T12562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.781607][ T5818] Bluetooth: hci0: command tx timeout [ 690.871217][T11749] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 690.881730][ T900] usb 4-1: Using ep0 maxpacket: 8 [ 690.894707][ T900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.017686][T12562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.070274][T12562] veth0_vlan: entered promiscuous mode [ 691.078084][ T9] usb 3-1: Could not find all expected endpoints [ 691.085594][T12562] veth1_vlan: entered promiscuous mode [ 691.111140][ T9] usb 3-1: USB disconnect, device number 64 [ 691.134355][T11749] usb 5-1: USB disconnect, device number 46 [ 691.141240][ T900] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 691.149859][T12562] veth0_macvtap: entered promiscuous mode [ 691.160693][ T900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.170624][T12562] veth1_macvtap: entered promiscuous mode [ 691.181219][ T900] usb 4-1: config 0 descriptor?? [ 691.198141][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.215050][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.226336][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.243441][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.257462][T12562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.272537][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.289594][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.307262][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.317930][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.333447][T12562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.354218][T12562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.372859][T12562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.390391][T12562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.402157][ T900] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 691.411050][T12562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.422753][T12562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.433367][T12562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.356489][T12688] syzkaller0: entered promiscuous mode [ 692.391863][T12688] syzkaller0: entered allmulticast mode [ 692.407015][ T6542] syzkaller0: tun_net_xmit 48 [ 692.440360][T12696] [ 692.441278][T12562] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 692.442684][T12696] ====================================================== [ 692.457390][T12696] WARNING: possible circular locking dependency detected [ 692.464402][T12696] 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 Not tainted [ 692.471155][T12696] ------------------------------------------------------ [ 692.478161][T12696] syz.4.1705/12696 is trying to acquire lock: [ 692.484220][T12696] ffff88807d0bd888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 692.493552][T12696] [ 692.493552][T12696] but task is already holding lock: [ 692.500903][T12696] ffff88807cb50868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 692.509184][T12696] [ 692.509184][T12696] which lock already depends on the new lock. [ 692.509184][T12696] [ 692.519580][T12696] [ 692.519580][T12696] the existing dependency chain (in reverse order) is: [ 692.521951][T12688] syzkaller0: create flow: hash 1316071893 index 1 [ 692.528576][T12696] [ 692.528576][T12696] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 692.541715][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.542418][T12696] __mutex_lock+0x19b/0xa60 [ 692.550183][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.555171][T12696] pipe_lock+0x64/0x80 [ 692.555193][T12696] iter_file_splice_write+0x1eb/0x10b0 [ 692.564099][ T6520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.566985][T12696] backing_file_splice_write+0x277/0x880 [ 692.580989][ T6520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.586818][T12696] ovl_splice_write+0x38e/0x630 [ 692.599487][T12696] do_splice+0x145c/0x1f60 [ 692.604426][T12696] __do_splice+0x327/0x360 [ 