last executing test programs: 14.387929604s ago: executing program 1 (id=727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 12.042052963s ago: executing program 4 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) dup(0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 11.564022455s ago: executing program 3 (id=735): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 10.975760616s ago: executing program 4 (id=736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000004c0)='syzkaller\x00', 0xa) 10.77563565s ago: executing program 3 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$drirender128(0xffffffffffffff9c, &(0x7f0000003540), 0x800, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x275c, &(0x7f00000000c0)={0x0, 0x5bce, 0x10, 0xffffffff, 0x111}, &(0x7f0000001140), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 10.300892784s ago: executing program 1 (id=738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x33b, 0x20004000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 10.094686897s ago: executing program 2 (id=739): r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000040000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f00000006c0), 0x0) 9.74012407s ago: executing program 4 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 9.720887636s ago: executing program 0 (id=741): r0 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff06, 0x0) 7.063346361s ago: executing program 2 (id=742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) dup3(r2, r1, 0x80000) r4 = dup(r2) write$FUSE_NOTIFY_POLL(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 7.062484899s ago: executing program 1 (id=743): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 6.95031932s ago: executing program 3 (id=744): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) 6.944548872s ago: executing program 4 (id=745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 6.393990033s ago: executing program 0 (id=746): socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$radio(0x0, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0xc721, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 6.09193194s ago: executing program 1 (id=747): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000240)) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x4000e7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x200ffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 6.014391373s ago: executing program 3 (id=748): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}]}}]}, 0x8c}}, 0x0) 5.322637834s ago: executing program 2 (id=749): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 5.277276499s ago: executing program 3 (id=750): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f34, 0x400, 0x200001, 0x3a1}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x847ba, 0x79c, 0xe, 0x0, 0x0) 5.123955701s ago: executing program 4 (id=751): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4.634007971s ago: executing program 0 (id=752): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8000000) r3 = semget(0x0, 0x4, 0x200) semtimedop(r3, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0) unshare(0x2040000) 3.873241132s ago: executing program 2 (id=753): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000040)) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3.483865637s ago: executing program 0 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x38}}, 0x0) 3.31059219s ago: executing program 1 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x0, 0x6) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x2efe, &(0x7f0000000700)={0x0, 0xe8e5, 0x1, 0x20003, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r4 = io_uring_setup(0x7625, &(0x7f0000000580)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r3], 0x1) 2.30722227s ago: executing program 0 (id=756): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 2.189523693s ago: executing program 1 (id=757): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x840, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x4, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\n\x00rG', 0x0, 0xfffffffd, 0x19f9e939a30d04e, 0x4, 0x0}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 2.15852697s ago: executing program 2 (id=758): openat$nullb(0xffffffffffffff9c, 0x0, 0xe4002, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x25a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 1.077506266s ago: executing program 0 (id=759): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 768.116633ms ago: executing program 3 (id=760): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000380)=""/217, 0xd9, 0x2, 0x1}) io_uring_enter(r3, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 739.925946ms ago: executing program 2 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x7a05, 0x1700) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 0s ago: executing program 4 (id=762): poll(0x0, 0x0, 0x7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) kernel console output (not intermixed with test programs): dv0: Adding interface: batadv_slave_0 [ 56.385773][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.411763][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.430769][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.437695][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.463707][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.483169][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.493155][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.500111][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.526136][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.538694][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.548258][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.555209][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.581147][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.593568][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.604334][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.618773][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.637030][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.664218][ T5812] team0: Port device team_slave_0 added [ 56.702457][ T5812] team0: Port device team_slave_1 added [ 56.717922][ T5810] team0: Port device team_slave_0 added [ 56.725519][ T5810] team0: Port device team_slave_1 added [ 56.732021][ T5807] team0: Port device team_slave_0 added [ 56.760307][ T5807] team0: Port device team_slave_1 added [ 56.778540][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.785616][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.811520][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.846269][ T5811] hsr_slave_0: entered promiscuous mode [ 56.852285][ T5811] hsr_slave_1: entered promiscuous mode [ 56.858752][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.865733][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.892084][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.906032][ T5815] hsr_slave_0: entered promiscuous mode [ 56.912081][ T5815] hsr_slave_1: entered promiscuous mode [ 56.917904][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 56.923678][ T5815] Cannot create hsr debugfs directory [ 56.935625][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.942627][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.968529][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.980370][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.987287][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.013148][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.030322][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.037246][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.063327][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.075207][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.082189][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.108086][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.177235][ T5812] hsr_slave_0: entered promiscuous mode [ 57.183414][ T5812] hsr_slave_1: entered promiscuous mode [ 57.189234][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 57.190428][ T53] Bluetooth: hci0: command tx timeout [ 57.195067][ T5813] Bluetooth: hci3: command tx timeout [ 57.200829][ T5812] Cannot create hsr debugfs directory [ 57.270817][ T5813] Bluetooth: hci1: command tx timeout [ 57.270832][ T5809] Bluetooth: hci4: command tx timeout [ 57.271062][ T53] Bluetooth: hci2: command tx timeout [ 57.281781][ T5810] hsr_slave_0: entered promiscuous mode [ 57.282406][ T5810] hsr_slave_1: entered promiscuous mode [ 57.298845][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 57.304576][ T5810] Cannot create hsr debugfs directory [ 57.313144][ T5807] hsr_slave_0: entered promiscuous mode [ 57.319093][ T5807] hsr_slave_1: entered promiscuous mode [ 57.325088][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 57.330866][ T5807] Cannot create hsr debugfs directory [ 57.617505][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.627830][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.636892][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.651633][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.697375][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.707187][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.716733][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.734734][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.792819][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.814504][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.824878][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.847179][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.887218][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.908030][ T5811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.919105][ T5811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.928887][ T5811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.946292][ T5811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.961871][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.989169][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.996346][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.005757][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.012843][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.036301][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.102882][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.113436][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.122680][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.133557][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.151277][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.206688][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.213801][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.223362][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 58.223373][ T30] audit: type=1400 audit(1763840459.871:86): avc: denied { sys_module } for pid=5815 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.224328][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.257475][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.306885][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.348785][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.363649][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.387555][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.394661][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.412971][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.433175][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.440318][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.462618][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.503130][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.533260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.540410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.563517][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.570608][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.596430][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.649190][ T5815] veth0_vlan: entered promiscuous mode [ 58.663530][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.670655][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.695716][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.702810][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.753105][ T5815] veth1_vlan: entered promiscuous mode [ 58.812022][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.886663][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.908045][ T5815] veth0_macvtap: entered promiscuous mode [ 58.942447][ T5815] veth1_macvtap: entered promiscuous mode [ 58.958632][ T5812] veth0_vlan: entered promiscuous mode [ 58.992600][ T5812] veth1_vlan: entered promiscuous mode [ 59.005910][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.028154][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.046070][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.065831][ T5811] veth0_vlan: entered promiscuous mode [ 59.102614][ T5811] veth1_vlan: entered promiscuous mode [ 59.113564][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.122888][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.149002][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.158052][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.166976][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.235827][ T5811] veth0_macvtap: entered promiscuous mode [ 59.248026][ T5812] veth0_macvtap: entered promiscuous mode [ 59.257724][ T5812] veth1_macvtap: entered promiscuous mode [ 59.270078][ T53] Bluetooth: hci0: command tx timeout [ 59.270561][ T5813] Bluetooth: hci3: command tx timeout [ 59.277538][ T5811] veth1_macvtap: entered promiscuous mode [ 59.322097][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.337346][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.354975][ T5813] Bluetooth: hci2: command tx timeout [ 59.354996][ T5809] Bluetooth: hci1: command tx timeout [ 59.365359][ T5807] veth0_vlan: entered promiscuous mode [ 59.367861][ T53] Bluetooth: hci4: command tx timeout [ 59.381357][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.395959][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.401170][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.412479][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.426217][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.435313][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.448848][ T5807] veth1_vlan: entered promiscuous mode [ 59.462718][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.471514][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.499172][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.517899][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.528645][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.529074][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.544901][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.566646][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.580881][ T30] audit: type=1400 audit(1763840461.231:87): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.Oxwnxp/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.613667][ T5807] veth0_macvtap: entered promiscuous mode [ 59.619469][ T30] audit: type=1400 audit(1763840461.231:88): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.646175][ T30] audit: type=1400 audit(1763840461.231:89): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.Oxwnxp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.672653][ T30] audit: type=1400 audit(1763840461.231:90): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.703201][ T30] audit: type=1400 audit(1763840461.231:91): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.Oxwnxp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.736371][ T5810] veth0_vlan: entered promiscuous mode [ 59.736669][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.744205][ T5807] veth1_macvtap: entered promiscuous mode [ 59.757272][ T30] audit: type=1400 audit(1763840461.231:92): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.Oxwnxp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.804851][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.812087][ T30] audit: type=1400 audit(1763840461.231:93): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.813665][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.833893][ T30] audit: type=1400 audit(1763840461.291:94): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.847246][ T5810] veth1_vlan: entered promiscuous mode [ 59.868460][ T30] audit: type=1400 audit(1763840461.291:95): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="gadgetfs" ino=7725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 59.908792][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.924800][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.989362][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.002153][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.023074][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.032509][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.438621][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.446558][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.500966][ T5810] veth0_macvtap: entered promiscuous mode [ 60.506774][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.517647][ T5810] veth1_macvtap: entered promiscuous mode [ 60.524871][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.562494][ T3744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.574499][ T3744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.600367][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.600916][ T5927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 60.616715][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.633514][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.643420][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.650730][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.679287][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.726268][ T3744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.739236][ T3744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.743321][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.757549][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.789540][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.806393][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.026241][ T5935] kvm: pic: non byte write [ 61.146228][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.172514][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.211072][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.228088][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.280221][ T5944] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5944 comm=syz.0.1 [ 61.323098][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 61.350657][ T5809] Bluetooth: hci3: command tx timeout [ 61.356068][ T5809] Bluetooth: hci0: command tx timeout [ 61.518011][ T5809] Bluetooth: hci2: command tx timeout [ 61.523672][ T53] Bluetooth: hci1: command tx timeout [ 62.462291][ T5969] syz_tun: entered allmulticast mode [ 62.479434][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 62.509933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.518589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 63.135951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 63.144661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.321870][ T5809] Bluetooth: hci4: command tx timeout [ 63.449897][ T5809] Bluetooth: hci0: command tx timeout [ 63.469252][ T5809] Bluetooth: hci3: command tx timeout [ 63.485325][ T5969] syz_tun (unregistering): left allmulticast mode [ 63.512548][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 63.512561][ T30] audit: type=1400 audit(1763840465.161:131): avc: denied { read } for pid=5977 comm="syz.2.18" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.545869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.580965][ T30] audit: type=1400 audit(1763840465.211:132): avc: denied { open } for pid=5977 comm="syz.2.18" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 63.621258][ T53] Bluetooth: hci2: command tx timeout [ 63.621261][ T5809] Bluetooth: hci1: command tx timeout [ 63.766925][ T30] audit: type=1400 audit(1763840465.411:133): avc: denied { create } for pid=5974 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.830045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.853217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.871151][ T30] audit: type=1400 audit(1763840465.441:134): avc: denied { bind } for pid=5974 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.891453][ T30] audit: type=1400 audit(1763840465.441:135): avc: denied { setopt } for pid=5974 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.912688][ T30] audit: type=1400 audit(1763840465.441:136): avc: denied { accept } for pid=5974 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.932475][ T30] audit: type=1400 audit(1763840465.441:137): avc: denied { write } for pid=5974 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.951847][ T30] audit: type=1400 audit(1763840465.441:138): avc: denied { read } for pid=5974 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.064879][ T30] audit: type=1400 audit(1763840465.711:139): avc: denied { read write } for pid=5985 comm="syz.3.20" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.089951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.123573][ T30] audit: type=1400 audit(1763840465.711:140): avc: denied { open } for pid=5985 comm="syz.3.20" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.605439][ T5989] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 64.710302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.790670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.855292][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 69.194520][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 69.194534][ T30] audit: type=1400 audit(1763840470.841:157): avc: denied { sqpoll } for pid=6048 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.248306][ T30] audit: type=1400 audit(1763840471.891:158): avc: denied { ioctl } for pid=6056 comm="syz.2.38" path="socket:[8709]" dev="sockfs" ino=8709 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.284613][ T6058] syzkaller0: entered promiscuous mode [ 70.328714][ T6058] syzkaller0: entered allmulticast mode [ 70.566924][ T30] audit: type=1400 audit(1763840472.161:159): avc: denied { write } for pid=6056 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.890914][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.897384][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.939460][ T30] audit: type=1400 audit(1763840472.581:160): avc: denied { ioctl } for pid=6087 comm="syz.4.41" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.805157][ T30] audit: type=1400 audit(1763840473.431:161): avc: denied { connect } for pid=6093 comm="syz.3.42" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.832645][ T30] audit: type=1400 audit(1763840473.431:162): avc: denied { write } for pid=6093 comm="syz.3.42" path="socket:[9515]" dev="sockfs" ino=9515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.099765][ T30] audit: type=1400 audit(1763840474.311:163): avc: denied { append } for pid=6102 comm="syz.2.44" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.581848][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.672653][ T30] audit: type=1400 audit(1763840475.321:164): avc: denied { ioctl } for pid=6111 comm="syz.2.48" path="socket:[8741]" dev="sockfs" ino=8741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.755925][ T30] audit: type=1400 audit(1763840475.321:165): avc: denied { read write } for pid=6113 comm="syz.3.47" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.822869][ T30] audit: type=1400 audit(1763840475.321:166): avc: denied { open } for pid=6113 comm="syz.3.47" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.984577][ T5881] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.786795][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 74.786810][ T30] audit: type=1400 audit(1763840476.271:168): avc: denied { read } for pid=6119 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.834409][ T5881] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 74.844396][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.939767][ T5881] usb 4-1: Product: syz [ 74.946312][ T5881] usb 4-1: Manufacturer: syz [ 74.965459][ T30] audit: type=1400 audit(1763840476.601:169): avc: denied { ioctl } for pid=6127 comm="syz.2.51" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9546 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.996145][ T5881] usb 4-1: SerialNumber: syz [ 75.943432][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 76.101316][ T10] cfg80211: failed to load regulatory.db [ 76.218397][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 76.238576][ T30] audit: type=1400 audit(1763840477.861:170): avc: denied { create } for pid=6137 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.348375][ T30] audit: type=1400 audit(1763840477.921:171): avc: denied { connect } for pid=6137 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.678860][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 78.010994][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 78.033111][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 78.055595][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 78.145026][ T5881] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 78.276192][ T5881] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 78.296866][ T30] audit: type=1400 audit(1763840479.941:172): avc: denied { bind } for pid=6153 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.354629][ T5881] usb 4-1: USB disconnect, device number 2 [ 78.390007][ T30] audit: type=1400 audit(1763840479.971:173): avc: denied { listen } for pid=6153 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.488189][ T30] audit: type=1400 audit(1763840479.981:174): avc: denied { write } for pid=6153 comm="syz.4.58" path="socket:[9583]" dev="sockfs" ino=9583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.895349][ T30] audit: type=1400 audit(1763840480.531:175): avc: denied { create } for pid=6157 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.922414][ T6178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.65'. [ 80.931600][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 80.941544][ T6178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.65'. [ 80.952437][ T6178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.65'. [ 81.005043][ T30] audit: type=1400 audit(1763840482.651:176): avc: denied { read write } for pid=6181 comm="syz.3.66" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.148481][ T30] audit: type=1400 audit(1763840482.651:177): avc: denied { open } for pid=6181 comm="syz.3.66" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.461595][ T30] audit: type=1400 audit(1763840483.001:178): avc: denied { create } for pid=6189 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.529079][ T30] audit: type=1400 audit(1763840483.171:179): avc: denied { write } for pid=6189 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.687542][ T30] audit: type=1400 audit(1763840483.171:180): avc: denied { nlmsg_write } for pid=6189 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.038715][ T30] audit: type=1400 audit(1763840483.461:181): avc: denied { create } for pid=6192 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.785118][ T30] audit: type=1400 audit(1763840483.481:182): avc: denied { write } for pid=6192 comm="syz.1.70" path="socket:[9661]" dev="sockfs" ino=9661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 