last executing test programs: 14.204260629s ago: executing program 0 (id=799): socket$inet6_sctp(0xa, 0x1, 0x84) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 12.535445387s ago: executing program 0 (id=801): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x1, 0xf0bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11.84470713s ago: executing program 4 (id=803): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec0800000000600001fff00e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) 10.641079654s ago: executing program 2 (id=805): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x18) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x844d, "1a0bd6", 0x0, 0xff}) 10.630966069s ago: executing program 4 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 9.632935717s ago: executing program 2 (id=809): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x1000000000) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r2, 0x18, 0x0, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.618503164s ago: executing program 4 (id=810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r4, 0x25, 0x4, @val=@tcx={@void, @value=r3}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$phonet(0x23, 0x2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.082191563s ago: executing program 0 (id=812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = eventfd(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x280342, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000600)=0x14) 9.081762452s ago: executing program 2 (id=813): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x2, 0xfffff010}, {0x6, 0xb4, 0x0, 0x3}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 8.250690917s ago: executing program 2 (id=815): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce080001400000000309000100"], 0x122}}, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r8}) 8.081493662s ago: executing program 3 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r2 = epoll_create(0xa985) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20004000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x20000800) r5 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x308, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff19}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000047c0)={0x0, 0xffa6, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x1, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000010}, 0x4014) 7.044578288s ago: executing program 2 (id=818): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') listen(0xffffffffffffffff, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) 6.845579502s ago: executing program 4 (id=819): syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x80000, 0x1, 0x0, 0x52, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20044045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = timerfd_create(0x0, 0x800) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.740294544s ago: executing program 1 (id=820): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x20001) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) dup3(r2, r1, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.932669715s ago: executing program 3 (id=821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.256652151s ago: executing program 0 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x4800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 5.176087253s ago: executing program 1 (id=823): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 5.005623618s ago: executing program 3 (id=824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r3}, 0x18) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) syslog(0x3, &(0x7f0000003640)=""/95, 0x5f) 4.224303283s ago: executing program 1 (id=825): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000200)=0xfffffffe) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.668163994s ago: executing program 2 (id=826): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3a) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x7e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getpriority(0x2, r4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) 3.318430534s ago: executing program 3 (id=827): prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xc, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x160, 0x98, 0xffffffff, 0x200, 0x200, 0x200, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0xffffffff}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x980, 0x80, 0x1, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x3, 0x2, &(0x7f00000001c0)) ioprio_set$pid(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0xffffffffffffffff, 0xe6368f3) 3.054950576s ago: executing program 1 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f00000005c0)=0x7fffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 2.501902093s ago: executing program 4 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x860}, 0x80, 0x0}}], 0x2, 0x480d4) 2.323387122s ago: executing program 3 (id=830): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r6, 0x1) 1.781274386s ago: executing program 0 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r4, 0xffffffffffffffff, 0x0) 1.589373576s ago: executing program 4 (id=832): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336", 0x94}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0f", 0x6a}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {0x0}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}], 0x5}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.012362655s ago: executing program 1 (id=833): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10040) 1.009721188s ago: executing program 3 (id=834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x328}}, 0x84) 793.450148ms ago: executing program 0 (id=835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 0s ago: executing program 1 (id=836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x5000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) kernel console output (not intermixed with test programs): yzkaller0>, priority 0 [ 104.021725][ T6307] tipc: Resetting bearer [ 104.027544][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 104.027554][ T30] audit: type=1400 audit(1764845909.462:198): avc: denied { unlink } for pid=6317 comm="rm" name="resolv.conf.bond0.ipv4ll" dev="tmpfs" ino=2214 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.070966][ T6307] tipc: Disabling bearer [ 104.901588][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.232587][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 105.514457][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.688021][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.697216][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.705224][ T10] usb 3-1: Product: syz [ 105.709434][ T10] usb 3-1: Manufacturer: syz [ 105.791536][ T10] usb 3-1: SerialNumber: syz [ 105.803904][ T10] usb 3-1: config 0 descriptor?? [ 105.833478][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.849798][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 106.172811][ T30] audit: type=1400 audit(1764845911.612:199): avc: denied { connect } for pid=6341 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.208724][ T30] audit: type=1400 audit(1764845911.612:200): avc: denied { write } for pid=6341 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.512871][ T10] em28xx 3-1:0.0: chip ID is em2765 [ 106.527708][ T5955] IPVS: starting estimator thread 0... [ 106.631662][ T6350] IPVS: using max 43 ests per chain, 103200 per kthread [ 107.395022][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.416337][ T10] em28xx 3-1:0.0: board has no eeprom [ 108.282773][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.301841][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 108.308468][ T5955] em28xx 3-1:0.0: Binding DVB extension [ 109.017242][ T6366] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.063912][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 109.328029][ T30] audit: type=1400 audit(1764845914.772:201): avc: denied { create } for pid=6367 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.767155][ T30] audit: type=1400 audit(1764845914.772:202): avc: denied { ioctl } for pid=6367 comm="syz.3.78" path="socket:[9030]" dev="sockfs" ino=9030 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.800148][ T6223] usb 3-1: USB disconnect, device number 2 [ 109.821124][ T6223] em28xx 3-1:0.0: Disconnecting em28xx [ 109.994743][ T30] audit: type=1400 audit(1764845915.302:203): avc: denied { create } for pid=6375 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.017526][ T5955] em28xx 3-1:0.0: Registering input extension [ 110.073959][ T30] audit: type=1400 audit(1764845915.482:204): avc: denied { write } for pid=6375 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.458958][ T6223] em28xx 3-1:0.0: Closing input extension [ 110.527440][ T6223] em28xx 3-1:0.0: Freeing device [ 110.537937][ T6383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6383 comm=syz.2.81 [ 110.561573][ T30] audit: type=1400 audit(1764845915.482:205): avc: denied { nlmsg_write } for pid=6375 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.001557][ T30] audit: type=1400 audit(1764845917.442:206): avc: denied { setopt } for pid=6403 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.179314][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 112.266010][ T6410] veth3: entered promiscuous mode [ 112.271243][ T6410] veth3: entered allmulticast mode [ 112.283520][ T6410] bridge1: port 1(veth3) entered blocking state [ 112.323024][ T6410] bridge1: port 1(veth3) entered disabled state [ 112.438942][ T6410] bridge1: port 1(veth3) entered blocking state [ 112.445452][ T6410] bridge1: port 1(veth3) entered forwarding state [ 112.665153][ T34] bridge1: port 1(veth3) entered disabled state [ 113.355921][ T6412] veth5: entered promiscuous mode [ 113.366597][ T6412] veth5: entered allmulticast mode [ 113.402178][ T6412] bridge1: port 2(veth5) entered blocking state [ 113.427998][ T6412] bridge1: port 2(veth5) entered disabled state [ 113.489045][ T6412] bridge1: port 2(veth5) entered blocking state [ 113.495540][ T6412] bridge1: port 2(veth5) entered forwarding state [ 113.542271][ T6412] Zero length message leads to an empty skb [ 113.642022][ T34] bridge1: port 2(veth5) entered disabled state [ 113.816032][ T5829] Bluetooth: hci2: Unable to find connection for big 0x00 [ 113.901963][ T6431] netlink: 'syz.2.91': attribute type 1 has an invalid length. [ 115.547275][ T30] audit: type=1400 audit(1764845921.002:207): avc: denied { sqpoll } for pid=6438 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.959933][ T30] audit: type=1400 audit(1764845921.072:208): avc: denied { write } for pid=6445 comm="syz.1.98" name="ip6_flowlabel" dev="proc" ino=4026533354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.721593][ T30] audit: type=1400 audit(1764845921.772:209): avc: denied { create } for pid=6450 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 116.797204][ T30] audit: type=1400 audit(1764845921.772:210): avc: denied { read } for pid=6450 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 118.604716][ T30] audit: type=1400 audit(1764845924.062:211): avc: denied { create } for pid=6470 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.069933][ T30] audit: type=1400 audit(1764845924.132:212): avc: denied { bind } for pid=6470 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.154688][ T30] audit: type=1400 audit(1764845924.132:213): avc: denied { write } for pid=6470 comm="syz.3.103" path="socket:[11277]" dev="sockfs" ino=11277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.207368][ T30] audit: type=1400 audit(1764845924.352:214): avc: denied { read } for pid=6475 comm="syz.2.104" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.736995][ T30] audit: type=1400 audit(1764845924.352:215): avc: denied { open } for pid=6475 comm="syz.2.104" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.760999][ T30] audit: type=1400 audit(1764845924.352:216): avc: denied { ioctl } for pid=6475 comm="syz.2.104" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.172481][ T6487] netlink: 'syz.0.107': attribute type 4 has an invalid length. [ 120.650527][ T6493] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 120.776869][ T6498] syz.4.111 uses obsolete (PF_INET,SOCK_PACKET) [ 120.900560][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 120.900677][ T30] audit: type=1400 audit(1764845926.242:219): avc: denied { create } for pid=6494 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.137776][ T30] audit: type=1400 audit(1764845927.592:220): avc: denied { write } for pid=6502 comm="syz.0.113" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.464223][ T6517] cgroup: fork rejected by pids controller in /syz4 [ 124.692933][ T181] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.881834][ T181] usb 1-1: Using ep0 maxpacket: 8 [ 124.897173][ T181] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.906550][ T181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.920257][ T181] usb 1-1: Product: syz [ 124.935954][ T181] usb 1-1: Manufacturer: syz [ 124.956553][ T181] usb 1-1: SerialNumber: syz [ 124.970894][ T181] usb 1-1: config 0 descriptor?? [ 125.490685][ T181] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.669498][ T181] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 127.704985][ T181] usb 1-1: USB disconnect, device number 2 [ 128.900648][ T30] audit: type=1400 audit(1764845934.312:221): avc: denied { mounton } for pid=9315 comm="syz.2.130" path="/26/file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 129.139801][ T30] audit: type=1400 