last executing test programs: 6.791235339s ago: executing program 3 (id=174): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x1000) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) close(r0) 6.375133657s ago: executing program 3 (id=176): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) 5.032478369s ago: executing program 3 (id=185): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x200000003, 0x86) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 4.931172759s ago: executing program 1 (id=187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e25, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1839}}, 0x0, 0x2, 0x400, 0xf, 0x32, 0xb, 0x5}, 0x9c) 4.790651828s ago: executing program 0 (id=190): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) fdatasync(r0) 4.69048789s ago: executing program 2 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4c040, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x0) 4.119181221s ago: executing program 0 (id=192): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, 0x0) r4 = syz_open_dev$loop(0x0, 0x8, 0x8080) ioctl$BLKREPORTZONE(r4, 0xc0101282, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r7, r6, 0x0, 0x23b) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 3.857403858s ago: executing program 1 (id=193): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x83, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0x2, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x45d, 0x4, 0x7f, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x8e2, 0x80000000, 0x242, 0x400007, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3d, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0x0, 0x8000012f, 0x8000, 0x9, 0xfffffff3, 0x129432e6, 0xcd, 0xf9, 0x9, 0x2c2, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2006, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x3, 0x8000, 0x0, 0xfe000000, 0xffff, 0xffffffff, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x4, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x80000001, 0x5, 0x0, 0x1ef, 0x20000005, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x4, 0xd, 0x4, 0x6d01, 0x5, 0x10009, 0x800000, 0x5, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0xffffffff, 0x5, 0xac8, 0x7, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x9, 0x2003, 0x101, 0xfffc, 0x6, 0x207fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x7f, 0x7, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.191299479s ago: executing program 2 (id=195): r0 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) 3.011259894s ago: executing program 1 (id=196): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b63350f0dc6b40b456d15f805250b493fbedf801a7d686205b4e9fbd0e7ae11c57", 0x21) 3.01098575s ago: executing program 0 (id=197): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bond0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 2.963345617s ago: executing program 4 (id=198): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xfffffffb) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0xff, @local, @local, {[], {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c5a7b796e14de80b59e2ac1000"}]}}}}}}}}, 0x0) 2.870775088s ago: executing program 0 (id=199): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$rds(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2.803173719s ago: executing program 4 (id=200): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r4 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r4, 0x0, 0x18) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r5, 0x0, 0x0) 2.791348895s ago: executing program 2 (id=201): syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2.587113162s ago: executing program 1 (id=202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) 1.570718022s ago: executing program 4 (id=203): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x10e, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) 1.570473742s ago: executing program 3 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}}, 0x0) 1.570279487s ago: executing program 0 (id=205): r0 = socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 1.57016411s ago: executing program 1 (id=206): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) finit_module(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) listen(r2, 0x0) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x4020000) 1.569925554s ago: executing program 4 (id=207): sendmmsg(0xffffffffffffffff, &(0x7f0000002d80), 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9001) recvmsg$can_bcm(r4, &(0x7f0000001640)={&(0x7f0000000240)=@ax25={{}, [@netrom, @rose, @rose, @default, @bcast, @remote, @null, @netrom]}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000001c0)}], 0x4}, 0x2120) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$vsock_stream(0x28, 0x5, 0x28) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.55348968s ago: executing program 2 (id=208): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x200100, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r4, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 1.447265419s ago: executing program 3 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @rand_addr=0x64010102, 0x8, 0x20e}}) 380.403259ms ago: executing program 2 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680)) getrusage(0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000040)=""/25, 0x19) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7ae, 0x0, r2, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0xf7, 0x8c, &(0x7f00000006c0)=""/140, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xf, 0x200, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x1, 0x4, 0xb, 0x2}, {0x4, 0x2, 0x3, 0x5}, {0x7, 0x3, 0x9, 0xb}, {0x0, 0x2, 0x1, 0xb}], 0x10, 0x1, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) 380.028991ms ago: executing program 4 (id=211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x2000001}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x60, 0x0) 261.490457ms ago: executing program 0 (id=212): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket(0x400000000010, 0x3, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x1011e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x2d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4040084) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 107.040935ms ago: executing program 1 (id=213): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e02742e8680d85ff978276", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x0) r2 = fsopen(&(0x7f0000000240)='ext4\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000280)='nl802154\x00', &(0x7f0000000a40)="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", 0xffe) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x92) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000524000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="baf80c66b82cca308866efbafc0c66b80100000066ef3e0f20a466b8090000000f23c80f21f86635000040000f23f8baf80c66b878fc1a8266efbafc0cb80000ef660fe05b84363ed87d000f01c23e0ffa170fc7f66766c7442400050000006766c7442402002000006766c744240600000000670f011c24", 0x78}], 0x1, 0x11, &(0x7f0000000180)=[@cr0={0x0, 0x40009}], 0x1) 106.760522ms ago: executing program 3 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local, 0x2}, 0x10) getsockname$l2tp(r2, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$P9_RREADLINK(r1, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) io_uring_enter(r4, 0x4866, 0x0, 0xb, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) r8 = signalfd(r4, &(0x7f0000000100)={[0x2]}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800124000050000080008400000000012000300686173683a6e65742c706f72740000000500050002040000050004"], 0x60}}, 0x0) sendmsg$nl_route_sched_retired(r8, 0x0, 0x24000040) r10 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r10, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',w~=', @ANYRESHEX=r10, @ANYBLOB=',version=9p2000,\x00']) 70.641003ms ago: executing program 4 (id=215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (fail_nth: 4) 0s ago: executing program 2 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0x6, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): [ 48.885519][ T30] audit: type=1400 audit(1747290922.838:64): avc: denied { rlimitinh } for pid=5657 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.904321][ T30] audit: type=1400 audit(1747290922.838:65): avc: denied { siginh } for pid=5657 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. [ 59.357110][ T30] audit: type=1400 audit(1747290933.378:66): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.360587][ T5797] cgroup: Unknown subsys name 'net' [ 59.379862][ T30] audit: type=1400 audit(1747290933.378:67): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.407530][ T30] audit: type=1400 audit(1747290933.418:68): avc: denied { unmount } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.552694][ T5797] cgroup: Unknown subsys name 'cpuset' [ 59.560300][ T5797] cgroup: Unknown subsys name 'rlimit' [ 59.694797][ T30] audit: type=1400 audit(1747290933.718:69): avc: denied { setattr } for pid=5797 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.727697][ T30] audit: type=1400 audit(1747290933.718:70): avc: denied { create } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.753726][ T30] audit: type=1400 audit(1747290933.718:71): avc: denied { write } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.774107][ T30] audit: type=1400 audit(1747290933.718:72): avc: denied { read } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.794590][ T30] audit: type=1400 audit(1747290933.728:73): avc: denied { mounton } for pid=5797 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.802816][ T5799] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.828041][ T30] audit: type=1400 audit(1747290933.728:74): avc: denied { mount } for pid=5797 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.852151][ T30] audit: type=1400 audit(1747290933.758:75): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.706220][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.077236][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.085335][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.093633][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.101057][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.103530][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.108456][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.131207][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.131479][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.148792][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.150529][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.156624][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.171010][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.172724][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.178880][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.185616][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.195349][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.201041][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.206614][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.213782][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.227345][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.236452][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.243678][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.250307][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.260734][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.270103][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.639680][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 63.770124][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 63.844144][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.851356][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.858523][ T5808] bridge_slave_0: entered allmulticast mode [ 63.866917][ T5808] bridge_slave_0: entered promiscuous mode [ 63.877983][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 63.892888][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 63.902910][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.910105][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.917169][ T5808] bridge_slave_1: entered allmulticast mode [ 63.924680][ T5808] bridge_slave_1: entered promiscuous mode [ 63.946864][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 64.038410][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.051039][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.169253][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.176539][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.184375][ T5807] bridge_slave_0: entered allmulticast mode [ 64.191688][ T5807] bridge_slave_0: entered promiscuous mode [ 64.200200][ T5808] team0: Port device team_slave_0 added [ 64.206044][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.213405][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.220563][ T5811] bridge_slave_0: entered allmulticast mode [ 64.227171][ T5811] bridge_slave_0: entered promiscuous mode [ 64.250710][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.257784][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.265231][ T5821] bridge_slave_0: entered allmulticast mode [ 64.271838][ T5821] bridge_slave_0: entered promiscuous mode [ 64.278670][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.286049][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.293470][ T5807] bridge_slave_1: entered allmulticast mode [ 64.300464][ T5807] bridge_slave_1: entered promiscuous mode [ 64.308094][ T5808] team0: Port device team_slave_1 added [ 64.313966][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.321035][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.328083][ T5811] bridge_slave_1: entered allmulticast mode [ 64.334851][ T5811] bridge_slave_1: entered promiscuous mode [ 64.341349][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.348430][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.355670][ T5810] bridge_slave_0: entered allmulticast mode [ 64.362277][ T5810] bridge_slave_0: entered promiscuous mode [ 64.369059][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.376284][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.383436][ T5821] bridge_slave_1: entered allmulticast mode [ 64.390224][ T5821] bridge_slave_1: entered promiscuous mode [ 64.436141][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.443466][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.450687][ T5810] bridge_slave_1: entered allmulticast mode [ 64.457265][ T5810] bridge_slave_1: entered promiscuous mode [ 64.488195][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.495153][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.521558][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.534588][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.546317][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.566090][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.577029][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.586652][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.593712][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.619901][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.653896][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.673615][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.691268][ T5811] team0: Port device team_slave_0 added [ 64.698792][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.734246][ T5811] team0: Port device team_slave_1 added [ 64.741870][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.762535][ T5821] team0: Port device team_slave_0 added [ 64.772833][ T5821] team0: Port device team_slave_1 added [ 64.780484][ T5807] team0: Port device team_slave_0 added [ 64.817107][ T5807] team0: Port device team_slave_1 added [ 64.838279][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.845668][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.871887][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.884708][ T5810] team0: Port device team_slave_0 added [ 64.900991][ T5808] hsr_slave_0: entered promiscuous mode [ 64.907312][ T5808] hsr_slave_1: entered promiscuous mode [ 64.929600][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.936834][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.962749][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.975148][ T5810] team0: Port device team_slave_1 added [ 64.990942][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.997870][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.024161][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.035775][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.043139][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.069035][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.100918][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.107862][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.133808][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.145028][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.153537][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.180158][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.192027][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.198963][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.225078][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.250585][ T5815] Bluetooth: hci3: command tx timeout [ 65.250658][ T5823] Bluetooth: hci0: command tx timeout [ 65.256027][ T5826] Bluetooth: hci1: command tx timeout [ 65.273299][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.280825][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.306902][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.330076][ T5815] Bluetooth: hci4: command tx timeout [ 65.335751][ T5826] Bluetooth: hci2: command tx timeout [ 65.359224][ T5821] hsr_slave_0: entered promiscuous mode [ 65.365486][ T5821] hsr_slave_1: entered promiscuous mode [ 65.371492][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.379474][ T5821] Cannot create hsr debugfs directory [ 65.424185][ T5811] hsr_slave_0: entered promiscuous mode [ 65.430292][ T5811] hsr_slave_1: entered promiscuous mode [ 65.436131][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.444025][ T5811] Cannot create hsr debugfs directory [ 65.494013][ T5807] hsr_slave_0: entered promiscuous mode [ 65.500223][ T5807] hsr_slave_1: entered promiscuous mode [ 65.506072][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.514186][ T5807] Cannot create hsr debugfs directory [ 65.528146][ T5810] hsr_slave_0: entered promiscuous mode [ 65.534632][ T5810] hsr_slave_1: entered promiscuous mode [ 65.540603][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.548134][ T5810] Cannot create hsr debugfs directory [ 65.801285][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.844237][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.853362][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.868655][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.954750][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.965888][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.977440][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.005831][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.068047][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.077247][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.087811][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.102896][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.167065][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.175121][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.185229][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.215679][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.240806][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.261500][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.285084][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.296568][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.305499][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.316122][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.338946][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.346076][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.368349][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.375446][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.387413][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.438775][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.456305][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.475246][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.482360][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.502975][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.510100][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.538419][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.588087][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.595225][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.606532][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 66.606545][ T30] audit: type=1400 audit(1747290940.598:90): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.670323][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.677440][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.696206][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.749440][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.794467][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.803631][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.810772][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.822802][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.830139][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.879897][ T5811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.896416][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.922415][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.939620][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.988384][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.995542][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.075465][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.082604][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.106864][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.136832][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.169096][ T5808] veth0_vlan: entered promiscuous mode [ 67.215683][ T5808] veth1_vlan: entered promiscuous mode [ 67.256630][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.328230][ T5808] veth0_macvtap: entered promiscuous mode [ 67.334160][ T5826] Bluetooth: hci0: command tx timeout [ 67.340588][ T5826] Bluetooth: hci1: command tx timeout [ 67.345994][ T5826] Bluetooth: hci3: command tx timeout [ 67.365101][ T5808] veth1_macvtap: entered promiscuous mode [ 67.378022][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.406649][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.414539][ T5826] Bluetooth: hci2: command tx timeout [ 67.419936][ T5826] Bluetooth: hci4: command tx timeout [ 67.448202][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.464946][ T5808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.487917][ T5808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.499258][ T5808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.508091][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.541838][ T5810] veth0_vlan: entered promiscuous mode [ 67.565766][ T5810] veth1_vlan: entered promiscuous mode [ 67.630522][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.643367][ T5811] veth0_vlan: entered promiscuous mode [ 67.674015][ T5811] veth1_vlan: entered promiscuous mode [ 67.687777][ T5821] veth0_vlan: entered promiscuous mode [ 67.721431][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.729758][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.758014][ T5821] veth1_vlan: entered promiscuous mode [ 67.786229][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.786714][ T5810] veth0_macvtap: entered promiscuous mode [ 67.800801][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.807572][ T5810] veth1_macvtap: entered promiscuous mode [ 67.837001][ T30] audit: type=1400 audit(1747290941.858:91): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.EK8HXz/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.855969][ T5807] veth0_vlan: entered promiscuous mode [ 67.873457][ T30] audit: type=1400 audit(1747290941.858:92): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.880229][ T5821] veth0_macvtap: entered promiscuous mode [ 67.903486][ T30] audit: type=1400 audit(1747290941.858:93): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.EK8HXz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.932748][ T5821] veth1_macvtap: entered promiscuous mode [ 67.937174][ T30] audit: type=1400 audit(1747290941.858:94): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.941081][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.971653][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.983146][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.991368][ T5811] veth0_macvtap: entered promiscuous mode [ 68.003351][ T30] audit: type=1400 audit(1747290941.858:95): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.EK8HXz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.009867][ T5807] veth1_vlan: entered promiscuous mode [ 68.037411][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.059758][ T30] audit: type=1400 audit(1747290941.858:96): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.EK8HXz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.061264][ T5811] veth1_macvtap: entered promiscuous mode [ 68.103032][ T30] audit: type=1400 audit(1747290941.858:97): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.124316][ T30] audit: type=1400 audit(1747290941.888:98): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.129236][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.158732][ T30] audit: type=1400 audit(1747290941.888:99): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="gadgetfs" ino=6463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.162929][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.194361][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.235380][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.250662][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.259364][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.278012][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.289732][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.303789][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.313961][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.332639][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.343586][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.363636][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.381230][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.391687][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.402654][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.412683][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.423408][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.434631][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.453939][ T5901] misc userio: The device must be registered before sending interrupts [ 68.453993][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.476359][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.487350][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.498079][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.508986][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.535692][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.546965][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.557230][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.567771][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.577628][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.588089][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.602749][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.623822][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.632597][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.642194][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.653976][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.678002][ T5807] veth0_macvtap: entered promiscuous mode [ 68.688436][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.698012][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.707904][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.719369][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.738555][ T5807] veth1_macvtap: entered promiscuous mode [ 68.833148][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.845904][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.856211][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.866678][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.876541][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.887050][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.896912][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.907361][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.918155][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.941909][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.950088][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.991182][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.001819][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.012919][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.023497][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.033361][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.044637][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.054467][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.065014][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.076243][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.095446][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.107896][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.117414][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.126322][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.137378][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.161914][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.175189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.183958][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.460143][ T5826] Bluetooth: hci3: command tx timeout [ 69.465883][ T5826] Bluetooth: hci1: command tx timeout [ 69.469983][ T5815] Bluetooth: hci0: command tx timeout [ 69.550342][ T5815] Bluetooth: hci4: command tx timeout [ 69.556434][ T5815] Bluetooth: hci2: command tx timeout [ 69.614078][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.653502][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.685418][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.714806][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.741059][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 69.769527][ T5913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8'. [ 69.790252][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.798113][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.887246][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.907424][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.962156][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.988787][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.170414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 70.178701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 70.197375][ T5925] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 70.273403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.375259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.384216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.477620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.486517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.560902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.569757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.578356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.940604][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.947012][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.630686][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 71.630716][ T30] audit: type=1400 audit(1747290945.648:159): avc: denied { create } for pid=5931 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.664222][ T5823] Bluetooth: hci0: command tx timeout [ 71.664780][ T5825] Bluetooth: hci4: command tx timeout [ 71.670129][ T5826] Bluetooth: hci3: command tx timeout [ 71.682031][ T5815] Bluetooth: hci1: command tx timeout [ 71.692939][ T5827] Bluetooth: hci2: command tx timeout [ 71.701599][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.710291][ T30] audit: type=1400 audit(1747290945.648:160): avc: denied { connect } for pid=5931 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.744767][ T30] audit: type=1400 audit(1747290945.708:161): avc: denied { call } for pid=5931 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.849216][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.997221][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 72.056946][ T5894] usb 3-1: device descriptor read/64, error -71 [ 72.150691][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 72.225709][ T58] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 72.324414][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.344102][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.351811][ T30] audit: type=1400 audit(1747290945.918:162): avc: denied { create } for pid=5944 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.374215][ T58] usb 5-1: Product: syz [ 72.385220][ T30] audit: type=1400 audit(1747290946.018:163): avc: denied { bind } for pid=5944 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.390638][ T58] usb 5-1: Manufacturer: syz [ 72.413114][ T58] usb 5-1: SerialNumber: syz [ 72.426415][ T58] usb 5-1: config 0 descriptor?? [ 72.445143][ T58] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 72.456609][ T58] usb 5-1: setting power ON [ 72.461633][ T58] dvb-usb: bulk message failed: -22 (2/0) [ 72.472299][ T30] audit: type=1400 audit(1747290946.018:164): avc: denied { setopt } for pid=5944 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.490079][ T58] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.511423][ T58] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 72.522678][ T5894] usb 3-1: device descriptor read/64, error -71 [ 72.530423][ T58] usb 5-1: media controller created [ 72.642350][ T5894] usb usb3-port1: attempt power cycle [ 72.684229][ T30] audit: type=1400 audit(1747290946.668:165): avc: denied { read write } for pid=5951 comm="syz.3.16" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.690854][ T5864] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 72.718939][ T5953] Invalid logical block size (150994944) [ 72.890646][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.928774][ T30] audit: type=1400 audit(1747290946.668:166): avc: denied { open } for pid=5951 comm="syz.3.16" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 72.964954][ T30] audit: type=1400 audit(1747290946.688:167): avc: denied { append } for pid=5951 comm="syz.3.16" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.028092][ T58] usb 5-1: selecting invalid altsetting 6 [ 73.045863][ T58] usb 5-1: digital interface selection failed (-22) [ 73.054769][ T58] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 73.063796][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 