83.008877][ T30] audit: type=1400 audit(1763840484.461:183): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 83.029113][ T30] audit: type=1400 audit(1763840484.561:184): avc: denied { create } for pid=6197 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.050473][ T30] audit: type=1400 audit(1763840484.561:185): avc: denied { ioctl } for pid=6197 comm="syz.2.71" path="socket:[9672]" dev="sockfs" ino=9672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.267662][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 84.235713][ T6216] xt_hashlimit: max too large, truncated to 1048576 [ 84.246729][ T6216] No such timeout policy "syz1" [ 85.174518][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 85.248331][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 86.318598][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 86.318627][ T30] audit: type=1400 audit(1763840487.941:192): avc: denied { create } for pid=6235 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.644946][ T30] audit: type=1400 audit(1763840487.951:193): avc: denied { write } for pid=6235 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.039729][ T30] audit: type=1400 audit(1763840489.641:194): avc: denied { read write } for pid=6242 comm="syz.1.83" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.294833][ T30] audit: type=1400 audit(1763840489.641:195): avc: denied { open } for pid=6242 comm="syz.1.83" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 88.367681][ T30] audit: type=1400 audit(1763840489.651:196): avc: denied { ioctl } for pid=6242 comm="syz.1.83" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 89.763745][ T30] audit: type=1400 audit(1763840491.411:197): avc: denied { create } for pid=6258 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.825027][ T30] audit: type=1400 audit(1763840491.441:198): avc: denied { connect } for pid=6258 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.861074][ T6262] syzkaller0: entered promiscuous mode [ 89.889520][ T6262] syzkaller0: entered allmulticast mode [ 89.899897][ T30] audit: type=1400 audit(1763840491.451:199): avc: denied { bind } for pid=6258 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.204305][ T30] audit: type=1400 audit(1763840491.451:200): avc: denied { write } for pid=6258 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 90.394071][ T30] audit: type=1400 audit(1763840491.461:201): avc: denied { read } for pid=6258 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.232990][ T30] audit: type=1400 audit(1763840493.861:202): avc: denied { create } for pid=6291 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.261249][ T30] audit: type=1400 audit(1763840493.871:203): avc: denied { setopt } for pid=6291 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.616004][ T6298] capability: warning: `syz.3.98' uses deprecated v2 capabilities in a way that may be insecure [ 92.710070][ T6301] netlink: 776 bytes leftover after parsing attributes in process `syz.0.97'. [ 92.812480][ T30] audit: type=1400 audit(1763840494.461:204): avc: denied { shutdown } for pid=6303 comm="syz.3.99" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.020753][ T6316] xt_hashlimit: max too large, truncated to 1048576 [ 94.028941][ T6316] No such timeout policy "syz1" [ 95.914855][ T6309] mmap: syz.1.100 (6309) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.931772][ T6340] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 96.941020][ T30] audit: type=1400 audit(1763840498.591:205): avc: denied { create } for pid=6336 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.374087][ T30] audit: type=1400 audit(1763840498.591:206): avc: denied { write } for pid=6336 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.394627][ T30] audit: type=1400 audit(1763840499.041:207): avc: denied { create } for pid=6337 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 97.444028][ T6339] Zero length message leads to an empty skb [ 97.497739][ T30] audit: type=1400 audit(1763840499.141:208): avc: denied { write } for pid=6337 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 97.582909][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 97.939842][ T30] audit: type=1400 audit(1763840499.511:209): avc: denied { getopt } for pid=6347 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.053583][ T30] audit: type=1400 audit(1763840499.701:210): avc: denied { mounton } for pid=6349 comm="syz.3.114" path="/23/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.297704][ T6361] Invalid source name [ 98.301769][ T6361] UBIFS error (pid: 6361): cannot open "./file0", error -22 [ 98.721609][ T30] audit: type=1400 audit(1763840499.881:211): avc: denied { mount } for pid=6358 comm="syz.1.116" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 99.371716][ T30] audit: type=1400 audit(1763840499.941:212): avc: denied { create } for pid=6353 comm="syz.2.115" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.459115][ T30] audit: type=1400 audit(1763840499.941:213): avc: denied { mounton } for pid=6353 comm="syz.2.115" path="/28/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.603525][ T30] audit: type=1400 audit(1763840501.161:214): avc: denied { mounton } for pid=6358 comm="syz.1.116" path="/22/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 99.909746][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.079738][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 100.090993][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.100142][ T43] usb 5-1: config 0 has no interface number 0 [ 100.207388][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.218792][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.274808][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 100.334609][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.371307][ T43] usb 5-1: config 0 descriptor?? [ 100.594478][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.597898][ T6377] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 100.607212][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.717631][ T6061] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.756563][ T6061] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.768531][ T6386] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 100.837612][ T6377] team0: Port device dummy0 added [ 101.043092][ T6386] team0: Port device dummy0 removed [ 101.109931][ T5819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.238955][ T6386] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.301714][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 101.459725][ T6061] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.476420][ T6061] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.488535][ T5819] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 101.508205][ T5819] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.534047][ T5819] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.547255][ T6377] openvswitch: netlink: Key type 4127 is out of range max 32 [ 101.551101][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.578783][ T5819] usb 1-1: Product: syz [ 101.585529][ T43] uclogic 0003:28BD:0071.0001: pen parameters not found [ 101.597994][ T5819] usb 1-1: Manufacturer: syz [ 101.604178][ T43] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 101.615868][ T5819] usb 1-1: SerialNumber: syz [ 101.688253][ T30] audit: type=1400 audit(1763840503.331:215): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 101.816856][ T43] usb 5-1: USB disconnect, device number 2 [ 101.844658][ T6391] smc: net device bond0 applied user defined pnetid SYZ2 [ 101.862384][ T6391] netlink: 14 bytes leftover after parsing attributes in process `syz.0.123'. [ 101.918027][ T6401] Bluetooth: MGMT ver 1.23 [ 101.922091][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.935440][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.983777][ T6391] smc: removing net device bond0 with user defined pnetid SYZ2 [ 101.994445][ T6391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.006661][ T6391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.017264][ T6391] bond0 (unregistering): Released all slaves [ 102.118412][ T5819] usb 1-1: 0:2 : does not exist [ 102.153942][ T5819] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 102.167420][ T5819] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 102.190695][ T5819] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 102.281399][ T5819] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 102.984097][ T5819] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 103.105231][ T5819] usb 1-1: USB disconnect, device number 2 [ 103.146429][ T6419] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.175618][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.478456][ T6428] Invalid source name [ 103.483191][ T6428] UBIFS error (pid: 6428): cannot open "./file0", error -22 [ 104.296973][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 104.296989][ T30] audit: type=1400 audit(1763840505.821:220): avc: denied { name_connect } for pid=6430 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 106.397445][ T6460] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 106.717042][ T30] audit: type=1400 audit(1763840508.291:221): avc: denied { write } for pid=6455 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 107.774277][ T6482] syzkaller0: entered promiscuous mode [ 107.789747][ T6482] syzkaller0: entered allmulticast mode [ 108.192980][ T30] audit: type=1400 audit(1763840509.841:222): avc: denied { watch } for pid=6485 comm="syz.1.147" path="/27/file1" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.590330][ T30] audit: type=1400 audit(1763840509.841:223): avc: denied { watch_sb watch_reads } for pid=6485 comm="syz.1.147" path="/27/file1" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.934859][ T30] audit: type=1400 audit(1763840510.381:224): avc: denied { read } for pid=6494 comm="syz.0.148" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.018387][ T30] audit: type=1400 audit(1763840510.381:225): avc: denied { open } for pid=6494 comm="syz.0.148" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.119884][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.169788][ T30] audit: type=1400 audit(1763840510.391:226): avc: denied { ioctl } for pid=6494 comm="syz.0.148" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.282114][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 109.654766][ T5819] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 109.672339][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.689736][ T30] audit: type=1400 audit(1763840510.391:227): avc: denied { set_context_mgr } for pid=6494 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.716628][ T5819] usb 4-1: Product: syz [ 109.920408][ T30] audit: type=1400 audit(1763840510.401:228): avc: denied { map } for pid=6494 comm="syz.0.148" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.980803][ T5819] usb 4-1: Manufacturer: syz [ 110.031645][ T30] audit: type=1400 audit(1763840510.401:229): avc: denied { call } for pid=6494 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.041733][ T5819] usb 4-1: SerialNumber: syz [ 110.112847][ T5819] usb 4-1: config 0 descriptor?? [ 110.185225][ T5819] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 111.368500][ T30] audit: type=1400 audit(1763840513.011:230): avc: denied { connect } for pid=6520 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.412366][ T6523] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 111.419392][ T30] audit: type=1804 audit(1763840513.051:231): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.156" name="/newroot/37/file0" dev="tmpfs" ino=207 res=1 errno=0 [ 111.458081][ T6523] ref_ctr increment failed for inode: 0xcf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880454035c0 [ 111.509969][ T2153] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.517585][ T6524] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 111.583281][ T6524] ref_ctr decrement failed for inode: 0xcf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880454035c0 [ 111.597788][ T6524] uprobe: syz.2.156:6524 failed to unregister, leaking uprobe [ 111.682800][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.705181][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.737108][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 111.751393][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 111.881778][ T2153] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.895105][ T2153] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.904966][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.921055][ T2153] usb 2-1: config 0 descriptor?? [ 112.421440][ T5819] gspca_stk1135: reg_w 0xf err -110 [ 112.431558][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 112.465381][ T5819] gspca_stk1135: Sensor write failed [ 112.495411][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 112.522614][ T5819] gspca_stk1135: Sensor write failed [ 112.610687][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 112.672080][ T5819] gspca_stk1135: Sensor read failed [ 112.716368][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 112.781182][ T5819] gspca_stk1135: Sensor read failed [ 112.826993][ T5819] gspca_stk1135: Detected sensor type unknown (0x0) [ 112.887217][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 112.949108][ T5819] gspca_stk1135: Sensor read failed [ 112.990976][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 113.046238][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.067209][ T5819] gspca_stk1135: Sensor read failed [ 113.117199][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 113.167137][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.189538][ T5819] gspca_stk1135: Sensor write failed [ 113.216227][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 