audit(1764845934.402:222): avc: denied { unmount } for pid=9315 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.286460][ T30] audit: type=1400 audit(1764845934.742:223): avc: denied { read write } for pid=9300 comm="syz.4.126" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 129.508945][ T30] audit: type=1400 audit(1764845934.742:224): avc: denied { open } for pid=9300 comm="syz.4.126" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 129.808441][ T30] audit: type=1326 audit(1764845934.772:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9300 comm="syz.4.126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8721f8f749 code=0x0 [ 130.453658][ T9338] xt_hashlimit: max too large, truncated to 1048576 [ 130.471646][ T9338] xt_hashlimit: overflow, rate too high: 0 [ 130.501866][ T30] audit: type=1400 audit(1764845935.962:226): avc: denied { create } for pid=9337 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.666232][ T30] audit: type=1400 audit(1764845935.982:227): avc: denied { ioctl } for pid=9337 comm="syz.1.136" path="socket:[11609]" dev="sockfs" ino=11609 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 130.747637][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 130.821554][ T30] audit: type=1400 audit(1764845935.982:228): avc: denied { getopt } for pid=9337 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.197284][ T9354] ptrace attach of "./syz-executor exec"[5817] was attempted by " [ 132.698768][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.943208][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.051950][ T30] audit: type=1400 audit(1764845938.512:229): avc: denied { create } for pid=9363 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.968455][ T30] audit: type=1400 audit(1764845939.422:230): avc: denied { read write } for pid=9373 comm="syz.3.147" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.016976][ T9376] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.082057][ T30] audit: type=1400 audit(1764845939.452:231): avc: denied { open } for pid=9373 comm="syz.3.147" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.253779][ T30] audit: type=1400 audit(1764845939.452:232): avc: denied { ioctl } for pid=9373 comm="syz.3.147" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.338962][ T30] audit: type=1400 audit(1764845941.712:233): avc: denied { read write } for pid=9395 comm="syz.0.152" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 136.466203][ T30] audit: type=1400 audit(1764845941.712:234): avc: denied { open } for pid=9395 comm="syz.0.152" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 137.584366][ T30] audit: type=1400 audit(1764845943.032:235): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 139.250667][ T9427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.868912][ T30] audit: type=1400 audit(1764845946.322:236): avc: denied { ioctl } for pid=9440 comm="syz.4.162" path="socket:[11032]" dev="sockfs" ino=11032 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.903876][ T30] audit: type=1400 audit(1764845946.352:237): avc: denied { setopt } for pid=9440 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.078230][ T30] audit: type=1400 audit(1764845946.502:238): avc: denied { read } for pid=9442 comm="syz.1.163" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.103780][ T30] audit: type=1400 audit(1764845946.502:239): avc: denied { open } for pid=9442 comm="syz.1.163" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.378834][ T30] audit: type=1400 audit(1764845946.502:240): avc: denied { ioctl } for pid=9442 comm="syz.1.163" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.644346][ T30] audit: type=1400 audit(1764845946.522:241): avc: denied { ioctl } for pid=9440 comm="syz.4.162" path="socket:[11720]" dev="sockfs" ino=11720 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.999846][ T30] audit: type=1400 audit(1764845946.522:242): avc: denied { bind } for pid=9440 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.035449][ T30] audit: type=1400 audit(1764845947.492:243): avc: denied { create } for pid=9457 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.067239][ T30] audit: type=1400 audit(1764845947.492:244): avc: denied { bind } for pid=9457 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.208877][ T30] audit: type=1400 audit(1764845947.592:245): avc: denied { write } for pid=9457 comm="syz.3.168" path="socket:[11740]" dev="sockfs" ino=11740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.330718][ T9470] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 142.373051][ T9470] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 142.684920][ T9469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 145.886285][ T9501] tipc: Cannot configure node identity twice [ 146.165046][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 146.165075][ T30] audit: type=1400 audit(1764845951.612:251): avc: denied { create } for pid=9503 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.370829][ T30] audit: type=1400 audit(1764845951.612:252): avc: denied { setopt } for pid=9503 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.626314][ T30] audit: type=1400 audit(1764845951.622:253): avc: denied { ioctl } for pid=9503 comm="syz.2.178" path="socket:[12519]" dev="sockfs" ino=12519 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.643631][ T9509] netlink: 'syz.4.180': attribute type 10 has an invalid length. [ 146.680605][ T9509] team0: Device ipvlan1 failed to register rx_handler [ 147.601105][ T30] audit: type=1400 audit(1764845953.052:254): avc: denied { bind } for pid=9516 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.647710][ T30] audit: type=1400 audit(1764845953.082:255): avc: denied { listen } for pid=9516 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.831545][ T30] audit: type=1400 audit(1764845953.262:256): avc: denied { connect } for pid=9500 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.969813][ T9526] netlink: 277 bytes leftover after parsing attributes in process `syz.4.183'. [ 147.994305][ T30] audit: type=1400 audit(1764845953.402:257): avc: denied { kexec_image_load } for pid=9500 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 148.336430][ T9530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9530 comm=syz.0.186 [ 148.370205][ T30] audit: type=1400 audit(1764845953.792:258): avc: denied { setopt } for pid=9527 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.371790][ T9530] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 148.627276][ T9532] bond1: (slave gretap1): making interface the new active one [ 148.774067][ T9532] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 149.538091][ T9518] kexec: Could not allocate control_code_buffer [ 149.794555][ T30] audit: type=1400 audit(1764845955.092:259): avc: denied { read } for pid=9539 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.805343][ T9546] process 'syz.2.190' launched '/dev/fd/4' with NULL argv: empty string added [ 149.856133][ T30] audit: type=1400 audit(1764845955.312:260): avc: denied { execute_no_trans } for pid=9543 comm="syz.2.190" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.812906][ T9581] tipc: Enabled bearer , priority 0 [ 152.829056][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 152.829067][ T30] audit: type=1400 audit(1764845958.282:266): avc: denied { ioctl } for pid=9579 comm="syz.0.199" path="socket:[12208]" dev="sockfs" ino=12208 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.913802][ T9581] syzkaller0: entered promiscuous mode [ 152.919277][ T9581] syzkaller0: entered allmulticast mode [ 153.004423][ T9581] tipc: Resetting bearer [ 153.033383][ T9579] tipc: Resetting bearer [ 153.223696][ T9579] tipc: Disabling bearer [ 154.226002][ T6489] tipc: Node number set to 1171507173 [ 155.353466][ T9608] tipc: Enabled bearer , priority 0 [ 155.434302][ T30] audit: type=1400 audit(1764845960.882:267): avc: denied { mounton } for pid=9610 comm="syz.1.209" path="/43/file0" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.478202][ T30] audit: type=1400 audit(1764845960.892:268): avc: denied { mount } for pid=9610 comm="syz.1.209" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 155.526886][ T30] audit: type=1400 audit(1764845960.982:269): avc: denied { create } for pid=9616 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.064850][ T30] audit: type=1400 audit(1764845960.982:270): avc: denied { ioctl } for pid=9616 comm="syz.3.210" path="socket:[12669]" dev="sockfs" ino=12669 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.188352][ T9607] tipc: Disabling bearer [ 156.196141][ T30] audit: type=1400 audit(1764845961.652:271): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 156.450254][ T6489] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.478666][ T30] audit: type=1400 audit(1764845961.932:272): avc: denied { read append } for pid=9633 comm="syz.1.214" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.932297][ T30] audit: type=1400 audit(1764845961.972:273): avc: denied { open } for pid=9633 comm="syz.1.214" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.971948][ T9639] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 156.991738][ T6489] usb 5-1: Using ep0 maxpacket: 8 [ 157.000887][ T9639] bond1: entered promiscuous mode [ 157.001255][ T6489] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.006295][ T9639] bond1: entered allmulticast mode [ 157.020789][ T9639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.021289][ T6489] usb 5-1: config 7 has an invalid interface number: 6 but max is 0 [ 157.036226][ T6489] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 157.037842][ T9642] erspan1: entered allmulticast mode [ 157.046898][ T6489] usb 5-1: config 7 has no interface number 0 [ 157.060219][ T6489] usb 5-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.064170][ T9642] bond1: (slave erspan1): making interface the new active one [ 157.074824][ T6489] usb 5-1: config 7 interface 6 has no altsetting 0 [ 157.081829][ T9642] erspan1: entered promiscuous mode [ 157.092822][ T6489] usb 5-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 157.102907][ T6489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.103180][ T9642] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 157.111010][ T6489] usb 5-1: Product: syz [ 157.127689][ T6489] usb 5-1: Manufacturer: syz [ 157.141667][ T6489] usb 5-1: SerialNumber: syz [ 157.170670][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 157.335347][ T9639] bond1 (unregistering): (slave erspan1): Releasing active interface [ 157.362288][ T9639] erspan1: left promiscuous mode [ 157.815199][ T30] audit: type=1400 audit(1764845963.262:274): avc: denied { create } for pid=9647 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.116249][ T9639] bond1 (unregistering): Released all slaves [ 158.197178][ T30] audit: type=1400 audit(1764845963.262:275): avc: denied { setopt } for pid=9647 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.306550][ T6489] option 5-1:7.6: GSM modem (1-port) converter detected [ 158.323260][ T30] audit: type=1400 audit(1764845963.722:276): avc: denied { ioctl } for pid=9615 comm="syz.4.207" path="socket:[13317]" dev="sockfs" ino=13317 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.366764][ T6489] usb 5-1: USB disconnect, device number 4 [ 158.380961][ T6489] option 5-1:7.6: device disconnected [ 159.931438][ T30] audit: type=1400 audit(1764845965.372:277): avc: denied { read } for pid=9664 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.340711][ T9683] netlink: zone id is out of range [ 161.585238][ T9683] netlink: set zone limit has 4 unknown bytes [ 163.560319][ T9689] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 163.626479][ T30] audit: type=1400 audit(1764845969.012:278): avc: denied { create } for pid=9688 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 163.667668][ T30] audit: type=1400 audit(1764845969.012:279): avc: denied { write } for pid=9688 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 164.219254][ T9694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.229639][ T9694] bond1: (slave bond2): making interface the new active one [ 164.240574][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.239'. [ 164.270516][ T9694] bond1: (slave bond2): Enslaving as an active interface with an up link [ 164.446938][ T9689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.550420][ T9696] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 164.932384][ T9721] ip6t_rpfilter: unknown options [ 166.537186][ T30] audit: type=1400 audit(1764845971.992:280): avc: denied { setopt } for pid=9741 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.724082][ T30] audit: type=1400 audit(1764845972.022:281): avc: denied { accept } for pid=9741 comm="syz.2.