73.076210][ T30] audit: type=1400 audit(1747290946.748:168): avc: denied { append } for pid=5936 comm="syz.4.5" name="i2c-1" dev="devtmpfs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.098586][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.105283][ T58] usb 5-1: setting power OFF [ 73.115075][ T5894] usb 3-1: device descriptor read/8, error -71 [ 73.121444][ T58] dvb-usb: bulk message failed: -22 (2/0) [ 73.127446][ T5864] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 73.141230][ T58] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 73.159125][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.168633][ T58] (NULL device *): no alternate interface [ 73.186436][ T5864] usb 2-1: config 0 descriptor?? [ 73.231173][ T5864] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 73.282656][ T58] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 73.343098][ T58] usb 5-1: USB disconnect, device number 2 [ 73.393031][ T5894] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 73.427039][ T5864] gp8psk: usb in 128 operation failed. [ 73.437354][ T5894] usb 3-1: device descriptor read/8, error -71 [ 73.509758][ T5969] syz.4.23 uses obsolete (PF_INET,SOCK_PACKET) [ 73.520890][ T5969] syzkaller1: entered promiscuous mode [ 73.526463][ T5969] syzkaller1: entered allmulticast mode [ 73.563669][ T911] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.570335][ T5894] usb usb3-port1: unable to enumerate USB device [ 73.620901][ T5972] FAULT_INJECTION: forcing a failure. [ 73.620901][ T5972] name failslab, interval 1, probability 0, space 0, times 1 [ 73.634388][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.3.24 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 73.634411][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.634421][ T5972] Call Trace: [ 73.634427][ T5972] [ 73.634434][ T5972] dump_stack_lvl+0x16c/0x1f0 [ 73.634462][ T5972] should_fail_ex+0x512/0x640 [ 73.634488][ T5972] should_failslab+0xc2/0x120 [ 73.634506][ T5972] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 73.634523][ T5972] ? skb_clone+0x190/0x3f0 [ 73.634545][ T5972] skb_clone+0x190/0x3f0 [ 73.634561][ T5972] netlink_deliver_tap+0xabd/0xd30 [ 73.634577][ T5972] netlink_unicast+0x6b2/0x7f0 [ 73.634592][ T5972] ? __pfx_netlink_unicast+0x10/0x10 [ 73.634609][ T5972] netlink_ack+0x696/0xb80 [ 73.634636][ T5972] netlink_rcv_skb+0x347/0x440 [ 73.634656][ T5972] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 73.634686][ T5972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.634710][ T5972] ? bpf_lsm_capable+0x9/0x10 [ 73.634720][ T5972] ? security_capable+0x7e/0x260 [ 73.634733][ T5972] ? ns_capable+0xd7/0x110 [ 73.634748][ T5972] nfnetlink_rcv+0x1b3/0x430 [ 73.634765][ T5972] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 73.634787][ T5972] ? netlink_deliver_tap+0x1ae/0xd30 [ 73.634811][ T5972] netlink_unicast+0x53d/0x7f0 [ 73.634833][ T5972] ? __pfx_netlink_unicast+0x10/0x10 [ 73.634852][ T5972] netlink_sendmsg+0x8d1/0xdd0 [ 73.634868][ T5972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.634886][ T5972] ____sys_sendmsg+0xa98/0xc70 [ 73.634903][ T5972] ? copy_msghdr_from_user+0x10a/0x160 [ 73.634921][ T5972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.634954][ T5972] ___sys_sendmsg+0x134/0x1d0 [ 73.634972][ T5972] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.635003][ T5972] __sys_sendmsg+0x16d/0x220 [ 73.635015][ T5972] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.635035][ T5972] do_syscall_64+0xcd/0x260 [ 73.635056][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.635073][ T5972] RIP: 0033:0x7fa6ed38e969 [ 73.635087][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.635101][ T5972] RSP: 002b:00007fa6eb1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.635116][ T5972] RAX: ffffffffffffffda RBX: 00007fa6ed5b5fa0 RCX: 00007fa6ed38e969 [ 73.635125][ T5972] RDX: 0000000024008012 RSI: 0000200000001540 RDI: 0000000000000003 [ 73.635132][ T5972] RBP: 00007fa6eb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 73.635138][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.635144][ T5972] R13: 0000000000000000 R14: 00007fa6ed5b5fa0 R15: 00007ffd5be11a58 [ 73.635157][ T5972] [ 74.007556][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 74.021555][ T911] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 74.030250][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.040864][ T911] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 74.049902][ T911] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 74.058282][ T911] usb 1-1: Manufacturer: syz [ 74.067239][ T911] usb 1-1: config 0 descriptor?? [ 74.137568][ T5864] gp8psk: usb in 146 operation failed. [ 74.181673][ T911] rc_core: IR keymap rc-hauppauge not found [ 74.188065][ T911] Registered IR keymap rc-empty [ 74.188954][ T5864] gp8psk: failed to get FW version [ 74.195559][ T911] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 74.232249][ T911] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 74.306204][ T5864] gp8psk: usb in 149 operation failed. [ 74.357846][ T5864] gp8psk: failed to get FPGA version [ 74.437714][ T5864] gp8psk: usb in 138 operation failed. [ 74.512039][ T5864] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 74.630037][ T5864] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 74.868845][ T5864] usb 2-1: USB disconnect, device number 2 [ 75.199901][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.28'. [ 75.345756][ T5987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.353256][ T5987] IPv6: NLM_F_CREATE should be set when creating new route [ 75.360485][ T5987] IPv6: NLM_F_CREATE should be set when creating new route [ 77.057567][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 77.057583][ T30] audit: type=1400 audit(1747290951.078:184): avc: denied { read } for pid=5986 comm="syz.4.28" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.115815][ T1169] cfg80211: failed to load regulatory.db [ 77.173614][ T5987] netlink: 'syz.4.28': attribute type 27 has an invalid length. [ 77.240021][ T5992] veth1_macvtap: left promiscuous mode [ 77.245574][ T5992] macsec0: entered promiscuous mode [ 77.250853][ T5992] macsec0: entered allmulticast mode [ 77.266273][ T5992] veth1_macvtap: entered promiscuous mode [ 77.272087][ T5992] veth1_macvtap: entered allmulticast mode [ 77.278121][ T5992] macsec0: left promiscuous mode [ 77.283259][ T5992] macsec0: left allmulticast mode [ 77.288477][ T5992] veth1_macvtap: left allmulticast mode [ 77.316801][ T30] audit: type=1400 audit(1747290951.168:185): avc: denied { open } for pid=5986 comm="syz.4.28" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.840140][ T30] audit: type=1400 audit(1747290951.198:186): avc: denied { append } for pid=5986 comm="syz.4.28" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.938211][ T6000] hfsplus: unable to find HFS+ superblock [ 78.013936][ T911] usb 1-1: USB disconnect, device number 2 [ 78.034638][ T30] audit: type=1400 audit(1747290951.368:187): avc: granted { setsecparam } for pid=5988 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 78.071049][ T30] audit: type=1400 audit(1747290951.958:188): avc: denied { mounton } for pid=5994 comm="syz.1.31" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 78.098671][ T30] audit: type=1400 audit(1747290952.048:189): avc: denied { create } for pid=5994 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.767269][ T6012] random: crng reseeded on system resumption [ 78.780076][ T30] audit: type=1400 audit(1747290952.788:190): avc: denied { append } for pid=6007 comm="syz.4.35" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.805035][ T30] audit: type=1400 audit(1747290952.788:191): avc: denied { open } for pid=6007 comm="syz.4.35" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.957621][ T6008] XFS (nullb0): Invalid superblock magic number [ 79.710070][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.784117][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.791786][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.861722][ T5906] usb 1-1: device descriptor read/64, error -71 [ 80.002911][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.017079][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.095431][ T6030] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.106179][ T6030] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.115293][ T6030] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.124913][ T6030] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.140219][ T5862] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 80.148670][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.190137][ T5864] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 80.262260][ T30] audit: type=1400 audit(1747290954.288:192): avc: denied { create } for pid=6035 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.290772][ T5906] usb 1-1: device descriptor read/64, error -71 [ 80.313194][ T5862] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 80.324147][ T5862] usb 5-1: config 2 has no interface number 0 [ 80.330455][ T5862] usb 5-1: config 2 interface 31 has no altsetting 0 [ 80.402498][ T5906] usb usb1-port1: attempt power cycle [ 80.532920][ T6038] bridge1: entered promiscuous mode [ 80.643105][ T6039] befs: (nbd3): No write support. Marking filesystem read-only [ 80.651987][ T6039] syz.3.42: attempt to access beyond end of device [ 80.651987][ T6039] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 80.664769][ T6039] befs: (nbd3): unable to read superblock [ 81.074619][ T30] audit: type=1400 audit(1747290954.578:193): avc: denied { create } for pid=6035 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 81.106710][ T5864] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 81.194298][ T5864] usb 3-1: config 0 has no interface number 0 [ 81.238879][ T5864] usb 3-1: config 0 interface 41 has no altsetting 0 [ 81.257598][ T5864] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 81.278002][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.293794][ T5864] usb 3-1: Product: syz [ 81.297970][ T5864] usb 3-1: Manufacturer: syz [ 81.312835][ T5864] usb 3-1: SerialNumber: syz [ 81.324194][ T5864] usb 3-1: config 0 descriptor?? [ 81.340229][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.354604][ T5864] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 81.370546][ T5906] usb 1-1: device descriptor read/8, error -71 [ 81.680107][ T5906] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.713446][ T5906] usb 1-1: device descriptor read/8, error -71 [ 81.873149][ T5906] usb usb1-port1: unable to enumerate USB device [ 81.874185][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.891226][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.904474][ T58] usb 3-1: USB disconnect, device number 6 [ 82.184234][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 82.184249][ T30] audit: type=1400 audit(1747290956.208:211): avc: denied { read write } for pid=6052 comm="syz.0.47" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.215844][ T30] audit: type=1400 audit(1747290956.208:212): avc: denied { open } for pid=6052 comm="syz.0.47" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.239768][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 82.252007][ T30] audit: type=1400 audit(1747290956.238:213): avc: denied { create } for pid=6052 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 82.273227][ T30] audit: type=1400 audit(1747290956.268:214): avc: denied { write } for pid=6052 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 82.295125][ T30] audit: type=1400 audit(1747290956.278:215): avc: denied { ioctl } for pid=6052 comm="syz.0.47" path="/newroot/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.497074][ T6044] delete_channel: no stack [ 82.502420][ T6044] delete_channel: no stack [ 82.693347][ T6058] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 