692.609358][T12696] __x64_sys_splice+0x187/0x250 [ 692.614727][T12696] do_syscall_64+0xcd/0x250 [ 692.619746][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.626167][T12696] [ 692.626167][T12696] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 692.633564][T12696] mnt_want_write+0x6f/0x450 [ 692.638679][T12696] ovl_create_object+0x12e/0x300 [ 692.644145][T12696] lookup_open.isra.0+0x11c8/0x1580 [ 692.649871][T12696] path_openat+0x904/0x2d70 [ 692.654895][T12696] do_filp_open+0x20c/0x470 [ 692.659916][T12696] do_sys_openat2+0x17a/0x1e0 [ 692.665116][T12696] __x64_sys_creat+0xcd/0x120 [ 692.670316][T12696] do_syscall_64+0xcd/0x250 [ 692.675334][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.681758][T12696] [ 692.681758][T12696] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 692.690446][T12696] down_read+0x9a/0x330 [ 692.695122][T12696] walk_component+0x342/0x5b0 [ 692.700310][T12696] path_lookupat+0x17f/0x770 [ 692.705394][T12696] filename_lookup+0x221/0x5f0 [ 692.710654][T12696] kern_path+0x35/0x50 [ 692.715223][T12696] lookup_bdev+0xd9/0x280 [ 692.720056][T12696] resume_store+0x1d8/0x460 [ 692.725058][T12696] kobj_attr_store+0x55/0x80 [ 692.730140][T12696] sysfs_kf_write+0x117/0x170 [ 692.735317][T12696] kernfs_fop_write_iter+0x33d/0x500 [ 692.741109][T12696] vfs_write+0x5ae/0x1150 [ 692.745963][T12696] ksys_write+0x12b/0x250 [ 692.750814][T12696] do_syscall_64+0xcd/0x250 [ 692.755838][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.762262][T12696] [ 692.762262][T12696] -> #0 (&of->mutex){+.+.}-{4:4}: [ 692.769474][T12696] __lock_acquire+0x249e/0x3c40 [ 692.774848][T12696] lock_acquire.part.0+0x11b/0x380 [ 692.780482][T12696] __mutex_lock+0x19b/0xa60 [ 692.785506][T12696] kernfs_fop_write_iter+0x27b/0x500 [ 692.791319][T12696] iter_file_splice_write+0x90f/0x10b0 [ 692.797303][T12696] do_splice+0x145c/0x1f60 [ 692.802238][T12696] __do_splice+0x327/0x360 [ 692.807147][T12696] __x64_sys_splice+0x187/0x250 [ 692.812494][T12696] do_syscall_64+0xcd/0x250 [ 692.817491][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.823885][T12696] [ 692.823885][T12696] other info that might help us debug this: [ 692.823885][T12696] [ 692.834083][T12696] Chain exists of: [ 692.834083][T12696] &of->mutex --> sb_writers#6 --> &pipe->mutex [ 692.834083][T12696] [ 692.846148][T12696] Possible unsafe locking scenario: [ 692.846148][T12696] [ 692.853588][T12696] CPU0 CPU1 [ 692.858943][T12696] ---- ---- [ 692.864298][T12696] lock(&pipe->mutex); [ 692.868462][T12696] lock(sb_writers#6); [ 692.875145][T12696] lock(&pipe->mutex); [ 692.881816][T12696] lock(&of->mutex); [ 692.885794][T12696] [ 692.885794][T12696] *** DEADLOCK *** [ 692.885794][T12696] [ 692.893927][T12696] 2 locks held by syz.4.1705/12696: [ 692.899112][T12696] #0: ffff888036548420 (sb_writers#9){.+.+}-{0:0}, at: __do_splice+0x327/0x360 [ 692.908183][T12696] #1: ffff88807cb50868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 692.916898][T12696] [ 692.916898][T12696] stack backtrace: [ 692.922774][T12696] CPU: 1 UID: 0 PID: 12696 Comm: syz.4.1705 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 692.933179][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 692.943227][T12696] Call Trace: [ 692.946501][T12696] [ 692.949428][T12696] dump_stack_lvl+0x116/0x1f0 [ 692.954118][T12696] print_circular_bug+0x419/0x5d0 [ 692.959144][T12696] check_noncircular+0x31a/0x400 [ 692.964082][T12696] ? __pfx_check_noncircular+0x10/0x10 [ 692.969540][T12696] ? lock_acquire.part.0+0x11b/0x380 [ 692.974823][T12696] ? lockdep_lock+0xc6/0x200 [ 692.979420][T12696] ? __pfx_lockdep_lock+0x10/0x10 [ 692.984453][T12696] __lock_acquire+0x249e/0x3c40 [ 692.989307][T12696] ? __pfx___lock_acquire+0x10/0x10 [ 692.994512][T12696] ? hlock_class+0x4e/0x130 [ 692.999030][T12696] lock_acquire.part.0+0x11b/0x380 [ 693.004146][T12696] ? kernfs_fop_write_iter+0x27b/0x500 [ 693.009615][T12696] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 693.015251][T12696] ? rcu_is_watching+0x12/0xc0 [ 