last executing test programs: 12.239238783s ago: executing program 1 (id=354): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x1cc, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0x16c, 0x1, [@m_mirred={0x90, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xc, 0x20000000, 0xa0b, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xffffffff, 0x5, 0x10, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4025, 0x4, 0x0, 0x4, 0x3}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xd8, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1, 0x1, 0x3, 0x7fffffff}}]}, {0x94, 0x6, "e0aea23d6eebeeab55912fc34eaa42db9e333843f06623eebc400332e1193f0aa2ca3bde15a5339fd5c84031b447623e46e977dc90ae5093fbcc0c980afee0982f29e31cd2a86384c5da3fe8e2d0c745e465d5c34d02cc44c9ca17414f1501a3c89b1eadfc2035c01d6134a3da1eb9bfb036f8450b6ecf93ea651e257d49666dc1035d3a661455eba1476b5308c35c11"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x804}, 0x0) ustat(0x6, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x3fa, 0x2, 0x6000, 0x1000, &(0x7f000020e000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) 8.833987464s ago: executing program 1 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r1, 0x1, 0x70bd2e, 0x10000000, {0x14, 0x0, 0xffff}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}}, 0x0) 8.536429791s ago: executing program 1 (id=367): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$cec(0x0, 0x0, 0x36942) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e20, @broadcast}}) r4 = dup(r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) write$FUSE_BMAP(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r5 = syz_io_uring_setup(0x7239, &(0x7f0000000380)={0x0, 0x20eb, 0x8000, 0x2, 0x105bb, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfbfffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_IOCTL(r4, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x80, 0x4, 0x20800, 0xf3}}, 0x20) mount$9p_fd(0x0, 0x0, 0x0, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYRESHEX=r4]) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r9, &(0x7f0000000000), 0x0) mkdirat(r0, 0x0, 0x12c) 7.460014837s ago: executing program 1 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x3000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x3c}}, 0x0) 7.202556958s ago: executing program 4 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000c0c0) semget$private(0x0, 0x5, 0x0) semop(0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1000}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01bf061438b1fd685b241f002dbd7000", @ANYBLOB="14005e80080002000000f0000800010002"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.940293372s ago: executing program 1 (id=375): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000002f5aec1f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32b2d5c0e79cbeec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x49, 0xff, 0xfffff295, 0x8, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7800, 0x4, 0xeb8}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x16, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x0, 0x7, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x7, 0x1, 0x1}}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) r6 = syz_open_dev$usbmon(&(0x7f0000001500), 0x6, 0x80080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x9204, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @nfc={0x27, r5, 0xffffffffffffffff, 0x6}, @ax25={0x3, @default, 0x100006}, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x1, 0x4001}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 5.420213543s ago: executing program 4 (id=378): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000380)) pidfd_send_signal(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xf0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x61, 0x0, 0x61, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') 5.308295608s ago: executing program 2 (id=379): iopl(0x3) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) 4.562324253s ago: executing program 4 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r4}}, 0x18) r5 = eventfd2(0x0, 0x0) flistxattr(r5, 0x0, 0x0) 4.547277327s ago: executing program 2 (id=383): socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = dup2(r0, r0) bind$inet(r1, &(0x7f0000000680)={0x2, 0x4e1c, @private=0xa010101}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xa, 0xffff}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.423645225s ago: executing program 0 (id=385): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) timer_create(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000612000/0x2000)=nil, 0x2000, 0x5, 0x20010, r0, 0x1fe000) 4.371851973s ago: executing program 4 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 4.329450383s ago: executing program 3 (id=387): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100183fffffff0000001400000014000000070000000000000000000081"], 