113.224306][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.233608][ T5819] gspca_stk1135: Sensor write failed [ 113.242355][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.250818][ T5819] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 113.310466][ T30] audit: type=1400 audit(1763840514.941:232): avc: denied { block_suspend } for pid=6540 comm="syz.4.163" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.511768][ T2153] usbhid 2-1:0.0: can't add hid device: -71 [ 113.568707][ T2153] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 113.924324][ T2153] usb 2-1: USB disconnect, device number 2 [ 114.263786][ T5820] usb 4-1: USB disconnect, device number 3 [ 116.381534][ T30] audit: type=1400 audit(1763840518.031:233): avc: denied { mount } for pid=6563 comm="syz.1.170" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.418642][ T30] audit: type=1400 audit(1763840518.061:234): avc: denied { mounton } for pid=6563 comm="syz.1.170" path="/30/file0" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.465434][ T30] audit: type=1400 audit(1763840518.111:235): avc: denied { read } for pid=6563 comm="syz.1.170" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.501725][ T30] audit: type=1400 audit(1763840518.111:236): avc: denied { read } for pid=6563 comm="syz.1.170" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.523394][ T30] audit: type=1400 audit(1763840518.111:237): avc: denied { open } for pid=6563 comm="syz.1.170" path="/30/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.546214][ T30] audit: type=1400 audit(1763840518.141:238): avc: denied { read } for pid=6563 comm="syz.1.170" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.547144][ T6577] netlink: 'syz.3.174': attribute type 13 has an invalid length. [ 116.569220][ T30] audit: type=1400 audit(1763840518.141:239): avc: denied { read } for pid=6563 comm="syz.1.170" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.598508][ T30] audit: type=1400 audit(1763840518.181:240): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.994393][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'. [ 118.632200][ T30] audit: type=1400 audit(1763840520.281:241): avc: denied { mounton } for pid=6568 comm="syz.2.173" path="/43/file0" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.801279][ T30] audit: type=1400 audit(1763840520.441:242): avc: denied { create } for pid=6596 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.966849][ T6624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.992251][ T6624] block device autoloading is deprecated and will be removed. [ 121.630602][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 121.630612][ T30] audit: type=1400 audit(1763840523.281:249): avc: denied { write } for pid=6629 comm="syz.2.187" name="vlan0" dev="proc" ino=4026533824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 122.489706][ T30] audit: type=1400 audit(1763840524.131:250): avc: denied { read write } for pid=6642 comm="syz.1.192" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.759736][ T30] audit: type=1400 audit(1763840524.131:251): avc: denied { open } for pid=6642 comm="syz.1.192" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.915020][ T30] audit: type=1400 audit(1763840524.181:252): avc: denied { accept } for pid=6641 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.129042][ T6664] syzkaller0: entered promiscuous mode [ 124.137692][ T6664] syzkaller0: entered allmulticast mode [ 124.703117][ T6668] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 124.881040][ T6668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.198'. [ 124.975853][ T6675] bond1: (slave veth3): Enslaving as an active interface with a down link [ 125.025818][ T6668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.305509][ T6686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6686 comm=syz.4.202 [ 125.413409][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 125.422324][ T30] audit: type=1400 audit(1763840527.061:253): avc: denied { link } for pid=6687 comm="syz.3.203" name="#5" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.495080][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 125.523800][ T30] audit: type=1400 audit(1763840527.061:254): avc: denied { rename } for pid=6687 comm="syz.3.203" name="#6" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.600846][ T30] audit: type=1400 audit(1763840527.171:255): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.682644][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.199'. [ 125.694466][ T6670] netlink: 'syz.0.199': attribute type 2 has an invalid length. [ 126.037787][ T30] audit: type=1400 audit(1763840527.681:256): avc: denied { bind } for pid=6694 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.009332][ T6708] input: syz1 as /devices/virtual/input/input5 [ 127.966559][ T30] audit: type=1400 audit(1763840528.631:257): avc: denied { read write } for pid=6705 comm="syz.3.208" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.248508][ T30] audit: type=1400 audit(1763840528.631:258): avc: denied { open } for pid=6705 comm="syz.3.208" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.359745][ T30] audit: type=1400 audit(1763840528.651:259): avc: denied { ioctl } for pid=6705 comm="syz.3.208" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.579821][ T30] audit: type=1400 audit(1763840529.781:260): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=2806 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.769729][ T30] audit: type=1400 audit(1763840529.781:261): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2806 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.875173][ T6726] syz_tun: entered allmulticast mode [ 129.300038][ T30] audit: type=1400 audit(1763840530.941:262): avc: denied { connect } for pid=6733 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.423108][ T5819] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.677994][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 129.691168][ T5819] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 129.703177][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.721957][ T5819] usb 5-1: Product: syz [ 129.734617][ T5819] usb 5-1: Manufacturer: syz [ 129.779689][ T5819] usb 5-1: SerialNumber: syz [ 129.786670][ T5819] usb 5-1: config 0 descriptor?? [ 130.418827][ T5819] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.712663][ T30] audit: type=1400 audit(1763840532.361:263): avc: denied { create } for pid=6752 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.889752][ T30] audit: type=1400 audit(1763840532.481:264): avc: denied { watch_sb watch_reads } for pid=6752 comm="syz.3.221" path="/48/file1" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.966782][ T30] audit: type=1400 audit(1763840532.481:265): avc: denied { execute } for pid=6752 comm="syz.3.221" path="/48/file1" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.312204][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.352667][ T5819] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 132.363917][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.770324][ T5819] usb 5-1: USB disconnect, device number 3 [ 133.782753][ T30] audit: type=1400 audit(1763840534.801:266): avc: denied { mount } for pid=6777 comm="syz.2.229" name="/" dev="autofs" ino=12159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 134.453734][ T30] audit: type=1400 audit(1763840536.081:267): avc: denied { create } for pid=6785 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.871495][ T30] audit: type=1400 audit(1763840536.081:268): avc: denied { ioctl } for pid=6785 comm="syz.0.230" path="socket:[10638]" dev="sockfs" ino=10638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.910759][ T30] audit: type=1400 audit(1763840536.081:269): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 134.945507][ T30] audit: type=1400 audit(1763840536.581:270): avc: denied { mount } for pid=6792 comm="syz.2.232" name="/" dev="ramfs" ino=10651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 135.790955][ T30] audit: type=1400 audit(1763840536.951:271): avc: denied { mount } for pid=6798 comm="syz.0.234" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.000428][ T30] audit: type=1400 audit(1763840537.031:272): avc: denied { create } for pid=6797 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 136.110069][ T30] audit: type=1400 audit(1763840537.031:273): avc: denied { bind } for pid=6797 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 136.154742][ T30] audit: type=1400 audit(1763840537.631:274): avc: denied { read write } for pid=6800 comm="syz.4.237" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.243023][ T30] audit: type=1400 audit(1763840537.631:275): avc: denied { open } for pid=6800 comm="syz.4.237" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 136.896776][ T6819] warning: `syz.1.240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.340017][ T6841] tipc: Started in network mode [ 138.345155][ T6841] tipc: Node identity 2e4d93ff5c35, cluster identity 4711 [ 138.359910][ T6841] tipc: Enabled bearer , priority 0 [ 138.540754][ T6842] syzkaller0: entered promiscuous mode [ 138.546269][ T6842] syzkaller0: entered allmulticast mode [ 138.552314][ T6842] tipc: Resetting bearer [ 138.562315][ T6833] tipc: Resetting bearer [ 138.677903][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 138.833696][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 139.766447][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 139.766461][ T30] audit: type=1400 audit(1763840541.391:282): avc: denied { read } for pid=6859 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.945715][ T30] audit: type=1400 audit(1763840541.951:283): avc: denied { kexec_image_load } for pid=6865 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 141.151903][ T6869] kexec: Could not allocate control_code_buffer [ 141.225921][ T6833] tipc: Disabling bearer [ 141.386233][ T10] tipc: Node number set to 1920504831 [ 141.443778][ T6873] netlink: 'syz.4.254': attribute type 10 has an invalid length. [ 141.451692][ T6873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.254'. [ 141.471581][ T6873] batman_adv: batadv0: Adding interface: virt_wifi0 [ 141.478303][ T6873] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.504033][ T6873] batman_adv: batadv0: Interface activated: virt_wifi0 [ 143.014309][ T30] audit: type=1400 audit(1763840544.561:284): avc: denied { mount } for pid=6881 comm="syz.0.257" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 143.793170][ T6890] netlink: 60 bytes leftover after parsing attributes in process `syz.4.258'. [ 145.506891][ T6910] Invalid source name [ 145.510957][ T6910] UBIFS error (pid: 6910): cannot open "./file0", error -22 [ 147.779735][ T30] audit: type=1400 audit(1763840549.401:285): avc: denied { getopt } for pid=6929 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.970787][ T6943] kvm: pic: non byte write [ 149.499787][ T30] audit: type=1400 audit(1763840551.141:286): avc: denied { write } for pid=6957 comm="syz.4.278" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 149.524606][ T6958] binder: 6957:6958 ioctl 4018620d 0 returned -22 [ 150.000111][ T30] audit: type=1400 audit(1763840551.461:287): avc: denied { read } for pid=6954 comm="syz.1.277" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 150.082141][ T30] audit: type=1400 audit(1763840551.461:288): avc: denied { open } for pid=6954 comm="syz.1.277" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 150.108365][ T30] audit: type=1400 audit(1763840551.601:289): avc: denied { append } for pid=6957 comm="syz.4.278" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.776998][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 152.212525][ T30] audit: type=1400 audit(1763840553.861:290): avc: denied { transfer } for pid=6981 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 152.732704][ T6988] macsec0: entered promiscuous mode [ 152.738800][ T6988] macsec0: entered allmulticast mode [ 152.744234][ T6988] veth1_macvtap: entered allmulticast mode [ 152.986806][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.999821][ T10] usb 3-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.012833][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 153.020628][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.049417][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.058844][ T30] audit: type=1400 audit(1763840554.691:291): avc: denied { search } for pid=6989 comm="syz.1.291" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.083490][ T10] usb 3-1: SerialNumber: syz [ 153.089263][ T30] audit: type=1400 audit(1763840554.691:292): avc: denied { search } for pid=6989 comm="syz.1.291" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.115914][ T10] usb 3-1: bad CDC descriptors [ 153.125668][ T30] audit: type=1400 audit(1763840554.691:293): avc: denied { setattr } for pid=6989 comm="syz.1.291" path="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.286875][ T6996] netlink: 'syz.3.280': attribute type 27 has an invalid length. [ 154.149081][ T30] audit: type=1400 audit(1763840555.411:294): avc: denied { create } for pid=6994 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 154.168755][ T30] audit: type=1400 audit(1763840555.521:295): avc: denied { setopt } for pid=6994 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 154.770615][ T30] audit: type=1400 audit(1763840556.331:296): avc: denied { create } for pid=7001 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 155.159105][ T5819] usb 3-1: USB disconnect, device number 2 [ 155.200010][ T7018] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0 [ 155.209505][ T30] audit: type=1400 audit(1763840556.811:297): avc: denied { create } for pid=7015 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.946447][ T7034] kvm: MWAIT instruction emulated as NOP! [ 155.964217][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 