last executing test programs: 14.627995516s ago: executing program 0 (id=1012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x1) r4 = open(&(0x7f0000000080)='.\x00', 0x480, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='user.syz\x00') r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) 13.691566361s ago: executing program 2 (id=1014): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xca, 0x2f8101) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0xa, 0x4, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, r2, r3, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) chdir(&(0x7f0000000280)='./file1\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000300)={0xf0f029, 0x6}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000040), 0x0, 0x0}) socket$inet6(0xa, 0x80000, 0x0) 12.064388325s ago: executing program 2 (id=1017): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x40080c1) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x120}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_dev$vcsa(0x0, 0x200, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 10.063004239s ago: executing program 3 (id=1022): syz_emit_vhci(0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x8}}}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_open_dev$usbmon(0x0, 0x8, 0x8002) 9.992098589s ago: executing program 2 (id=1023): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport=0xf}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000001c0)=""/115) 9.920021708s ago: executing program 3 (id=1024): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x100) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) inotify_init1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r2}) 9.689778761s ago: executing program 1 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x6, 0x6, 0x8000, 0x3541, 0x8, 0xffffffffffffffff}) migrate_pages(r2, 0x3, &(0x7f00000000c0)=0x6, &(0x7f0000000240)=0xc) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) sendto$inet(r3, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 8.789082451s ago: executing program 4 (id=1026): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff87}, 0x4000041) faccessat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x6, &(0x7f0000000000)="fa794bfa", 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e22, @broadcast}}) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) migrate_pages(0x0, 0x3, 0x0, 0x0) 8.671313737s ago: executing program 3 (id=1027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)=0x7c3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, &(0x7f0000000000)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 7.976468987s ago: executing program 0 (id=1028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x11, r2, 0x83000000) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x3, 0xacd1, 0x0, 0x0, 0x40}}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) 7.672193287s ago: executing program 3 (id=1029): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x0, &(0x7f0000000340)}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x808500, 0x0) sendto$packet(r3, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=""/229}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 7.64627011s ago: executing program 1 (id=1030): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6.716554754s ago: executing program 1 (id=1031): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x3404c8d4) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000380)='net/arp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r5 = fanotify_init(0x40, 0x40000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000009, 0x13, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 5.706245562s ago: executing program 2 (id=1032): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x20, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x2, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb8391372c9ef937d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d", 0x4b}, {0x0}, {&(0x7f0000000f00)}], 0x3}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(0xffffffffffffffff) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 5.56579872s ago: executing program 4 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) open(&(0x7f0000000280)='.\x00', 0x20000, 0xd5) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001c) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x8, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x40087101, 0x20001103) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) listxattr(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000500)=""/208, 0xd0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='schedstat\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001e80)=ANY=[], 0x38) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000002060108000034e4000000000000fa080c000780080006400000000111000300686173683a69702c706f7274000000000900020073797a3100000000050005000200000005000400000000000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) 5.05726671s ago: executing program 4 (id=1034): syz_emit_vhci(0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x8}}}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_open_dev$usbmon(0x0, 0x8, 0x8002) 4.467806627s ago: executing program 1 (id=1035): r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x0, "518aba4d000000000000000000000000002000"}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) unshare(0x6a040000) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000200), 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, 0x0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abe00000000ee398d162471f4"}, @NL80211_KEY_IDX={0x5}]}]}, 0x3c}}, 0x0) 4.425817919s ago: executing program 0 (id=1036): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, 0xffffffffffffffff, 0x0, 0x5d2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x2c, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0x5, 0x0, &(0x7f00000026c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0xfffe, 0x8000000, @loopback}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)='sched_switch\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x4c, 0x0, r3, 0x80, &(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x0, 0x0, 0x1}) socket$kcm(0xa, 0x3, 0x87) 4.425329761s ago: executing program 4 (id=1037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ac0)={'#! ', '', [{0x20, '\'\\&+&().\x0e\x15Kf6Z\xcd\xf4\x00K\xe7F\xf4\xc0\xfcAAz\xd3\xdf\xb8\x80\xc3\xc7\x1b\xf8b\xa4\r\xb12{J=\x18?,,\xbb\x1c&o\xce3h\x1e\x8400\x89%,\xd8\x9dJ\xac\x80,\xf2\x9c^\x95\x18\xc2\x1a\x13\x9d\x1a\ns\xc5\xb9\xd2\xee\xc7f\xdd\xa1\xa0\xeb\xad\xba\xd6i\xd9re\xfe\xbf\x1fl\x1b7)\xcb\xc7\xdc\xccv\xec\x9d\x9f\xe2\xd5\xad\xb9\xda?\xd5\xe0o\x81\xb6\xce\xb2\x8a\x8a\x14\x9c\xc7`\xa7\xa2\x99\xcb\x1b\xa6Jw\xacx\xbd\x01\x02\xbe$e\x88\x1d4+\x1d\xab|'}], 0xa, "0ff8ecf707e309c39093cb5c0a2f6456a90398a128449dd1d2c4cc445d57aa484b14a9237a0a584a9fdec43665891916cfb8010fd2c29d02765408d8"}, 0xd9) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e45b, 0x700000000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x60) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r6 = openat(0xffffffffffffff9c, 0x0, 0xb6380, 0x3c) sendmsg$NFT_BATCH(r6, 0x0, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, 0x0) 4.3015766s ago: executing program 2 (id=1038): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000002c00128008000100677265002000028008001400020000000800040004000000060010004e220000040012000800040000080000"], 0x54}}, 0x0) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd8}, "017cac080f91a39588b9d334787f5bbede229bc710bfe84064342d50f819dcb3aacea8d5edf5ea5dc0fd5600a511a5e8ca030aca7a388754e1e02bcff7b497547fc8bb7df3f74cce86d58cf83087e2f8fe8b0f402f20c34766cfcad832505ebf89ffffc06ad94754c4d7617f5aaddfb0d59a2360fa73bae23d0c06e28d607c329f69f510e9c4fd76397fc031359c8e2489509fc1000efa30dd276ab58825ece31b8f1e8299b592f14a93bdff16d99c4238988216503e9f86324e6b98a616ff87413eabb3859aea66deab6b929dcf9b857cf78b32b6f4c4a1"}, 0xdc) write$6lowpan_enable(r8, &(0x7f00000000c0)='1', 0x1) mmap$dsp(&(0x7f00000cd000/0x1000)=nil, 0x1000, 0x100000f, 0x11, r3, 0x0) 4.293359297s ago: executing program 3 (id=1039): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)={@local, @link_local, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74000c00e63b9ba2ea4f115a67245b00", "584cbf2649a50f2dbc436fa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "9cfd56d3c86e55010000000000000000000000004137dfff2f8f00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x3, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) 3.335016077s ago: executing program 0 (id=1040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r3, 0x0, 0xff0e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}]}, 0x48}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) 2.311623002s ago: executing program 1 (id=1041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) syz_io_uring_setup(0x320f, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2287, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendto(r5, &(0x7f0000000140)="d8e22679f5", 0x5, 0x0, 0x0, 0x0) 2.131807582s ago: executing program 4 (id=1042): syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x44}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00002e2000/0x4000)=nil, 0x4000, 0xd, 0x80010, 0xffffffffffffffff, 0x8000000) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x12, 0x0, 0x0, 0x800, &(0x7f0000000080), 0x0, 0x0, 0x710a89d0c9b734a9}) r6 = fsmount(r4, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00') openat2(r6, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x202002, 0x0, 0x8}, 0x18) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) 1.751460744s ago: executing program 0 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) open(0x0, 0x36f5c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x8}, 0x94) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, 0x0}, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) migrate_pages(0x0, 0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') set_mempolicy(0x6, &(0x7f0000000040)=0x2003c, 0x5) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r2, @ANYBLOB="295d18b4e279750bf351b891ca1582e0020000004749b115"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 1.368916015s ago: executing program 1 (id=1044): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000748000/0x1000)=nil, 0x1000, 0x1000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, 0x0, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(0xffffffffffffffff, 0x0, 0x2000, 0xce2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003c08030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700", 0x65) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) 677.258853ms ago: executing program 4 (id=1045): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x200000000008, 0x4, 0x0, 0x209}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRESHEX, @ANYRESDEC=r1], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xffff}, {0x10}}}, 0x24}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x541b, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x3, 0x4a243) close(r5) 180.22453ms ago: executing program 2 (id=1046): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000380), 0x20000000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 0s ago: executing program 3 (id=1047): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)) kernel console output (not intermixed with test programs): ="syz.2.95" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.735592][ T30] audit: type=1400 audit(1754449127.614:239): avc: denied { open } for pid=6423 comm="syz.2.95" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.498239][ T6434] vlan2: entered allmulticast mode [ 113.503545][ T6434] bond0: entered allmulticast mode [ 113.508697][ T6434] bond_slave_0: entered allmulticast mode [ 113.514671][ T6434] bond_slave_1: entered allmulticast mode [ 113.793099][ T30] audit: type=1400 audit(1754449128.864:240): avc: denied { bind } for pid=6435 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.835799][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 116.218041][ T30] audit: type=1400 audit(1754449131.294:241): avc: denied { create } for pid=6457 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.221928][ T6458] vlan2: entered promiscuous mode [ 116.255784][ T6458] bridge0: entered promiscuous mode [ 116.272588][ T6458] vlan2: entered allmulticast mode [ 116.277769][ T6458] bridge0: entered allmulticast mode [ 116.290083][ T6461] bridge_slave_0: left allmulticast mode [ 116.296936][ T6461] bridge_slave_0: left promiscuous mode [ 116.305492][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.348400][ T6462] trusted_key: syz.4.105 sent an empty control message without MSG_MORE. [ 116.358719][ T6461] bridge_slave_1: left allmulticast mode [ 116.364413][ T6461] bridge_slave_1: left promiscuous mode [ 116.370134][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.392193][ T6461] bond0: (slave bond_slave_0): Releasing backup interface [ 116.402013][ T6461] bond0: (slave bond_slave_1): Releasing backup interface [ 116.413956][ T6461] team0: Port device team_slave_0 removed [ 116.494358][ T30] audit: type=1400 audit(1754449131.574:242): avc: denied { write } for pid=6463 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.528531][ T6461] team0: Port device team_slave_1 removed [ 116.544068][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.558690][ T30] audit: type=1400 audit(1754449131.594:243): avc: denied { setopt } for pid=6463 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.588584][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.635600][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.712092][ T30] audit: type=1400 audit(1754449131.734:244): avc: denied { unlink } for pid=6463 comm="syz.3.106" name="#1" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.735887][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.735920][ T30] audit: type=1400 audit(1754449131.734:245): avc: denied { mount } for pid=6463 comm="syz.3.106" name="/" dev="overlay" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.235268][ T6488] capability: warning: `syz.3.110' uses deprecated v2 capabilities in a way that may be insecure [ 119.279262][ T30] audit: type=1400 audit(1754449134.334:246): avc: denied { mount } for pid=6481 comm="syz.3.110" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.747401][ T30] audit: type=1400 audit(1754449134.814:247): avc: denied { ioctl } for pid=6493 comm="syz.4.113" path="socket:[8842]" dev="sockfs" ino=8842 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 119.911590][ T30] audit: type=1400 audit(1754449134.974:248): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.105752][ T6499] netlink: 