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.340416][ T30] audit: type=1400 audit(1764845974.792:282): avc: denied { create } for pid=9768 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.375915][ T30] audit: type=1400 audit(1764845974.832:283): avc: denied { ioctl } for pid=9768 comm="syz.2.242" path="socket:[12852]" dev="sockfs" ino=12852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.089138][ T30] audit: type=1400 audit(1764845975.172:284): avc: denied { mount } for pid=9773 comm="syz.3.246" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 171.999674][ T30] audit: type=1400 audit(1764845977.452:285): avc: denied { create } for pid=9792 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 172.705412][ T30] audit: type=1400 audit(1764845978.162:286): avc: denied { listen } for pid=9814 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.810622][ T30] audit: type=1400 audit(1764845978.262:287): avc: denied { write } for pid=9814 comm="syz.1.254" path="socket:[12896]" dev="sockfs" ino=12896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 174.248976][ T30] audit: type=1400 audit(1764845979.022:288): avc: denied { ioctl } for pid=9792 comm="syz.3.252" path="socket:[12882]" dev="sockfs" ino=12882 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 176.071677][ T30] audit: type=1400 audit(1764845981.512:289): avc: denied { connect } for pid=9844 comm="syz.3.261" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.813022][ T9865] fuse: Bad value for 'fd' [ 177.842219][ T30] audit: type=1400 audit(1764845983.302:290): avc: denied { ioctl } for pid=9864 comm="syz.4.266" path="socket:[13628]" dev="sockfs" ino=13628 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.979361][ T9867] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 178.807302][ T30] audit: type=1400 audit(1764845984.262:291): avc: denied { accept } for pid=9872 comm="syz.2.268" lport=50747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 179.181758][ T30] audit: type=1400 audit(1764845984.592:292): avc: denied { getopt } for pid=9879 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.111553][ T30] audit: type=1400 audit(1764845985.482:293): avc: denied { connect } for pid=9884 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.393282][ T30] audit: type=1400 audit(1764845985.492:294): avc: denied { ioctl } for pid=9884 comm="syz.4.272" path="socket:[13047]" dev="sockfs" ino=13047 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.515238][ T30] audit: type=1326 audit(1764845986.642:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8721f8f749 code=0x7ffc0000 [ 181.539313][ T30] audit: type=1326 audit(1764845986.642:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f8721f8f749 code=0x7ffc0000 [ 181.634163][ T30] audit: type=1326 audit(1764845986.652:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8721f8f749 code=0x7ffc0000 [ 181.689005][ T30] audit: type=1326 audit(1764845986.652:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8721f8f749 code=0x7ffc0000 [ 181.778602][ T30] audit: type=1326 audit(1764845986.652:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8721f8f749 code=0x7ffc0000 [ 181.864229][ T30] audit: type=1326 audit(1764845986.652:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8721f8f749 code=0x7ffc0000 [ 182.001068][ T30] audit: type=1326 audit(1764845986.652:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8721f8f749 code=0x7ffc0000 [ 182.435282][ T30] audit: type=1326 audit(1764845986.652:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8721f8f749 code=0x7ffc0000 [ 182.460097][ T30] audit: type=1400 audit(1764845987.062:303): avc: denied { append } for pid=9902 comm="syz.3.277" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.364636][ T30] audit: type=1400 audit(1764845989.572:304): avc: denied { setopt } for pid=9918 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 184.787269][ T9897] capability: warning: `syz.0.275' uses deprecated v2 capabilities in a way that may be insecure [ 185.431316][ T9936] netlink: 156 bytes leftover after parsing attributes in process `syz.3.286'. [ 185.463095][ T9936] netlink: 156 bytes leftover after parsing attributes in process `syz.3.286'. [ 185.745863][ T9940] ip6t_srh: unknown srh invflags 7F00 [ 187.131045][ T9952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.357938][ T60] Bluetooth: Error in BCSP hdr checksum [ 188.522435][ T4090] Bluetooth: Error in BCSP hdr checksum [ 188.781222][ T2909] Bluetooth: Error in BCSP hdr checksum [ 188.801023][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 188.801040][ T30] audit: type=1400 audit(1764845994.252:306): avc: denied { bind } for pid=9946 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.829019][ T9975] syzkaller0: entered promiscuous mode [ 188.835231][ T9975] syzkaller0: entered allmulticast mode [ 188.843521][ T30] audit: type=1400 audit(1764845994.302:307): avc: denied { write } for pid=9974 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.096753][ T1974] Bluetooth: Error in BCSP hdr checksum [ 189.142957][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 189.151246][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 189.268080][ T9978] syzkaller0: entered promiscuous mode [ 189.296669][ T9978] syzkaller0: entered allmulticast mode [ 189.312439][ T6461] Bluetooth: Error in BCSP hdr checksum [ 189.551300][ T30] audit: type=1400 audit(1764845995.002:308): avc: denied { read write } for pid=9969 comm="syz.1.293" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 189.584453][ T9984] binder: 9969:9984 ioctl 400c620e 200000000100 returned -22 [ 189.645518][ T30] audit: type=1400 audit(1764845995.042:309): avc: denied { open } for pid=9969 comm="syz.1.293" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.060204][ T30] audit: type=1400 audit(1764845995.042:310): avc: denied { ioctl } for pid=9969 comm="syz.1.293" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x620e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.633211][T10020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 193.865779][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.881019][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.081287][ T30] audit: type=1400 audit(1764845999.532:311): avc: denied { mount } for pid=10018 comm="syz.3.307" name="/" dev="ramfs" ino=13966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 195.012877][T10041] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[10041] [ 195.188704][T10044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.196073][T10044] IPv6: NLM_F_CREATE should be set when creating new route [ 195.210453][T10044] lo: entered allmulticast mode [ 195.216009][T10044] tunl0: entered allmulticast mode [ 195.227276][T10044] gre0: entered allmulticast mode [ 195.237027][T10044] gretap0: entered allmulticast mode [ 195.244155][T10044] erspan0: entered allmulticast mode [ 195.251857][T10044] ip_vti0: entered allmulticast mode [ 195.333059][T10044] ip6_vti0: entered allmulticast mode [ 195.424224][T10044] sit0: entered allmulticast mode [ 195.454031][T10044] ip6tnl0: entered allmulticast mode [ 195.460925][T10044] ip6gre0: entered allmulticast mode [ 195.490123][T10044] syz_tun: entered allmulticast mode [ 195.498466][T10044] ip6gretap0: entered allmulticast mode [ 195.754540][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.762588][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.772214][T10044] bridge0: entered allmulticast mode [ 195.779140][T10044] vcan0: entered allmulticast mode [ 195.785930][T10044] bond0: entered allmulticast mode [ 195.862116][T10044] bond_slave_0: entered allmulticast mode [ 195.867977][T10044] bond_slave_1: entered allmulticast mode [ 195.935699][T10044] team0: entered allmulticast mode [ 195.940838][T10044] team_slave_0: entered allmulticast mode [ 195.971570][T10044] team_slave_1: entered allmulticast mode [ 196.014968][T10044] dummy0: entered allmulticast mode [ 196.037499][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 196.043673][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 196.049864][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 196.055981][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 196.062128][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 196.192877][T10044] nlmon0: entered allmulticast mode [ 196.312234][T10044] caif0: entered allmulticast mode [ 196.321087][T10044] batadv0: entered allmulticast mode [ 196.712680][T10044] veth0: entered allmulticast mode [ 197.000160][T10044] veth1: entered allmulticast mode [ 197.514321][T10044] wg0: entered allmulticast mode [ 197.533648][T10044] wg1: entered allmulticast mode [ 197.548515][T10044] wg2: entered allmulticast mode [ 197.558986][T10044] veth0_to_bridge: entered allmulticast mode [ 197.576336][T10044] veth1_to_bridge: entered allmulticast mode [ 197.598551][T10044] veth0_to_bond: entered allmulticast mode [ 197.613014][T10044] veth1_to_bond: entered allmulticast mode [ 197.654087][T10044] veth0_to_team: left promiscuous mode [ 197.665004][T10044] veth0_to_team: entered allmulticast mode [ 197.677258][T10044] veth1_to_team: entered allmulticast mode [ 197.688585][T10044] veth0_to_batadv: entered allmulticast mode [ 197.699863][T10044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.749165][T10044] batadv_slave_0: entered allmulticast mode [ 197.758719][T10044] veth1_to_batadv: entered allmulticast mode [ 197.768638][T10044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.776794][T10044] batadv_slave_1: entered allmulticast mode [ 197.785832][T10044] xfrm0: entered allmulticast mode [ 197.794185][T10044] veth0_to_hsr: entered allmulticast mode [ 197.806088][T10044] hsr_slave_0: entered allmulticast mode [ 198.429855][T10044] veth1_to_hsr: entered allmulticast mode [ 198.459365][T10044] hsr_slave_1: entered allmulticast mode [ 198.482225][T10044] hsr0: entered allmulticast mode [ 198.493855][T10044] veth1_virt_wifi: entered allmulticast mode [ 198.501654][T10044] veth0_virt_wifi: entered allmulticast mode [ 198.512867][T10044] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 198.522412][T10044] veth1_vlan: entered allmulticast mode [ 198.531317][T10044] veth0_vlan: entered allmulticast mode [ 198.548721][T10044] vlan0: entered allmulticast mode [ 198.555699][T10044] vlan1: entered allmulticast mode [ 198.830792][T10079] qnx6: unable to read the first superblock [ 198.838981][T10079] qnx6: unable to read the first superblock [ 198.844983][T10079] qnx6: unable to read the first superblock [ 199.197496][ T30] audit: type=1400 audit(1764846004.262:312): avc: denied { create } for pid=10074 comm="syz.2.319" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.248843][T10044] macvlan0: entered allmulticast mode [ 199.294877][T10044] macvlan1: entered allmulticast mode [ 199.320644][T10044] ipvlan0: entered allmulticast mode [ 199.334763][T10044] ipvlan1: entered allmulticast mode [ 199.365142][T10044] veth1_macvtap: entered allmulticast mode [ 199.384435][T10044] veth0_macvtap: entered allmulticast mode [ 199.437914][ T30] audit: type=1400 audit(1764846004.892:313): avc: denied { unlink } for pid=5817 comm="syz-executor" name="file0" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.531303][T10044] macvtap0: entered allmulticast mode [ 199.545772][T10086] kAFS: unable to lookup cell 'ÿ' [ 199.553348][T10086] kAFS: unable to lookup cell '(,c¾Ì' [ 199.590081][ T30] audit: type=1400 audit(1764846004.962:314): avc: denied { bind } for pid=10084 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.596138][T10044] macsec0: entered allmulticast mode [ 199.653534][T10044] geneve0: entered allmulticast mode [ 199.658940][ T30] audit: type=1400 audit(1764846004.972:315): avc: denied { name_bind } for pid=10084 comm="syz.2.322" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 199.843896][ T30] audit: type=1400 audit(1764846004.972:316): avc: denied { node_bind } for pid=10084 comm="syz.2.322" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 199.891015][T10044] geneve1: entered allmulticast mode [ 200.016239][ T30] audit: type=1400 audit(1764846004.972:317): avc: denied { name_connect } for pid=10084 comm="syz.2.322" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 200.063488][T10044] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 200.227212][T10044] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 200.401829][ T30] audit: type=1400 audit(1764846005.782:318): avc: denied { getopt } for pid=10094 comm="syz.2.324" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.757623][T10044] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 200.783734][T10044] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 200.813987][T10044] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 201.505059][T10044] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 201.534946][T10044] bridge1: entered allmulticast mode [ 201.607291][T10044] veth2: entered allmulticast mode [ 201.692842][T10044] veth4: entered allmulticast mode [ 201.741733][ T3907] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.798272][ T3907] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.770417][ T3907] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.779334][ T3907] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.845432][T10148] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 204.496883][ T30] audit: type=1400 audit(1764846009.942:319): avc: denied { set_context_mgr } for pid=10149 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 205.127386][ T30] audit: type=1400 audit(1764846010.512:320): avc: denied { create } for pid=10153 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.028153][T10170] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 206.084478][T10170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.203923][T10172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.214517][T10172] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 206.362438][T10172] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 206.530979][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'. [ 206.592442][T10173] veth7: entered promiscuous mode [ 206.619679][T10173] bond1: (slave veth7): Enslaving as an active interface with a down link [ 206.671262][T10170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.967988][T10180] vlan2: entered promiscuous mode [ 206.973130][T10180] batadv_slave_1: entered promiscuous mode [ 206.979962][T10180] vlan2: entered allmulticast mode [ 206.985213][T10180] batadv_slave_1: entered allmulticast mode [ 206.997564][T10180] team0: Device vlan2 is up. Set it down before adding it as a team port [ 207.587271][T10192] veth1_to_bond: entered allmulticast mode [ 