82.708664][ T30] audit: type=1400 audit(1747290956.678:216): avc: denied { create } for pid=6055 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.955924][ T30] audit: type=1400 audit(1747290956.688:217): avc: denied { write } for pid=6055 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.976480][ T30] audit: type=1400 audit(1747290956.688:218): avc: denied { nlmsg_write } for pid=6055 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.996768][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.097227][ T5862] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 83.113311][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.138533][ T5862] usb 5-1: can't set config #2, error -71 [ 83.152097][ T5862] usb 5-1: USB disconnect, device number 3 [ 83.186437][ T30] audit: type=1400 audit(1747290957.208:219): avc: denied { create } for pid=6066 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.423329][ T30] audit: type=1400 audit(1747290957.238:220): avc: denied { write } for pid=6066 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.459443][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 83.498892][ T6064] FAULT_INJECTION: forcing a failure. [ 83.498892][ T6064] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 83.513732][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.3.51 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 83.513756][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.513765][ T6064] Call Trace: [ 83.513772][ T6064] [ 83.513777][ T6064] dump_stack_lvl+0x16c/0x1f0 [ 83.513806][ T6064] should_fail_ex+0x512/0x640 [ 83.513832][ T6064] should_fail_alloc_page+0xe7/0x130 [ 83.513853][ T6064] prepare_alloc_pages+0x3c2/0x610 [ 83.513878][ T6064] ? rcu_is_watching+0x12/0xc0 [ 83.513906][ T6064] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 83.513926][ T6064] ? __lock_acquire+0x5ca/0x1ba0 [ 83.513953][ T6064] ? cgroup_rstat_updated+0x2a/0xb20 [ 83.513973][ T6064] ? __lock_acquire+0x5ca/0x1ba0 [ 83.514001][ T6064] ? rcu_is_watching+0x12/0xc0 [ 83.514021][ T6064] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 83.514039][ T6064] ? __mod_zone_page_state+0xcc/0x1a0 [ 83.514075][ T6064] ? llist_add_batch+0x103/0x170 [ 83.514093][ T6064] ? __pfx_llist_add_batch+0x10/0x10 [ 83.514109][ T6064] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.514129][ T6064] ? policy_nodemask+0xea/0x4e0 [ 83.514149][ T6064] alloc_pages_mpol+0x1fb/0x550 [ 83.514170][ T6064] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 83.514196][ T6064] folio_alloc_mpol_noprof+0x36/0x2f0 [ 83.514220][ T6064] vma_alloc_folio_noprof+0xed/0x1e0 [ 83.514241][ T6064] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 83.514261][ T6064] ? find_held_lock+0x2b/0x80 [ 83.514282][ T6064] ? do_wp_page+0x229a/0x58e0 [ 83.514307][ T6064] do_wp_page+0x1282/0x58e0 [ 83.514336][ T6064] ? __pfx_do_wp_page+0x10/0x10 [ 83.514362][ T6064] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.514378][ T6064] ? ___pte_offset_map+0x1bc/0x540 [ 83.514396][ T6064] __handle_mm_fault+0x1ada/0x2a40 [ 83.514417][ T6064] ? __pfx___handle_mm_fault+0x10/0x10 [ 83.514442][ T6064] ? find_vma+0xbf/0x140 [ 83.514455][ T6064] ? __pfx_find_vma+0x10/0x10 [ 83.514470][ T6064] handle_mm_fault+0x3fe/0xad0 [ 83.514489][ T6064] do_user_addr_fault+0x7a6/0x1370 [ 83.514504][ T6064] ? rcu_is_watching+0x12/0xc0 [ 83.514518][ T6064] exc_page_fault+0x5c/0xc0 [ 83.514532][ T6064] asm_exc_page_fault+0x26/0x30 [ 83.514543][ T6064] RIP: 0010:__put_user_4+0xd/0x20 [ 83.514559][ T6064] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 47 54 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 83.514569][ T6064] RSP: 0018:ffffc9000b59fd68 EFLAGS: 00050206 [ 83.514578][ T6064] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000006000 [ 83.514585][ T6064] RDX: ffff88807f0e2440 RSI: ffffffff8222610b RDI: ffffffff8bf48920 [ 83.514592][ T6064] RBP: 0000000000000000 R08: f9f0d9a003d2eb8b R09: 0000000000000001 [ 83.514598][ T6064] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000000000 [ 83.514604][ T6064] R13: 0000000000000000 R14: 00000000fffffff2 R15: ffff88807f0e2440 [ 83.514615][ T6064] ? kernel_move_pages+0xc4b/0x1430 [ 83.514631][ T6064] kernel_move_pages+0xc60/0x1430 [ 83.514651][ T6064] ? __pfx_kernel_move_pages+0x10/0x10 [ 83.514669][ T6064] ? fput+0x70/0xf0 [ 83.514681][ T6064] ? ksys_write+0x1b9/0x240 [ 83.514697][ T6064] ? __pfx_ksys_write+0x10/0x10 [ 83.514712][ T6064] ? rcu_is_watching+0x12/0xc0 [ 83.514727][ T6064] __x64_sys_move_pages+0xe0/0x1c0 [ 83.514740][ T6064] ? do_syscall_64+0x91/0x260 [ 83.514755][ T6064] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.514770][ T6064] do_syscall_64+0xcd/0x260 [ 83.514786][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.514799][ T6064] RIP: 0033:0x7fa6ed38e969 [ 83.514812][ T6064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.514827][ T6064] RSP: 002b:00007fa6eb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 83.514842][ T6064] RAX: ffffffffffffffda RBX: 00007fa6ed5b5fa0 RCX: 00007fa6ed38e969 [ 83.514852][ T6064] RDX: 0000200000000040 RSI: 0000000000002064 RDI: 0000000000000000 [ 83.514858][ T6064] RBP: 00007fa6eb1f6090 R08: 0000200000000000 R09: 0000000000000000 [ 83.514865][ T6064] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 83.514871][ T6064] R13: 0000000000000000 R14: 00007fa6ed5b5fa0 R15: 00007ffd5be11a58 [ 83.514885][ T6064] [ 83.523335][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 84.017010][ T6063] ceph: No mds server is up or the cluster is laggy [ 84.271549][ T6082] Invalid logical block size (199600449) [ 84.502528][ T5864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5864 comm=kworker/1:5 [ 84.503137][ T6090] netlink: 'syz.2.58': attribute type 2 has an invalid length. [ 84.766210][ T6099] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 84.809739][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 84.997774][ T6102] veth3: entered promiscuous mode [ 85.149268][ T6110] batadv1: entered promiscuous mode [ 85.467321][ T6121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.69'. [ 85.482762][ T6122] Zero length message leads to an empty skb [ 85.990040][ T5864] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.200156][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 86.210105][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.254609][ T6130] overlayfs: missing 'lowerdir' [ 86.638513][ T5864] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.652360][ T5864] usb 4-1: config 1 interface 0 has no altsetting 0 [ 86.664656][ T5864] usb 4-1: language id specifier not provided by device, defaulting to English [ 86.684896][ T5864] usb 4-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 86.694596][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.702966][ T5864] usb 4-1: Product: syz [ 86.707413][ T5864] usb 4-1: Manufacturer: syz [ 86.712467][ T5864] usb 4-1: SerialNumber: syz [ 87.026000][ T6135] netlink: 'syz.4.73': attribute type 1 has an invalid length. [ 87.084174][ T6136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6136 comm=syz.4.73 [ 89.041731][ T5864] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 89.056758][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 89.056773][ T30] audit: type=1400 audit(1747290963.078:239): avc: denied { setopt } for pid=6141 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.082830][ T5906] IPVS: starting estimator thread 0... [ 89.104952][ T6142] xt_cgroup: invalid path, errno=-2 [ 89.159829][ T5864] usb 4-1: USB disconnect, device number 2 [ 89.190180][ T6145] IPVS: using max 37 ests per chain, 88800 per kthread [ 89.323960][ T30] audit: type=1400 audit(1747290963.298:240): avc: denied { bind } for pid=6146 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.392266][ T5863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 89.658764][ T6154] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 89.949150][ T30] audit: type=1400 audit(1747290963.298:241): avc: denied { listen } for pid=6146 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.024910][ T30] audit: type=1400 audit(1747290963.618:242): avc: denied { create } for pid=6149 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.097171][ T30] audit: type=1400 audit(1747290963.688:243): avc: denied { relabelto } for pid=6149 comm="syz.1.79" name="file0" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 90.124537][ T30] audit: type=1400 audit(1747290963.688:244): avc: denied { associate } for pid=6149 comm="syz.1.79" name="file0" dev="tmpfs" ino=99 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hostname_exec_t:s0" [ 90.161297][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 90.200740][ T6158] loop2: detected capacity change from 0 to 7 [ 90.230931][ T6158] Dev loop2: unable to read RDB block 7 [ 90.236716][ T6158] loop2: unable to read partition table [ 90.288231][ T30] audit: type=1400 audit(1747290964.278:245): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 90.322439][ T6158] loop2: partition table beyond EOD, truncated [ 90.332870][ T5863] usb 1-1: config 0 has no interfaces? [ 90.338393][ T5863] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.452934][ T6158] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 90.472050][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.503375][ T5863] usb 1-1: config 0 descriptor?? [ 90.645407][ T5184] Dev loop2: unable to read RDB block 7 [ 90.651692][ T5184] loop2: unable to read partition table [ 90.657547][ T5184] loop2: partition table beyond EOD, truncated [ 90.773696][ T6144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.804551][ T30] audit: type=1400 audit(1747290964.818:246): avc: denied { append } for pid=6143 comm="syz.0.76" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.862311][ T30] audit: type=1400 audit(1747290964.868:247): avc: denied { execute } for pid=6143 comm="syz.0.76" path="/11/cpu.stat" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.891128][ T5906] usb 1-1: USB disconnect, device number 7 [ 91.046586][ T30] audit: type=1400 audit(1747290965.048:248): avc: denied { ioctl } for pid=6171 comm="syz.3.85" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 92.631160][ T6188] loop8: detected capacity change from 0 to 7 [ 92.668467][ T6188] Dev loop8: unable to read RDB block 7 [ 92.689414][ T6188] loop8: unable to read partition table [ 92.730081][ T5894] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.738543][ T6188] loop8: partition table beyond EOD, truncated [ 92.850011][ T6194] FAULT_INJECTION: forcing a failure. [ 92.850011][ T6194] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.863221][ T6194] CPU: 0 UID: 0 PID: 6194 Comm: syz.4.90 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 92.863236][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.863243][ T6194] Call Trace: [ 92.863247][ T6194] [ 92.863251][ T6194] dump_stack_lvl+0x16c/0x1f0 [ 92.863271][ T6194] should_fail_ex+0x512/0x640 [ 92.863288][ T6194] _copy_to_user+0x32/0xd0 [ 92.863306][ T6194] simple_read_from_buffer+0xcb/0x170 [ 92.863324][ T6194] proc_fail_nth_read+0x197/0x270 [ 92.863342][ T6194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.863359][ T6194] ? rw_verify_area+0xcf/0x680 [ 92.863374][ T6194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.863391][ T6194] vfs_read+0x1e1/0xc70 [ 92.863409][ T6194] ? __pfx___mutex_lock+0x10/0x10 [ 92.863426][ T6194] ? __pfx_vfs_read+0x10/0x10 [ 92.863445][ T6194] ? __fget_files+0x20e/0x3c0 [ 92.863459][ T6194] ksys_read+0x12a/0x240 [ 92.863475][ T6194] ? __pfx_ksys_read+0x10/0x10 [ 92.863495][ T6194] do_syscall_64+0xcd/0x260 [ 92.863512][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.863524][ T6194] RIP: 0033:0x7f63a198d37c [ 92.863533][ T6194] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.863543][ T6194] RSP: 002b:00007f639f7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.863553][ T6194] RAX: ffffffffffffffda