155.964604][ T30] audit: type=1400 audit(1763840557.611:298): avc: denied { create } for pid=7036 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 155.993302][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 156.016053][ T30] audit: type=1400 audit(1763840557.611:299): avc: denied { write } for pid=7036 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 156.079673][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 156.091138][ T7017] netlink: 'syz.1.295': attribute type 2 has an invalid length. [ 156.679778][ T5819] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.954648][ T5819] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 156.964064][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.973324][ T5819] usb 5-1: Product: syz [ 156.977545][ T5819] usb 5-1: Manufacturer: syz [ 156.991218][ T5819] usb 5-1: SerialNumber: syz [ 157.087228][ T5819] usb 5-1: config 0 descriptor?? [ 157.098910][ T5819] hub 5-1:0.0: bad descriptor, ignoring hub [ 157.105205][ T5819] hub 5-1:0.0: probe with driver hub failed with error -5 [ 157.310530][ T5819] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 157.978163][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.988122][ T5819] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 157.996712][ T5819] usb 5-1: media controller created [ 158.035685][ T7045] dib0700: tx buffer length is larger than 4. Not supported. [ 158.047646][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.058177][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.120223][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.641619][ T7083] 9pnet_fd: Insufficient options for proto=fd [ 158.845729][ T5819] DVB: Unable to find symbol dib7000p_attach() [ 158.852448][ T5819] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 159.173161][ T5819] rc_core: IR keymap rc-dib0700-rc5 not found [ 159.179251][ T5819] Registered IR keymap rc-empty [ 159.329965][ T5819] dvb-usb: could not initialize remote control. [ 159.336227][ T5819] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 159.821428][ T5819] usb 5-1: USB disconnect, device number 4 [ 160.003961][ T5819] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 160.290617][ T7100] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 160.298479][ T7100] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 160.307367][ T7100] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 160.315877][ T7100] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 160.399774][ T30] audit: type=1400 audit(1763840561.911:300): avc: denied { create } for pid=7096 comm="syz.1.318" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.057576][ T30] audit: type=1400 audit(1763840562.641:301): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 161.281031][ T7108] process 'syz.1.321' launched './file0' with NULL argv: empty string added [ 161.310611][ T30] audit: type=1400 audit(1763840562.951:302): avc: denied { execute_no_trans } for pid=7107 comm="syz.1.321" path="/62/file0" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.649703][ T7109] Cannot find del_set index 4 as target [ 162.705949][ T30] audit: type=1400 audit(1763840564.191:303): avc: denied { read } for pid=7124 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.761643][ T30] audit: type=1400 audit(1763840567.411:304): avc: denied { ioctl } for pid=7165 comm="syz.0.335" path="socket:[14374]" dev="sockfs" ino=14374 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.941102][ T7170] binder_alloc: 7169: pid 7169 spamming oneway? 1 buffers allocated for a total size of 4096 [ 166.070584][ T7171] binder_alloc: 7169: pid 7169 spamming oneway? 2 buffers allocated for a total size of 5120 [ 166.120499][ T30] audit: type=1400 audit(1763840567.771:305): avc: denied { name_bind } for pid=7173 comm="syz.1.337" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 166.176427][ T30] audit: type=1400 audit(1763840567.821:306): avc: denied { setopt } for pid=7176 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.252131][ T30] audit: type=1400 audit(1763840567.861:307): avc: denied { read } for pid=7172 comm="syz.4.338" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.313397][ T30] audit: type=1400 audit(1763840567.861:308): avc: denied { open } for pid=7172 comm="syz.4.338" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.380428][ T30] audit: type=1400 audit(1763840567.871:309): avc: denied { ioctl } for pid=7172 comm="syz.4.338" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 166.487427][ T30] audit: type=1400 audit(1763840568.131:310): avc: denied { read append } for pid=7181 comm="syz.4.341" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.511017][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.520498][ T30] audit: type=1400 audit(1763840568.131:311): avc: denied { open } for pid=7181 comm="syz.4.341" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.543888][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.626553][ T30] audit: type=1400 audit(1763840568.171:312): avc: denied { map } for pid=7181 comm="syz.4.341" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.650657][ T30] audit: type=1400 audit(1763840568.171:313): avc: denied { write execute } for pid=7181 comm="syz.4.341" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.674813][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.694551][ T2153] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 168.971312][ T2153] usb 3-1: Using ep0 maxpacket: 32 [ 169.562403][ T2153] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 169.585181][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.618022][ T2153] usb 3-1: config 0 descriptor?? [ 169.957025][ T7222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.974438][ T2153] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 170.000908][ T2153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.020750][ T2153] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 170.028875][ T2153] usb 3-1: media controller created [ 170.110146][ T2153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.857070][ T2153] az6027: usb out operation failed. (-71) [ 170.889109][ T2153] az6027: usb out operation failed. (-71) [ 170.915940][ T2153] stb0899_attach: Driver disabled by Kconfig [ 170.942891][ T2153] az6027: no front-end attached [ 170.942891][ T2153] [ 170.974057][ T2153] az6027: usb out operation failed. (-71) [ 170.995516][ T2153] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 171.023300][ T2153] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 171.069522][ T30] audit: type=1400 audit(1763840572.711:314): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2826 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.094403][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.240756][ T2153] dvb-usb: schedule remote query interval to 400 msecs. [ 171.247720][ T2153] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 171.726868][ T2153] usb 3-1: USB disconnect, device number 3 [ 171.779147][ T30] audit: type=1400 audit(1763840573.411:315): avc: denied { create } for pid=7237 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.926320][ T30] audit: type=1400 audit(1763840573.421:316): avc: denied { bind } for pid=7237 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.255040][ T2153] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 172.263884][ T30] audit: type=1400 audit(1763840573.431:317): avc: denied { name_bind } for pid=7237 comm="syz.3.356" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 172.312126][ T30] audit: type=1400 audit(1763840573.431:318): avc: denied { node_bind } for pid=7237 comm="syz.3.356" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 172.422059][ T7248] Bluetooth: MGMT ver 1.23 [ 172.878353][ T30] audit: type=1326 audit(1763840573.431:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a8318f749 code=0x0 [ 172.909742][ T30] audit: type=1400 audit(1763840574.071:320): avc: denied { read } for pid=7247 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.929196][ T30] audit: type=1400 audit(1763840574.071:321): avc: denied { bind } for pid=7247 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.035405][ T30] audit: type=1400 audit(1763840574.681:322): avc: denied { read write } for pid=7249 comm="syz.0.360" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.283152][ T30] audit: type=1400 audit(1763840574.681:323): avc: denied { open } for pid=7249 comm="syz.0.360" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 173.840086][ T5867] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 174.091873][ T7267] binder_alloc: 7266: binder_alloc_buf, no vma [ 174.200103][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 174.465246][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.474523][ T5809] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 174.484694][ T5809] Bluetooth: hci2: command 0x0401 tx timeout [ 174.560358][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.653551][ T5867] usb 2-1: Product: syz [ 174.727935][ T5867] usb 2-1: Manufacturer: syz [ 174.742594][ T5867] usb 2-1: SerialNumber: syz [ 175.055470][ T5867] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.164478][ T7290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.455510][ T7300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.375'. [ 175.869711][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 175.914949][ C0] usblp0: nonzero write bulk status received: -71 [ 175.922706][ T5867] usb 2-1: USB disconnect, device number 3 [ 175.940989][ T5867] usblp0: removed [ 176.179685][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 176.179696][ T30] audit: type=1400 audit(1763840577.801:329): avc: denied { name_bind } for pid=7306 comm="syz.3.376" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 176.246884][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 176.281305][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.302065][ T43] usb 3-1: Product: syz [ 176.306208][ T43] usb 3-1: Manufacturer: syz [ 176.311572][ T43] usb 3-1: SerialNumber: syz [ 176.469971][ T5881] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.629731][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 176.700607][ T5881] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 176.708847][ T5881] usb 4-1: config 0 has no interface number 0 [ 176.720081][ T5881] usb 4-1: config 0 interface 196 has no altsetting 0 [ 176.943379][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 177.145251][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 177.167020][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 177.177835][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.186039][ T5881] usb 4-1: Product: syz [ 177.191197][ T5881] usb 4-1: Manufacturer: syz [ 177.196349][ T5881] usb 4-1: SerialNumber: syz [ 177.206002][ T5881] usb 4-1: config 0 descriptor?? [ 177.458739][ T5881] ipheth 4-1:0.196: Unable to find endpoints [ 177.496466][ T5881] usb 4-1: USB disconnect, device number 4 [ 177.611068][ T30] audit: type=1400 audit(1763840579.261:330): avc: denied { create } for pid=7318 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.689831][ T30] audit: type=1400 audit(1763840579.291:331): avc: denied { connect } for pid=7318 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.087671][ T30] audit: type=1400 audit(1763840579.361:332): avc: denied { write } for pid=7318 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.111006][ T30] audit: type=1400 audit(1763840579.421:333): avc: denied { listen } for pid=7318 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.170160][ T30] audit: type=1400 audit(1763840579.821:334): avc: denied { read } for pid=7322 comm="syz.1.381" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 178.270079][ T30] audit: type=1400 audit(1763840579.821:335): avc: denied { open } for pid=7322 comm="syz.1.381" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 178.348153][ T30] audit: type=1400 audit(1763840579.821:336): avc: denied { ioctl } for pid=7322 comm="syz.1.381" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 178.568620][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 178.611109][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 178.704759][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.383'. [ 178.741435][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.383'. [ 178.986291][ T7332] xt_hashlimit: max too large, truncated to 1048576 [ 179.072872][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 179.351220][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.364694][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.378088][ T43] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 179.394332][ T43] usb 3-1: USB disconnect, device number 4 [ 180.778069][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 180.784094][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 180.790087][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 180.796094][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 180.802844][ T5818] Bluetooth: hci2: command 0x0401 tx timeout [ 181.024098][ T7357] fuse: Bad value for 'user_id' [ 181.028975][ T7357] fuse: Bad value for 'user_id' [ 182.776211][ T7367] binder: 7364:7367 ioctl c0306201 0 returned -14 [ 184.349751][ T30] audit: type=1400 audit(1763840585.971:337): avc: denied { getopt } for pid=7371 comm="syz.1.395" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.449952][ T10] IPVS: starting estimator thread 0... [ 184.572736][ T7379] IPVS: using max 76 ests per chain, 182400 per kthread [ 184.650695][ T7383] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 184.771292][ T7383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.826616][ T7383] ip6erspan0: entered promiscuous mode [ 184.832194][ T5820] IPVS: starting estimator thread 0... [ 184.835374][ T7383] bond1: (slave ip6erspan0): making interface the new active one [ 184.863716][ T7383] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 185.144927][ T7391] IPVS: using max 45 ests per chain, 108000 per kthread [ 187.013724][ T30] audit: type=1400 audit(1763840588.651:338): avc: denied { setopt } for pid=7413 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.259486][ T7420] fuse: Bad value for 'fd' [ 187.371236][ T30] audit: type=1400 audit(1763840589.011:339): avc: denied { ioctl } for pid=7413 comm="syz.2.406" path="socket:[14021]" dev="sockfs" ino=14021 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 187.506992][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 187.623511][ T30] audit: type=1400 audit(1763840589.081:340): avc: denied { bind } for pid=7413 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.648432][ T30] audit: type=1400 audit(1763840589.141:341): avc: denied { ioctl } for pid=7419 comm="syz.3.408" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.422119][ T30] audit: type=1400 audit(1763840590.071:342): avc: denied { node_bind } for pid=7431 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 191.804899][ T7474] syzkaller0: entered promiscuous mode [ 191.810535][ T7474] syzkaller0: entered allmulticast mode [ 192.446094][ T7487] ip6t_srh: unknown srh invflags 4000 [ 193.664887][ T7504] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 193.672723][ T7504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.428'. [ 193.800711][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.807056][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.125447][ T7504] batman_adv: batadv0: Adding interface: virt_wifi0 [ 194.132632][ T7504] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.158370][ T7504] batman_adv: batadv0: Interface activated: virt_wifi0 [ 194.221458][ T7500] svc: failed to register nfsdv3 RPC service (errno 111). [ 194.240246][ T7500] svc: failed to register nfsaclv3 RPC service (errno 111). [ 194.542845][ T7512] netlink: 104 bytes leftover after parsing attributes in process `syz.2.430'. [ 195.957236][ T5820] IPVS: starting estimator thread 0... [ 196.059780][ T7526] IPVS: using max 40 ests per chain, 96000 per kthread [ 196.169119][ T30] audit: type=1400 audit(1763840597.811:343): avc: denied { create } for pid=7527 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.427846][ T7531] bond0: (slave dummy0): Releasing backup interface [ 196.470764][ T7535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.485402][ T7531] bridge_slave_0: left allmulticast mode [ 196.494228][ T7531] bridge_slave_0: left promiscuous mode [ 196.503742][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.571944][ T7531] bridge_slave_1: left allmulticast mode [ 196.598592][ T7531] bridge_slave_1: left promiscuous mode [ 196.623747][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.658671][ T7531] bond0: (slave bond_slave_0): Releasing backup interface [ 196.679324][ T7531] bond0: (slave bond_slave_1): Releasing backup interface [ 196.725702][ T7531] team0: Port device team_slave_0 removed [ 196.745253][ T7531] team0: Port device team_slave_1 removed [ 196.788880][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.829757][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.967140][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.974767][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.994379][ T7531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.608852][ T30] audit: type=1400 audit(1763840600.251:344): avc: denied { ioctl } for pid=7552 comm="syz.4.442" path="socket:[15035]" dev="sockfs" ino=15035 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.707263][ T30] audit: type=1400 audit(1763840600.251:345): avc: denied { read } for pid=7552 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 198.978973][ T7558] kAFS: unable to lookup cell '(,c¾Ì' [ 199.979015][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 201.167640][ T30] audit: type=1400 audit(1763840602.421:346): avc: denied { write } for pid=7567 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.682609][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 205.519903][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 205.569827][ T30] audit: type=1400 audit(1763840607.191:347): avc: denied { create } for pid=7610 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.485387][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.579726][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 206.588793][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.616903][ T30] audit: type=1400 audit(1763840608.261:348): avc: denied { bind } for pid=7610 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.745274][ T30] audit: type=1400 audit(1763840608.321:349): avc: denied { write } for pid=7610 comm="syz.3.460" path="socket:[15082]" dev="sockfs" ino=15082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.770465][ T43] usb 3-1: config 0 descriptor?? [ 206.864907][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 208.242366][ T43] pwc: recv_control_msg error -71 req 02 val 2b00 [ 208.249290][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 208.269506][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 208.279754][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 208.289350][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 208.317767][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 208.330045][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 208.362422][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 208.392029][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 208.420306][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 208.460561][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 208.590190][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 208.674512][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 208.712863][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 208.731977][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 208.739488][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 208.761610][ T30] audit: type=1400 audit(1763840610.401:350): avc: denied { read } for pid=7631 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.833072][ T7643] netlink: 'syz.3.466': attribute type 10 has an invalid length. [ 208.840942][ T7643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.466'. [ 208.869059][ T7643] batman_adv: batadv0: Adding interface: virt_wifi0 [ 208.875740][ T7643] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.901467][ T7643] batman_adv: batadv0: Interface activated: virt_wifi0 [ 209.499563][ T30] audit: type=1400 audit(1763840610.801:351): avc: denied { bind } for pid=7633 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 209.559175][ T43] pwc: Registered as video103. [ 209.572190][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 209.719939][ T43] usb 3-1: USB disconnect, device number 5 [ 209.841815][ T30] audit: type=1400 audit(1763840611.481:352): avc: denied { connect } for pid=7651 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.492323][ T7646] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.537694][ T7659] svc: failed to register nfsdv3 RPC service (errno 111). [ 210.578267][ T7659] svc: failed to register nfsaclv3 RPC service (errno 111). [ 210.654536][ T7646] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.779509][ T7646] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 210.817192][ T7646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 210.889731][ T7646] usb 5-1: Product: syz [ 210.894007][ T7646] usb 5-1: Manufacturer: syz [ 210.898598][ T7646] usb 5-1: SerialNumber: syz [ 210.995411][ T30] audit: type=1400 audit(1763840612.631:353): avc: denied { execmod } for pid=7663 comm="syz.3.472" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 211.133257][ T7646] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 211.408919][ T30] audit: type=1326 audit(1763840613.051:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6cb8f749 code=0x7ffc0000 [ 211.506735][ T30] audit: type=1326 audit(1763840613.051:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6cb8f749 code=0x7ffc0000 [ 211.719790][ T30] audit: type=1326 audit(1763840613.091:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b6cb8f749 code=0x7ffc0000 [ 211.756270][ T7646] usb 5-1: USB disconnect, device number 5 [ 211.799896][ T7646] usblp0: removed [ 211.856156][ T7685] netlink: 'syz.1.476': attribute type 4 has an invalid length. [ 211.979747][ T30] audit: type=1326 audit(1763840613.091:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6cb8f749 code=0x7ffc0000 [ 212.270023][ T30] audit: type=1326 audit(1763840613.101:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6cb8f749 code=0x7ffc0000 [ 212.318107][ T30] audit: type=1326 audit(1763840613.101:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b6cb8f749 code=0x7ffc0000 [ 212.445513][ T30] audit: type=1326 audit(1763840613.101:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6cb8f749 code=0x7ffc0000 [ 212.484747][ T30] audit: type=1326 audit(1763840613.101:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6cb8f749 code=0x7ffc0000 [ 213.029706][ T30] audit: type=1400 audit(1763840613.481:362): avc: denied { create } for pid=7683 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.231040][ T7707] netlink: 'syz.1.479': attribute type 10 has an invalid length. [ 214.238814][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.479'. [ 214.255349][ T7707] batman_adv: batadv0: Adding interface: virt_wifi0 [ 214.262020][ T7707] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.288479][ T7707] batman_adv: batadv0: Interface activated: virt_wifi0 [ 215.437871][ T7720] Cannot find del_set index 4 as target [ 218.922752][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 218.922768][ T30] audit: type=1400 audit(1763840620.161:364): avc: denied { getopt } for pid=7742 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.269242][ T7748] svc: failed to register nfsdv3 RPC service (errno 111). [ 219.278296][ T7748] svc: failed to register nfsaclv3 RPC service (errno 111). [ 220.518538][ T30] audit: type=1400 audit(1763840622.161:365): avc: denied { read } for pid=7766 comm="syz.3.496" lport=23712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 221.849682][ T7776] syz.3.499 uses obsolete (PF_INET,SOCK_PACKET) [ 222.201612][ T7782] lo speed is unknown, defaulting to 1000 [ 222.207692][ T7782] lo speed is unknown, defaulting to 1000 [ 222.216962][ T7782] lo speed is unknown, defaulting to 1000 [ 222.227790][ T7782] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 222.241964][ T7782] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 222.290432][ T30] audit: type=1400 audit(1763840623.871:366): avc: denied { read } for pid=7773 comm="syz.2.498" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 222.447572][ T30] audit: type=1400 audit(1763840623.871:367): avc: denied { open } for pid=7773 comm="syz.2.498" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 222.755400][ T7782] lo speed is unknown, defaulting to 1000 [ 222.774992][ T7782] lo speed is unknown, defaulting to 1000 [ 222.789119][ T7782] lo speed is unknown, defaulting to 1000 [ 222.831701][ T7782] lo speed is unknown, defaulting to 1000 [ 222.841547][ T7782] lo speed is unknown, defaulting to 1000 [ 222.882566][ T30] audit: type=1400 audit(1763840623.871:368): avc: denied { ioctl } for pid=7773 comm="syz.2.498" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 224.421476][ T30] audit: type=1400 audit(1763840626.071:369): avc: denied { accept } for pid=7801 comm="syz.4.507" lport=41193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.301229][ T7814] hub 2-0:1.0: USB hub found [ 225.309191][ T7814] hub 2-0:1.0: 1 port detected [ 225.704543][ T30] audit: type=1400 audit(1763840627.351:370): avc: denied { write } for pid=7809 comm="syz.2.509" name="file0" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 225.726858][ T30] audit: type=1400 audit(1763840627.351:371): avc: denied { open } for pid=7809 comm="syz.2.509" path="/106/file0" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.142797][ T7826] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 226.249736][ T30] audit: type=1400 audit(1763840627.771:372): avc: denied { mounton } for pid=7818 comm="syz.0.511" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 228.680110][ T30] audit: type=1400 audit(1763840630.321:373): avc: denied { bind } for pid=7853 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 229.034569][ T30] audit: type=1400 audit(1763840630.641:374): avc: denied { connect } for pid=7853 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.329732][ T5867] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 232.559659][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 232.566071][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.578114][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.589995][ T5867] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 232.599031][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.221608][ T5867] usb 2-1: config 0 descriptor?? [ 234.266582][ T5867] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 234.522945][ T5867] usb 2-1: USB disconnect, device number 4 [ 236.453237][ T7905] fido_id[7905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 239.639720][ T5881] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 240.029734][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 240.102064][ T5881] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.430437][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.438461][ T5881] usb 3-1: Product: syz [ 240.447305][ T5881] usb 3-1: Manufacturer: syz [ 240.453598][ T5881] usb 3-1: SerialNumber: syz [ 240.480137][ T5881] usb 3-1: config 0 descriptor?? [ 241.668031][ T5881] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.354549][ T7986] batadv_slave_0: entered promiscuous mode [ 242.456376][ T7987] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.554'. [ 