693.020021][T12696] ? trace_lock_acquire+0x14e/0x1f0 [ 693.025214][T12696] ? kernfs_fop_write_iter+0x27b/0x500 [ 693.030676][T12696] ? lock_acquire+0x2f/0xb0 [ 693.035178][T12696] ? kernfs_fop_write_iter+0x27b/0x500 [ 693.040641][T12696] __mutex_lock+0x19b/0xa60 [ 693.045145][T12696] ? kernfs_fop_write_iter+0x27b/0x500 [ 693.050613][T12696] ? __asan_memcpy+0x3c/0x60 [ 693.055203][T12696] ? kernfs_fop_write_iter+0x27b/0x500 [ 693.060664][T12696] ? __pfx___mutex_lock+0x10/0x10 [ 693.065689][T12696] ? __pfx__copy_from_iter+0x10/0x10 [ 693.070971][T12696] ? __virt_addr_valid+0x5e/0x590 [ 693.075999][T12696] ? __phys_addr_symbol+0x30/0x80 [ 693.081029][T12696] ? kernfs_fop_write_iter+0x27b/0x500 [ 693.086491][T12696] kernfs_fop_write_iter+0x27b/0x500 [ 693.091787][T12696] iter_file_splice_write+0x90f/0x10b0 [ 693.097256][T12696] ? __pfx_iter_file_splice_write+0x10/0x10 [ 693.103156][T12696] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 693.108791][T12696] ? __do_splice+0x327/0x360 [ 693.113381][T12696] ? __pfx_iter_file_splice_write+0x10/0x10 [ 693.119272][T12696] do_splice+0x145c/0x1f60 [ 693.123698][T12696] ? __pfx_do_splice+0x10/0x10 [ 693.128464][T12696] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 693.133931][T12696] ? __pfx_lock_release+0x10/0x10 [ 693.138955][T12696] ? trace_lock_acquire+0x14e/0x1f0 [ 693.144150][T12696] __do_splice+0x327/0x360 [ 693.148569][T12696] ? __pfx___do_splice+0x10/0x10 [ 693.153507][T12696] ? __fget_files+0x206/0x3a0 [ 693.158184][T12696] __x64_sys_splice+0x187/0x250 [ 693.163032][T12696] do_syscall_64+0xcd/0x250 [ 693.167532][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.173436][T12696] RIP: 0033:0x7fb84b585d29 [ 693.177843][T12696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.197452][T12696] RSP: 002b:00007fb84c458038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 693.205859][T12696] RAX: ffffffffffffffda RBX: 00007fb84b776080 RCX: 00007fb84b585d29 [ 693.213826][T12696] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 693.221790][T12696] RBP: 00007fb84b601b08 R08: 000000000000bfd1 R09: 0000000000000000 [ 693.229756][T12696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.237722][T12696] R13: 0000000000000001 R14: 00007fb84b776080 R15: 00007ffecdb72e68 [ 693.245701][T12696] [ 693.266518][T12689] syzkaller0: delete flow: hash 1316071893 index 1 [ 694.269032][ T25] usb 4-1: USB disconnect, device number 57 [ 695.443710][ T6542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.494537][ T6542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.564547][ T6542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.625968][ T6542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.703346][ T6542] bridge_slave_1: left allmulticast mode [ 695.710528][ T6542] bridge_slave_1: left promiscuous mode [ 695.718180][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.727204][ T6542] bridge_slave_0: left allmulticast mode [ 695.734864][ T6542] bridge_slave_0: left promiscuous mode [ 695.740498][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.849942][ T6542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.863792][ T6542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.874483][ T6542] bond0 (unregistering): Released all slaves [ 696.107795][ T6542] hsr_slave_0: left promiscuous mode [ 696.113469][ T6542] hsr_slave_1: left promiscuous mode [ 696.120135][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.129303][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.137901][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.147430][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.162861][ T6542] veth1_macvtap: left promiscuous mode [ 696.168351][ T6542] veth0_macvtap: left promiscuous mode [ 696.174163][ T6542] veth1_vlan: left promiscuous mode [ 696.179406][ T6542] veth0_vlan: left promiscuous mode [ 696.338666][ T6542] team0 (unregistering): Port device team_slave_1 removed [ 696.368384][ T6542] team0 (unregistering): Port device team_slave_0 removed