207.596945][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 207.769815][ T30] audit: type=1400 audit(1764846013.052:321): avc: denied { write } for pid=10191 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.178740][T10192] bond0: (slave bond_slave_1): Releasing backup interface [ 208.192461][ T30] audit: type=1400 audit(1764846013.632:322): avc: denied { watch watch_reads } for pid=10188 comm="syz.3.347" path="/" dev="ramfs" ino=14132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 208.232024][T10192] veth1_to_bond (unregistering): left allmulticast mode [ 208.969514][ T30] audit: type=1400 audit(1764846014.422:323): avc: denied { cmd } for pid=10203 comm="syz.0.350" path="socket:[14149]" dev="sockfs" ino=14149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 209.393401][ T30] audit: type=1800 audit(1764846014.852:324): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.347" name="bus" dev="ramfs" ino=14587 res=0 errno=0 [ 210.353471][T10218] syzkaller0: entered promiscuous mode [ 210.358960][T10218] syzkaller0: entered allmulticast mode [ 210.405874][T10218] 0: reclassify loop, rule prio 0, protocol 800 [ 211.557457][ T52] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 211.973236][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'. [ 212.061027][T10246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10246 comm=syz.2.364 [ 212.305997][ T30] audit: type=1400 audit(1764846017.642:325): avc: denied { watch } for pid=10247 comm="syz.1.366" path="/68/file1" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.677119][ T30] audit: type=1400 audit(1764846017.642:326): avc: denied { watch_sb watch_reads } for pid=10247 comm="syz.1.366" path="/68/file1" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.439807][ T30] audit: type=1400 audit(1764846018.892:327): avc: denied { read } for pid=10261 comm="syz.3.369" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 213.740174][T10268] tipc: Started in network mode [ 213.745125][T10268] tipc: Node identity , cluster identity 4711 [ 213.751221][T10268] tipc: Failed to obtain node identity [ 213.756945][T10268] tipc: Enabling of bearer rejected, failed to enable media [ 214.108852][ T30] audit: type=1400 audit(1764846018.922:328): avc: denied { open } for pid=10261 comm="syz.3.369" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 214.142012][ T30] audit: type=1400 audit(1764846019.092:329): avc: denied { ioctl } for pid=10261 comm="syz.3.369" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 216.184273][T10289] tipc: Started in network mode [ 216.212976][T10289] tipc: Node identity 7f000001, cluster identity 4711 [ 216.220310][T10289] tipc: Enabled bearer , priority 10 [ 216.276187][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.376'. [ 216.330879][T10289] tipc: Enabled bearer , priority 10 [ 216.788026][ T30] audit: type=1400 audit(1764846022.242:330): avc: denied { mounton } for pid=10307 comm="syz.1.379" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 217.737851][ T30] audit: type=1400 audit(1764846022.772:331): avc: denied { setopt } for pid=10310 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.744721][ T37] tipc: Node number set to 2130706433 [ 217.863297][ T30] audit: type=1400 audit(1764846022.872:332): avc: denied { bind } for pid=10310 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.882883][ T30] audit: type=1400 audit(1764846022.872:333): avc: denied { node_bind } for pid=10310 comm="syz.2.381" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 217.952369][T10314] GUP no longer grows the stack in syz.0.382 (10314): 200000004000-20000000a000 (200000002000) [ 217.963240][T10314] CPU: 0 UID: 0 PID: 10314 Comm: syz.0.382 Not tainted syzkaller #0 PREEMPT(full) [ 217.963268][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.963279][T10314] Call Trace: [ 217.963286][T10314] [ 217.963293][T10314] dump_stack_lvl+0x16c/0x1f0 [ 217.963328][T10314] gup_vma_lookup+0x1d2/0x220 [ 217.963358][T10314] __get_user_pages+0x241/0x33c0 [ 217.963395][T10314] ? find_held_lock+0x2b/0x80 [ 217.963418][T10314] ? __pfx___get_user_pages+0x10/0x10 [ 217.963454][T10314] get_user_pages_remote+0x243/0xab0 [ 217.963481][T10314] ? mast_spanning_rebalance.isra.0+0x2020/0x2060 [ 217.963513][T10314] ? __pfx_get_user_pages_remote+0x10/0x10 [ 217.963544][T10314] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.963575][T10314] __access_remote_vm+0x24d/0x850 [ 217.963605][T10314] ? do_raw_spin_lock+0x12c/0x2b0 [ 217.963634][T10314] ? __pfx___access_remote_vm+0x10/0x10 [ 217.963659][T10314] ? set_page_refcounted+0xbd/0x230 [ 217.963691][T10314] proc_pid_cmdline_read+0x4de/0x8e0 [ 217.963720][T10314] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 217.963747][T10314] ? rw_verify_area+0xcf/0x6c0 [ 217.963774][T10314] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 217.963797][T10314] vfs_readv+0x5c1/0x8b0 [ 217.963829][T10314] ? __pfx_vfs_readv+0x10/0x10 [ 217.963874][T10314] ? __fget_files+0x20e/0x3c0 [ 217.963900][T10314] ? do_preadv+0x1a6/0x270 [ 217.963924][T10314] do_preadv+0x1a6/0x270 [ 217.963950][T10314] ? __pfx_do_preadv+0x10/0x10 [ 217.963984][T10314] do_syscall_64+0xcd/0xf80 [ 217.964013][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.964032][T10314] RIP: 0033:0x7f5c23d8f749 [ 217.964048][T10314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.964066][T10314] RSP: 002b:00007f5c24cf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 217.964084][T10314] RAX: ffffffffffffffda RBX: 00007f5c23fe5fa0 RCX: 00007f5c23d8f749 [ 217.964096][T10314] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 217.964107][T10314] RBP: 00007f5c23e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 217.964118][T10314] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 217.964130][T10314] R13: 00007f5c23fe6038 R14: 00007f5c23fe5fa0 R15: 00007ffc1f2a7688 [ 217.964165][T10314] [ 218.729766][ T30] audit: type=1400 audit(1764846024.182:334): avc: denied { create } for pid=10320 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 219.083951][ T30] audit: type=1400 audit(1764846024.522:335): avc: denied { name_bind } for pid=10323 comm="syz.3.385" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 219.508177][ T30] audit: type=1400 audit(1764846024.872:336): avc: denied { setopt } for pid=10320 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 219.540360][T10331] syzkaller0: entered promiscuous mode [ 219.548920][T10331] syzkaller0: entered allmulticast mode [ 220.075719][ T30] audit: type=1400 audit(1764846025.522:337): avc: denied { create } for pid=10334 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 220.201619][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 220.408148][ T30] audit: type=1400 audit(1764846025.522:338): avc: denied { ioctl } for pid=10334 comm="syz.3.387" path="socket:[14901]" dev="sockfs" ino=14901 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 220.551601][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 220.560672][ T5878] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 220.570630][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 220.598440][ T5878] usb 1-1: Product: syz [ 220.609140][ T5878] usb 1-1: Manufacturer: syz [ 220.618573][ T5878] usb 1-1: SerialNumber: syz [ 221.115030][ T5878] usb 1-1: config 0 descriptor?? [ 221.307059][T10346] kvm: emulating exchange as write [ 221.393713][ T5878] usb 1-1: USB disconnect, device number 3 [ 221.443746][ T30] audit: type=1400 audit(1764846026.902:339): avc: denied { append } for pid=10350 comm="syz.4.393" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 222.540602][ T30] audit: type=1400 audit(1764846027.192:340): avc: denied { relabelfrom } for pid=10350 comm="syz.4.393" name="" dev="pipefs" ino=15409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 223.247173][T10370] netlink: 75 bytes leftover after parsing attributes in process `syz.3.397'. [ 223.889502][ T30] audit: type=1400 audit(1764846029.332:341): avc: denied { read } for pid=10384 comm="syz.3.401" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.947600][ T30] audit: type=1400 audit(1764846029.332:342): avc: denied { open } for pid=10384 comm="syz.3.401" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 224.062311][ T30] audit: type=1400 audit(1764846029.332:343): avc: denied { ioctl } for pid=10384 comm="syz.3.401" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.011520][T10403] Illegal XDP return value 1645112257 on prog (id 87) dev N/A, expect packet loss! [ 225.045793][ T30] audit: type=1400 audit(1764846029.462:344): avc: denied { bind } for pid=10376 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 225.869262][T10411] team0: Port device team_slave_0 removed [ 225.973549][ T30] audit: type=1400 audit(1764846031.432:345): avc: denied { bind } for pid=10415 comm="syz.2.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.035976][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 226.075403][ T30] audit: type=1400 audit(1764846031.532:346): avc: denied { write } for pid=10417 comm="syz.4.411" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.750879][ T30] audit: type=1400 audit(1764846033.202:347): avc: denied { setopt } for pid=10428 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.494028][T10439] tipc: Enabled bearer , priority 0 [ 228.651023][T10437] tipc: Disabling bearer [ 231.011392][ T30] audit: type=1400 audit(1764846036.462:348): avc: denied { getopt } for pid=10460 comm="syz.4.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 234.741205][ T30] audit: type=1326 audit(1764846040.192:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10501 comm="syz.4.434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8721f8f749 code=0x0 [ 235.164940][T10510] dlm: no local IP address has been set [ 235.170665][T10510] dlm: cannot start dlm midcomms -107 [ 235.451505][ T9963] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.469196][T10518] warning: `syz.0.429' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 235.488163][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 235.662842][ C0] hrtimer: interrupt took 68569 ns [ 235.901668][ T9963] usb 4-1: Using ep0 maxpacket: 16 [ 236.193156][ T9963] usb 4-1: config 4 has an invalid interface number: 194 but max is 0 [ 236.215043][ T9963] usb 4-1: config 4 has no interface number 0 [ 236.222365][ T9963] usb 4-1: config 4 interface 194 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 236.318266][ T9963] usb 4-1: config 4 interface 194 has no altsetting 0 [ 236.339283][ T9963] usb 4-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.bf [ 236.418171][ T9963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.463249][ T9963] usb 4-1: Product: syz [ 236.481535][ T9963] usb 4-1: Manufacturer: syz [ 236.486152][ T9963] usb 4-1: SerialNumber: syz [ 236.527858][T10510] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 236.583342][ T9963] em28xx 4-1:4.194: New device syz syz @ 480 Mbps (2040:6500, interface 194, class 194) [ 236.600849][ T9963] em28xx 4-1:4.194: Video interface 194 found: bulk [ 236.761573][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 237.333118][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.362164][ T5879] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 238.081604][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.151846][ T9963] em28xx 4-1:4.194: unknown em28xx chip ID (0) [ 238.159074][ T5879] usb 5-1: config 0 descriptor?? [ 238.226489][ T9963] em28xx 4-1:4.194: reading from i2c device at 0xa0 failed (error=-5) [ 238.237462][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 238.345171][ T30] audit: type=1400 audit(1764846043.692:350): avc: denied { connect } for pid=10538 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.414029][ T9963] em28xx 4-1:4.194: board has no eeprom [ 238.491638][ T9963] em28xx 4-1:4.194: Identified as Hauppauge WinTV HVR 900 (card=10) [ 238.504615][ T9963] em28xx 4-1:4.194: analog set to bulk mode. [ 238.510680][ T5878] em28xx 4-1:4.194: Registering V4L2 extension [ 238.609026][ T30] audit: type=1400 audit(1764846044.062:351): avc: denied { bind } for pid=10538 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.632522][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 238.670470][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 238.704788][ T5878] em28xx 4-1:4.194: reading from i2c device at 0xb8 failed (error=-5) [ 238.714280][ T5879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 238.724473][ T9963] usb 4-1: USB disconnect, device number 2 [ 238.730795][ T9963] em28xx 4-1:4.194: Disconnecting em28xx [ 238.736572][ T30] audit: type=1400 audit(1764846044.082:352): avc: denied { write } for pid=10538 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.765180][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 238.790262][ T5879] pwc: recv_control_msg error -32 req 04 val 1300 [ 238.808966][ T5879] pwc: recv_control_msg error -32 req 04 val 1400 [ 238.911629][T10548] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 238.911629][T10548] program syz.3.445 not setting count and/or reply_len properly [ 239.094282][ T5879] pwc: recv_control_msg error -32 req 02 val 2000 [ 239.104528][ T30] audit: type=1400 audit(1764846044.102:353): avc: denied { read } for pid=10538 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.129375][ T5879] pwc: recv_control_msg error -32 req 02 val 2100 [ 239.143957][ T5879] pwc: recv_control_msg error -32 req 04 val 1500 [ 239.159026][ T5879] pwc: recv_control_msg error -32 req 02 val 2500 [ 239.169541][ T5879] pwc: recv_control_msg error -32 req 02 val 2400 [ 239.182220][ T30] audit: type=1400 audit(1764846044.352:354): avc: denied { ioctl } for pid=10545 comm="syz.3.445" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 239.226246][ T5879] pwc: recv_control_msg error -32 req 02 val 2600 [ 239.329999][ T5878] em28xx 4-1:4.194: Config register raw data: 0xffffffed [ 239.343451][ T5878] em28xx 4-1:4.194: AC97 chip type couldn't be determined [ 239.371379][ T5878] em28xx 4-1:4.194: No AC97 audio processor [ 239.437846][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 239.445756][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 239.454325][ T5878] em28xx 4-1:4.194: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 239.468223][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 239.477993][ T5878] em28xx 4-1:4.194: Binding DVB extension [ 239.485665][ T5879] pwc: Registered as video103. [ 239.491784][ T5878] em28xx 4-1:4.194: no endpoint for DVB mode and transfer type 0 [ 239.500656][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 239.586615][ T5878] em28xx 4-1:4.194: failed to pre-allocate USB transfer buffers for DVB. [ 239.609613][ T5879] usb 5-1: USB disconnect, device number 5 [ 239.626289][ T5878] em28xx 4-1:4.194: Registering input extension [ 239.689858][ T9963] em28xx 4-1:4.194: Closing input extension [ 239.774563][ T9963] em28xx 4-1:4.194: Freeing device [ 239.852750][ T30] audit: type=1400 audit(1764846045.312:355): avc: denied { search } for pid=5488 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.876538][ T30] audit: type=1400 audit(1764846045.312:356): avc: denied { search } for pid=5488 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.898400][ T30] audit: type=1400 audit(1764846045.312:357): avc: denied { search } for pid=5488 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.243731][T10569] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.447'. [ 240.305113][ T30] audit: type=1400 audit(1764846045.762:358): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 240.500967][ T30] audit: type=1400 audit(1764846045.952:359): avc: denied { bind } for pid=10572 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.771543][ T37] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 241.392782][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.411485][ T37] usb 4-1: config 0 has no interfaces? [ 241.418724][ T37] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 241.441472][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.449482][ T37] usb 4-1: Product: syz [ 241.454054][ T37] usb 4-1: Manufacturer: syz [ 241.459262][ T37] usb 4-1: SerialNumber: syz [ 241.485355][ T37] usb 4-1: config 0 descriptor?? [ 242.084787][T10543] delete_channel: no stack [ 243.424988][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.432491][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.771327][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.784637][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.368861][ T4090] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.378296][ T4090] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.394816][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.409377][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.558859][ T5879] usb 4-1: USB disconnect, device number 3 [ 245.824457][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 245.824471][ T30] audit: type=1400 audit(1764846051.282:365): avc: denied { write } for pid=10640 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 245.825808][T10642] lo speed is unknown, defaulting to 1000 [ 246.076049][T10642] lo speed is unknown, defaulting to 1000 [ 247.068173][T10642] lo speed is unknown, defaulting to 1000 [ 247.176606][T10642] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.204860][T10642] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 248.265393][T10642] lo speed is unknown, defaulting to 1000 [ 248.447160][T10642] lo speed is unknown, defaulting to 1000 [ 248.508852][T10642] lo speed is unknown, defaulting to 1000 [ 248.558068][T10642] lo speed is unknown, defaulting to 1000 [ 248.571217][ T30] audit: type=1800 audit(1764846054.022:366): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.465" name="bus" dev="ramfs" ino=15289 res=0 errno=0 [ 248.641618][T10642] lo speed is unknown, defaulting to 1000 [ 250.043202][ T30] audit: type=1400 audit(1764846055.502:367): avc: denied { create } for pid=10671 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 250.649831][ T30] audit: type=1400 audit(1764846055.832:368): avc: denied { getopt } for pid=10671 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.224912][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.231238][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.871516][ T30] audit: type=1400 audit(1764846064.712:369): avc: denied { setopt } for pid=10794 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 260.455378][ T5917] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 261.519308][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 261.572342][ T5917] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 262.589961][ T5917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.615895][ T5917] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 262.631481][ T5917] usb 2-1: config 1 has no interface number 1 [ 262.637600][ T5917] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 262.711650][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 263.961239][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 264.382941][ T9] usb 1-1: can't read configurations, error -71 [ 264.400052][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.369128][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.373080][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 265.410930][ T5917] usb 2-1: can't set config #1, error -71 [ 265.467513][ T5917] usb 2-1: USB disconnect, device number 2 [ 267.399586][ T30] audit: type=1400 audit(1764846072.852:370): avc: denied { read write } for pid=10877 comm="syz.0.513" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 268.789371][ T30] audit: type=1400 audit(1764846072.852:371): avc: denied { open } for pid=10877 comm="syz.0.513" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 271.653324][T10913] tipc: Started in network mode [ 271.658197][T10913] tipc: Node identity 080211, cluster identity 4711 [ 271.666156][T10913] tipc: Enabled bearer , priority 0 [ 271.697331][T10913] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 271.711596][T10913] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 271.765174][T10913] tipc: Resetting bearer [ 272.408874][ T30] audit: type=1400 audit(1764846077.852:372): avc: denied { read } for pid=10919 comm="syz.3.523" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 272.676872][ T30] audit: type=1400 audit(1764846077.852:373): avc: denied { open } for pid=10919 comm="syz.3.523" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 272.893959][ T5917] tipc: Node number set to 134353152 [ 272.961508][T10931] kAFS: unable to lookup cell 'ÿ' [ 273.445002][T10933] kAFS: unable to lookup cell '(,c¾Ì' [ 273.836042][ T30] audit: type=1400 audit(1764846079.292:374): avc: denied { read } for pid=10934 comm="syz.4.526" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 273.930591][ T30] audit: type=1400 audit(1764846079.322:375): avc: denied { open } for pid=10934 comm="syz.4.526" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.031549][ T30] audit: type=1400 audit(1764846079.322:376): avc: denied { ioctl } for pid=10934 comm="syz.4.526" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.189589][ T30] audit: type=1400 audit(1764846079.432:377): avc: denied { write } for pid=10934 comm="syz.4.526" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.124643][ T30] audit: type=1400 audit(1764846080.102:378): avc: denied { create } for pid=10945 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 275.144073][ T30] audit: type=1400 audit(1764846080.102:379): avc: denied { getopt } for pid=10945 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 275.813663][T10959] netlink: 'syz.4.533': attribute type 13 has an invalid length. [ 276.013872][T10952] svc: failed to register nfsdv3 RPC service (errno 111). [ 276.031640][T10952] svc: failed to register nfsaclv3 RPC service (errno 111). [ 276.081137][ T24] libceph: connect (1)[c::]:6789 error -101 [ 276.092402][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 276.106789][T10956] ceph: No mds server is up or the cluster is laggy [ 276.420572][T10959] tipc: Enabled bearer , priority 0 [ 276.441846][T10968] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 276.450180][T10968] syzkaller0: entered promiscuous mode [ 276.920223][T10968] syzkaller0: entered allmulticast mode [ 277.073641][T10958] tipc: Resetting bearer [ 277.144747][T10958] tipc: Disabling bearer [ 277.238576][ T30] audit: type=1326 audit(1764846082.672:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 277.274021][ T30] audit: type=1326 audit(1764846082.672:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 277.518556][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 277.518570][ T30] audit: type=1326 audit(1764846082.672:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 277.619577][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 278.101585][ T30] audit: type=1326 audit(1764846082.672:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 278.131545][ T30] audit: type=1326 audit(1764846082.672:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 278.291024][ T30] audit: type=1326 audit(1764846082.672:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 278.496659][ T30] audit: type=1326 audit(1764846082.672:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 278.927702][ T30] audit: type=1326 audit(1764846082.672:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 278.951943][ T30] audit: type=1326 audit(1764846082.672:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 279.001626][ T30] audit: type=1326 audit(1764846082.672:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 279.099837][ T30] audit: type=1326 audit(1764846082.672:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 279.185964][ T30] audit: type=1326 audit(1764846082.672:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10977 comm="syz.2.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e98f749 code=0x7ffc0000 [ 281.245552][T11003] syz.2.542 (11003) used greatest stack depth: 17112 bytes left [ 284.185394][T11042] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 284.197593][T11042] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 284.939353][T11055] netlink: 188 bytes leftover after parsing attributes in process `syz.4.555'. [ 287.389413][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'. [ 287.404339][T11071] wg1: entered promiscuous mode [ 287.409310][T11071] wg1: entered allmulticast mode [ 289.231636][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 289.231675][ T30] audit: type=1400 audit(1764846094.672:401): avc: denied { append } for pid=11085 comm="syz.1.564" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 290.245254][T11098] tipc: Started in network mode [ 290.250422][T11098] tipc: Node identity 12064c4d5768, cluster identity 4711 [ 290.258506][T11098] tipc: Enabled bearer , priority 0 [ 290.272912][T11098] syzkaller0: entered promiscuous mode [ 290.279001][T11098] syzkaller0: entered allmulticast mode [ 290.310340][T11098] tipc: Resetting bearer [ 290.320436][T11097] tipc: Resetting bearer [ 290.335521][T11097] tipc: Disabling bearer [ 291.923004][ T30] audit: type=1800 audit(1764846097.342:402): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.571" name="bus" dev="ramfs" ino=16238 res=0 errno=0 [ 293.056928][T11128] tipc: Enabling of bearer rejected, failed to enable media [ 295.463940][T11145] tipc: Enabled bearer , priority 0 [ 295.496660][T11145] syzkaller0: entered promiscuous mode [ 295.526936][T11145] syzkaller0: entered allmulticast mode [ 295.589932][T11145] tipc: Resetting bearer [ 295.712088][T11144] tipc: Resetting bearer [ 296.339013][T11144] tipc: Disabling bearer [ 296.512834][T11146] lo speed is unknown, defaulting to 1000 [ 298.448986][T11181] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 298.538926][T11181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.236117][T11178] kvm: kvm [11174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 299.259408][T11183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.291826][T11183] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 299.454693][T11183] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 299.741910][T11195] tipc: Enabled bearer , priority 0 [ 299.843029][T11184] macvlan2: entered promiscuous mode [ 299.848359][T11184] macvlan2: entered allmulticast mode [ 299.873020][T11184] bond2: entered promiscuous mode [ 299.925564][T11184] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.024433][T11184] bond2: left promiscuous mode [ 300.252643][T11196] syzkaller0: entered promiscuous mode [ 300.270347][T11196] syzkaller0: entered allmulticast mode [ 300.335842][T11195] tipc: Resetting bearer [ 300.384050][T11189] tipc: Resetting bearer [ 300.410010][T11189] tipc: Disabling bearer [ 300.771647][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 301.201497][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 301.209868][ T5878] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.692770][ T5878] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 301.711512][ T5878] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 301.737207][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.771691][ T5878] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 301.812387][ T5878] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.837812][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 301.861279][ T5878] usb 1-1: SerialNumber: syz [ 