0x0, 0x33, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 3.784319056s ago: executing program 0 (id=388): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x4002) 3.465538871s ago: executing program 3 (id=389): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x1ff, 0x20000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x44050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000004) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) 3.262217097s ago: executing program 2 (id=390): mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f00000054c0)='./file0\x00', 0x0, 0xfffffffffffffff6, &(0x7f0000005500)) 2.320340755s ago: executing program 3 (id=391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x1c00}, {@in=@loopback, 0xfffffffc, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x1ff, 0x0, 0x4}, {}, {0x0, 0x2, 0xff}, 0x70bd2d, 0x0, 0x2, 0x0, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x70bd26, 0x70bd2d, 0x70bd2b, 0x4, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 1.97518622s ago: executing program 0 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4000000) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r5 = syz_open_dev$swradio(0x0, 0x1, 0x2) preadv(r5, 0x0, 0x0, 0x1000, 0x3f2f0fde) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x20, 0x0, {r8, r9/1000+10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}, 0x5, 0x4, {}, 0x5c000000}) (async) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='oom_score_adj\x00') recvmsg$unix(r10, &(0x7f0000001700)={&(0x7f0000000300), 0x6e, &(0x7f0000000100)=[{&(0x7f0000001400)=""/92, 0x5c}, {&(0x7f0000001480)=""/216, 0xd8}, {&(0x7f0000001580)=""/187, 0xbb}, {&(0x7f0000001640)=""/166, 0xa6}], 0x4}, 0x2040) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)}], 0x2) (async) r11 = socket$unix(0x1, 0x1, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x2000c004) 1.907557222s ago: executing program 2 (id=393): iopl(0x3) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) 1.839867897s ago: executing program 1 (id=394): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0], 0x0) write(r0, &(0x7f0000000080)="992d", 0x2) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66b6696d1bd1239726", @ANYRESHEX=r3, @ANYRESDEC=r1, @ANYRESHEX=r5]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$inet(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00008bd000/0x4000)=nil, 0x4000, 0x6, 0x8a852, 0xffffffffffffffff, 0x0) 1.785480656s ago: executing program 3 (id=395): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x40000000, '\x00', @p_u8=&(0x7f0000001040)=0x5}}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r1, &(0x7f0000000080)=""/153, 0x99) (async) socket(0x10, 0x3, 0x0) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick=0x8001}], 0x38) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="04000d8008"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40000}, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r5, 0x73b, &(0x7f00000002c0)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001200000000000000000000000000000044409786873626bab48d7871e5719fdb354d46dccb9a3e5214f7f8d812224cb117ad0ed6611c97d214f3b47a36ad5b958482383cf2acfb94934c8c111240851c3b135e235f1574e3a7ba0254b2a23ddffaf313c7e55e236f6ee3c0696ba3684b89c847bc", @ANYRES32=0x0, @ANYBLOB="488400000040000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) 1.293141696s ago: executing program 4 (id=396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x18000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000000a4f88fa89f5800000000001800000000000800000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card2/oss_mixer\x00', 0x133000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000100006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x45, &(0x7f0000000a80)=ANY=[@ANYBLOB="18390f0000000000181100005aacfcd830bf2521e6142fecec906f97f98dcf06302e55425de2e941f37e78755cd615b09d918d90dc9ef9eec3e14677a4ee51e5385d0cf10d47301a43a28b3387f97a62c7eb9b083c2af622eea6bc2d4d3b86ada57ffecac45c77021b7c20dbdec28d60fdf1d8f24ff991f15697a2b0b44911ea9e7fe81d38d66c572333e70228563ad4f302011217fd3f62a5b51a2af4eaea9fb91f01e148a5b35ef797e336e206fc85be91deba9775f157898eef352e21581490241f5229e235f5873c9c382d3a0492d89e1b17f43fd68afeb41275cff4c1f5843d1c92496a51d220b0c33a2e4f3dd55d4a9bc61b05cb36", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000184a000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xf, 0x65, &(0x7f0000000280)=""/101, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x3, 0xd, 0x2}, {0x2, 0x4, 0xf, 0x4}], 0x10, 0x1, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000800)=@o_path={&(0x7f0000000080)='./file0\x00', r8, 0x4000, r4}, 0x18) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) stat(&(0x7f0000001180)='./file1\x00', &(0x7f00000011c0)) 1.224404624s ago: executing program 3 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0xa9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x80108906, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 