242.465938][ T7987] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.554'. [ 242.777516][ T7986] batman_adv: batadv0: Adding interface: macvtap1 [ 242.785899][ T7986] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.811469][ T7986] batman_adv: batadv0: Interface activated: macvtap1 [ 243.018901][ T7991] syzkaller0: entered promiscuous mode [ 243.024520][ T7991] syzkaller0: entered allmulticast mode [ 243.469878][ T5881] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 243.484512][ T5881] usb 3-1: USB disconnect, device number 6 [ 244.616467][ T30] audit: type=1400 audit(1763840645.911:375): avc: denied { bind } for pid=8003 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.396751][ T30] audit: type=1400 audit(1763840649.011:376): avc: denied { relabelfrom } for pid=8042 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.439675][ T30] audit: type=1400 audit(1763840649.011:377): avc: denied { relabelto } for pid=8042 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 247.463523][ T5820] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 247.499813][ T5867] syzkaller0: tun_net_xmit 76 [ 247.646056][ T8047] gfs2: gfs2 mount does not exist [ 247.700323][ T5881] syzkaller0: tun_net_xmit 76 [ 247.746790][ T8043] syzkaller0: create flow: hash 2788023531 index 1 [ 248.641457][ T8049] xt_socket: unknown flags 0x50 [ 248.671268][ T5881] syzkaller0: tun_net_xmit 76 [ 248.728906][ T8046] syzkaller0: delete flow: hash 2788023531 index 1 [ 248.879885][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 248.891569][ T5820] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 248.906857][ T5820] usb 2-1: config 0 has no interface number 0 [ 248.915559][ T5820] usb 2-1: config 0 interface 136 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 248.926030][ T5820] usb 2-1: config 0 interface 136 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 248.936295][ T5820] usb 2-1: config 0 interface 136 has no altsetting 0 [ 248.945512][ T5820] usb 2-1: New USB device found, idVendor=185b, idProduct=2041, bcdDevice=67.54 [ 248.954773][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.964269][ T5820] usb 2-1: Product: syz [ 249.098899][ T5820] usb 2-1: Manufacturer: syz [ 249.104767][ T5820] usb 2-1: SerialNumber: syz [ 249.147133][ T5820] usb 2-1: config 0 descriptor?? [ 249.158301][ T8038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.178933][ T8038] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.615325][ T5820] em28xx 2-1:0.136: New device syz syz @ 480 Mbps (185b:2041, interface 136, class 136) [ 249.626211][ T5820] em28xx 2-1:0.136: Video interface 136 found: bulk [ 249.892848][ T8064] overlayfs: failed to resolve './file1': -2 [ 249.925919][ T30] audit: type=1400 audit(1763840651.571:378): avc: denied { create } for pid=8065 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 250.122717][ T30] audit: type=1400 audit(1763840651.571:379): avc: denied { sys_admin } for pid=8065 comm="syz.3.576" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 250.180381][ T5820] em28xx 2-1:0.136: unknown em28xx chip ID (0) [ 250.267422][ T5820] em28xx 2-1:0.136: reading from i2c device at 0xa0 failed (error=-5) [ 250.283839][ T5820] em28xx 2-1:0.136: board has no eeprom [ 250.350839][ T5820] em28xx 2-1:0.136: Identified as Compro VideoMate ForYou/Stereo (card=58) [ 250.359506][ T5820] em28xx 2-1:0.136: analog set to bulk mode. [ 250.365997][ T2153] em28xx 2-1:0.136: Registering V4L2 extension [ 250.384394][ T5820] usb 2-1: USB disconnect, device number 5 [ 250.391996][ T5820] em28xx 2-1:0.136: Disconnecting em28xx [ 250.610301][ T2153] i2c i2c-1: Invalid 7-bit I2C address 0xb0 [ 250.705853][ T2153] em28xx 2-1:0.136: Config register raw data: 0xffffffed [ 250.715739][ T2153] em28xx 2-1:0.136: AC97 chip type couldn't be determined [ 250.739668][ T2153] em28xx 2-1:0.136: No AC97 audio processor [ 250.749430][ T2153] em28xx 2-1:0.136: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 250.768060][ T2153] em28xx 2-1:0.136: Remote control support is not available for this card. [ 250.812836][ T5820] em28xx 2-1:0.136: Closing input extension [ 250.846504][ T5820] em28xx 2-1:0.136: Freeing device [ 251.040006][ T30] audit: type=1400 audit(1763840652.681:380): avc: denied { setopt } for pid=8078 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.239438][ T8091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.302048][ T8091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.438740][ T8091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.691591][ T30] audit: type=1400 audit(1763840654.281:381): avc: denied { append } for pid=8094 comm="syz.0.583" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 252.743692][ T8091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.151268][ T81] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.240962][ T6075] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.284755][ T81] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.949940][ T6075] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.644204][ T30] audit: type=1400 audit(1763840656.291:382): avc: denied { mount } for pid=8117 comm="syz.1.589" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 255.385354][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.575442][ T8130] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 255.765715][ T8135] SET target dimension over the limit! [ 255.767005][ T8130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.854542][ T8133] bond2: (slave veth5): Enslaving as an active interface with a down link [ 256.931995][ T30] audit: type=1400 audit(1763840658.571:383): avc: denied { write } for pid=8143 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 256.982908][ T8130] vlan2: entered allmulticast mode [ 256.988044][ T8130] veth1: entered allmulticast mode [ 257.080361][ T8130] veth1: entered promiscuous mode [ 257.086637][ T8130] veth1: left promiscuous mode [ 257.096902][ T8130] bond2: (slave vlan2): making interface the new active one [ 257.110870][ T8130] veth1: entered promiscuous mode [ 257.119536][ T8130] vlan2: entered promiscuous mode [ 257.142717][ T8130] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 257.719790][ T30] audit: type=1400 audit(1763840659.361:384): avc: denied { setopt } for pid=8151 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.211287][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'. [ 259.606274][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.719397][ T8224] syz_tun (unregistering): left allmulticast mode [ 261.728787][ T8223] netlink: 'syz.3.616': attribute type 12 has an invalid length. [ 262.119860][ T5867] IPVS: starting estimator thread 0... [ 262.209732][ T8236] IPVS: using max 76 ests per chain, 182400 per kthread [ 263.408196][ T8246] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 263.840312][ T8246] tipc: Enabled bearer , priority 10 [ 265.391935][ T30] audit: type=1400 audit(1763840667.031:385): avc: denied { create } for pid=8264 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 265.761410][ T30] audit: type=1400 audit(1763840667.041:386): avc: denied { read } for pid=8264 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 266.339987][ T8268] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 267.433212][ T8268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.529340][ T8279] bond2: (slave geneve2): making interface the new active one [ 267.538411][ T8279] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 267.592649][ T81] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.044309][ T8268] bond2: entered promiscuous mode [ 268.079715][ T8268] geneve2: entered promiscuous mode [ 268.145298][ T30] audit: type=1400 audit(1763840669.791:387): avc: denied { accept } for pid=8267 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 268.199764][ T81] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.208481][ T81] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.280892][ T81] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.483765][ T8303] binder: 8302:8303 unknown command 0 [ 269.491917][ T8303] binder: 8302:8303 ioctl c0306201 200000000080 returned -22 [ 269.512406][ T8303] binder: 8302:8303 ioctl c0306201 200000000300 returned -11 [ 269.737591][ T8314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8314 comm=syz.2.638 [ 270.684957][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.836689][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.648'. [ 272.418759][ T6070] vlan2: left promiscuous mode [ 276.729083][ T8394] cgroup: fork rejected by pids controller in /syz1 [ 276.859694][ T5820] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 277.671819][ T5820] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 277.680201][ T5820] usb 5-1: config 0 has no interface number 0 [ 277.688828][ T5820] usb 5-1: New USB device found, idVendor=1b93, idProduct=1013, bcdDevice=e0.89 [ 277.766746][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.783014][ T5820] usb 5-1: Product: syz [ 277.800743][ T5820] usb 5-1: Manufacturer: syz [ 278.451639][ T5820] usb 5-1: SerialNumber: syz [ 278.476594][ T30] audit: type=1400 audit(1763840679.911:388): avc: denied { bind } for pid=8440 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.646221][ T5820] usb 5-1: config 0 descriptor?? [ 279.176142][ T30] audit: type=1400 audit(1763840679.911:389): avc: denied { write } for pid=8440 comm="syz.0.663" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 279.266750][ T30] audit: type=1400 audit(1763840680.901:390): avc: denied { shutdown } for pid=8437 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.634517][ T30] audit: type=1400 audit(1763840680.901:391): avc: denied { read } for pid=8437 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.640582][ T5820] usb 5-1: can't set config #0, error -71 [ 280.172769][ T5820] usb 5-1: USB disconnect, device number 6 [ 281.078889][ T30] audit: type=1400 audit(1763840682.711:392): avc: denied { append } for pid=11527 comm="syz.3.674" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 281.101594][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.229025][T11549] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 283.253803][ T30] audit: type=1400 audit(1763840684.891:393): avc: denied { relabelto } for pid=11543 comm="syz.4.678" name="119" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 283.289732][ T30] audit: type=1400 audit(1763840684.891:394): avc: denied { associate } for pid=11543 comm="syz.4.678" name="119" dev="tmpfs" ino=621 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 283.532579][ T30] audit: type=1400 audit(1763840684.891:395): avc: denied { mounton } for pid=11543 comm="syz.4.678" path="/119" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 283.586429][ T30] audit: type=1400 audit(1763840684.901:396): avc: denied { mount } for pid=11543 comm="syz.4.678" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 284.200825][ T30] audit: type=1400 audit(1763840685.841:397): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 284.364087][ T30] audit: type=1400 audit(1763840685.871:398): avc: denied { remove_name } for pid=5810 comm="syz-executor" name="binderfs" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 284.400213][ T30] audit: type=1400 audit(1763840685.881:399): avc: denied { rmdir } for pid=5810 comm="syz-executor" name="119" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 284.560377][ T30] audit: type=1400 audit(1763840686.141:400): avc: denied { map } for pid=11562 comm="syz.0.695" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.583245][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.760224][T11623] netlink: 'syz.4.699': attribute type 10 has an invalid length. [ 290.009825][T11623] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.027698][T11623] bond0: (slave team0): Enslaving as an active interface with an up link [ 290.756468][ T30] audit: type=1400 audit(1763840692.401:401): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.848420][ T30] audit: type=1400 audit(1763840692.401:402): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.952927][ T30] audit: type=1400 audit(1763840692.401:403): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.329452][ T30] audit: type=1400 audit(1763840692.401:404): avc: denied { read } for pid=5479 comm="dhcpcd" name="n510" dev="tmpfs" ino=4058 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 291.463948][ T30] audit: type=1400 audit(1763840692.401:405): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n510" dev="tmpfs" ino=4058 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 291.696485][ T30] audit: type=1400 audit(1763840692.401:406): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n510" dev="tmpfs" ino=4058 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.594104][T11659] batadv_slave_0: entered promiscuous mode [ 292.807534][T11659] batman_adv: batadv0: Adding interface: macvtap1 [ 292.819284][T11659] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.855065][T11659] batman_adv: batadv0: Interface activated: macvtap1 [ 296.305465][ T30] audit: type=1400 audit(1763840697.921:407): avc: denied { connect } for pid=11679 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.639658][ T30] audit: type=1400 audit(1763840697.921:408): avc: denied { ioctl } for pid=11679 comm="syz.1.714" path="socket:[19838]" dev="sockfs" ino=19838 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.911683][T11692] syzkaller0: entered promiscuous mode [ 296.969713][T11692] syzkaller0: entered allmulticast mode [ 301.697158][T11741] ======================================================= [ 301.697158][T11741] WARNING: The mand mount option has been deprecated and [ 301.697158][T11741] and is ignored by this kernel. Remove the mand [ 301.697158][T11741] option from the mount to silence this warning. [ 301.697158][T11741] ======================================================= [ 