RBX: 00007f63a1bb5fa0 RCX: 00007f63a198d37c [ 92.863560][ T6194] RDX: 000000000000000f RSI: 00007f639f7f60a0 RDI: 0000000000000007 [ 92.863567][ T6194] RBP: 00007f639f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 92.863573][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.863579][ T6194] R13: 0000000000000000 R14: 00007f63a1bb5fa0 R15: 00007ffed1e18488 [ 92.863592][ T6194] [ 93.112513][ T6188] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 93.123393][ T5184] Dev loop2: unable to read RDB block 7 [ 93.473290][ T5184] loop2: unable to read partition table [ 93.481697][ T5184] loop2: partition table beyond EOD, truncated [ 93.555521][ T5894] usb 2-1: device descriptor read/64, error -71 [ 93.691521][ T6203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.920806][ T6208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.945488][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.299183][ T5184] Dev loop2: unable to read RDB block 7 [ 94.328816][ T5184] loop2: unable to read partition table [ 94.340181][ T5894] usb 2-1: device descriptor read/64, error -71 [ 94.348426][ T5184] loop2: partition table beyond EOD, truncated [ 94.366747][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 94.366761][ T30] audit: type=1400 audit(1747290968.388:255): avc: denied { write } for pid=6209 comm="syz.0.97" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.522946][ T5894] usb usb2-port1: attempt power cycle [ 94.634160][ T30] audit: type=1400 audit(1747290968.598:256): avc: denied { write } for pid=6215 comm="syz.2.98" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.641255][ T5862] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 94.712438][ T5184] Dev loop2: unable to read RDB block 7 [ 94.719749][ T5184] loop2: unable to read partition table [ 94.836129][ T5184] loop2: partition table beyond EOD, truncated [ 95.319566][ T5860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.397150][ T30] audit: type=1400 audit(1747290969.418:257): avc: denied { create } for pid=6219 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 95.400385][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 95.464853][ T30] audit: type=1400 audit(1747290969.418:258): avc: denied { read } for pid=6219 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 95.511620][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 95.532167][ T5860] usb 4-1: config 0 has no interfaces? [ 95.542346][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.612268][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.622456][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.632911][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.652726][ T5862] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.686256][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.700034][ T5860] usb 4-1: config 0 descriptor?? [ 95.725906][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 95.735162][ T5862] usb 1-1: Product: syz [ 95.749659][ T5862] usb 1-1: Manufacturer: syz [ 95.780775][ T5862] usb 1-1: SerialNumber: syz [ 95.850550][ T5184] Dev loop2: unable to read RDB block 7 [ 95.863973][ T5184] loop2: unable to read partition table [ 95.871433][ T5184] loop2: partition table beyond EOD, truncated [ 96.010709][ T5860] usb 4-1: USB disconnect, device number 3 [ 96.180443][ T5906] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.221360][ T5862] usb 1-1: 0:2 : does not exist [ 96.276700][ T30] audit: type=1400 audit(1747290970.298:259): avc: denied { create } for pid=6238 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.493436][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.608141][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.617520][ T5906] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.635472][ T5906] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.657894][ T30] audit: type=1400 audit(1747290970.678:260): avc: denied { unlink } for pid=6238 comm="syz.1.107" name="#1" dev="tmpfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.657993][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.679894][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.706779][ T5906] usb 3-1: Product: syz [ 96.724641][ T5906] usb 3-1: Manufacturer: syz [ 96.729873][ T5906] usb 3-1: SerialNumber: syz [ 96.762311][ T30] audit: type=1400 audit(1747290970.678:261): avc: denied { mount } for pid=6238 comm="syz.1.107" name="/" dev="overlay" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 96.801798][ T5906] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 96.803157][ T30] audit: type=1400 audit(1747290970.738:262): avc: denied { ioctl } for pid=6238 comm="syz.1.107" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.839257][ T5906] cdc_mbim 3-1:1.0: bind() failure [ 96.987831][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.004561][ T5894] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 97.013077][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.013651][ T30] audit: type=1400 audit(1747290970.958:263): avc: denied { mount } for pid=6248 comm="syz.1.110" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 97.039552][ T5906] usb 3-1: USB disconnect, device number 7 [ 97.044127][ T30] audit: type=1400 audit(1747290970.998:264): avc: denied { search } for pid=6248 comm="syz.1.110" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 97.077896][ T5860] usb 1-1: USB disconnect, device number 8 [ 97.190029][ T5894] usb 5-1: Invalid ep0 maxpacket: 64 [ 97.330180][ T5894] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 98.296319][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 98.340865][ T5894] usb 5-1: Invalid ep0 maxpacket: 64 [ 98.347563][ T5894] usb usb5-port1: attempt power cycle [ 98.531478][ T5184] Dev loop2: unable to read RDB block 7 [ 99.129481][ T5184] loop2: unable to read partition table [ 99.135578][ T5184] loop2: partition table beyond EOD, truncated [ 99.217938][ T5894] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 99.302213][ T5894] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.461296][ T5894] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 99.481319][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 99.481546][ T30] audit: type=1400 audit(1747290973.428:270): avc: denied { connect } for pid=6266 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.482361][ T5894] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.487792][ T30] audit: type=1400 audit(1747290973.448:271): avc: denied { write } for pid=6266 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.711835][ T30] audit: type=1400 audit(1747290973.718:272): avc: denied { shutdown } for pid=6266 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.746293][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'. [ 99.810323][ T5894] usb usb5-port1: unable to enumerate USB device [ 99.825949][ T6275] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 99.905555][ T5184] Dev loop2: unable to read RDB block 7 [ 99.929708][ T5184] loop2: unable to read partition table [ 99.937872][ T5184] loop2: partition table beyond EOD, truncated [ 99.995540][ T30] audit: type=1400 audit(1747290974.008:273): avc: denied { block_suspend } for pid=6279 comm="syz.4.118" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.029117][ T30] audit: type=1400 audit(1747290974.048:274): avc: denied { associate } for pid=6282 comm="syz.1.121" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 100.040580][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.150178][ T6283] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.121'. [ 100.182102][ T6287] process 'syz.4.118' launched './file0' with NULL argv: empty string added [ 100.252391][ T5184] Dev loop2: unable to read RDB block 7 [ 100.258792][ T30] audit: type=1400 audit(1747290974.258:275): avc: denied { execute_no_trans } for pid=6279 comm="syz.4.118" path="/19/file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.293042][ T5184] loop2: unable to read partition table [ 100.298874][ T5184] loop2: partition table beyond EOD, truncated [ 100.490282][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 100.508209][ T5906] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 100.517670][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.628793][ T5906] usb 4-1: config 0 descriptor?? [ 100.666634][ T5906] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 100.675055][ T6280] orangefs_mount: mount request failed with -4 [ 100.725512][ T5906] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 100.752368][ T30] audit: type=1400 audit(1747290974.768:276): avc: denied { getopt } for pid=6290 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.897492][ T5860] usb 4-1: USB disconnect, device number 4 [ 101.598330][ T6310] ./file0: Can't lookup blockdev [ 102.047164][ T30] audit: type=1400 audit(1747290976.068:277): avc: denied { sys_module } for pid=6290 comm="syz.2.123" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.450434][ T5860] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.546928][ T6320] batadv1: entered promiscuous mode [ 102.679599][ T6325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.128'. [ 102.697743][ T6325] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 102.713470][ T5184] Dev loop2: unable to read RDB block 7 [ 102.719491][ T5184] loop2: unable to read partition table [ 102.735213][ T5184] loop2: partition table beyond EOD, truncated [ 102.891196][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 102.902421][ T5860] usb 4-1: no configurations [ 102.917239][ T5860] usb 4-1: can't read configurations, error -22 [ 102.923652][ T30] audit: type=1400 audit(1747290976.938:278): avc: denied { read } for pid=6334 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.006230][ T6336] netlink: 'syz.2.130': attribute type 4 has an invalid length. [ 103.150500][ T5860] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.960039][ T6342] netlink: 'syz.4.132': attribute type 10 has an invalid length. [ 103.974528][ T6342] team0: Device veth1_macvtap failed to register rx_handler [ 103.998067][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 104.005155][ T5860] usb 4-1: no configurations [ 104.010522][ T5860] usb 4-1: can't read configurations, error -22 [ 104.018391][ T5860] usb usb4-port1: attempt power cycle [ 104.314282][ T30] audit: type=1400 audit(1747290978.338:279): avc: denied { sqpoll } for pid=6343 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 104.406221][ T5184] Dev loop2: unable to read RDB block 7 [ 104.551311][ T5184] loop2: unable to read partition table [ 104.660106][ T5860] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.730486][ T5184] loop2: partition table beyond EOD, truncated [ 104.763692][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 104.802705][ T5860] usb 4-1: no configurations [ 104.807353][ T5860] usb 4-1: can't read configurations, error -22 [ 105.148053][ T5184] Dev loop2: unable to read RDB block 7 [ 105.189364][ T5184] loop2: unable to read partition table [ 105.199653][ T5184] loop2: partition table beyond EOD, truncated [ 105.417669][ T5184] Dev loop2: unable to read RDB block 7 [ 105.445115][ T5184] loop2: unable to read partition table [ 105.472943][ T5184] loop2: partition table beyond EOD, truncated [ 105.734764][ T30] audit: type=1400 audit(1747290979.748:280): avc: denied { ioctl } for pid=6366 comm="syz.4.142" path="socket:[9078]" dev="sockfs" ino=9078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.971223][ T6367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.228603][ T30] audit: type=1400 audit(1747290980.248:281): avc: denied { mount } for pid=6372 comm="syz.0.145" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 106.717429][ T30] audit: type=1400 audit(1747290980.738:282): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 106.788764][ T5184] Dev loop2: unable to read RDB block 7 [ 106.806157][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 