301.882904][T11212] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.932560][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.940201][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.172859][T11212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11212 comm=syz.0.594 [ 302.346129][T11210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.371575][T11210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.804839][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 302.821444][T11212] erspan0: entered promiscuous mode [ 302.829888][ T5057] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.869740][ T5057] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.896443][ T5057] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.917823][ T5057] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.915710][ T30] audit: type=1326 audit(1764846109.372:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 303.970868][ T5878] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 303.985574][ T5878] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 303.993480][ T5878] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 304.002875][ T30] audit: type=1326 audit(1764846109.402:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 304.031931][ T5878] usb 1-1: USB disconnect, device number 6 [ 304.042659][ T30] audit: type=1326 audit(1764846109.402:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 304.156529][ T30] audit: type=1326 audit(1764846109.402:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 304.181004][ T30] audit: type=1326 audit(1764846109.402:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 304.665770][ T30] audit: type=1326 audit(1764846109.402:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 304.690264][ T30] audit: type=1326 audit(1764846109.402:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 304.719830][ T30] audit: type=1326 audit(1764846109.402:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 304.744382][ T30] audit: type=1326 audit(1764846109.402:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 305.803378][ T30] audit: type=1326 audit(1764846109.402:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11241 comm="syz.3.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8758f749 code=0x7ffc0000 [ 306.140682][T11271] netlink: 132 bytes leftover after parsing attributes in process `syz.4.606'. [ 306.651884][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.605'. [ 306.660869][T11274] tipc: Invalid UDP bearer configuration [ 306.661265][T11274] tipc: Enabling of bearer rejected, failed to enable media [ 310.525606][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 310.525626][ T30] audit: type=1400 audit(1764846115.652:422): avc: denied { bind } for pid=11292 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 312.029946][T11314] tipc: Enabling of bearer rejected, failed to enable media [ 313.925193][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 314.184185][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 314.629193][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 314.660122][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 314.793613][T11344] ceph: No mds server is up or the cluster is laggy [ 315.020231][T11349] PKCS8: Unsupported PKCS#8 version [ 316.666404][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.678955][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.310986][ T30] audit: type=1400 audit(1764846122.762:423): avc: denied { name_bind } for pid=11376 comm="syz.4.633" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 320.819893][T11415] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 320.886253][T11415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.589535][T11420] bond2: (slave ip6gretap1): making interface the new active one [ 321.612495][T11420] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 321.651155][T11425] tipc: Enabled bearer , priority 0 [ 321.719132][T11419] tipc: Resetting bearer [ 321.843203][T11426] syzkaller0: entered promiscuous mode [ 321.893375][T11426] syzkaller0: entered allmulticast mode [ 321.985947][T11418] tipc: Resetting bearer [ 322.397648][ T30] audit: type=1400 audit(1764846127.602:424): avc: denied { watch watch_reads } for pid=11434 comm="syz.3.646" path="/109" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 322.450673][T11418] tipc: Disabling bearer [ 323.227104][ T30] audit: type=1400 audit(1764846128.682:425): avc: denied { append } for pid=11452 comm="syz.1.649" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 324.531942][ T30] audit: type=1400 audit(1764846129.982:426): avc: denied { map } for pid=11464 comm="syz.4.652" path="socket:[18020]" dev="sockfs" ino=18020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 324.598095][T11469] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 324.818286][T11469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.569762][T11474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.613281][ T30] audit: type=1400 audit(1764846131.062:427): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.768946][T11474] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 325.829927][ T30] audit: type=1400 audit(1764846131.062:428): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.868849][T11474] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 325.904570][T11475] gretap1: entered promiscuous mode [ 325.909996][ T30] audit: type=1400 audit(1764846131.062:429): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.104122][T11475] bond1: (slave gretap1): making interface the new active one [ 326.151518][ T30] audit: type=1400 audit(1764846131.412:430): avc: denied { allowed } for pid=11482 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 326.172258][T11475] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 326.198026][T11469] macvlan2: entered promiscuous mode [ 326.212834][ T30] audit: type=1400 audit(1764846131.412:431): avc: denied { create } for pid=11482 comm="syz.1.656" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.234122][T11469] macvlan2: entered allmulticast mode [ 326.252176][T11469] bond1: entered promiscuous mode [ 326.262598][T11469] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 326.301567][ T30] audit: type=1400 audit(1764846131.412:432): avc: denied { map } for pid=11482 comm="syz.1.656" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.326517][ T30] audit: type=1400 audit(1764846131.412:433): avc: denied { read write } for pid=11482 comm="syz.1.656" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.353481][T11469] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 326.545928][T11469] bond1: left promiscuous mode [ 327.130614][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 327.163374][ T1974] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.174004][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 327.212101][ T1974] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.361713][ T1974] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.405138][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 327.405173][ T30] audit: type=1400 audit(1764846132.862:450): avc: denied { read write } for pid=11492 comm="syz.3.660" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 327.444875][T11494] ip6tnl0: Caught tx_queue_len zero misconfig [ 327.614611][ T30] audit: type=1400 audit(1764846132.862:451): avc: denied { open } for pid=11492 comm="syz.3.660" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 327.803588][ T30] audit: type=1400 audit(1764846132.862:452): avc: denied { create } for pid=11492 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 327.826054][ T1974] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.834619][ T30] audit: type=1400 audit(1764846133.182:453): avc: denied { map_create } for pid=11493 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 327.907591][ T30] audit: type=1400 audit(1764846133.182:454): avc: denied { map_read map_write } for pid=11493 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.919225][ T30] audit: type=1400 audit(1764846133.182:455): avc: denied { setopt } for pid=11493 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 329.061519][ T30] audit: type=1400 audit(1764846133.512:456): avc: denied { create } for pid=11500 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 329.199760][ T30] audit: type=1400 audit(1764846133.532:457): avc: denied { bind } for pid=11500 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 329.218867][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.497206][ T30] audit: type=1400 audit(1764846133.532:458): avc: denied { setopt } for pid=11500 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 329.542767][ T30] audit: type=1400 audit(1764846133.532:459): avc: denied { accept } for pid=11500 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 330.548018][T11526] netlink: 'syz.4.667': attribute type 10 has an invalid length. [ 330.592096][T11526] batman_adv: batadv0: Adding interface: netdevsim0 [ 330.598946][T11526] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.624680][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.631560][T11526] batman_adv: batadv0: Interface activated: netdevsim0 [ 332.934081][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 332.934094][ T30] audit: type=1400 audit(1764846137.982:481): avc: denied { create } for pid=11563 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 333.626251][ T30] audit: type=1400 audit(1764846137.992:482): avc: denied { write } for pid=11563 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 333.691570][ T30] audit: type=1400 audit(1764846137.992:483): avc: denied { create } for pid=11563 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.356530][ T30] audit: type=1400 audit(1764846137.992:484): avc: denied { setopt } for pid=11563 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.378790][ T30] audit: type=1400 audit(1764846138.382:485): avc: denied { connect } for pid=11561 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.478480][ T30] audit: type=1400 audit(1764846139.072:486): avc: denied { read write } for pid=11570 comm="syz.3.678" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.501817][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.701536][ T30] audit: type=1400 audit(1764846139.072:487): avc: denied { ioctl open } for pid=11570 comm="syz.3.678" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.911730][T11581] lo speed is unknown, defaulting to 1000 [ 335.984892][ T30] audit: type=1400 audit(1764846140.992:488): avc: denied { bind } for pid=11586 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.210519][ T30] audit: type=1400 audit(1764846141.002:489): avc: denied { setopt } for pid=11586 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.556355][ T30] audit: type=1400 audit(1764846141.022:490): avc: denied { write } for pid=11586 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.208175][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 338.421334][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 338.421349][ T30] audit: type=1400 audit(1764846143.872:503): avc: denied { setopt } for pid=11616 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 341.199583][ T30] audit: type=1400 audit(1764846146.652:504): avc: denied { create } for pid=11643 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 341.738083][ T30] audit: type=1400 audit(1764846146.682:505): avc: denied { listen } for pid=11643 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.034562][T11651] overlayfs: failed to clone upperpath [ 342.092835][ T30] audit: type=1400 audit(1764846146.682:506): avc: denied { accept } for pid=11643 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.286234][T11648] Invalid source name [ 342.290261][T11648] UBIFS error (pid: 11648): cannot open "ubifs", error -22 [ 342.306824][ T30] audit: type=1400 audit(1764846147.492:507): avc: denied { mounton } for pid=11650 comm="syz.2.697" path="/184/file0" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 344.152226][T11673] mkiss: ax0: crc mode is auto. [ 344.159214][ T30] audit: type=1400 audit(1764846149.132:508): avc: denied { connect } for pid=11667 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 344.525427][ T30] audit: type=1400 audit(1764846149.132:509): avc: denied { bind } for pid=11667 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 344.551469][ T30] audit: type=1400 audit(1764846149.132:510): avc: denied { write } for pid=11667 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 344.580866][ T30] audit: type=1400 audit(1764846149.322:511): avc: denied { write } for pid=11666 comm="syz.3.701" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 344.771484][ T30] audit: type=1400 audit(1764846149.332:512): avc: denied { open } for pid=11666 comm="syz.3.701" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 344.804561][ T30] audit: type=1400 audit(1764846150.262:513): avc: denied { read } for pid=5488 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 345.613200][T11688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.731969][ T30] audit: type=1400 audit(1764846151.082:514): avc: denied { wake_alarm } for pid=11686 comm="syz.3.707" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.490821][ T30] audit: type=1400 audit(1764846151.942:515): avc: denied { name_bind } for pid=11699 comm="syz.3.720" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 347.115273][ T30] audit: type=1400 audit(1764846151.972:516): avc: denied { node_bind } for pid=11699 comm="syz.3.720" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 347.137637][ T30] audit: type=1400 audit(1764846152.022:517): avc: denied { mount } for pid=11684 comm="syz.4.708" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 349.110714][T11730] netlink: 'syz.1.705': attribute type 1 has an invalid length. [ 