301.732622][T11741] new mount options do not match the existing superblock, will be ignored [ 301.746730][T11741] option changes via remount are deprecated (pid=11739 comm=syz.4.729) [ 301.755374][ T30] audit: type=1400 audit(1763840703.391:409): avc: denied { remount } for pid=11739 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 302.463564][ T30] audit: type=1400 audit(1763840704.111:410): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 303.032104][T11786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11786 comm=syz.3.735 [ 303.050145][T11786] netlink: 'syz.3.735': attribute type 1 has an invalid length. [ 303.088777][T11786] bond3: (slave gretap1): making interface the new active one [ 303.114973][T11786] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 303.153302][T11790] vlan2: entered allmulticast mode [ 303.158542][T11790] bond3: entered allmulticast mode [ 303.320277][T11790] gretap1: entered allmulticast mode [ 303.464538][T11790] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 303.940018][ T30] audit: type=1400 audit(1763840705.471:411): avc: denied { setopt } for pid=11792 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 307.490769][ T30] audit: type=1400 audit(1763840707.871:412): avc: denied { getopt } for pid=11803 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.660361][ T30] audit: type=1400 audit(1763840709.311:413): avc: denied { read write } for pid=11824 comm="syz.2.742" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 307.696103][ T43] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 307.706674][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 307.724738][ T43] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.894616][ T30] audit: type=1400 audit(1763840709.311:414): avc: denied { open } for pid=11824 comm="syz.2.742" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 308.017232][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 311.096645][T11862] kAFS: unable to lookup cell 'ÿ' [ 311.103520][T11862] kAFS: unable to lookup cell '(,c¾Ì' [ 314.119817][ T5820] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 314.596855][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.607863][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.629557][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 419.636550][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11874/1:b..l [ 419.644930][ C0] rcu: (detected by 0, t=10504 jiffies, g=21673, q=114 ncpus=2) [ 419.652638][ C0] task:syz.1.757 state:R running task stack:26376 pid:11874 tgid:11873 ppid:5815 task_flags:0x400040 flags:0x00080003 [ 419.666675][ C0] Call Trace: [ 419.669940][ C0] [ 419.672867][ C0] __schedule+0x1190/0x5de0 [ 419.677376][ C0] ? ___sys_recvmsg+0x114/0x1a0 [ 419.682221][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 419.687143][ C0] ? do_recvmmsg+0x2fe/0x750 [ 419.691727][ C0] ? __pfx___schedule+0x10/0x10 [ 419.696574][ C0] ? __lock_acquire+0x622/0x1c90 [ 419.701499][ C0] ? mark_held_locks+0x49/0x80 [ 419.706251][ C0] preempt_schedule_irq+0x51/0x90 [ 419.711259][ C0] irqentry_exit+0x36/0x90 [ 419.715658][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 419.721108][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 419.726290][ C0] Code: e6 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 4d e9 0e 0f 82 74 02 00 00 8b 35 9a 7d e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 e6 08 12 0f 85 c7 02 00 00 48 83 c4 [ 419.745882][ C0] RSP: 0018:ffffc9000c276f10 EFLAGS: 00000206 [ 419.751933][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4760 RCX: 00000000704cbb28 [ 419.759889][ C0] RDX: 0000000000000000 RSI: ffffffff8da06b82 RDI: ffffffff8bf073c0 [ 419.767848][ C0] RBP: 0000000000000002 R08: fd5b3b4fdb4dbf52 R09: 0000000000000000 [ 419.775808][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 419.783761][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 419.791738][ C0] __page_table_check_zero+0x13d/0x5d0 [ 419.797182][ C0] ? __page_table_check_zero+0x12c/0x5d0 [ 419.802805][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 419.808771][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 419.813959][ C0] post_alloc_hook+0x19e/0x220 [ 419.818723][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 419.824272][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 419.829551][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 419.835436][ C0] ? __perf_event_task_sched_in+0x27a/0xa10 [ 419.841329][ C0] ? __lock_acquire+0x622/0x1c90 [ 419.846257][ C0] ? mark_held_locks+0x49/0x80 [ 419.851004][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 419.857329][ C0] ? lock_acquire+0x179/0x350 [ 419.861991][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 419.866923][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.872806][ C0] ? policy_nodemask+0xea/0x4e0 [ 419.877652][ C0] alloc_pages_mpol+0x1fb/0x550 [ 419.882493][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 419.887865][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 419.893227][ C0] vma_alloc_folio_noprof+0xed/0x1e0 [ 419.898501][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 419.904389][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 419.909150][ C0] do_wp_page+0x11d8/0x52b0 [ 419.913650][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 419.918494][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.923858][ C0] ? ___pte_offset_map+0x2ad/0x4f0 [ 419.928962][ C0] __handle_mm_fault+0x1ae3/0x2aa0 [ 419.934071][ C0] ? mt_find+0x3e2/0xa20 [ 419.938745][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 419.944210][ C0] ? __pfx_mt_find+0x10/0x10 [ 419.948810][ C0] ? find_vma+0xbf/0x140 [ 419.953052][ C0] ? __pfx_find_vma+0x10/0x10 [ 419.957725][ C0] handle_mm_fault+0x589/0xd10 [ 419.962492][ C0] ? __pkru_allows_pkey+0x21/0xb0 [ 419.967513][ C0] do_user_addr_fault+0x7a6/0x1370 [ 419.972636][ C0] ? rcu_is_watching+0x12/0xc0 [ 419.977407][ C0] exc_page_fault+0x64/0xc0 [ 419.981897][ C0] asm_exc_page_fault+0x26/0x30 [ 419.986734][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 419.992440][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 97 80 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 420.012035][ C0] RSP: 0018:ffffc9000c2779e8 EFLAGS: 00050246 [ 420.018095][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000027d030 [ 420.026055][ C0] RDX: 0000000000080000 RSI: ffffffff89278903 RDI: 0000000000000005 [ 420.034017][ C0] RBP: ffffc9000c277d88 R08: 0000000000000005 R09: 0000000000000000 [ 420.041977][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 420.049934][ C0] R13: 000020000027d000 R14: ffffc9000c277dcc R15: 0000000000000002 [ 420.057906][ C0] ? ____sys_recvmsg+0x2e3/0x6b0 [ 420.062849][ C0] ____sys_recvmsg+0x2ee/0x6b0 [ 420.067612][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 420.072897][ C0] ? kfree+0x252/0x6d0 [ 420.076962][ C0] ? ___sys_recvmsg+0xe3/0x1a0 [ 420.081728][ C0] ___sys_recvmsg+0x114/0x1a0 [ 420.086401][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 420.091609][ C0] ? __pfx___might_resched+0x10/0x10 [ 420.096893][ C0] do_recvmmsg+0x2fe/0x750 [ 420.101306][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 420.106244][ C0] ? do_futex+0x122/0x350 [ 420.110571][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 420.115503][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 420.120531][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 420.126086][ C0] do_syscall_64+0xcd/0xfa0 [ 420.130581][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.136463][ C0] RIP: 0033:0x7f0b6cb8f749 [ 420.140865][ C0] RSP: 002b:00007f0b6d946038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 420.149265][ C0] RAX: ffffffffffffffda RBX: 00007f0b6cde5fa0 RCX: 00007f0b6cb8f749 [ 420.157230][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 420.165191][ C0] RBP: 00007f0b6cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 420.173145][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 420.181103][ C0] R13: 00007f0b6cde6038 R14: 00007f0b6cde5fa0 R15: 00007ffcfc2e9d08 [ 420.189073][ C0] [ 420.192089][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g21673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 420.203270][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 420.213223][ C0] rcu: RCU grace-period kthread stack dump: [ 420.219094][ C0] task:rcu_preempt state:R running task stack:28080 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 420.232571][ C0] Call Trace: [ 420.235843][ C0] [ 420.238767][ C0] __schedule+0x1190/0x5de0 [ 420.243285][ C0] ? __pfx___schedule+0x10/0x10 [ 420.248137][ C0] ? find_held_lock+0x2b/0x80 [ 420.252812][ C0] ? schedule+0x2d7/0x3a0 [ 420.257141][ C0] schedule+0xe7/0x3a0 [ 420.261207][ C0] schedule_timeout+0x123/0x290 [ 420.266049][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 420.271417][ C0] ? __pfx_process_timeout+0x10/0x10 [ 420.276701][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 420.282503][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 420.287961][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 420.292715][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 420.297985][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.303170][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 420.308089][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 420.312931][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 420.318731][ C0] rcu_gp_kthread+0x26d/0x380 [ 420.323397][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.328580][ C0] ? rcu_is_watching+0x12/0xc0 [ 420.333339][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.338523][ C0] ? __kthread_parkme+0x19e/0x250 [ 420.343542][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.348733][ C0] kthread+0x3c5/0x780 [ 420.352788][ C0] ? __pfx_kthread+0x10/0x10 [ 420.357367][ C0] ? rcu_is_watching+0x12/0xc0 [ 420.362121][ C0] ? __pfx_kthread+0x10/0x10 [ 420.366697][ C0] ret_from_fork+0x675/0x7d0 [ 420.371272][ C0] ? __pfx_kthread+0x10/0x10 [ 420.375848][ C0] ret_from_fork_asm+0x1a/0x30 [ 420.380620][ C0] [ 420.383622][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 420.389925][ C0] Sending NMI from CPU 0 to CPUs 1: [ 420.395117][ C1] NMI backtrace for cpu 1 [ 420.395127][ C1] CPU: 1 UID: 0 PID: 11897 Comm: syz.4.762 Not tainted syzkaller #0 PREEMPT(full) [ 420.395143][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.395151][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 420.395168][ C1] Code: 82 58 16 00 00 83 f8 02 75 20 48 8b 8a 60 16 00 00 8b 92 5c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 420.395180][ C1] RSP: 0018:ffffc90000a08d88 EFLAGS: 00000046 [ 420.395191][ C1] RAX: 0000000000010002 RBX: ffff888032071340 RCX: ffffffff896c9264 [ 420.395200][ C1] RDX: ffff888030410000 RSI: ffffffff896c9272 RDI: 0000000000000006 [ 420.395209][ C1] RBP: ffff88805df74400 R08: 0000000000000006 R09: 1888fb7edc000000 [ 420.395218][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1888fb7edc000000 [ 420.395226][ C1] R13: 0000000000000000 R14: ffff8880474ba800 R15: ffffffff896c9030 [ 420.395234][ C1] FS: 00007fde124e86c0(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 420.395249][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.395258][ C1] CR2: 00007fde124e7f98 CR3: 000000005f52a000 CR4: 00000000003526f0 [ 420.395267][ C1] Call Trace: [ 420.395271][ C1] [ 420.395276][ C1] advance_sched+0x242/0xc80 [ 420.395291][ C1] ? find_held_lock+0x2b/0x80 [ 420.395308][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 420.395323][ C1] ? __pfx_advance_sched+0x10/0x10 [ 420.395335][ C1] __hrtimer_run_queues+0x202/0xad0 [ 420.395353][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 420.395368][ C1] ? read_tsc+0x9/0x20 [ 420.395386][ C1] hrtimer_interrupt+0x397/0x8e0 [ 420.395405][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 420.395420][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 420.395441][ C1] [ 420.395445][ C1] [ 420.395450][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.395465][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 420.395483][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 48 35 f6 48 89 df e8 0e 9c 35 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 a4 25 f6 65 8b 05 7e 35 3e 08 85 c0 74 16 5b [ 420.395495][ C1] RSP: 0018:ffffc9000c2a7b70 EFLAGS: 00000246 [ 420.395505][ C1] RAX: 0000000000000006 RBX: ffff8880b8427c80 RCX: 0000000000000007 [ 420.395514][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c59c RDI: ffffffff8bf073c0 [ 420.395522][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 420.395530][ C1] R10: ffffffff908216d7 R11: 0000000000000001 R12: 0000000000000000 [ 420.395538][ C1] R13: 3647d08007143378 R14: dffffc0000000000 R15: ffff8880b8427c80 [ 420.395552][ C1] clock_was_set+0x599/0x870 [ 420.395569][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 420.395587][ C1] do_adjtimex+0x221/0x330 [ 420.395599][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 420.395617][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 420.395631][ C1] __do_sys_clock_adjtime+0x175/0x290 [ 420.395644][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 420.395664][ C1] ? do_user_addr_fault+0x843/0x1370 [ 420.395678][ C1] ? rcu_is_watching+0x12/0xc0 [ 420.395695][ C1] do_syscall_64+0xcd/0xfa0 [ 420.395708][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.395721][ C1] RIP: 0033:0x7fde1158f749 [ 420.395731][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.395743][ C1] RSP: 002b:00007fde124e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 420.395755][ C1] RAX: ffffffffffffffda RBX: 00007fde117e6090 RCX: 00007fde1158f749 [ 420.395763][ C1] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 420.395771][ C1] RBP: 00007fde11613f91 R08: 0000000000000000 R09: 0000000000000000 [ 420.395779][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.395786][ C1] R13: 00007fde117e6128 R14: 00007fde117e6090 R15: 00007fff2fc480c8 [ 420.395800][ C1]