106.810433][ T5184] loop2: unable to read partition table [ 106.830174][ T5184] loop2: partition table beyond EOD, truncated [ 106.930862][ T6367] bond1 (unregistering): Released all slaves [ 106.973782][ T6379] batadv1: entered promiscuous mode [ 107.072848][ T5184] Dev loop2: unable to read RDB block 7 [ 107.078530][ T5184] loop2: unable to read partition table [ 107.097336][ T5184] loop2: partition table beyond EOD, truncated [ 107.234204][ T5184] Dev loop2: unable to read RDB block 7 [ 107.240427][ T5184] loop2: unable to read partition table [ 107.256416][ T5184] loop2: partition table beyond EOD, truncated [ 107.347263][ T5184] Dev loop2: unable to read RDB block 7 [ 107.352957][ T5184] loop2: unable to read partition table [ 107.367330][ T5184] loop2: partition table beyond EOD, truncated [ 107.420099][ T5894] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.449120][ T5184] Dev loop2: unable to read RDB block 7 [ 107.457990][ T5184] loop2: unable to read partition table [ 107.470205][ T5184] loop2: partition table beyond EOD, truncated [ 107.541292][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.580243][ T5184] Dev loop2: unable to read RDB block 7 [ 107.643911][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 107.657734][ T5894] usb 5-1: no configurations [ 107.662471][ T5184] loop2: unable to read partition table [ 107.668283][ T5184] loop2: partition table beyond EOD, truncated [ 107.675289][ T5894] usb 5-1: can't read configurations, error -22 [ 107.794442][ T30] audit: type=1400 audit(1747290981.808:283): avc: denied { write } for pid=6407 comm="syz.1.156" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.819185][ T5894] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.918058][ T6410] binder: BINDER_SET_CONTEXT_MGR already set [ 107.927066][ T6410] binder: 6407:6410 ioctl 4018620d 200000000040 returned -16 [ 107.975785][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 108.000858][ T30] audit: type=1400 audit(1747290982.028:284): avc: denied { read } for pid=6412 comm="syz.3.157" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.030414][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 108.049318][ T5894] usb 5-1: no configurations [ 108.070118][ T5894] usb 5-1: can't read configurations, error -22 [ 108.079716][ T30] audit: type=1400 audit(1747290982.028:285): avc: denied { open } for pid=6412 comm="syz.3.157" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.111474][ T5894] usb usb5-port1: attempt power cycle [ 108.180018][ T30] audit: type=1400 audit(1747290982.028:286): avc: denied { ioctl } for pid=6412 comm="syz.3.157" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.490164][ T911] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 108.696349][ T911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.714573][ T911] usb 1-1: config 0 has no interfaces? [ 108.733008][ T5894] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.761637][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 108.773976][ T5894] usb 5-1: no configurations [ 108.812144][ T911] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 108.812291][ T5894] usb 5-1: can't read configurations, error -22 [ 108.825029][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.860302][ T911] usb 1-1: Product: syz [ 108.864487][ T911] usb 1-1: Manufacturer: syz [ 108.872897][ T30] audit: type=1400 audit(1747290982.878:287): avc: denied { read write } for pid=6424 comm="syz.3.162" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.879269][ T911] usb 1-1: SerialNumber: syz [ 108.908512][ T30] audit: type=1400 audit(1747290982.878:288): avc: denied { open } for pid=6424 comm="syz.3.162" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.944077][ T30] audit: type=1400 audit(1747290982.898:289): avc: denied { ioctl } for pid=6424 comm="syz.3.162" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.956547][ T911] usb 1-1: config 0 descriptor?? [ 109.050720][ T5894] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 109.135471][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 109.194030][ T5894] usb 5-1: no configurations [ 109.224589][ T5894] usb 5-1: can't read configurations, error -22 [ 109.271562][ T5894] usb usb5-port1: unable to enumerate USB device [ 109.347667][ T911] hid-generic 0000:0004:0009.0001: unknown main item tag 0x0 [ 109.375234][ T911] hid-generic 0000:0004:0009.0001: unknown main item tag 0x0 [ 109.383731][ T911] hid-generic 0000:0004:0009.0001: unknown main item tag 0x0 [ 109.407169][ T911] hid-generic 0000:0004:0009.0001: hidraw0: HID v0.04 Device [syz0] on syz1 [ 109.538297][ T5816] udevd[5816]: 'fido_id' [6433] terminated by signal 33 (Unknown signal 33) [ 109.558526][ T5184] Dev loop2: unable to read RDB block 7 [ 109.578796][ T5184] loop2: unable to read partition table [ 109.585898][ T5184] loop2: partition table beyond EOD, truncated [ 109.910052][ T911] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.978363][ T5863] usb 1-1: USB disconnect, device number 9 [ 110.078188][ T911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.119477][ T911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.163145][ T911] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.179660][ T911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.198527][ T911] usb 3-1: SerialNumber: syz [ 110.533030][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.685999][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.865338][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'. [ 110.879546][ T911] usb 3-1: 0:2 : does not exist [ 110.886273][ T911] usb 3-1: unit 5: unexpected type 0x03 [ 110.969348][ T911] usb 3-1: USB disconnect, device number 8 [ 111.030652][ T6458] batadv1: entered promiscuous mode [ 111.039883][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.139404][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 112.049698][ T6470] Invalid logical block size (254) [ 112.340720][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 112.340736][ T30] audit: type=1400 audit(1747290986.368:295): avc: denied { read write } for pid=6474 comm="syz.3.176" dev="sockfs" ino=9696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.606313][ T5184] Dev loop2: unable to read RDB block 7 [ 112.612371][ T5184] loop2: unable to read partition table [ 112.618201][ T5184] loop2: partition table beyond EOD, truncated [ 112.662555][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 112.732561][ T5184] Dev loop2: unable to read RDB block 7 [ 112.738179][ T5184] loop2: unable to read partition table [ 112.877959][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 112.896823][ T5184] loop2: partition table beyond EOD, truncated [ 113.752340][ T5184] Dev loop2: unable to read RDB block 7 [ 113.759574][ T5184] loop2: unable to read partition table [ 113.782576][ T5184] loop2: partition table beyond EOD, truncated [ 113.833293][ T6497] syzkaller1: entered promiscuous mode [ 113.883192][ T6497] syzkaller1: entered allmulticast mode [ 113.945656][ T5184] Dev loop2: unable to read RDB block 7 [ 114.420343][ T5184] loop2: unable to read partition table [ 114.426198][ T5184] loop2: partition table beyond EOD, truncated [ 114.478209][ T6512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 114.484940][ T6512] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.547851][ T6512] vhci_hcd vhci_hcd.0: Device attached [ 114.566975][ T30] audit: type=1400 audit(1747290988.588:296): avc: denied { checkpoint_restore } for pid=6515 comm="syz.0.192" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.628477][ T6516] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 114.635117][ T6516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.831295][ T5894] vhci_hcd: vhci_device speed not set [ 114.906700][ T6522] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 114.913341][ T6522] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.041773][ T6516] vhci_hcd vhci_hcd.0: Device attached [ 115.049636][ T6522] vhci_hcd vhci_hcd.0: Device attached [ 115.098411][ T6512] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 115.105058][ T6512] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.131082][ T5894] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 115.398211][ T5184] Dev loop2: unable to read RDB block 7 [ 115.421419][ T6522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.438430][ T5184] loop2: unable to read partition table [ 115.461482][ T5184] loop2: partition table beyond EOD, truncated [ 115.479893][ T6512] vhci_hcd vhci_hcd.0: Device attached [ 115.508265][ T6516] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 115.514897][ T6516] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 115.595461][ T6522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.604073][ T6516] vhci_hcd vhci_hcd.0: Device attached [ 115.611662][ T6512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.625678][ T6523] vhci_hcd: connection closed [ 115.625804][ T6519] vhci_hcd: connection closed [ 115.626256][ T6526] vhci_hcd: connection closed [ 115.640741][ T6513] vhci_hcd: connection reset by peer [ 115.650835][ T1089] vhci_hcd: stop threads [ 115.655819][ T1089] vhci_hcd: release socket [ 115.701327][ T1089] vhci_hcd: disconnect device [ 115.710268][ T1089] vhci_hcd: stop threads [ 115.714579][ T1089] vhci_hcd: release socket [ 115.727897][ T1089] vhci_hcd: disconnect device [ 115.733602][ T6532] vhci_hcd: connection closed [ 115.746634][ T1089] vhci_hcd: stop threads [ 115.778206][ T1089] vhci_hcd: release socket [ 115.787575][ T1089] vhci_hcd: disconnect device [ 115.812931][ T1089] vhci_hcd: stop threads [ 115.817212][ T1089] vhci_hcd: release socket [ 115.834698][ T1089] vhci_hcd: disconnect device [ 115.844128][ T5184] Dev loop2: unable to read RDB block 7 [ 115.854499][ T1089] vhci_hcd: stop threads [ 115.858783][ T1089] vhci_hcd: release socket [ 115.867531][ T5184] loop2: unable to read partition table [ 115.872421][ T1089] vhci_hcd: disconnect device [ 115.892800][ T5184] loop2: partition table beyond EOD, truncated [ 116.859698][ T30] audit: type=1400 audit(1747290990.878:297): avc: denied { bind } for pid=6561 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 116.880932][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.204'. [ 117.160982][ T5184] Dev loop2: unable to read RDB block 7 [ 117.174135][ T5184] loop2: unable to read partition table [ 117.200692][ T5184] loop2: partition table beyond EOD, truncated [ 117.316312][ T30] audit: type=1400 audit(1747290991.338:298): avc: denied { setopt } for pid=6565 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.163685][ T30] audit: type=1400 audit(1747290992.188:299): avc: denied { module_load } for pid=6568 comm="syz.1.206" path="/sys/power/wakeup_count" dev="sysfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 118.315936][ T30] audit: type=1400 audit(1747290992.188:300): avc: denied { write } for pid=6568 comm="syz.1.206" name="tcp" dev="proc" ino=4026533388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 118.380074][ T5184] Dev loop2: unable to read RDB block 7 [ 118.385699][ T5184] loop2: unable to read partition table [ 118.391688][ T5184] loop2: partition table beyond EOD, truncated [ 118.499534][ T6582] trusted_key: syz.4.211 sent an empty control message without MSG_MORE. [ 118.659862][ T6588] netlink: 'syz.3.214': attribute type 2 has an invalid length. [ 118.688759][ T30] audit: type=1400 audit(1747290992.558:301): avc: denied { setopt } for pid=6580 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.723606][ T5184] Dev loop2: unable to read RDB block 7 [ 118.729252][ T5184] loop2: unable to read partition table [ 118.739151][ T6594] FAULT_INJECTION: forcing a failure. [ 118.739151][ T6594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.740384][ T5184] loop2: partition table beyond EOD, truncated [ 119.201843][ T30] audit: type=1400 audit(1747290992.558:302): avc: denied { bind } for pid=6586 