349.951212][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 349.951224][ T30] audit: type=1400 audit(1764846155.402:523): avc: denied { getopt } for pid=11738 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 350.245641][ T30] audit: type=1400 audit(1764846155.662:524): avc: denied { connect } for pid=11747 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.337433][ T6240] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 350.541538][ T6240] usb 1-1: Using ep0 maxpacket: 8 [ 350.554412][ T6240] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.834227][ T30] audit: type=1400 audit(1764846155.662:525): avc: denied { name_connect } for pid=11747 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 350.889426][ T30] audit: type=1400 audit(1764846155.662:526): avc: denied { write } for pid=11741 comm="syz.1.718" name="unix" dev="proc" ino=4026533287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 350.929498][ T6240] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.948001][ T6240] usb 1-1: config 0 has no interfaces? [ 350.958168][ T30] audit: type=1400 audit(1764846155.872:527): avc: denied { ioctl } for pid=11751 comm="syz.2.721" path="socket:[20493]" dev="sockfs" ino=20493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.016821][ T6240] usb 1-1: New USB device found, idVendor=5050, idProduct=0900, bcdDevice=b3.ef [ 351.026375][ T6240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.084871][ T6240] usb 1-1: Product: syz [ 351.089061][ T6240] usb 1-1: Manufacturer: syz [ 351.099168][ T6240] usb 1-1: SerialNumber: syz [ 353.396680][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 354.092255][ T6240] usb 1-1: config 0 descriptor?? [ 354.126802][ T6240] usb 1-1: can't set config #0, error -71 [ 354.135626][ T6240] usb 1-1: USB disconnect, device number 7 [ 354.158169][T11676] udevd[11676]: setting mode of /dev/bus/usb/001/007 to 020664 failed: No such file or directory [ 354.183781][ T30] audit: type=1400 audit(1764846166.638:528): avc: denied { create } for pid=11773 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 354.187192][T11676] udevd[11676]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory [ 354.822158][ T30] audit: type=1400 audit(1764846167.148:529): avc: denied { mounton } for pid=11779 comm="syz.3.730" path="/proc/518/task" dev="proc" ino=20541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 355.334313][ T30] audit: type=1400 audit(1764846167.148:530): avc: denied { mount } for pid=11779 comm="syz.3.730" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 355.831924][T11803] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 355.840371][T11803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.734'. [ 355.898605][T11803] batman_adv: batadv0: Adding interface: virt_wifi0 [ 355.905530][T11803] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.931446][T11803] batman_adv: batadv0: Interface activated: virt_wifi0 [ 357.131851][ T30] audit: type=1400 audit(1764846169.508:531): avc: denied { mounton } for pid=11792 comm="syz.4.735" path=2F3133372FE91F7189591E9233614B dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 357.432960][T11820] ======================================================= [ 357.432960][T11820] WARNING: The mand mount option has been deprecated and [ 357.432960][T11820] and is ignored by this kernel. Remove the mand [ 357.432960][T11820] option from the mount to silence this warning. [ 357.432960][T11820] ======================================================= [ 357.686897][ T30] audit: type=1400 audit(1764846169.948:532): avc: denied { mount } for pid=11814 comm="syz.3.736" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 357.760344][ T30] audit: type=1400 audit(1764846170.038:533): avc: denied { mounton } for pid=11814 comm="syz.3.736" path="/132/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 357.904024][ T30] audit: type=1400 audit(1764846170.058:534): avc: denied { mount } for pid=11814 comm="syz.3.736" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 357.961673][ T5826] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 357.981104][ T30] audit: type=1400 audit(1764846170.388:535): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 358.024345][ T30] audit: type=1400 audit(1764846170.418:536): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 358.181643][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 358.188518][ T5826] usb 1-1: config 0 has no interfaces? [ 358.747172][ T5826] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 358.756659][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.764785][ T5826] usb 1-1: Product: syz [ 358.768995][ T5826] usb 1-1: Manufacturer: syz [ 358.773707][ T5826] usb 1-1: SerialNumber: syz [ 358.789585][ T5826] usb 1-1: config 0 descriptor?? [ 358.845915][ T30] audit: type=1400 audit(1764846170.528:537): avc: denied { create } for pid=11825 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 358.972103][ T30] audit: type=1400 audit(1764846170.758:538): avc: denied { setopt } for pid=11825 comm="syz.3.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 359.071686][ T30] audit: type=1400 audit(1764846171.538:539): avc: denied { bind } for pid=11830 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.292947][T11849] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 360.903961][T11857] netlink: 76 bytes leftover after parsing attributes in process `syz.2.753'. [ 360.917121][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 360.917133][ T30] audit: type=1400 audit(1764846173.378:544): avc: denied { read write } for pid=11850 comm="syz.3.743" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.981549][T11860] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 361.017969][ T30] audit: type=1400 audit(1764846173.418:545): avc: denied { open } for pid=11850 comm="syz.3.743" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 361.046868][ T30] audit: type=1400 audit(1764846173.508:546): avc: denied { create } for pid=11858 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 361.092251][ T30] audit: type=1400 audit(1764846173.558:547): avc: denied { write } for pid=11858 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 361.151328][T11864] macvlan2: entered promiscuous mode [ 361.160806][T11864] macvlan2: entered allmulticast mode [ 361.168205][T11864] bond3: entered promiscuous mode [ 361.212295][T11864] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 361.252806][T11864] bond3: left promiscuous mode [ 361.920211][ T5826] usb 1-1: USB disconnect, device number 8 [ 362.890203][T11886] ntfs3(nullb0): Primary boot signature is not NTFS. [ 362.903769][T11886] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 363.203391][ T30] audit: type=1400 audit(1764846175.668:548): avc: denied { open } for pid=11889 comm="syz.4.751" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 363.549447][ T52] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 364.361022][T11909] xt_hashlimit: size too large, truncated to 1048576 [ 365.116743][ T30] audit: type=1400 audit(1764846176.818:549): avc: denied { setopt } for pid=11903 comm="syz.3.755" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.494331][T11919] random: crng reseeded on system resumption [ 365.531760][ T30] audit: type=1400 audit(1764846177.938:550): avc: denied { read } for pid=11917 comm="syz.0.758" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 365.763253][ T30] audit: type=1400 audit(1764846177.938:551): avc: denied { open } for pid=11917 comm="syz.0.758" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 366.089669][ T30] audit: type=1400 audit(1764846177.948:552): avc: denied { ioctl } for pid=11917 comm="syz.0.758" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 366.340734][ T30] audit: type=1400 audit(1764846177.958:553): avc: denied { read write } for pid=11917 comm="syz.0.758" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 366.707535][ T30] audit: type=1400 audit(1764846177.958:554): avc: denied { ioctl open } for pid=11917 comm="syz.0.758" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 366.921354][ T30] audit: type=1400 audit(1764846178.388:555): avc: denied { create } for pid=11922 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 367.114436][ T30] audit: type=1400 audit(1764846179.508:556): avc: denied { read } for pid=11932 comm="syz.1.762" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 367.154865][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 367.171554][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 367.331510][ T30] audit: type=1400 audit(1764846179.518:557): avc: denied { open } for pid=11932 comm="syz.1.762" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 367.774490][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 367.783154][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 367.792340][ T52] Bluetooth: hci4: hardware error 0x00 [ 367.863035][ T30] audit: type=1400 audit(1764846179.608:558): avc: denied { ioctl } for pid=11932 comm="syz.1.762" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 367.955503][ T30] audit: type=1400 audit(1764846180.418:559): avc: denied { block_suspend } for pid=11932 comm="syz.1.762" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 368.141990][T11948] overlayfs: failed to clone upperpath [ 368.952510][ T30] audit: type=1400 audit(1764846181.418:560): avc: denied { write } for pid=11952 comm="syz.0.777" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 369.141924][ T30] audit: type=1400 audit(1764846181.438:561): avc: denied { write } for pid=11952 comm="syz.0.777" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 369.966171][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 370.230899][T11969] macvlan2: entered promiscuous mode [ 370.236331][T11969] bridge0: entered promiscuous mode [ 370.596694][T11966] netlink: 'syz.0.768': attribute type 8 has an invalid length. [ 370.751724][T11966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.768'. [ 370.820495][T11966] block nbd0: not configured, cannot reconfigure [ 370.990533][T11978] Failed to initialize the IGMP autojoin socket (err -2) [ 371.053486][T11983] Failed to initialize the IGMP autojoin socket (err -2) [ 371.274366][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 371.297497][T11988] overlayfs: failed to clone upperpath [ 371.682748][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 371.682783][ T30] audit: type=1400 audit(1764846183.938:570): avc: denied { bind } for pid=11979 comm="syz.0.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 371.717967][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 372.980222][T12008] gtp1: entered promiscuous mode [ 372.992324][T12008] gtp1: entered allmulticast mode [ 373.102835][ T30] audit: type=1400 audit(1764846185.468:571): avc: denied { execute_no_trans } for pid=12001 comm="syz.0.779" path="/143/file1" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 373.130671][ T30] audit: type=1400 audit(1764846185.548:572): avc: denied { map } for pid=12005 comm="syz.1.781" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.454039][ T30] audit: type=1400 audit(1764846185.548:573): avc: denied { execute } for pid=12005 comm="syz.1.781" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.350049][ T30] audit: type=1400 audit(1764846188.798:574): avc: denied { write } for pid=12038 comm="syz.4.788" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 377.834810][ T30] audit: type=1400 audit(1764846189.898:575): avc: denied { create } for pid=12045 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.969280][ T30] audit: type=1400 audit(1764846189.898:576): avc: denied { connect } for pid=12045 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 378.138372][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.144835][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.719507][ T30] audit: type=1400 audit(1764846190.738:577): avc: denied { ioctl } for pid=12051 comm="syz.3.791" path="socket:[20364]" dev="sockfs" ino=20364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.749399][T12055] dlm: no local IP address has been set [ 378.762906][T12055] dlm: cannot start dlm midcomms -107 [ 378.799400][ T30] audit: type=1400 audit(1764846190.738:578): avc: denied { bind } for pid=12051 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.920905][ T30] audit: type=1400 audit(1764846190.738:579): avc: denied { setopt } for pid=12051 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.951965][ T30] audit: type=1400 audit(1764846191.208:580): avc: denied { append } for pid=12049 comm="syz.1.790" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 378.979355][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 379.111523][ T5878] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 379.732228][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 379.948065][ T5878] usb 2-1: config 4 has an invalid interface number: 194 but max is 0 [ 379.957136][ T5878] usb 2-1: config 4 has no interface number 0 [ 379.987241][ T30] audit: type=1400 audit(1764846192.168:581): avc: denied { create } for pid=12072 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 380.011526][ T5878] usb 2-1: config 4 interface 194 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 380.104610][ T5878] usb 2-1: config 4 interface 194 has no altsetting 0 [ 380.281737][ T30] audit: type=1400 audit(1764846192.178:582): avc: denied { setopt } for pid=12072 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 380.303653][ T5878] usb 2-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.bf [ 380.319133][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.334513][ T5878] usb 2-1: Product: syz [ 380.338717][ T5878] usb 2-1: Manufacturer: syz [ 380.344674][ T5878] usb 2-1: SerialNumber: syz [ 