'syz.4.113': attribute type 10 has an invalid length. [ 120.242581][ T6505] syz.2.115 uses obsolete (PF_INET,SOCK_PACKET) [ 120.305897][ T30] audit: type=1400 audit(1754449135.384:250): avc: denied { create } for pid=6506 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.359477][ T6499] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 120.397002][ T6499] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.440473][ T30] audit: type=1400 audit(1754449135.384:249): avc: denied { create } for pid=6504 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.671342][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.871362][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 120.890480][ T5914] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 121.015291][ T5914] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.175947][ T5914] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 121.189146][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 121.197551][ T5914] usb 3-1: Product: syz [ 121.201765][ T5914] usb 3-1: Manufacturer: syz [ 121.206393][ T5914] usb 3-1: SerialNumber: syz [ 121.279012][ T5914] appletouch 3-1:1.0: Could not find int-in endpoint [ 121.301827][ T5914] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 121.413596][ T5914] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 121.438556][ T6505] loop9: detected capacity change from 0 to 8 [ 121.440314][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 121.440327][ T30] audit: type=1400 audit(1754449136.514:254): avc: denied { create } for pid=6504 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.452893][ T6505] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 121.490745][ T6505] loop9: partition table partially beyond EOD, truncated [ 121.527262][ T6505] loop9: p1 size 81768186 extends beyond EOD, truncated [ 121.967024][ T5914] usb 3-1: USB disconnect, device number 2 [ 123.863816][ T30] audit: type=1400 audit(1754449138.734:255): avc: denied { create } for pid=6536 comm="syz.0.123" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.942817][ T30] audit: type=1400 audit(1754449138.734:256): avc: denied { link } for pid=6536 comm="syz.0.123" name="#5" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.166866][ T30] audit: type=1400 audit(1754449138.744:257): avc: denied { rename } for pid=6536 comm="syz.0.123" name="#6" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.011291][ T839] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.066052][ T30] audit: type=1400 audit(1754449140.144:258): avc: denied { append } for pid=6547 comm="syz.1.126" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.174373][ T839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.174408][ T839] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.177232][ T839] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.177259][ T839] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 125.177279][ T839] usb 1-1: Product: syz [ 125.177293][ T839] usb 1-1: Manufacturer: syz [ 125.177307][ T839] usb 1-1: SerialNumber: syz [ 125.197718][ T839] usb 1-1: config 0 descriptor?? [ 125.281333][ T6553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6553 comm=syz.2.127 [ 125.455029][ T30] audit: type=1400 audit(1754449140.484:259): avc: denied { ioctl } for pid=6547 comm="syz.1.126" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.691785][ T30] audit: type=1400 audit(1754449140.604:260): avc: denied { create } for pid=6547 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.179217][ T30] audit: type=1400 audit(1754449141.204:261): avc: denied { bind } for pid=6541 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.206370][ T5899] usb 1-1: USB disconnect, device number 2 [ 126.267879][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.621279][ T30] audit: type=1400 audit(1754449141.684:262): avc: denied { create } for pid=6561 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 128.526910][ T6580] netlink: 'syz.2.133': attribute type 2 has an invalid length. [ 130.662874][ T30] audit: type=1400 audit(1754449145.744:263): avc: denied { listen } for pid=6596 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.743935][ T30] audit: type=1400 audit(1754449145.814:264): avc: denied { bind } for pid=6596 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.994364][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 132.527732][ T30] audit: type=1400 audit(1754449147.154:265): avc: denied { read write } for pid=6612 comm="syz.3.142" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 132.561535][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.569015][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.528462][ T30] audit: type=1400 audit(1754449147.174:266): avc: denied { open } for pid=6612 comm="syz.3.142" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 135.840521][ T30] audit: type=1400 audit(1754449150.364:267): avc: denied { watch watch_reads } for pid=6621 comm="syz.3.143" path="/28" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 137.611288][ T30] audit: type=1400 audit(1754449152.654:268): avc: denied { read write } for pid=6639 comm="syz.1.147" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.441300][ T30] audit: type=1400 audit(1754449152.654:269): avc: denied { open } for pid=6639 comm="syz.1.147" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.739477][ T30] audit: type=1400 audit(1754449153.744:270): avc: denied { read write } for pid=6652 comm="syz.0.151" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.281056][ T30] audit: type=1400 audit(1754449153.754:271): avc: denied { open } for pid=6652 comm="syz.0.151" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.306576][ T30] audit: type=1400 audit(1754449153.854:272): avc: denied { ioctl } for pid=6652 comm="syz.0.151" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.331465][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.424532][ T6663] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 139.574911][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.599503][ T6663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.607401][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.617335][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.163755][ T24] usb 1-1: config 0 descriptor?? [ 140.191122][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 140.338806][ T6666] bond1: (slave geneve2): making interface the new active one [ 140.488849][ T6666] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 140.806168][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 140.828529][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 140.844067][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 140.851521][ T30] audit: type=1400 audit(1754449155.934:273): avc: denied { getopt } for pid=6661 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.897928][ T6662] bridge1: entered promiscuous mode [ 140.910592][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 140.939328][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 140.948963][ T6668] veth3: entered promiscuous mode [ 140.959829][ T30] audit: type=1400 audit(1754449156.044:274): avc: denied { getopt } for pid=6660 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.970030][ T6668] bond1: (slave veth3): Enslaving as an active interface with a down link [ 140.989457][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 141.001987][ T6663] vlan3: entered allmulticast mode [ 141.008382][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 141.015628][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 141.051208][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 141.068268][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 141.082061][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 141.102204][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 141.108489][ T6663] bond1: entered allmulticast mode [ 141.120788][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 141.131722][ T6663] geneve2: entered allmulticast mode [ 141.154532][ T6663] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 141.163728][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 141.198123][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 141.222833][ T24] pwc: Registered as video103. [ 141.241431][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 141.540186][ T30] audit: type=1400 audit(1754449156.544:275): avc: denied { mount } for pid=6685 comm="syz.1.158" name="/" dev="hugetlbfs" ino=10221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 141.944527][ T6690] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.273194][ T5914] usb 1-1: USB disconnect, device number 3 [ 143.095096][ T30] audit: type=1400 audit(1754449158.174:276): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 144.401252][ T30] audit: type=1400 audit(1754449159.094:277): avc: denied { setopt } for pid=6699 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.301698][ T30] audit: type=1400 audit(1754449160.324:278): avc: denied { create } for pid=6706 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 146.106933][ T6724] netlink: 'syz.2.166': attribute type 2 has an invalid length. [ 146.938522][ T30] audit: type=1400 audit(1754449162.004:279): avc: denied { bind } for pid=6728 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.640412][ T30] audit: type=1400 audit(1754449163.714:280): avc: denied { ioctl } for pid=6732 comm="syz.2.169" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.437928][ T30] audit: type=1400 audit(1754449164.494:281): avc: denied { write } for pid=6751 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 149.753797][ T30] audit: type=1400 audit(1754449164.764:282): avc: denied { open } for pid=6743 comm="syz.4.171" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 149.848653][ T30] audit: type=1400 audit(1754449164.924:283): avc: denied { ioctl } for pid=6743 comm="syz.4.171" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 151.793999][ T30] audit: type=1400 audit(1754449166.864:284): avc: denied { bind } for pid=6774 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.813047][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.010679][ T30] audit: type=1400 audit(1754449167.034:285): avc: denied { connect } for pid=6777 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.039357][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 152.089917][ T30] audit: type=1400 audit(1754449167.034:286): avc: denied { append } for pid=6777 comm="syz.0.180" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.636712][ T6781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 152.727485][ T6792] delete_channel: no stack [ 152.901554][ T6783] syz.4.179: attempt to access beyond end of device [ 152.901554][ T6783] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.527827][ T30] audit: type=1400 audit(1754449169.604:287): avc: denied { create } for pid=6806 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.138530][ T30] audit: type=1400 audit(1754449169.604:288): avc: denied { bind } for pid=6806 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.310524][ T30] audit: type=1400 audit(1754449169.604:289): avc: denied { ioctl } for pid=6806 comm="syz.4.183" path="socket:[11371]" dev="sockfs" ino=11371 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 156.005545][ T30] audit: type=1326 audit(1754449170.444:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6815 comm="syz.4.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf5538eb69 code=0x0 [ 156.028250][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.703591][ T30] audit: type=1400 audit(1754449171.234:291): avc: denied { kexec_image_load } for pid=6815 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.843401][ T30] audit: type=1400 audit(1754449172.904:292): avc: denied { create } for pid=6837 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.307101][ T30] audit: type=1400 audit(1754449172.914:293): avc: denied { read } for pid=6837 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.321305][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.532650][ T30] audit: type=1400 audit(1754449175.604:294): avc: denied { connect } for pid=6864 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.991783][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 161.100236][ T30] audit: type=1400 audit(1754449175.604:295): avc: denied { write } for pid=6864 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.329522][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.347981][ T10] usb 3-1: config 0 has no interface number 0 [ 161.370121][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 161.391491][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.454882][ T6880] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 161.465556][ T6880] netlink: 'syz.4.200': attribute type 2 has an invalid length. [ 162.367804][ T10] usb 3-1: Product: syz [ 162.401529][ T10] usb 3-1: Manufacturer: syz [ 162.474569][ T10] usb 3-1: SerialNumber: syz [ 162.522075][ T10] usb 3-1: config 0 descriptor?? [ 162.712924][ T6890] ubi31: attaching mtd0 [ 162.728772][ T6890] ubi31: scanning is finished [ 162.733622][ T6890] ubi31: empty MTD device detected [ 163.065431][ T10] usb 3-1: can't set config #0, error -71 [ 163.141209][ T6893] syz.4.204 (6893): attempted to duplicate a private mapping with mremap. This is not supported. [ 163.167033][ T30] audit: type=1400 audit(1754449178.204:296): avc: denied { read write } for pid=6888 comm="syz.4.204" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 163.176787][ T10] usb 3-1: USB disconnect, device number 3 [ 163.251669][ T30] audit: type=1400 audit(1754449178.204:297): avc: denied { open } for pid=6888 comm="syz.4.204" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 163.254387][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 163.512544][ T6890] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 164.228549][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 164.237082][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 164.245472][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 164.253652][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 164.261032][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 164.268789][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 164.464812][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 164.839647][ T30] audit: type=1400 audit(1754449179.894:298): avc: denied { create } for pid=6897 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.901746][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 164.909182][ T5914] hid-generic 0001:0080:0544.0001: unknown main item tag 0x0 [ 165.179630][ T5914] hid-generic 0001:0080:0544.0001: hidraw0: HID v1.ff Device [syz1] on syz0 [ 165.645825][ T30] audit: type=1400 audit(1754449180.334:299): avc: denied { getopt } for pid=6903 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.844292][ T6914] fido_id[6914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.981762][ T30] audit: type=1400 audit(1754449181.004:300): avc: denied { read } for pid=6909 comm="syz.0.209" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.203463][ T30] audit: type=1400 audit(1754449182.274:301): avc: denied { map } for pid=6929 comm="syz.4.212" path="socket:[11554]" dev="sockfs" ino=11554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.228339][ T30] audit: type=1400 audit(1754449182.284:302): avc: denied { read accept } for pid=6929 comm="syz.4.212" path="socket:[11554]" dev="sockfs" ino=11554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.610373][ T6932] warning: `syz.4.212' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.731300][ T30] audit: type=1400 audit(1754449182.764:303): avc: denied { append } for pid=6927 comm="syz.3.211" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.817022][ T30] audit: type=1400 audit(1754449182.774:304): avc: denied { listen } for pid=6927 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 168.021728][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 168.277258][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.314660][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 168.371600][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 168.390882][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.535834][ T10] usb 3-1: config 0 descriptor?? [ 169.707017][ T6953] fuse: Unknown parameter 'user_i00000000000000000000' [ 169.784233][ T5913] usb 3-1: USB disconnect, device number 4 [ 171.050541][ T30] audit: type=1400 audit(1754449185.704:305): avc: denied { mounton } for pid=6962 comm="syz.3.220" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 171.287049][ T6974] netlink: 'syz.4.223': attribute type 10 has an invalid length. [ 171.295073][ T6974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.223'. [ 171.304455][ T6974] dummy0: entered promiscuous mode [ 171.373600][ T6974] bridge0: port 3(dummy0) entered blocking state [ 171.380342][ T6974] bridge0: port 3(dummy0) entered disabled state [ 171.387843][ T6974] dummy0: entered allmulticast mode [ 171.405261][ T6974] bridge0: port 3(dummy0) entered blocking state [ 171.412504][ T6974] bridge0: port 3(dummy0) entered forwarding state [ 171.913760][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.224'. [ 171.928794][ T30] audit: type=1400 audit(1754449186.994:306): avc: denied { setopt } for pid=6979 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.789848][ T30] audit: type=1400 audit(1754449188.704:307): avc: denied { read write } for pid=6992 comm="syz.3.227" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 174.061917][ T7001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.129709][ T7002] cifs: Bad value for 'port' [ 174.146124][ T30] audit: type=1400 audit(1754449188.934:308): avc: denied { open } for pid=6992 comm="syz.3.227" path="/40/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 174.601212][ T7009] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 175.205294][ T7014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.730451][ T30] audit: type=1400 audit(1754449190.734:309): avc: denied { name_bind } for pid=7015 comm="syz.4.233" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 175.796992][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 176.098835][ T5906] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.158343][ T5906] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 176.315143][ T5906] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 176.451348][ T5906] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.471585][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.212532][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.232103][ T5906] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 178.275258][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.324205][ T5906] usb 2-1: USB disconnect, device number 3 [ 180.471657][ T7062] Bluetooth: MGMT ver 1.23 [ 181.533625][ T30] audit: type=1400 audit(1754449196.504:310): avc: denied { read } for pid=7068 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.601201][ T30] audit: type=1400 audit(1754449196.634:311): avc: denied { write } for pid=7068 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.701228][ T30] audit: type=1400 audit(1754449196.744:312): avc: denied { ioctl } for pid=7068 comm="syz.1.249" path="socket:[10944]" dev="sockfs" ino=10944 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.716313][ T7076] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 182.373567][ T7076] bond1: entered promiscuous mode [ 182.379623][ T7076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.552168][ T7082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.560318][ T7082] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 182.571827][ T7082] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 182.702177][ T7082] bond1: (slave vcan1): making interface the new active one [ 182.859339][ T7082] vcan1: entered promiscuous mode [ 182.882083][ T7082] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 182.882514][ T7076] overlayfs: missing 'lowerdir' [ 184.131260][ T5914] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 184.472434][ T5914] usb 1-1: config 0 has an invalid interface number: 142 but max is 1 [ 184.480775][ T5914] usb 1-1: config 0 has no interface number 0 [ 184.487066][ T5914] usb 1-1: config 0 interface 1 has no altsetting 0 [ 184.507841][ T5914] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 184.517358][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.550862][ T5914] usb 1-1: Product: syz [ 184.577622][ T5914] usb 1-1: Manufacturer: syz [ 184.620756][ T5914] usb 1-1: SerialNumber: syz [ 184.639310][ T5914] usb 1-1: config 0 descriptor?? [ 185.385842][ T7109] netlink: 64 bytes leftover after parsing attributes in process `syz.1.256'. [ 185.737124][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 185.747609][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 185.751389][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 185.753676][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 186.703733][ T7127] hub 2-0:1.0: USB hub found [ 186.708717][ T7127] hub 2-0:1.0: 1 port detected [ 186.715098][ T5914] msi2500 1-1:0.1: Registered as swradio24 [ 186.741211][ T5914] msi2500 1-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 186.976583][ T5914] videodev: could not get a free minor [ 187.028347][ T5914] msi2500 1-1:0.142: Failed to register as video device (-23) [ 187.078387][ T5914] msi2500 1-1:0.142: probe with driver msi2500 failed with error -23 [ 187.157980][ T30] audit: type=1400 audit(1754449202.224:313): avc: denied { watch } for pid=7132 comm="syz.3.262" path="/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.209275][ T5914] usb 1-1: USB disconnect, device number 4 [ 187.590556][ T30] audit: type=1400 audit(1754449202.234:314): avc: denied { watch_sb watch_reads } for pid=7132 comm="syz.3.262" path="/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.789235][ T7120] netlink: 'syz.4.260': attribute type 30 has an invalid length. [ 188.341279][ T30] audit: type=1400 audit(1754449203.224:315): avc: denied { search } for pid=7144 comm="syz.3.264" name="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.420302][ T30] audit: type=1400 audit(1754449203.224:316): avc: denied { search } for pid=7144 comm="syz.3.264" name="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.467808][ T30] audit: type=1400 audit(1754449203.244:317): avc: denied { mounton } for pid=7144 comm="syz.3.264" path="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.558337][ T30] audit: type=1400 audit(1754449203.284:318): avc: denied { read open } for pid=7144 comm="syz.3.264" path="/" dev="configfs" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.616252][ T30] audit: type=1400 audit(1754449203.694:319): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 189.243906][ T7158] tipc: Enabled bearer , priority 0 [ 189.273188][ T7158] syzkaller0: entered promiscuous mode [ 189.278688][ T7158] syzkaller0: entered allmulticast mode [ 189.545838][ T7158] tipc: Resetting bearer [ 189.592555][ T7157] tipc: Resetting bearer [ 189.602822][ T7157] tipc: Disabling bearer [ 189.698161][ T7166] tipc: Started in network mode [ 189.703198][ T7166] tipc: Node identity 2641a1c9ad9d, cluster identity 4711 [ 189.721588][ T7166] tipc: Enabled bearer , priority 0 [ 189.734398][ T7166] syzkaller0: entered promiscuous mode [ 189.739879][ T7166] syzkaller0: entered allmulticast mode [ 189.884299][ T7167] tipc: Resetting bearer [ 190.104099][ T7163] tipc: Resetting bearer [ 190.268983][ T7177] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 191.619559][ T10] tipc: Node number set to 2346492361 [ 191.724710][ T7163] tipc: Disabling bearer [ 193.819577][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.826376][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.920665][ T30] audit: type=1400 audit(1754449209.994:320): avc: denied { ioctl } for pid=7204 comm="syz.3.278" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 194.999282][ T9] IPVS: starting estimator thread 0... [ 195.450520][ T7211] IPVS: using max 79 ests per chain, 189600 per kthread [ 195.571828][ T7220] tipc: Enabled bearer , priority 10 [ 197.844668][ T30] audit: type=1400 audit(1754449212.924:321): avc: denied { setopt } for pid=7235 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.864149][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.625801][ T7270] block nbd4: shutting down sockets [ 203.309971][ T30] audit: type=1400 audit(1754449217.964:322): avc: denied { remount } for pid=7276 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.381247][ T30] audit: type=1400 audit(1754449218.354:323): avc: denied { create } for pid=7281 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 204.778406][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 206.257628][ T7314] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.270080][ T30] audit: type=1400 audit(1754449221.334:324): avc: denied { write } for pid=7310 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.123179][ T30] audit: type=1400 audit(1754449222.204:325): avc: denied { append } for pid=7317 comm="syz.2.303" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.285169][ T30] audit: type=1400 audit(1754449222.364:326): avc: denied { connect } for pid=7317 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.351613][ T7321] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 207.373429][ T7321] ======================================================= [ 207.373429][ T7321] WARNING: The mand mount option has been deprecated and [ 207.373429][ T7321] and is ignored by this kernel. Remove the mand [ 207.373429][ T7321] option from the mount to silence this warning. [ 207.373429][ T7321] ======================================================= [ 210.012992][ T7351] input: syz1 as /devices/virtual/input/input10 [ 210.790661][ T7354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7354 comm=syz.0.311 [ 211.626973][ T7363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.634492][ T7363] IPv6: NLM_F_CREATE should be set when creating new route [ 211.641983][ T7363] IPv6: NLM_F_CREATE should be set when creating new route [ 211.649292][ T7363] IPv6: NLM_F_CREATE should be set when creating new route [ 212.298366][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 212.409057][ T30] audit: type=1400 audit(1754449227.374:327): avc: denied { ioctl } for pid=7364 comm="syz.0.314" path="socket:[12412]" dev="sockfs" ino=12412 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 213.872016][ T7391] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.320'. [ 213.912813][ T7391] netlink: zone id is out of range [ 213.919402][ T7391] netlink: zone id is out of range [ 213.953473][ T7391] netlink: zone id is out of range [ 213.958707][ T7391] netlink: zone id is out of range [ 213.964370][ T7391] netlink: zone id is out of range [ 213.969616][ T7391] netlink: zone id is out of range [ 213.975714][ T7391] netlink: zone id is out of range [ 213.980952][ T7391] netlink: zone id is out of range [ 213.986640][ T7391] netlink: zone id is out of range [ 213.991911][ T7391] netlink: zone id is out of range [ 214.072779][ T30] audit: type=1400 audit(1754449229.144:328): avc: denied { read } for pid=7381 comm="syz.1.321" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.256979][ T30] audit: type=1400 audit(1754449229.144:329): avc: denied { open } for pid=7381 comm="syz.1.321" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.569897][ T30] audit: type=1400 audit(1754449229.144:330): avc: denied { ioctl } for pid=7381 comm="syz.1.321" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.797254][ T30] audit: type=1326 audit(1754449229.154:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7381 comm="syz.1.