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.205023][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.4.215 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 119.205046][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.205055][ T6594] Call Trace: [ 119.205060][ T6594] [ 119.205067][ T6594] dump_stack_lvl+0x16c/0x1f0 [ 119.205094][ T6594] should_fail_ex+0x512/0x640 [ 119.205118][ T6594] should_fail_alloc_page+0xe7/0x130 [ 119.205136][ T6594] prepare_alloc_pages+0x3c2/0x610 [ 119.205158][ T6594] ? __lock_acquire+0x5ca/0x1ba0 [ 119.205184][ T6594] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 119.205202][ T6594] ? __lock_acquire+0x5ca/0x1ba0 [ 119.205232][ T6594] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 119.205259][ T6594] ? lock_acquire+0x179/0x350 [ 119.205282][ T6594] ? find_held_lock+0x2b/0x80 [ 119.205300][ T6594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.205318][ T6594] ? policy_nodemask+0xea/0x4e0 [ 119.205336][ T6594] alloc_pages_mpol+0x1fb/0x550 [ 119.205354][ T6594] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 119.205387][ T6594] ? walk_system_ram_range+0x169/0x1e0 [ 119.205402][ T6594] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 119.205427][ T6594] alloc_pages_noprof+0x131/0x390 [ 119.205444][ T6594] pte_alloc_one+0x19/0x380 [ 119.205464][ T6594] __pte_alloc+0x6d/0x3c0 [ 119.205482][ T6594] ? __pfx___pte_alloc+0x10/0x10 [ 119.205506][ T6594] remap_pfn_range_internal+0xa1b/0xd00 [ 119.205538][ T6594] ? __pfx_remap_pfn_range_internal+0x10/0x10 [ 119.205575][ T6594] remap_pfn_range+0xca/0x150 [ 119.205596][ T6594] ? __pfx_remap_pfn_range+0x10/0x10 [ 119.205624][ T6594] sel_mmap_handle_status+0x298/0x400 [ 119.205643][ T6594] ? lockdep_init_map_type+0x5c/0x280 [ 119.205660][ T6594] __mmap_region+0x1485/0x27c0 [ 119.205678][ T6594] ? __pfx___mmap_region+0x10/0x10 [ 119.205692][ T6594] ? __lock_acquire+0x5ca/0x1ba0 [ 119.205721][ T6594] ? __kernel_text_address+0xd/0x40 [ 119.205782][ T6594] ? __lock_acquire+0xaa4/0x1ba0 [ 119.205813][ T6594] mmap_region+0x1ab/0x3f0 [ 119.205833][ T6594] do_mmap+0xd8e/0x11b0 [ 119.205858][ T6594] ? __pfx_do_mmap+0x10/0x10 [ 119.205878][ T6594] ? __pfx_down_write_killable+0x10/0x10 [ 119.205908][ T6594] vm_mmap_pgoff+0x281/0x450 [ 119.205934][ T6594] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 119.205958][ T6594] ? __fget_files+0x20e/0x3c0 [ 119.205978][ T6594] ksys_mmap_pgoff+0x32c/0x5c0 [ 119.205997][ T6594] ? __pfx_ksys_write+0x10/0x10 [ 119.206020][ T6594] ? rcu_is_watching+0x12/0xc0 [ 119.206041][ T6594] __x64_sys_mmap+0x125/0x190 [ 119.206064][ T6594] do_syscall_64+0xcd/0x260 [ 119.206088][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.206103][ T6594] RIP: 0033:0x7f63a198e969 [ 119.206115][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.206129][ T6594] RSP: 002b:00007f639f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 119.206144][ T6594] RAX: ffffffffffffffda RBX: 00007f63a1bb5fa0 RCX: 00007f63a198e969 [ 119.206154][ T6594] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 119.206163][ T6594] RBP: 00007f639f7f6090 R08: 0000000000000004 R09: 0000000000000000 [ 119.206171][ T6594] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 119.206180][ T6594] R13: 0000000000000000 R14: 00007f63a1bb5fa0 R15: 00007ffed1e18488 [ 119.206201][ T6594] [ 119.206293][ T6594] ------------[ cut here ]------------ [ 119.241118][ T30] audit: type=1400 audit(1747290992.558:303): avc: denied { node_bind } for pid=6586 comm="syz.3.214" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 119.244987][ T6594] WARNING: CPU: 1 PID: 6594 at arch/x86/mm/pat/memtype.c:983 get_pat_info+0x29d/0x300 [ 119.579977][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.590102][ T5862] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 119.595777][ T6594] Modules linked in: [ 119.607554][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.4.215 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 119.619519][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.630047][ T6594] RIP: 0010:get_pat_info+0x29d/0x300 [ 119.635345][ T6594] Code: 49 89 1c 24 e9 12 ff ff ff e8 ff d0 4e 00 90 0f 0b 90 e9 1b fe ff ff 4c 89 ef e8 2e 4f b4 00 e9 f3 fe ff ff e8 e4 d0 4e 00 90 <0f> 0b 90 bb ea ff ff ff e9 e6 fe ff ff 4c 89 ff e8 1e 4e b4 00 e9 [ 119.655352][ T6594] RSP: 0018:ffffc9000dd3f468 EFLAGS: 00010293 [ 119.661538][ T6594] RAX: 0000000000000000 RBX: ffff888062809280 RCX: ffffffff816c74e0 [ 119.669502][ T6594] RDX: ffff888058e2c880 RSI: ffffffff816c755c RDI: 0000000000000007 [ 119.677476][ T6594] RBP: 1ffff92001ba7e8e R08: 0000000000000007 R09: 0000000000000020 [ 119.685442][ T6594] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000dd3f570 [ 119.693403][ T6594] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880628092a0 [ 119.701395][ T6594] FS: 00007f639f7f66c0(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 119.710340][ T6594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.716902][ T6594] CR2: 0000001b2ed14ff8 CR3: 0000000032733000 CR4: 00000000003526f0 [ 119.724883][ T6594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.733075][ T6594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.741325][ T6594] Call Trace: [ 119.744613][ T6594] [ 119.747527][ T6594] ? __pfx_get_pat_info+0x10/0x10 [ 119.752558][ T6594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.758433][ T6594] ? __lock_acquire+0xaa4/0x1ba0 [ 119.763382][ T6594] untrack_pfn+0xeb/0x420 [ 119.767697][ T6594] ? __pfx_untrack_pfn+0x10/0x10 [ 119.772649][ T6594] ? uprobe_munmap+0x20/0x5c0 [ 119.777330][ T6594] unmap_single_vma+0x1bd/0x2a0 [ 119.782181][ T6594] zap_page_range_single+0x320/0x560 [ 119.787448][ T6594] ? __pfx_zap_page_range_single+0x10/0x10 [ 119.793248][ T6594] ? remap_pfn_range_internal+0xa4f/0xd00 [ 119.798975][ T6594] remap_pfn_range+0x12e/0x150 [ 119.803741][ T6594] ? __pfx_remap_pfn_range+0x10/0x10 [ 119.809012][ T6594] sel_mmap_handle_status+0x298/0x400 [ 119.814404][ T6594] ? lockdep_init_map_type+0x5c/0x280 [ 119.819756][ T6594] __mmap_region+0x1485/0x27c0 [ 119.824522][ T6594] ? __pfx___mmap_region+0x10/0x10 [ 119.829625][ T6594] ? __lock_acquire+0x5ca/0x1ba0 [ 119.834826][ T6594] ? __kernel_text_address+0xd/0x40 [ 119.840199][ T6594] ? __lock_acquire+0xaa4/0x1ba0 [ 119.845144][ T6594] mmap_region+0x1ab/0x3f0 [ 119.849541][ T6594] do_mmap+0xd8e/0x11b0 [ 119.853697][ T6594] ? __pfx_do_mmap+0x10/0x10 [ 119.858266][ T6594] ? __pfx_down_write_killable+0x10/0x10 [ 119.863917][ T6594] vm_mmap_pgoff+0x281/0x450 [ 119.868490][ T6594] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 119.873597][ T6594] ? __fget_files+0x20e/0x3c0 [ 119.878263][ T6594] ksys_mmap_pgoff+0x32c/0x5c0 [ 119.883027][ T6594] ? __pfx_ksys_write+0x10/0x10 [ 119.887861][ T6594] ? rcu_is_watching+0x12/0xc0 [ 119.893133][ T6594] __x64_sys_mmap+0x125/0x190 [ 119.897806][ T6594] do_syscall_64+0xcd/0x260 [ 119.902323][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.908190][ T6594] RIP: 0033:0x7f63a198e969 [ 119.912603][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.932226][ T6594] RSP: 002b:00007f639f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 119.940867][ T6594] RAX: ffffffffffffffda RBX: 00007f63a1bb5fa0 RCX: 00007f63a198e969 [ 119.948991][ T6594] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 119.956976][ T6594] RBP: 00007f639f7f6090 R08: 0000000000000004 R09: 0000000000000000 [ 119.964947][ T6594] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 119.972936][ T6594] R13: 0000000000000000 R14: 00007f63a1bb5fa0 R15: 00007ffed1e18488 [ 119.980912][ T6594] [ 119.983912][ T6594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.991166][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.4.215 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 120.003028][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.013067][ T6594] Call Trace: [ 120.016328][ T6594] [ 120.019234][ T6594] dump_stack_lvl+0x3d/0x1f0 [ 120.023810][ T6594] panic+0x71c/0x800 [ 120.027690][ T6594] ? __pfx_panic+0x10/0x10 [ 120.032088][ T6594] ? show_trace_log_lvl+0x29b/0x3e0 [ 120.037280][ T6594] ? check_panic_on_warn+0x1f/0xb0 [ 120.042371][ T6594] ? get_pat_info+0x29d/0x300 [ 120.047035][ T6594] check_panic_on_warn+0xab/0xb0 [ 120.051950][ T6594] __warn+0xf6/0x3c0 [ 120.055821][ T6594] ? get_pat_info+0x29d/0x300 [ 120.060479][ T6594] report_bug+0x3c3/0x580 [ 120.064810][ T6594] ? get_pat_info+0x29d/0x300 [ 120.069466][ T6594] handle_bug+0x184/0x210 [ 120.073777][ T6594] exc_invalid_op+0x17/0x50 [ 120.078255][ T6594] asm_exc_invalid_op+0x1a/0x20 [ 120.083080][ T6594] RIP: 0010:get_pat_info+0x29d/0x300 [ 120.088343][ T6594] Code: 49 89 1c 24 e9 12 ff ff ff e8 ff d0 4e 00 90 0f 0b 90 e9 1b fe ff ff 4c 89 ef e8 2e 4f b4 00 e9 f3 fe ff ff e8 e4 d0 4e 00 90 <0f> 0b 90 bb ea ff ff ff e9 e6 fe ff ff 4c 89 ff e8 1e 4e b4 00 e9 [ 120.107926][ T6594] RSP: 0018:ffffc9000dd3f468 EFLAGS: 00010293 [ 120.113979][ T6594] RAX: 0000000000000000 RBX: ffff888062809280 RCX: ffffffff816c74e0 [ 120.121927][ T6594] RDX: ffff888058e2c880 RSI: ffffffff816c755c RDI: 0000000000000007 [ 120.129875][ T6594] RBP: 1ffff92001ba7e8e R08: 0000000000000007 R09: 0000000000000020 [ 120.137821][ T6594] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000dd3f570 [ 120.145781][ T6594] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880628092a0 [ 120.153754][ T6594] ? get_pat_info+0x220/0x300 [ 120.158416][ T6594] ? get_pat_info+0x29c/0x300 [ 120.163249][ T6594] ? get_pat_info+0x29c/0x300 [ 120.167915][ T6594] ? __pfx_get_pat_info+0x10/0x10 [ 120.172928][ T6594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.178799][ T6594] ? __lock_acquire+0xaa4/0x1ba0 [ 120.183722][ T6594] untrack_pfn+0xeb/0x420 [ 120.188032][ T6594] ? __pfx_untrack_pfn+0x10/0x10 [ 120.192961][ T6594] ? uprobe_munmap+0x20/0x5c0 [ 120.197621][ T6594] unmap_single_vma+0x1bd/0x2a0 [ 120.202460][ T6594] zap_page_range_single+0x320/0x560 [ 120.207725][ T6594] ? __pfx_zap_page_range_single+0x10/0x10 [ 120.213540][ T6594] ? remap_pfn_range_internal+0xa4f/0xd00 [ 120.219257][ T6594] remap_pfn_range+0x12e/0x150 [ 120.224022][ T6594] ? __pfx_remap_pfn_range+0x10/0x10 [ 120.229308][ T6594] sel_mmap_handle_status+0x298/0x400 [ 120.234661][ T6594] ? lockdep_init_map_type+0x5c/0x280 [ 120.240019][ T6594] __mmap_region+0x1485/0x27c0 [ 120.244777][ T6594] ? __pfx___mmap_region+0x10/0x10 [ 120.249866][ T6594] ? __lock_acquire+0x5ca/0x1ba0 [ 120.254788][ T6594] ? __kernel_text_address+0xd/0x40 [ 120.260022][ T6594] ? __lock_acquire+0xaa4/0x1ba0 [ 120.264978][ T6594] mmap_region+0x1ab/0x3f0 [ 120.269380][ T6594] do_mmap+0xd8e/0x11b0 [ 120.273519][ T6594] ? __pfx_do_mmap+0x10/0x10 [ 120.278092][ T6594] ? __pfx_down_write_killable+0x10/0x10 [ 120.283727][ T6594] vm_mmap_pgoff+0x281/0x450 [ 120.288306][ T6594] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 120.293400][ T6594] ? __fget_files+0x20e/0x3c0 [ 120.298066][ T6594] ksys_mmap_pgoff+0x32c/0x5c0 [ 120.302818][ T6594] ? __pfx_ksys_write+0x10/0x10 [ 120.307656][ T6594] ? rcu_is_watching+0x12/0xc0 [ 120.312405][ T6594] __x64_sys_mmap+0x125/0x190 [ 120.317068][ T6594] do_syscall_64+0xcd/0x260 [ 120.321557][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.327435][ T6594] RIP: 0033:0x7f63a198e969 [ 120.331828][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.351417][ T6594] RSP: 002b:00007f639f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 120.359821][ T6594] RAX: ffffffffffffffda RBX: 00007f63a1bb5fa0 RCX: 00007f63a198e969 [ 120.367769][ T6594] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 120.375726][ T6594] RBP: 00007f639f7f6090 R08: 0000000000000004 R09: 0000000000000000 [ 120.383681][ T6594] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 120.391629][ T6594] R13: 0000000000000000 R14: 00007f63a1bb5fa0 R15: 00007ffed1e18488 [ 120.399582][ T6594] [ 120.402787][ T6594] Kernel Offset: disabled [ 120.407090][ T6594] Rebooting in 86400 seconds..