380.552739][T12055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.561815][ T5878] em28xx 2-1:4.194: New device syz syz @ 480 Mbps (2040:6500, interface 194, class 194) [ 380.580360][ T5878] em28xx 2-1:4.194: Video interface 194 found: bulk [ 382.226945][ T5878] em28xx 2-1:4.194: unknown em28xx chip ID (0) [ 382.543578][ T5878] em28xx 2-1:4.194: reading from i2c device at 0xa0 failed (error=-5) [ 382.592481][ T5878] em28xx 2-1:4.194: board has no eeprom [ 382.653595][ T5878] em28xx 2-1:4.194: Identified as Hauppauge WinTV HVR 900 (card=10) [ 382.663029][ T5878] em28xx 2-1:4.194: analog set to bulk mode. [ 382.664776][ T30] audit: type=1400 audit(1764846195.128:583): avc: denied { read } for pid=12093 comm="syz.4.800" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 382.698634][ T30] audit: type=1400 audit(1764846195.128:584): avc: denied { open } for pid=12093 comm="syz.4.800" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 383.114149][ T30] audit: type=1400 audit(1764846195.408:585): avc: denied { ioctl } for pid=12093 comm="syz.4.800" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 383.139163][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.184595][ T9963] em28xx 2-1:4.194: Registering V4L2 extension [ 383.427472][ T9963] em28xx 2-1:4.194: reading from i2c device at 0xb8 failed (error=-5) [ 384.331665][ T9963] em28xx 2-1:4.194: reading from i2c device at 0xba failed (error=-5) [ 384.370077][ T2151] usb 2-1: USB disconnect, device number 3 [ 384.402253][ T2151] em28xx 2-1:4.194: Disconnecting em28xx [ 385.262315][ T9963] em28xx 2-1:4.194: Config register raw data: 0xffffffed [ 385.423035][ T9963] em28xx 2-1:4.194: AC97 chip type couldn't be determined [ 385.435063][ T9963] em28xx 2-1:4.194: No AC97 audio processor [ 385.440995][ T9963] em28xx 2-1:4.194: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 385.492105][ T9963] em28xx 2-1:4.194: Binding DVB extension [ 385.503705][ T30] audit: type=1400 audit(1764846197.968:586): avc: denied { mount } for pid=12122 comm="syz.3.808" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 385.511804][ T9963] em28xx 2-1:4.194: no endpoint for DVB mode and transfer type 0 [ 385.677051][T12127] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 385.695940][ T9963] em28xx 2-1:4.194: failed to pre-allocate USB transfer buffers for DVB. [ 385.727850][T12127] block device autoloading is deprecated and will be removed. [ 385.822604][ T9963] em28xx 2-1:4.194: Registering input extension [ 385.837883][ T30] audit: type=1400 audit(1764846198.058:587): avc: denied { kexec_image_load } for pid=12121 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 385.916367][ T2151] em28xx 2-1:4.194: Closing input extension [ 385.939831][ T2151] em28xx 2-1:4.194: Freeing device [ 386.130027][T12127] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 386.538562][ T30] audit: type=1400 audit(1764846198.118:588): avc: denied { read } for pid=12122 comm="syz.3.808" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 386.613649][ T30] audit: type=1400 audit(1764846198.118:589): avc: denied { open } for pid=12122 comm="syz.3.808" path="/148/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 386.636632][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.716689][ T30] audit: type=1400 audit(1764846198.198:590): avc: denied { ioctl } for pid=12121 comm="syz.4.810" path="socket:[21984]" dev="sockfs" ino=21984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 386.811538][ T30] audit: type=1400 audit(1764846198.408:591): avc: denied { write } for pid=12122 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 386.926305][T12124] tipc: Resetting bearer [ 386.947580][T12124] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.954881][T12124] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.027076][T12144] overlayfs: missing 'workdir' [ 387.405931][ T30] audit: type=1400 audit(1764846198.408:592): avc: denied { write } for pid=12122 comm="syz.3.808" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.431747][ T30] audit: type=1400 audit(1764846198.408:593): avc: denied { open } for pid=12122 comm="syz.3.808" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.455561][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.465612][ T30] audit: type=1400 audit(1764846199.378:594): avc: denied { create } for pid=12121 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.003932][T12124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.014857][T12124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.060443][T12124] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 388.098403][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 388.123455][ T4090] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.136110][ T4090] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.347239][T12167] overlayfs: missing 'lowerdir' [ 388.846603][ T4090] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.932149][ T4090] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.442625][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 391.442640][ T30] audit: type=1400 audit(1764846203.908:596): avc: denied { create } for pid=12181 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 392.449960][ T30] audit: type=1400 audit(1764846204.528:597): avc: denied { create } for pid=12193 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 392.492397][ T30] audit: type=1400 audit(1764846204.538:598): avc: denied { setopt } for pid=12193 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 393.131525][ T30] audit: type=1400 audit(1764846205.338:599): avc: denied { write } for pid=12202 comm="syz.4.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.098251][ T30] audit: type=1400 audit(1764846206.558:600): avc: denied { read } for pid=12221 comm="syz.1.833" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 394.285597][ T30] audit: type=1400 audit(1764846206.558:601): avc: denied { open } for pid=12221 comm="syz.1.833" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 394.321441][ T30] audit: type=1400 audit(1764846206.558:602): avc: denied { ioctl } for pid=12221 comm="syz.1.833" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.633824][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 395.702926][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 395.807610][T12238] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 395.851535][T12237] netlink: 'syz.1.836': attribute type 11 has an invalid length. [ 395.876921][T12238] ------------[ cut here ]------------ [ 395.882772][T12238] Unexpected driver unregister! [ 395.887645][T12238] WARNING: drivers/base/driver.c:273 at 0x0, CPU#0: syz.1.836/12238 [ 395.895681][T12238] Modules linked in: [ 395.899740][T12238] CPU: 0 UID: 0 PID: 12238 Comm: syz.1.836 Not tainted syzkaller #0 PREEMPT(full) [ 395.909507][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.920144][T12238] RIP: 0010:driver_unregister+0x89/0xb0 [ 395.925771][T12238] Code: 00 75 3a 48 8b 73 68 48 89 ef e8 72 90 8a fc 48 89 df e8 1a 94 ff ff 5b 5d e9 b3 86 df fb e8 ae 86 df fb 48 8d 3d 77 55 b2 0a <67> 48 0f b9 3a 5b 5d e9 9b 86 df fb e8 e6 90 48 fc eb 9a e8 df 90 [ 395.945777][T12238] RSP: 0018:ffffc9000fac79a0 EFLAGS: 00010287 [ 395.951919][T12238] RAX: 00000000000045f5 RBX: ffffffff8ff42be0 RCX: ffffc9000ea8a000 [ 395.955663][T12241] bridge_slave_1: left promiscuous mode [ 395.959895][T12238] RDX: 0000000000080000 RSI: ffffffff85de7df2 RDI: ffffffff9090d370 [ 395.959932][T12238] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 395.959945][T12238] R10: 0000000000000000 R11: 0000000005d1fcee R12: ffffffff8ff42b20 [ 395.959957][T12238] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88803122f800 [ 395.959968][T12238] FS: 00007fccdfc226c0(0000) GS:ffff88812497e000(0000) knlGS:0000000000000000 [ 395.959985][T12238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.967644][T12241] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.974369][T12238] CR2: 00007fccdfc01d58 CR3: 0000000028c0e000 CR4: 00000000003526f0 [ 396.029686][T12238] Call Trace: [ 396.033412][T12238] [ 396.036343][T12238] comedi_device_detach_locked+0x12f/0xa50 [ 396.042182][T12238] comedi_device_detach+0x67/0xb0 [ 396.047202][T12238] comedi_device_attach+0x43d/0x900 [ 396.052519][T12238] do_devconfig_ioctl+0x1b1/0x710 [ 396.057527][T12238] ? comedi_unlocked_ioctl+0x167/0x2ee0 [ 396.063368][T12238] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 396.068920][T12238] ? find_held_lock+0x2b/0x80 [ 396.073620][T12238] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 396.079098][T12238] ? __lock_acquire+0x433/0x22f0 [ 396.084279][T12238] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 396.090167][T12238] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.096437][T12238] ? do_vfs_ioctl+0x128/0x14f0 [ 396.101189][T12238] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 396.106286][T12238] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 396.113187][T12238] ? hook_file_ioctl_common+0x144/0x410 [ 396.118717][T12238] ? selinux_file_ioctl+0x180/0x270 [ 396.124288][T12238] ? selinux_file_ioctl+0xb4/0x270 [ 396.129431][T12238] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 396.135274][T12238] __x64_sys_ioctl+0x18e/0x210 [ 396.140041][T12238] do_syscall_64+0xcd/0xf80 [ 396.144662][T12238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.150548][T12238] RIP: 0033:0x7fccded8f749 [ 396.155317][T12238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.175116][T12238] RSP: 002b:00007fccdfc22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.183910][T12238] RAX: ffffffffffffffda RBX: 00007fccdefe6090 RCX: 00007fccded8f749 [ 396.192027][T12238] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000004 [ 396.199984][T12238] RBP: 00007fccdee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.208013][T12238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.216213][T12238] R13: 00007fccdefe6128 R14: 00007fccdefe6090 R15: 00007ffdce458a38 [ 396.224218][T12238] [ 396.227215][T12238] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 396.234465][T12238] CPU: 0 UID: 0 PID: 12238 Comm: syz.1.836 Not tainted syzkaller #0 PREEMPT(full) [ 396.243724][T12238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.253749][T12238] Call Trace: [ 396.257010][T12238] [ 396.259915][T12238] dump_stack_lvl+0x3d/0x1f0 [ 396.264497][T12238] vpanic+0x640/0x6f0 [ 396.268454][T12238] panic+0xca/0xd0 [ 396.272150][T12238] ? __pfx_panic+0x10/0x10 [ 396.276544][T12238] check_panic_on_warn+0xab/0xb0 [ 396.281460][T12238] __warn+0x108/0x3c0 [ 396.285437][T12238] __report_bug+0x2a0/0x520 [ 396.289928][T12238] ? __pfx___report_bug+0x10/0x10 [ 396.294927][T12238] ? driver_unregister+0x82/0xb0 [ 396.299847][T12238] report_bug_entry+0xb2/0x220 [ 396.304586][T12238] ? driver_unregister+0x89/0xb0 [ 396.309500][T12238] handle_bug+0x18a/0x260 [ 396.313801][T12238] exc_invalid_op+0x17/0x50 [ 396.318273][T12238] asm_exc_invalid_op+0x1a/0x20 [ 396.323096][T12238] RIP: 0010:driver_unregister+0x89/0xb0 [ 396.328618][T12238] Code: 00 75 3a 48 8b 73 68 48 89 ef e8 72 90 8a fc 48 89 df e8 1a 94 ff ff 5b 5d e9 b3 86 df fb e8 ae 86 df fb 48 8d 3d 77 55 b2 0a <67> 48 0f b9 3a 5b 5d e9 9b 86 df fb e8 e6 90 48 fc eb 9a e8 df 90 [ 396.348201][T12238] RSP: 0018:ffffc9000fac79a0 EFLAGS: 00010287 [ 396.354248][T12238] RAX: 00000000000045f5 RBX: ffffffff8ff42be0 RCX: ffffc9000ea8a000 [ 396.362192][T12238] RDX: 0000000000080000 RSI: ffffffff85de7df2 RDI: ffffffff9090d370 [ 396.370396][T12238] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 396.378340][T12238] R10: 0000000000000000 R11: 0000000005d1fcee R12: ffffffff8ff42b20 [ 396.386284][T12238] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88803122f800 [ 396.394247][T12238] ? driver_unregister+0x82/0xb0 [ 396.399176][T12238] comedi_device_detach_locked+0x12f/0xa50 [ 396.404966][T12238] comedi_device_detach+0x67/0xb0 [ 396.409967][T12238] comedi_device_attach+0x43d/0x900 [ 396.415147][T12238] do_devconfig_ioctl+0x1b1/0x710 [ 396.420148][T12238] ? comedi_unlocked_ioctl+0x167/0x2ee0 [ 396.425669][T12238] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 396.431195][T12238] ? find_held_lock+0x2b/0x80 [ 396.435845][T12238] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 396.441282][T12238] ? __lock_acquire+0x433/0x22f0 [ 396.446192][T12238] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 396.451976][T12238] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.457844][T12238] ? do_vfs_ioctl+0x128/0x14f0 [ 396.462603][T12238] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 396.467601][T12238] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 396.474429][T12238] ? hook_file_ioctl_common+0x144/0x410 [ 396.479955][T12238] ? selinux_file_ioctl+0x180/0x270 [ 396.485125][T12238] ? selinux_file_ioctl+0xb4/0x270 [ 396.490208][T12238] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 396.496004][T12238] __x64_sys_ioctl+0x18e/0x210 [ 396.500749][T12238] do_syscall_64+0xcd/0xf80 [ 396.505232][T12238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.511096][T12238] RIP: 0033:0x7fccded8f749 [ 396.515488][T12238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.535075][T12238] RSP: 002b:00007fccdfc22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.543471][T12238] RAX: ffffffffffffffda RBX: 00007fccdefe6090 RCX: 00007fccded8f749 [ 396.551424][T12238] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000004 [ 396.559374][T12238] RBP: 00007fccdee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.567320][T12238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.575265][T12238] R13: 00007fccdefe6128 R14: 00007fccdefe6090 R15: 00007ffdce458a38 [ 396.583218][T12238] [ 396.586510][T12238] Kernel Offset: disabled [ 396.590806][T12238] Rebooting in 86400 seconds..