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdcd58eb69 code=0x0 [ 215.447101][ T30] audit: type=1400 audit(1754449230.154:332): avc: denied { mounton } for pid=7396 comm="syz.2.322" path="/62/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 218.275072][ T7428] netlink: 136784 bytes leftover after parsing attributes in process `syz.3.326'. [ 218.481454][ T7425] netlink: 'syz.0.328': attribute type 4 has an invalid length. [ 218.585132][ T7422] netlink: 'syz.0.328': attribute type 4 has an invalid length. [ 219.491586][ T7422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=7422 comm=syz.0.328 [ 222.151701][ T7460] syz.2.332: attempt to access beyond end of device [ 222.151701][ T7460] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 222.172753][ T30] audit: type=1400 audit(1754449237.254:333): avc: denied { write } for pid=7455 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.147354][ T30] audit: type=1400 audit(1754449238.084:334): avc: denied { ioctl } for pid=7466 comm="syz.4.338" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.331440][ T10] IPVS: starting estimator thread 0... [ 223.461235][ T7471] IPVS: using max 48 ests per chain, 115200 per kthread [ 224.330827][ T7481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.342081][ T30] audit: type=1400 audit(1754449239.404:335): avc: denied { write } for pid=7472 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.002212][ T7462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.157677][ T7489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.343'. [ 225.168295][ T7489] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 225.629358][ T7497] netlink: 'syz.4.346': attribute type 39 has an invalid length. [ 226.874953][ T30] audit: type=1400 audit(1754449241.824:336): avc: denied { append } for pid=7507 comm="syz.0.348" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 226.901165][ T30] audit: type=1400 audit(1754449241.824:337): avc: denied { open } for pid=7507 comm="syz.0.348" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 228.155920][ T7516] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.156028][ T7521] syz.3.351: attempt to access beyond end of device [ 228.156028][ T7521] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 228.250382][ T7521] syz.3.351: attempt to access beyond end of device [ 228.250382][ T7521] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 228.352835][ T7521] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 228.505812][ T7528] wg1 speed is unknown, defaulting to 1000 [ 228.513603][ T7528] wg1 speed is unknown, defaulting to 1000 [ 228.537424][ T30] audit: type=1400 audit(1754449243.574:338): avc: denied { write } for pid=7524 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 228.660436][ T7528] wg1 speed is unknown, defaulting to 1000 [ 229.123204][ T7528] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 229.336948][ T7528] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 229.652935][ T7521] syz.3.351: attempt to access beyond end of device [ 229.652935][ T7521] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 229.693766][ T7521] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 229.731483][ T7521] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 229.804141][ T7528] wg1 speed is unknown, defaulting to 1000 [ 229.979392][ T7528] wg1 speed is unknown, defaulting to 1000 [ 230.422604][ T7521] UDF-fs: Scanning with blocksize 512 failed [ 230.470172][ T7528] wg1 speed is unknown, defaulting to 1000 [ 230.516400][ T7528] wg1 speed is unknown, defaulting to 1000 [ 230.535312][ T7521] syz.3.351: attempt to access beyond end of device [ 230.535312][ T7521] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 230.646772][ T7521] syz.3.351: attempt to access beyond end of device [ 230.646772][ T7521] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 230.676728][ T7521] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 230.690483][ T7521] syz.3.351: attempt to access beyond end of device [ 230.690483][ T7521] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 230.782483][ T7528] wg1 speed is unknown, defaulting to 1000 [ 230.947921][ T7521] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 231.442083][ T7521] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 231.488642][ T7521] UDF-fs: Scanning with blocksize 1024 failed [ 231.519907][ T7521] syz.3.351: attempt to access beyond end of device [ 231.519907][ T7521] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 232.088452][ T30] audit: type=1400 audit(1754449246.974:339): avc: denied { setopt } for pid=7551 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 232.121302][ T7521] syz.3.351: attempt to access beyond end of device [ 232.121302][ T7521] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 233.166994][ T7521] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 233.541338][ T7521] syz.3.351: attempt to access beyond end of device [ 233.541338][ T7521] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 233.593884][ T7521] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 233.604758][ T7521] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 233.617466][ T7521] UDF-fs: Scanning with blocksize 2048 failed [ 233.663977][ T7521] syz.3.351: attempt to access beyond end of device [ 233.663977][ T7521] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 233.690651][ T7521] syz.3.351: attempt to access beyond end of device [ 233.690651][ T7521] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 233.708314][ T7521] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 233.720478][ T7521] syz.3.351: attempt to access beyond end of device [ 233.720478][ T7521] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 233.737937][ T7521] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 233.810058][ T30] audit: type=1400 audit(1754449248.854:340): avc: denied { append } for pid=7567 comm="syz.4.362" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 233.859289][ T7521] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 233.868874][ T7521] UDF-fs: Scanning with blocksize 4096 failed [ 233.877330][ T7521] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 235.946073][ T7588] IPv6: Can't replace route, no match found [ 237.605834][ T7601] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 237.613710][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 242.015786][ T30] audit: type=1400 audit(1754449257.084:341): avc: denied { ioctl } for pid=7640 comm="syz.3.378" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 242.426840][ T30] audit: type=1400 audit(1754449257.504:342): avc: denied { sys_module } for pid=7644 comm="syz.2.379" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 242.851773][ T7658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.241158][ T30] audit: type=1400 audit(1754449258.314:343): avc: denied { create } for pid=7664 comm="syz.0.383" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.533055][ T30] audit: type=1400 audit(1754449258.594:344): avc: denied { write } for pid=7664 comm="syz.0.383" name="file0" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.894081][ T30] audit: type=1400 audit(1754449258.604:345): avc: denied { open } for pid=7664 comm="syz.0.383" path="/77/file0" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.969841][ T30] audit: type=1400 audit(1754449258.604:346): avc: denied { ioctl } for pid=7664 comm="syz.0.383" path="/77/file0" dev="tmpfs" ino=431 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.443576][ T30] audit: type=1400 audit(1754449258.984:347): avc: denied { setopt } for pid=7668 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.524972][ T30] audit: type=1400 audit(1754449259.394:348): avc: denied { unlink } for pid=5849 comm="syz-executor" name="file0" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.664074][ T30] audit: type=1326 audit(1754449259.674:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 244.855575][ T30] audit: type=1326 audit(1754449259.674:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 244.891627][ T5914] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 245.061323][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 245.314100][ T5914] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 245.348173][ T5914] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 245.373855][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.399226][ T5914] usb 1-1: Product: syz [ 245.407792][ T5914] usb 1-1: Manufacturer: syz [ 245.420913][ T5914] usb 1-1: SerialNumber: syz [ 245.445201][ T5914] usb 1-1: config 0 descriptor?? [ 245.492198][ T5914] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 245.512564][ T5914] usb 1-1: Detected FT232B [ 245.932033][ T7696] binder: 7694:7696 unknown command 0 [ 245.937437][ T7696] binder: 7694:7696 ioctl c0306201 200000000080 returned -22 [ 246.051207][ T7703] input: syz1 as /devices/virtual/input/input11 [ 247.076491][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 247.076503][ T30] audit: type=1400 audit(1754449262.154:375): avc: denied { add_name } for pid=7681 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.271372][ T30] audit: type=1400 audit(1754449262.204:376): avc: denied { create } for pid=7681 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.385427][ T7714] tipc: Started in network mode [ 247.506285][ T7714] tipc: Node identity e22b60392068, cluster identity 4711 [ 247.569342][ T30] audit: type=1400 audit(1754449262.204:377): avc: denied { write } for pid=7681 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=3549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.616020][ T7714] tipc: Enabled bearer , priority 0 [ 247.636785][ T7718] syzkaller0: entered promiscuous mode [ 247.656478][ T7718] syzkaller0: entered allmulticast mode [ 247.681211][ T30] audit: type=1400 audit(1754449262.204:378): avc: denied { append } for pid=7681 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.741399][ T30] audit: type=1400 audit(1754449262.904:379): avc: denied { remove_name } for pid=7715 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.765332][ T839] tipc: Node number set to 3259195449 [ 249.191444][ C0] net_ratelimit: 8136 callbacks suppressed [ 249.191489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.721181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.902535][ T30] audit: type=1400 audit(1754449262.904:380): avc: denied { unlink } for pid=7715 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.925756][ T30] audit: type=1400 audit(1754449264.154:381): avc: denied { create } for pid=7728 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 249.981883][ T7713] tipc: Resetting bearer [ 250.229315][ T7713] tipc: Disabling bearer [ 250.656473][ T5914] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 250.680555][ T5914] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 250.692642][ T5914] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 251.029411][ T839] usb 1-1: USB disconnect, device number 5 [ 251.098114][ T839] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 251.161277][ T7745] tipc: Enabled bearer , priority 0 [ 251.177752][ T7745] syzkaller0: entered promiscuous mode [ 251.210322][ T7745] syzkaller0: entered allmulticast mode [ 251.260584][ T839] ftdi_sio 1-1:0.0: device disconnected [ 251.641980][ T5914] IPVS: starting estimator thread 0... [ 251.861236][ T7751] IPVS: using max 39 ests per chain, 93600 per kthread [ 252.009749][ T7743] tipc: Resetting bearer [ 252.087131][ T7743] tipc: Disabling bearer [ 253.880240][ T30] audit: type=1400 audit(1754449268.953:382): avc: denied { map } for pid=7760 comm="syz.0.403" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 254.454111][ T7776] netlink: 'syz.4.405': attribute type 1 has an invalid length. [ 254.462496][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 255.253888][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.260214][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.769868][ T7803] wg1 speed is unknown, defaulting to 1000 [ 256.986221][ T7812] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 257.043317][ T7812] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 257.103797][ T7819] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 257.110415][ T7819] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 257.125403][ T7819] vhci_hcd vhci_hcd.0: Device attached [ 257.271248][ T30] audit: type=1400 audit(1754449272.343:383): avc: denied { firmware_load } for pid=7811 comm="syz.0.414" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 257.271350][ T7812] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 257.391295][ T5899] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 257.879291][ T7820] vhci_hcd: connection reset by peer [ 257.898086][ T6116] vhci_hcd: stop threads [ 257.938759][ T6116] vhci_hcd: release socket [ 257.995033][ T6116] vhci_hcd: disconnect device [ 260.312597][ T7865] syz.2.420 (7865): drop_caches: 2 [ 261.284992][ T7885] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 261.294646][ T30] audit: type=1400 audit(1754449276.363:384): avc: denied { getopt } for pid=7878 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 262.982149][ T5899] vhci_hcd: vhci_device speed not set [ 263.178493][ T7908] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 263.231265][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 264.881185][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 265.419665][ T7938] wg1 speed is unknown, defaulting to 1000 [ 265.472524][ T5899] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 265.485053][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.504609][ T5899] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.519252][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.681333][ T5899] usb 3-1: Product: syz [ 265.685871][ T5899] usb 3-1: Manufacturer: syz [ 265.690466][ T5899] usb 3-1: SerialNumber: syz [ 265.765500][ T5899] usb 3-1: config 0 descriptor?? [ 265.798040][ T5899] usb 3-1: selecting invalid altsetting 0 [ 266.690995][ T30] audit: type=1400 audit(1754449281.683:385): avc: denied { ioctl } for pid=7944 comm="syz.3.438" path="socket:[13128]" dev="sockfs" ino=13128 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.748311][ T30] audit: type=1400 audit(1754449281.683:386): avc: denied { write } for pid=7944 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.779337][ T30] audit: type=1326 audit(1754449281.853:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 266.830794][ T30] audit: type=1326 audit(1754449281.853:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 266.977851][ T30] audit: type=1326 audit(1754449281.853:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 267.006264][ T5913] usb 3-1: USB disconnect, device number 5 [ 267.074187][ T30] audit: type=1326 audit(1754449281.853:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 267.101447][ T30] audit: type=1326 audit(1754449281.853:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 267.131054][ T30] audit: type=1326 audit(1754449281.903:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 267.324161][ T30] audit: type=1326 audit(1754449281.903:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 267.400480][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 267.575810][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 267.732784][ T30] audit: type=1326 audit(1754449281.903:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5538eb69 code=0x7ffc0000 [ 270.877185][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 271.347163][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 271.511496][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 271.717827][ T5914] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 271.734183][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.751113][ T5914] usb 3-1: Product: syz [ 271.756376][ T5914] usb 3-1: Manufacturer: syz [ 271.762753][ T5914] usb 3-1: SerialNumber: syz [ 271.776945][ T5914] usb 3-1: config 0 descriptor?? [ 271.805863][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 271.805879][ T30] audit: type=1800 audit(1754449286.883:411): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.443" name="bus" dev="ramfs" ino=13170 res=0 errno=0 [ 272.016294][ T5914] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 272.027984][ T5914] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 272.044028][ T5914] usb 3-1: USB disconnect, device number 6 [ 275.033733][ T30] audit: type=1400 audit(1754449289.793:412): avc: denied { write } for pid=8019 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 277.097069][ T8052] tipc: Enabled bearer , priority 10 [ 277.114700][ T8052] siw: device registration error -23 [ 278.230299][ T30] audit: type=1400 audit(1754449293.273:413): avc: denied { ioctl } for pid=8041 comm="syz.4.459" path="socket:[13276]" dev="sockfs" ino=13276 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.254873][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.255021][ T8061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.445863][ T8047] ptrace attach of "./syz-executor exec"[5843] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ team0  8  G\x0b \x09   € €  @  \x5c \x5c      @ €<  $  user_linkup        [ 282.628101][ T30] audit: type=1400 audit(1754449297.613:414): avc: denied { connect } for pid=8094 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 285.601439][ T8125] netlink: 'syz.4.477': attribute type 4 has an invalid length. [ 285.643342][ T8125] netlink: 'syz.4.477': attribute type 4 has an invalid length. [ 285.671275][ T8125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=8125 comm=syz.4.477 [ 286.148807][ T30] audit: type=1400 audit(1754449301.213:415): avc: denied { shutdown } for pid=8111 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.906399][ T8136] netlink: 108 bytes leftover after parsing attributes in process `syz.3.481'. [ 286.934214][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 287.625813][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 287.824225][ T30] audit: type=1400 audit(1754449302.903:416): avc: denied { write } for pid=8141 comm="syz.2.482" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.880650][ T30] audit: type=1400 audit(1754449302.933:417): avc: denied { open } for pid=8141 comm="syz.2.482" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.173011][ T30] audit: type=1400 audit(1754449302.933:418): avc: denied { read append } for pid=8141 comm="syz.2.482" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 288.428560][ T30] audit: type=1400 audit(1754449303.493:419): avc: denied { setopt } for pid=8146 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.691167][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 291.058317][ T30] audit: type=1400 audit(1754449306.133:420): avc: denied { read } for pid=8166 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 291.834539][ T30] audit: type=1400 audit(1754449306.873:421): avc: denied { create } for pid=8173 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.723871][ T8193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.660249][ T30] audit: type=1400 audit(1754449314.739:422): avc: denied { connect } for pid=8273 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.025286][ T30] audit: type=1400 audit(1754449315.089:423): avc: denied { getopt } for pid=8275 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.931748][ T30] audit: type=1400 audit(1754449317.519:424): avc: denied { read } for pid=8273 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.954065][ T30] audit: type=1400 audit(1754449317.629:425): avc: denied { mount } for pid=8288 comm="syz.2.509" name="/" dev="rpc_pipefs" ino=15525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 303.196118][ T30] audit: type=1400 audit(1754449318.279:426): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 305.250856][ T30] audit: type=1400 audit(1754449320.289:427): avc: denied { accept } for pid=8306 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 306.439149][ T30] audit: type=1400 audit(1754449321.519:428): avc: denied { read } for pid=8321 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.536791][ T8328] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 306.544515][ T8328] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.518'. [ 306.939016][ T30] audit: type=1400 audit(1754449322.019:429): avc: denied { bind } for pid=8326 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.499955][ T8339] ptrace attach of "./syz-executor exec"[5842] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ team0  8  G\x0b \x09   € €  @  \x5c \x5c      @ €<  $  user_linkup        [ 308.694993][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 311.663683][ T8369] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 311.777899][ T8375] netlink: 64 bytes leftover after parsing attributes in process `syz.1.531'. [ 314.423662][ T8370] bond1: (slave vcan1): Releasing backup interface [ 314.430209][ T8370] vcan1: left promiscuous mode [ 314.441382][ T8377] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 314.540568][ T8377] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 314.663416][ T8377] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 314.868904][ T8391] netlink: 196 bytes leftover after parsing attributes in process `syz.2.534'. [ 315.354135][ T30] audit: type=1400 audit(1754449330.439:430): avc: denied { firmware_load } for pid=8368 comm="syz.0.529" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 315.498458][ T8369] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 315.515419][ T8369] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 315.541161][ T8369] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 315.794792][ T8369] syz.0.529 (8369) used greatest stack depth: 19960 bytes left [ 316.250326][ T30] audit: type=1400 audit(1754449331.019:431): avc: denied { setopt } for pid=8397 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 316.711753][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.718288][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.110192][ T8398] vxcan1: entered allmulticast mode [ 317.980449][ T8391] syz.2.534 (8391): drop_caches: 2 [ 319.631855][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 319.640791][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 320.157597][ T30] audit: type=1400 audit(1754449334.739:432): avc: denied { create } for pid=8425 comm="syz.4.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 321.041880][ T30] audit: type=1400 audit(1754449336.109:433): avc: denied { create } for pid=8433 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 321.108252][ T30] audit: type=1400 audit(1754449336.119:434): avc: denied { sys_admin } for pid=8433 comm="syz.3.543" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 321.543571][ T30] audit: type=1400 audit(1754449336.379:435): avc: denied { read } for pid=8440 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.565947][ T30] audit: type=1400 audit(1754449336.629:436): avc: denied { connect } for pid=8439 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.922610][ T30] audit: type=1400 audit(1754449336.629:437): avc: denied { write } for pid=8439 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.055173][ T8475] tipc: New replicast peer: 255.255.255.255 [ 324.063333][ T8475] tipc: Enabled bearer , priority 10 [ 324.514223][ T30] audit: type=1400 audit(1754449339.599:438): avc: denied { wake_alarm } for pid=8473 comm="syz.3.553" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.929694][ T8486] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 324.997615][ T8486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.067522][ T8489] ip6tnl1: entered allmulticast mode [ 325.118997][ T8489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.242846][ T8489] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 325.277488][ T8489] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 328.479090][ T8527] netlink: 'syz.2.562': attribute type 4 has an invalid length. [ 328.496789][ T8527] netlink: 'syz.2.562': attribute type 4 has an invalid length. [ 328.516140][ T8527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=8527 comm=syz.2.562 [ 331.973269][ T30] audit: type=1400 audit(1754449347.029:439): avc: denied { block_suspend } for pid=8542 comm="syz.0.566" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 332.067464][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 332.434525][ T8550] sch_tbf: burst 480 is lower than device lo mtu (11337746) ! [ 332.468870][ T30] audit: type=1400 audit(1754449347.509:440): avc: denied { module_request } for pid=8539 comm="syz.3.565" kmod="nft-expr-10-co" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 332.515048][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 332.679803][ T8550] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 332.764889][ T8550] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 333.514932][ T30] audit: type=1400 audit(1754449348.569:441): avc: denied { read } for pid=8551 comm="syz.1.567" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 333.570787][ T30] audit: type=1400 audit(1754449348.569:442): avc: denied { open } for pid=8551 comm="syz.1.567" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 333.768491][ T8562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.776110][ T8562] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 333.859082][ T8576] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 333.865620][ T8576] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.002786][ T8576] vhci_hcd vhci_hcd.0: Device attached [ 334.647703][ T8577] vhci_hcd: connection closed [ 334.861222][ T3527] vhci_hcd: stop threads [ 334.953474][ T3527] vhci_hcd: release socket [ 335.111139][ T5913] vhci_hcd: vhci_device speed not set [ 335.221111][ T5913] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 335.358487][ T3527] vhci_hcd: disconnect device [ 335.571119][ T5170] Bluetooth: hci0: command 0x0406 tx timeout [ 335.692395][ T8562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 335.700889][ T8562] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 335.779306][ T8562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 335.786382][ T8562] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 335.972710][ T8562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 336.631260][ T8562] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 336.787136][ T8562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 336.817172][ T8562] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 337.008557][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.015745][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.347176][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.418252][ T8602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.659795][ T5170] Bluetooth: hci0: command 0x0406 tx timeout [ 337.741250][ T5170] Bluetooth: hci1: command 0x0406 tx timeout [ 337.811295][ T5170] Bluetooth: hci3: command 0x0406 tx timeout [ 338.051271][ T5170] Bluetooth: hci2: command 0x0406 tx timeout [ 338.161266][ T30] audit: type=1400 audit(1754449353.159:443): avc: denied { bind } for pid=8607 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 338.613766][ T8256] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.676900][ T8623] syz.0.588: attempt to access beyond end of device [ 338.676900][ T8623] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 338.690305][ T8623] EXT4-fs (nbd0): unable to read superblock [ 338.709585][ T8256] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.815626][ T30] audit: type=1400 audit(1754449353.839:444): avc: denied { ioctl } for pid=8618 comm="syz.0.588" path="socket:[16025]" dev="sockfs" ino=16025 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.901337][ T8256] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.935078][ T5170] Bluetooth: hci4: command 0x0405 tx timeout [ 339.035182][ T8256] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.048659][ T8612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.068195][ T8612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.177609][ T8629] /dev/nullb0: Can't open blockdev [ 339.197709][ T8612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.221752][ T30] audit: type=1400 audit(1754449354.279:445): avc: denied { nlmsg_write } for pid=8627 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 339.342985][ T8612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.438285][ T8612] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.509400][ T8626] Driver unsupported XDP return value 0 on prog (id 144) dev N/A, expect packet loss! [ 340.684364][ T5913] vhci_hcd: vhci_device speed not set [ 340.921137][ T839] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 341.139987][ T5170] Bluetooth: hci1: command 0x0406 tx timeout [ 341.161097][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 341.253771][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 341.282987][ T839] usb 2-1: Using ep0 maxpacket: 32 [ 341.294361][ T839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 341.408844][ T839] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2A, changing to 0xA [ 341.440654][ T839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 171, changing to 11 [ 341.444742][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 341.452416][ T839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 17932, setting to 1024 [ 341.503097][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 341.734117][ T839] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 341.747985][ T839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.756267][ T839] usb 2-1: Product: syz [ 341.760410][ T839] usb 2-1: Manufacturer: syz [ 341.766649][ T839] usb 2-1: SerialNumber: syz [ 341.779842][ T839] usb 2-1: config 0 descriptor?? [ 341.801903][ T8638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.067147][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.590'. [ 343.394505][ T5913] usb 2-1: USB disconnect, device number 4 [ 343.887735][ T30] audit: type=1400 audit(1754449358.899:446): avc: denied { read } for pid=8671 comm="syz.1.591" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 344.120344][ T30] audit: type=1400 audit(1754449358.899:447): avc: denied { open } for pid=8671 comm="syz.1.591" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 344.145939][ T8673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8673 comm=syz.3.590 [ 344.778378][ T5899] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 345.171147][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 345.189878][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.421372][ T5899] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 345.442925][ T5899] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 345.452346][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.479963][ T5899] usb 3-1: config 0 descriptor?? [ 345.946310][ T30] audit: type=1400 audit(1754449361.019:448): avc: denied { accept } for pid=8677 comm="syz.2.592" lport=46572 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 346.030751][ T30] audit: type=1400 audit(1754449361.029:449): avc: denied { read } for pid=8677 comm="syz.2.592" lport=46572 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 346.176549][ T30] audit: type=1400 audit(1754449361.149:450): avc: denied { setopt } for pid=8677 comm="syz.2.592" lport=46572 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 347.141927][ T8722] loop6: detected capacity change from 0 to 2560 [ 347.153305][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.163572][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.192023][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.336408][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.345022][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.354276][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.362463][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.371527][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.389624][ T8722] ldm_validate_partition_table(): Disk read failed. [ 347.398151][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.407296][ T8722] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.417816][ T8722] Dev loop6: unable to read RDB block 0 [ 347.425077][ T8722] loop6: unable to read partition table [ 347.431245][ T8722] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 347.864115][ T8733] overlayfs: failed to clone lowerpath [ 347.945421][ T8734] overlayfs: failed to clone upperpath [ 349.135521][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'. [ 349.207146][ T30] audit: type=1400 audit(1754449364.269:451): avc: denied { setopt } for pid=8737 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 350.641639][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 351.251006][ T30] audit: type=1804 audit(1754449366.319:452): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.606" name="file0" dev="ramfs" ino=15103 res=1 errno=0 [ 351.383667][ T5921] usb 3-1: USB disconnect, device number 7 [ 351.560141][ T8777] netlink: 'syz.3.607': attribute type 21 has an invalid length. [ 352.100440][ T30] audit: type=1400 audit(1754449367.155:453): avc: denied { create } for pid=8780 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 352.152775][ T30] audit: type=1400 audit(1754449367.155:454): avc: denied { write } for pid=8780 comm="syz.2.608" path="socket:[15113]" dev="sockfs" ino=15113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 353.182913][ T5921] hid_parser_main: 131 callbacks suppressed [ 353.182934][ T5921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.403211][ T8789] syz.2.610 (8789) used greatest stack depth: 19128 bytes left [ 353.835933][ T5921] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.792206][ T8817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.615'. [ 357.092781][ T8823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.002880][ T8844] input: syz0 as /devices/virtual/input/input12 [ 359.829562][ T5170] Bluetooth: hci4: command 0x0405 tx timeout [ 360.019069][ T8855] netlink: 'syz.3.625': attribute type 13 has an invalid length. [ 362.500295][ T8879] tty tty4: ldisc open failed (-12), clearing slot 3 [ 363.446269][ T30] audit: type=1400 audit(1754449378.525:455): avc: denied { bind } for pid=8887 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.374260][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 364.481667][ T8897] can0: slcan on ptm0. [ 364.791236][ T8902] capability: warning: `syz.3.637' uses 32-bit capabilities (legacy support in use) [ 364.821193][ T30] audit: type=1400 audit(1754449378.525:456): avc: denied { node_bind } for pid=8887 comm="syz.4.632" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 365.821605][ T8891] can0 (unregistered): slcan off ptm0. [ 365.831494][ T5914] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 366.100757][ T5914] usb 5-1: config 0 has no interfaces? [ 366.119115][ T5914] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.562247][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.570283][ T5914] usb 5-1: Product: syz [ 366.575375][ T5914] usb 5-1: Manufacturer: syz [ 366.579978][ T5914] usb 5-1: SerialNumber: syz [ 366.590562][ T5914] usb 5-1: config 0 descriptor?? [ 367.290590][ T8935] Failed to initialize the IGMP autojoin socket (err -2) [ 369.238369][ T5906] usb 5-1: USB disconnect, device number 2 [ 371.213533][ T8990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.118753][ T30] audit: type=1400 audit(1754449388.175:457): avc: denied { write } for pid=8992 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.203428][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.657'. [ 373.985991][ T30] audit: type=1400 audit(1754449389.025:458): avc: denied { create } for pid=9017 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 374.294711][ T9014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9014 comm=syz.4.657 [ 374.401786][ T30] audit: type=1400 audit(1754449389.375:459): avc: denied { lock } for pid=9012 comm="syz.4.657" path="socket:[17428]" dev="sockfs" ino=17428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 374.539370][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 374.548573][ T9026] netlink: 'syz.0.655': attribute type 15 has an invalid length. [ 374.580431][ T9023] batman_adv: batadv0: Adding interface: ipvlan2 [ 374.586821][ T9023] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.612146][ T9023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.622601][ T9023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.632438][ T9023] batman_adv: batadv0: Interface activated: ipvlan2 [ 374.764303][ T30] audit: type=1400 audit(1754449389.845:460): avc: denied { create } for pid=9029 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 378.215683][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.222213][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.840695][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 378.885466][ T9074] evm: overlay not supported [ 378.901560][ T30] audit: type=1400 audit(1754449393.975:461): avc: denied { watch } for pid=9068 comm="syz.0.670" path="/134/bus/file1" dev="overlay" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 380.191266][ T9080] syz.4.672 (9080): drop_caches: 2 [ 380.577702][ T9083] hpfs: Bad magic ... probably not HPFS [ 381.002460][ T9092] : entered promiscuous mode [ 385.443442][ T5914] wg1 speed is unknown, defaulting to 1000 [ 385.580275][ T9133] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 386.715394][ T9133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.730514][ T9140] ip6tnl1: entered allmulticast mode [ 386.840592][ T9140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.857626][ T9140] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 387.333641][ T9140] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 388.414675][ T9154] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 388.425885][ T9154] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 389.805444][ T9162] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 389.821480][ T9162] qnx6: wrong signature (magic) in superblock #1. [ 389.827909][ T9162] qnx6: unable to read the first superblock [ 393.117431][ T30] audit: type=1400 audit(1754449408.125:462): avc: denied { connect } for pid=9189 comm="syz.2.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 396.040054][ T9242] binder: 9235:9242 ioctl c0306201 0 returned -14 [ 403.771097][ T5972] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 403.846155][ T9301] bridge1: entered promiscuous mode [ 404.332322][ T30] audit: type=1400 audit(1754449419.365:463): avc: denied { read write } for pid=9293 comm="syz.1.715" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 404.380372][ T30] audit: type=1400 audit(1754449419.365:464): avc: denied { open } for pid=9293 comm="syz.1.715" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 404.486329][ T5972] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 404.549055][ T5972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.562811][ T5972] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 404.573780][ T5972] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.638555][ T5972] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.729674][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.736484][ T30] audit: type=1400 audit(1754449419.365:465): avc: denied { map } for pid=9293 comm="syz.1.715" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 404.774664][ T5972] usb 3-1: Product: syz [ 404.786482][ T5972] usb 3-1: Manufacturer: syz [ 404.885591][ T5972] usb 3-1: SerialNumber: syz [ 405.916094][ T9323] netlink: zone id is out of range [ 405.921505][ T9323] netlink: zone id is out of range [ 405.930040][ T9323] netlink: del zone limit has 4 unknown bytes [ 406.302379][ T30] audit: type=1400 audit(1754449421.315:466): avc: denied { map } for pid=9316 comm="syz.3.719" path="socket:[17742]" dev="sockfs" ino=17742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 406.681233][ T30] audit: type=1400 audit(1754449421.315:467): avc: denied { accept } for pid=9316 comm="syz.3.719" path="socket:[17742]" dev="sockfs" ino=17742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 406.706526][ T5972] usb 3-1: USB disconnect, device number 8 [ 406.791497][ T30] audit: type=1400 audit(1754449421.695:468): avc: denied { ioctl } for pid=9325 comm="syz.0.721" path="socket:[17142]" dev="sockfs" ino=17142 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 407.761461][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.688083][ T30] audit: type=1400 audit(1754449423.745:469): avc: denied { map } for pid=9335 comm="syz.2.724" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 408.907416][ T30] audit: type=1400 audit(1754449423.745:470): avc: denied { write execute } for pid=9335 comm="syz.2.724" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 410.458042][ T9362] misc userio: Invalid payload size [ 410.476505][ T9362] misc userio: No port type given on /dev/userio [ 410.587911][ T9363] blktrace: Concurrent blktraces are not allowed on sg0 [ 410.924578][ T9373] netlink: zone id is out of range [ 410.929844][ T9373] netlink: zone id is out of range [ 410.938255][ T9373] netlink: del zone limit has 4 unknown bytes [ 413.276106][ T9393] netlink: 108 bytes leftover after parsing attributes in process `syz.3.737'. [ 414.525538][ T9404] Failed to initialize the IGMP autojoin socket (err -2) [ 415.250921][ T30] audit: type=1400 audit(1754449430.325:471): avc: denied { mount } for pid=9406 comm="syz.0.741" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 415.283269][ T9415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.411187][ T5170] Bluetooth: hci4: command 0x0405 tx timeout [ 416.958648][ T9432] netlink: zone id is out of range [ 416.964786][ T9432] netlink: zone id is out of range [ 416.972000][ T9432] netlink: del zone limit has 4 unknown bytes [ 418.318444][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 418.761554][ T839] libceph: mon0 (1)[c::]:6789 connect error [ 419.166374][ T9450] Failed to initialize the IGMP autojoin socket (err -2) [ 419.212472][ T30] audit: type=1400 audit(1754449434.185:472): avc: denied { getopt } for pid=9444 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 419.965238][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 420.258221][ T9437] ceph: No mds server is up or the cluster is laggy [ 420.511731][ T30] audit: type=1400 audit(1754449435.565:473): avc: denied { ioctl } for pid=9453 comm="syz.0.754" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 421.575266][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.755'. [ 421.969247][ T9470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 423.268404][ T9492] IPv6: Can't replace route, no match found [ 423.514402][ T9494] netlink: 'syz.3.761': attribute type 10 has an invalid length. [ 423.522845][ T9494] team0: Device hsr_slave_0 failed to register rx_handler [ 424.917492][ T9499] overlayfs: failed to clone lowerpath [ 425.031520][ T30] audit: type=1400 audit(1754449439.994:474): avc: denied { mount } for pid=9498 comm="syz.3.762" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 426.364633][ T30] audit: type=1400 audit(1754449441.424:475): avc: denied { read } for pid=9516 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 430.164723][ T9545] overlayfs: failed to resolve './file0': -2 [ 430.259798][ T9539] netlink: 132 bytes leftover after parsing attributes in process `syz.0.772'. [ 432.281054][ T30] audit: type=1400 audit(1754449447.214:476): avc: denied { append } for pid=9567 comm="syz.4.781" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 433.881023][ T9587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.502378][ T30] audit: type=1400 audit(1754449450.424:477): avc: denied { ioctl } for pid=9603 comm="syz.1.791" path="socket:[18165]" dev="sockfs" ino=18165 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 436.291046][ T5972] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 436.530003][ T5972] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 436.538559][ T5972] usb 5-1: config 0 has no interface number 0 [ 436.565959][ T5972] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20 [ 436.575107][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.626996][ T5972] usb 5-1: Product: syz [ 436.646084][ T5972] usb 5-1: Manufacturer: syz [ 436.657332][ T5972] usb 5-1: SerialNumber: syz [ 436.677957][ T5972] usb 5-1: config 0 descriptor?? [ 436.707654][ T5972] s2255 5-1:0.83: Could not find bulk-in endpoint [ 436.742375][ T5972] Sensoray 2255 driver load failed: 0xfffffff4 [ 436.771104][ T5972] s2255 5-1:0.83: probe with driver s2255 failed with error -12 [ 438.340837][ T9634] tipc: MTU too low for tipc bearer [ 439.083249][ T9637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'. [ 439.321262][ T839] usb 5-1: USB disconnect, device number 3 [ 440.232248][ T9645] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 440.239051][ T9645] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 440.246108][ T9645] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 440.252580][ T9645] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 440.259015][ T9645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 440.265527][ T9645] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 440.272618][ T9645] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 440.279678][ T9645] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 440.292186][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.298958][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.322115][ T9652] Bluetooth: MGMT ver 1.23 [ 440.344868][ T5170] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 440.503811][ T30] audit: type=1400 audit(1754449455.584:478): avc: denied { getopt } for pid=9648 comm="syz.3.801" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.875317][ T30] audit: type=1400 audit(1754449455.914:479): avc: denied { accept } for pid=9656 comm="syz.3.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 441.988640][ T9680] bridge0: entered promiscuous mode [ 441.994429][ T9680] macvlan2: entered promiscuous mode [ 444.990034][ T9703] wg1 speed is unknown, defaulting to 1000 [ 447.278482][ T30] audit: type=1400 audit(1754449461.944:480): avc: denied { setopt } for pid=9719 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 451.404096][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.420680][ T9760] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.516600][ T9760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.771598][ T9764] cgroup: Need name or subsystem set [ 452.308888][ T9766] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 452.466902][ T9766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.478580][ T9766] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 453.629908][ T9766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9766 comm=syz.3.828 [ 453.671128][ T9780] tipc: Started in network mode [ 453.676025][ T9780] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 453.683385][ T9780] tipc: Enabled bearer , priority 10 [ 453.683385][ T5170] Bluetooth: hci4: connection err: -111 [ 453.698339][ T9780] siw: device registration error -23 [ 454.271051][ T9793] bridge0: entered promiscuous mode [ 454.276336][ T9793] macvlan2: entered promiscuous mode [ 454.711078][ T5914] tipc: Node number set to 10005162 [ 455.033810][ T9803] serio: Serial port ptm0 [ 455.422958][ T9804] overlayfs: missing 'lowerdir' [ 455.472184][ T9804] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 459.596615][ T9838] could not allocate digest TFM handle vmac64(aes-arm) [ 460.806255][ T9859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.763431][ T30] audit: type=1400 audit(1754449476.384:481): avc: denied { accept } for pid=9858 comm="syz.2.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 461.988270][ T5170] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 464.761224][ T5170] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 464.985351][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 465.883098][ T30] audit: type=1400 audit(1754449480.574:482): avc: denied { connect } for pid=9902 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 465.943676][ T9897] netlink: 'syz.2.858': attribute type 21 has an invalid length. [ 465.951562][ T9897] netlink: 156 bytes leftover after parsing attributes in process `syz.2.858'. [ 465.963378][ T9897] netlink: 'syz.2.858': attribute type 21 has an invalid length. [ 465.971247][ T9897] netlink: 156 bytes leftover after parsing attributes in process `syz.2.858'. [ 466.068580][ T5170] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 466.094529][ T5170] Bluetooth: hci0: Injecting HCI hardware error event [ 466.103134][ T5170] Bluetooth: hci0: hardware error 0x00 [ 466.678862][ T9922] fuse: Bad value for 'fd' [ 467.002675][ T30] audit: type=1400 audit(1754449481.574:483): avc: denied { getopt } for pid=9908 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 467.116100][ T9920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.205221][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.862'. [ 468.139030][ T5170] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 468.949868][ T30] audit: type=1400 audit(1754449484.024:484): avc: denied { write } for pid=9935 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 468.978565][ T9943] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 468.989835][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.867'. [ 469.384410][ T30] audit: type=1400 audit(1754449484.454:485): avc: denied { watch_sb } for pid=9947 comm="syz.3.870" path="/201" dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 470.215031][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 470.381064][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 471.003583][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.100830][ T5906] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 471.108842][ T5906] usb 2-1: can't read configurations, error -71 [ 471.131484][ T9968] bridge4: entered promiscuous mode [ 471.242145][ T9969] kAFS: No cell specified [ 473.396253][ T9990] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 476.573824][ T30] audit: type=1400 audit(1754449491.644:486): avc: denied { execute } for pid=10012 comm="syz.2.884" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 476.814690][T10017] pim6reg: entered allmulticast mode [ 479.415640][ T30] audit: type=1400 audit(1754449494.494:487): avc: denied { connect } for pid=10042 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 479.917259][ T30] audit: type=1400 audit(1754449494.964:488): avc: denied { name_bind } for pid=10046 comm="syz.2.892" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 480.152248][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 480.201288][ T30] audit: type=1400 audit(1754449495.264:489): avc: denied { associate } for pid=10051 comm="syz.3.893" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 480.382919][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.404121][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 480.437585][T10057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.603525][ T30] audit: type=1400 audit(1754449495.274:490): avc: denied { mounton } for pid=10051 comm="syz.3.893" path="/file0" dev="rootfs" ino=20489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 480.630921][ T5921] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 480.774365][ T30] audit: type=1400 audit(1754449495.284:491): avc: denied { setattr } for pid=10051 comm="syz.3.893" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 480.796540][ T30] audit: type=1400 audit(1754449495.284:492): avc: denied { unmount } for pid=10051 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 480.830899][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.861405][ T5921] usb 5-1: config 0 descriptor?? [ 481.535246][ T5921] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 482.090355][T10079] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 482.108256][T10079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.124020][ T5921] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 482.138489][ T5921] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 482.150648][ T5921] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -32 [ 482.207684][T10079] bond3: (slave gretap2): making interface the new active one [ 482.217284][T10079] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 482.374123][T10083] pim6reg: entered allmulticast mode [ 482.451066][ T5906] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 483.057715][T10090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.900'. [ 483.862269][ T5913] usb 5-1: USB disconnect, device number 4 [ 483.979454][ T5906] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 483.994700][ T30] audit: type=1400 audit(1754449499.074:493): avc: denied { bind } for pid=10097 comm="syz.4.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 484.015633][ T5906] usb 2-1: config 0 has no interface number 0 [ 485.303767][ T30] audit: type=1400 audit(1754449499.984:494): avc: denied { connect } for pid=10101 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 486.151800][ T30] audit: type=1400 audit(1754449500.864:495): avc: denied { bind } for pid=10107 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 486.226347][ T30] audit: type=1400 audit(1754449500.924:496): avc: denied { write } for pid=10107 comm="syz.2.906" path="socket:[20010]" dev="sockfs" ino=20010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 486.250161][ T30] audit: type=1400 audit(1754449501.014:497): avc: denied { read } for pid=10107 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 487.483801][ T5906] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20 [ 487.494796][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.230704][ T5906] usb 2-1: config 0 descriptor?? [ 488.241660][ T5906] usb 2-1: can't set config #0, error -71 [ 488.274883][ T5906] usb 2-1: USB disconnect, device number 7 [ 488.747450][T10146] overlayfs: missing 'lowerdir' [ 488.931122][T10147] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 490.905019][T10157] wg1 speed is unknown, defaulting to 1000 [ 492.936937][ T30] audit: type=1400 audit(1754449507.794:498): avc: denied { map } for pid=10166 comm="syz.1.916" path="socket:[20621]" dev="sockfs" ino=20621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 492.960147][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.493798][ T30] audit: type=1400 audit(1754449509.184:499): avc: denied { listen } for pid=10181 comm="syz.4.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 495.071143][ T30] audit: type=1400 audit(1754449510.114:500): avc: denied { remount } for pid=10210 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 495.801368][ T30] audit: type=1400 audit(1754449510.744:501): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.46 dest=38592 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 495.826201][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.273521][T10226] overlayfs: missing 'lowerdir' [ 496.382649][T10227] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 497.958477][T10231] syz.2.924: attempt to access beyond end of device [ 497.958477][T10231] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 497.972139][T10231] syz.2.924: attempt to access beyond end of device [ 497.972139][T10231] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 497.986028][T10231] Mount JFS Failure: -5 [ 499.201230][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 499.441029][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.459942][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 499.501129][ T5906] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 499.523374][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.549855][ T5906] usb 5-1: config 0 descriptor?? [ 500.056349][ T5906] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 500.360391][T10256] netlink: 'syz.1.930': attribute type 10 has an invalid length. [ 500.384594][T10256] team0: Device hsr_slave_0 failed to register rx_handler [ 500.831126][ T5921] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 501.012804][T10243] netlink: 'syz.4.925': attribute type 1 has an invalid length. [ 501.125735][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.132184][ T5906] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 501.140261][T10243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 501.140287][ T5906] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 501.154650][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.173934][ T5921] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.178259][ T5906] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -32 [ 501.681430][ T5921] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 501.691343][ T5921] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.709443][ T5906] usb 5-1: USB disconnect, device number 5 [ 501.724167][T10266] netlink: 'syz.3.934': attribute type 7 has an invalid length. [ 501.745454][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.766290][T10249] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 501.779111][ T5921] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.981044][ T5906] usb 1-1: USB disconnect, device number 6 [ 504.254665][T10286] block nbd0: Unsupported socket: shutdown callout must be supported. [ 505.023519][ T30] audit: type=1400 audit(1754449519.684:502): avc: denied { bind } for pid=10281 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 505.867667][T10299] fuse: Bad value for 'fd' [ 506.941598][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 509.281506][T10325] wg1 speed is unknown, defaulting to 1000 [ 510.600777][ T30] audit: type=1800 audit(1754449525.504:503): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.955" name="nullb0" dev="tmpfs" ino=1224 res=0 errno=0 [ 511.265124][ T30] audit: type=1400 audit(1754449526.344:504): avc: denied { egress } for pid=8223 comm="kworker/u8:32" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 511.319235][ T30] audit: type=1400 audit(1754449526.344:505): avc: denied { sendto } for pid=8223 comm="kworker/u8:32" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 512.871323][T10367] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 512.881506][T10367] SELinux: failed to load policy [ 513.236035][ T30] audit: type=1400 audit(1754449527.944:506): avc: denied { load_policy } for pid=10363 comm="syz.4.960" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 517.182485][T10398] netlink: 76 bytes leftover after parsing attributes in process `syz.4.967'. [ 517.300090][ T30] audit: type=1400 audit(1754449532.374:507): avc: denied { ioctl } for pid=10402 comm="syz.2.968" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 518.095369][ T30] audit: type=1400 audit(1754449533.064:508): avc: denied { execmem } for pid=10408 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 519.569455][T10424] overlayfs: failed to clone upperpath [ 520.927669][T10430] : entered promiscuous mode [ 521.828445][T10440] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 521.834986][T10440] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.881927][T10450] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 522.135381][T10440] vhci_hcd vhci_hcd.0: Device attached [ 522.191119][T10454] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 522.197756][T10454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.302221][T10454] vhci_hcd vhci_hcd.0: Device attached [ 522.432396][T10460] libceph: resolve '4..' (ret=-3): failed [ 522.465406][T10440] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 522.472031][T10440] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 522.481198][ T5906] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 522.913018][T10450] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 522.919638][T10450] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 522.934921][T10450] vhci_hcd vhci_hcd.0: Device attached [ 522.991937][T10440] vhci_hcd vhci_hcd.0: Device attached [ 523.054746][T10440] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 523.076182][T10440] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 523.107746][T10440] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 523.193345][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 523.445253][T10466] vhci_hcd: connection closed [ 523.445459][T10463] vhci_hcd: connection closed [ 523.451131][T10455] vhci_hcd: connection closed [ 523.457785][T10444] vhci_hcd: connection reset by peer [ 523.479512][ T70] vhci_hcd: stop threads [ 523.509963][ T70] vhci_hcd: release socket [ 523.525227][ T70] vhci_hcd: disconnect device [ 523.956416][ T70] vhci_hcd: stop threads [ 523.961927][ T70] vhci_hcd: release socket [ 523.973810][ T70] vhci_hcd: disconnect device [ 524.010677][ T70] vhci_hcd: stop threads [ 524.018805][ T70] vhci_hcd: release socket [ 524.025542][ T70] vhci_hcd: disconnect device [ 524.035070][ T70] vhci_hcd: stop threads [ 524.043347][ T70] vhci_hcd: release socket [ 524.055385][ T70] vhci_hcd: disconnect device [ 524.846179][T10483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.964159][T10485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 524.972957][T10485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 527.690754][ T30] audit: type=1326 audit(1754449542.384:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10501 comm="syz.0.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4fb78eb69 code=0x0 [ 527.975812][T10506] netlink: 'syz.2.986': attribute type 10 has an invalid length. [ 528.001887][T10506] batman_adv: batadv0: Adding interface: wlan0 [ 528.008092][T10506] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.081180][T10506] batman_adv: batadv0: Interface activated: wlan0 [ 528.111045][ T5906] vhci_hcd: vhci_device speed not set [ 528.435126][ T5914] IPVS: starting estimator thread 0... [ 528.903764][T10520] IPVS: using max 42 ests per chain, 100800 per kthread [ 529.021382][ T5972] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 529.172669][ T5972] usb 1-1: config index 0 descriptor too short (expected 32786, got 18) [ 529.748422][ T5972] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 529.770066][ T5972] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 529.810448][ T5972] usb 1-1: Manufacturer: syz [ 529.912490][ T5972] usb 1-1: config 0 descriptor?? [ 529.928353][ T5972] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 530.572328][ T5972] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 530.595645][T10526] wg1 speed is unknown, defaulting to 1000 [ 530.897828][T10518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.930843][ T5899] usb usb42-port1: attempt power cycle [ 530.940750][ T5972] usb 1-1: USB disconnect, device number 7 [ 530.978636][ T5972] ftdi_sio 1-1:0.0: device disconnected [ 531.496941][ T5899] usb usb42-port1: unable to enumerate USB device [ 531.841742][ T30] audit: type=1400 audit(1754449546.794:510): avc: denied { mounton } for pid=10544 comm="syz.0.998" path="/file0" dev="ramfs" ino=21273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 532.411126][T10551] o2cb: This node has not been configured. [ 532.417124][T10551] o2cb: Cluster check failed. Fix errors before retrying. [ 532.424441][T10551] (syz.3.999,10551,0):user_dlm_register:674 ERROR: status = -22 [ 532.432150][T10551] (syz.3.999,10551,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 532.447659][T10551] o2cb: This node has not been configured. [ 532.453618][T10551] o2cb: Cluster check failed. Fix errors before retrying. [ 532.460864][T10551] (syz.3.999,10551,0):user_dlm_register:674 ERROR: status = -22 [ 532.468567][T10551] (syz.3.999,10551,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 532.717990][ T30] audit: type=1400 audit(1754449547.484:511): avc: denied { add_name } for pid=10548 comm="syz.3.999" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.738614][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.832420][ T30] audit: type=1400 audit(1754449547.484:512): avc: denied { create } for pid=10548 comm="syz.3.999" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 532.853471][ T30] audit: type=1400 audit(1754449547.484:513): avc: denied { associate } for pid=10548 comm="syz.3.999" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 532.875018][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.985385][T10556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.150573][T10559] geneve2: entered promiscuous mode [ 534.156183][T10559] geneve2: entered allmulticast mode [ 534.835278][T10570] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.1002'. [ 536.626581][T10586] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 539.111202][ T30] audit: type=1400 audit(1754449554.134:514): avc: denied { mount } for pid=10601 comm="syz.0.1012" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 540.488205][ T30] audit: type=1400 audit(1754449555.174:515): avc: denied { read } for pid=10622 comm="syz.4.1015" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 541.226658][T10633] ceph: No mds server is up or the cluster is laggy [ 542.995796][T10662] 9pnet_virtio: no channels available for device syz [ 543.797625][T10672] pimreg3: entered allmulticast mode [ 543.861645][T10669] bond2: entered promiscuous mode [ 543.866787][T10669] bond2: entered allmulticast mode [ 543.876532][T10669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.930065][ T30] audit: type=1400 audit(1754449558.904:516): avc: denied { create } for pid=10666 comm="syz.1.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 543.950676][ T30] audit: type=1400 audit(1754449558.904:517): avc: denied { bind } for pid=10666 comm="syz.1.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 545.856025][T10693] wg1 speed is unknown, defaulting to 1000 [ 547.006677][ T30] audit: type=1400 audit(1754449562.054:518): avc: denied { write } for pid=10700 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 547.075101][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.132067][ T30] audit: type=1400 audit(1754449562.054:519): avc: denied { nlmsg_write } for pid=10700 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 547.218793][ T30] audit: type=1400 audit(1754449562.064:520): avc: denied { audit_write } for pid=10700 comm="syz.1.1031" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 547.309544][ T30] audit: type=1400 audit(1754449562.254:521): avc: denied { setopt } for pid=10707 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 547.484852][T10714] netlink: 'syz.2.1032': attribute type 12 has an invalid length. [ 548.819340][T10730] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.896262][T10728] wg1 speed is unknown, defaulting to 1000 [ 549.165796][T10738] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1039'. [ 550.057189][T10749] 9pnet_fd: Insufficient options for proto=fd [ 550.390180][ T5170] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 550.399076][ T30] audit: type=1400 audit(1754449565.464:522): avc: denied { execute } for pid=10724 comm="syz.2.1038" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 553.032522][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 553.399614][T10783] syz.2.1046: attempt to access beyond end of device [ 553.399614][T10783] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 553.415356][T10783] syz.2.1046: attempt to access beyond end of device [ 553.415356][T10783] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 553.464735][T10778] nbd2: detected capacity change from 0 to 10 [ 553.480064][T10783] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 553.490123][T10783] ------------[ cut here ]------------ [ 553.496402][T10783] WARNING: CPU: 0 PID: 10783 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 553.505149][T10783] Modules linked in: [ 553.509209][T10783] CPU: 0 UID: 0 PID: 10783 Comm: syz.2.1046 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 553.521009][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.531166][T10783] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 553.536662][T10783] Code: c0 8b 48 89 df e8 44 d4 bb ff 90 0f 0b e8 bc 28 73 ff 48 c7 c6 e0 60 c0 8b 48 89 df e8 2d d4 bb ff 90 0f 0b e8 a5 28 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 40 62 c0 8b 31 db e8 1d d2 51 [ 553.556529][T10783] RSP: 0018:ffffc900035b77f0 EFLAGS: 00010287 [ 553.562645][T10783] RAX: 0000000000017359 RBX: 0000000000000200 RCX: ffffc9000f7eb000 [ 553.570648][T10783] RDX: 0000000000080000 RSI: ffffffff82486a7b RDI: 0000000000000005 [ 553.579616][T10783] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 553.587734][T10783] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888024105c00 [ 553.595807][T10783] R13: 0000000000000000 R14: 0000000000000200 R15: ffff888024105c00 [ 553.604508][T10783] FS: 00007f03de92e6c0(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 553.613555][T10783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.620186][T10783] CR2: 0000001b31009ff8 CR3: 000000002b74f000 CR4: 00000000003526f0 [ 553.628253][T10783] Call Trace: [ 553.631606][T10783] [ 553.634587][T10783] ? __pfx___might_resched+0x10/0x10 [ 553.639921][T10783] bdev_getblk+0xd4/0xe0 [ 553.644297][T10783] __bread_gfp+0x86/0x3c0 [ 553.648680][T10783] udf_read_tagged+0xae/0x740 [ 553.653434][T10783] udf_check_anchor_block+0x89/0x4b0 [ 553.658724][T10783] ? udf_get_last_block+0x1ce/0x2a0 [ 553.663949][T10783] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 553.669865][T10783] udf_load_vrs+0x588/0x1070 [ 553.674504][T10783] ? __pfx_udf_load_vrs+0x10/0x10 [ 553.679785][T10783] ? __pfx_udf_get_last_session+0x10/0x10 [ 553.685800][T10783] ? lockdep_init_map_type+0x5c/0x280 [ 553.691229][T10783] udf_fill_super+0x791/0x1df0 [ 553.696019][T10783] ? __pfx_udf_fill_super+0x10/0x10 [ 553.701319][T10783] ? do_raw_spin_lock+0x12c/0x2b0 [ 553.706386][T10783] ? find_held_lock+0x2b/0x80 [ 553.711137][T10783] ? sb_set_blocksize+0x176/0x1d0 [ 553.716187][T10783] ? setup_bdev_super+0x369/0x730 [ 553.721304][T10783] get_tree_bdev_flags+0x38c/0x620 [ 553.726439][T10783] ? __pfx_udf_fill_super+0x10/0x10 [ 553.731818][T10783] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 553.737508][T10783] ? bpf_lsm_capable+0x9/0x10 [ 553.742283][T10783] ? security_capable+0x7e/0x260 [ 553.747267][T10783] vfs_get_tree+0x8b/0x340 [ 553.751728][T10783] path_mount+0x1482/0x1fd0 [ 553.756246][T10783] ? __pfx_path_mount+0x10/0x10 [ 553.761119][T10783] ? kmem_cache_free+0x2d1/0x4d0 [ 553.766057][T10783] ? putname+0x154/0x1a0 [ 553.770292][T10783] ? putname+0x154/0x1a0 [ 553.774552][T10783] ? __x64_sys_mount+0x28d/0x310 [ 553.779743][T10783] __x64_sys_mount+0x28d/0x310 [ 553.784668][T10783] ? __pfx___x64_sys_mount+0x10/0x10 [ 553.789959][T10783] ? fput+0x9b/0xd0 [ 553.793828][T10783] do_syscall_64+0xcd/0x4c0 [ 553.798332][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.804236][T10783] RIP: 0033:0x7f03ddb8eb69 [ 553.808629][T10783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.828577][T10783] RSP: 002b:00007f03de92e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 553.837120][T10783] RAX: ffffffffffffffda RBX: 00007f03dddb6160 RCX: 00007f03ddb8eb69 [ 553.845104][T10783] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 553.853104][T10783] RBP: 00007f03ddc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 553.861113][T10783] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 553.869076][T10783] R13: 0000000000000000 R14: 00007f03dddb6160 R15: 00007fffa2702de8 [ 553.877080][T10783] [ 553.880084][T10783] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 553.887344][T10783] CPU: 0 UID: 0 PID: 10783 Comm: syz.2.1046 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 553.899047][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.909091][T10783] Call Trace: [ 553.912372][T10783] [ 553.915292][T10783] dump_stack_lvl+0x3d/0x1f0 [ 553.919873][T10783] vpanic+0x6e8/0x7a0 [ 553.923853][T10783] ? __pfx_vpanic+0x10/0x10 [ 553.928359][T10783] ? __getblk_slow+0x4cc/0x560 [ 553.933106][T10783] panic+0xca/0xd0 [ 553.936826][T10783] ? __pfx_panic+0x10/0x10 [ 553.941245][T10783] check_panic_on_warn+0xab/0xb0 [ 553.946171][T10783] __warn+0xf6/0x3c0 [ 553.950044][T10783] ? __getblk_slow+0x4cc/0x560 [ 553.954804][T10783] report_bug+0x3c3/0x580 [ 553.959135][T10783] ? __getblk_slow+0x4cc/0x560 [ 553.963897][T10783] handle_bug+0x184/0x210 [ 553.968232][T10783] exc_invalid_op+0x17/0x50 [ 553.972746][T10783] asm_exc_invalid_op+0x1a/0x20 [ 553.977599][T10783] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 553.982970][T10783] Code: c0 8b 48 89 df e8 44 d4 bb ff 90 0f 0b e8 bc 28 73 ff 48 c7 c6 e0 60 c0 8b 48 89 df e8 2d d4 bb ff 90 0f 0b e8 a5 28 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 40 62 c0 8b 31 db e8 1d d2 51 [ 554.002563][T10783] RSP: 0018:ffffc900035b77f0 EFLAGS: 00010287 [ 554.008612][T10783] RAX: 0000000000017359 RBX: 0000000000000200 RCX: ffffc9000f7eb000 [ 554.016573][T10783] RDX: 0000000000080000 RSI: ffffffff82486a7b RDI: 0000000000000005 [ 554.024540][T10783] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 554.032534][T10783] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888024105c00 [ 554.040499][T10783] R13: 0000000000000000 R14: 0000000000000200 R15: ffff888024105c00 [ 554.048463][T10783] ? __getblk_slow+0x4cb/0x560 [ 554.053248][T10783] ? __pfx___might_resched+0x10/0x10 [ 554.058523][T10783] bdev_getblk+0xd4/0xe0 [ 554.062852][T10783] __bread_gfp+0x86/0x3c0 [ 554.067182][T10783] udf_read_tagged+0xae/0x740 [ 554.071848][T10783] udf_check_anchor_block+0x89/0x4b0 [ 554.077139][T10783] ? udf_get_last_block+0x1ce/0x2a0 [ 554.082328][T10783] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 554.088206][T10783] udf_load_vrs+0x588/0x1070 [ 554.092803][T10783] ? __pfx_udf_load_vrs+0x10/0x10 [ 554.097817][T10783] ? __pfx_udf_get_last_session+0x10/0x10 [ 554.103534][T10783] ? lockdep_init_map_type+0x5c/0x280 [ 554.108888][T10783] udf_fill_super+0x791/0x1df0 [ 554.113643][T10783] ? __pfx_udf_fill_super+0x10/0x10 [ 554.118830][T10783] ? do_raw_spin_lock+0x12c/0x2b0 [ 554.123849][T10783] ? find_held_lock+0x2b/0x80 [ 554.128519][T10783] ? sb_set_blocksize+0x176/0x1d0 [ 554.133552][T10783] ? setup_bdev_super+0x369/0x730 [ 554.138586][T10783] get_tree_bdev_flags+0x38c/0x620 [ 554.143695][T10783] ? __pfx_udf_fill_super+0x10/0x10 [ 554.148884][T10783] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 554.154513][T10783] ? bpf_lsm_capable+0x9/0x10 [ 554.159173][T10783] ? security_capable+0x7e/0x260 [ 554.164088][T10783] vfs_get_tree+0x8b/0x340 [ 554.168498][T10783] path_mount+0x1482/0x1fd0 [ 554.172993][T10783] ? __pfx_path_mount+0x10/0x10 [ 554.177836][T10783] ? kmem_cache_free+0x2d1/0x4d0 [ 554.182750][T10783] ? putname+0x154/0x1a0 [ 554.186983][T10783] ? putname+0x154/0x1a0 [ 554.191215][T10783] ? __x64_sys_mount+0x28d/0x310 [ 554.196148][T10783] __x64_sys_mount+0x28d/0x310 [ 554.200899][T10783] ? __pfx___x64_sys_mount+0x10/0x10 [ 554.206221][T10783] ? fput+0x9b/0xd0 [ 554.210040][T10783] do_syscall_64+0xcd/0x4c0 [ 554.214574][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.220481][T10783] RIP: 0033:0x7f03ddb8eb69 [ 554.224894][T10783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.244508][T10783] RSP: 002b:00007f03de92e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 554.252928][T10783] RAX: ffffffffffffffda RBX: 00007f03dddb6160 RCX: 00007f03ddb8eb69 [ 554.260884][T10783] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 554.268864][T10783] RBP: 00007f03ddc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 554.276817][T10783] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 554.284777][T10783] R13: 0000000000000000 R14: 00007f03dddb6160 R15: 00007fffa2702de8 [ 554.292759][T10783] [ 554.295982][T10783] Kernel Offset: disabled [ 554.300295][T10783] Rebooting in 86400 seconds..