1.224189794s ago: executing program 0 (id=398): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x2, 0x40000330}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0xf5ff}, 0x1c) 1.055410664s ago: executing program 3 (id=399): socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20000004) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x4000}) 374.170902ms ago: executing program 0 (id=400): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1fb, 0x20000) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000003000000020000000000401102043ad71492c03ea971ca"], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 32) r2 = socket$inet(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @private=0xa010102}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e297", 0x3, 0x840, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="c318964561a174f22bf25e7fad576dc7c6eb1f772f14320b5fe141ac216b1ca158cdf1d36addd6", 0x27}, {&(0x7f0000002380)="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", 0xbe0}], 0x2}}], 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x1b, 0x5, 0x7a0, 0x188, 0x2c8, 0xffffffff, 0x188, 0x2c8, 0x6f8, 0x6f8, 0xffffffff, 0x6f8, 0x6f8, 0x5, &(0x7f0000000180), {[{{@ipv6={@empty, @empty, [0xffffff00, 0x0, 0xff000000, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffff00], 'geneve1\x00', 'netpci0\x00', {}, {}, 0x0, 0x8, 0x4, 0x18}, 0x0, 0x140, 0x188, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x4, 0x0, [0x9, 0x9, 0x8b0, 0x2, 0x2, 0xfff8, 0x4, 0x1, 0x3, 0x1, 0xfff8, 0x6, 0x8, 0x100, 0xe88, 0xcda0], 0x7}}, @common=@inet=@set3={{0x50}, {{0x1, 0x1, 0x2}, {0x1, 0x4}, {0x6, 0x8}, 0x9}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv6=@loopback, @icmp_id=0x68, @gre_key=0xc}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7, 0xfffd}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x5, @ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e23, @port=0x4e22}}}, {{@uncond, 0x0, 0x318, 0x340, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0xffffff00, 0x17], 0x5f1, 0x10, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x16}, @loopback, @local, @mcast1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x34}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2], 0xe}}, @common=@rt={{0x138}, {0xfffffff9, [0x3, 0x400], 0x10000, 0x8, 0x5, [@private1, @dev={0xfe, 0x80, '\x00', 0x19}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @dev={0xfe, 0x80, '\x00', 0x26}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @mcast1], 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x3, 0x5}, {0x0, 0x0, 0x5}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x64, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00080000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_mreqn(r2, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x6}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x6, 0x2, 0x5, 0x2, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0x200, 0x80, 0x7, 0x7, 0x7, 0x8, 0x2, 0x2, 0x7, 0xffffffffffffffff, 0x3, 0x900000001, 0x403, 0x1, 0x4, 0x101, 0x3, 0x5, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0x100, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x3ff, 0x9, 0x1800000, 0x2, 0x82b, 0x8, 0x5, 0x0, 0x9, 0x2, 0x3ff, 0x100000000000006, 0x2, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x200, 0x8077d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x200, 0x7, 0x8, 0x0, 0x5, 0x97, 0x8, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x8, 0x8, 0x1000, 0x0, 0x3, 0x8000000000007, 0xfffffffffffff000, 0x6, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x2, 0x8, 0x5, 0x9, 0x4, 0x0, 0x7f, 0xd1]}) (async) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) 363.421251ms ago: executing program 2 (id=401): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f000000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 200.249894ms ago: executing program 4 (id=402): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="0b8393b6167aa5d73dad0a66a7c9277d481343d806b77c2ca991d28a336cca04457118d40ecc80b9e740666d460730b94c5c0f5ade0536edc69b7b01a28dac44547b236e712cfeef6b66091959ab54409799dc141471577771cafeb2e47e0d8c3a082d", 0x63) write$qrtrtun(r3, &(0x7f0000000780)="9d8dfa5e53b6183d874f9e93a18dd009a09582ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315424fa0a1622da79faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d479ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c720f36d957944b3b979cfaef6a51a7aff0560787261522243b2911ca55d24db82e20b7a9544529", 0xd7) write$UHID_INPUT(r3, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 123.008422ms ago: executing program 0 (id=403): openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x4000000, {0x3}}, 0x18}}, 0x8004) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x12538485) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0x2b}, @uexit={0x0, 0x18, 0xffffffffffffff80}, @code={0x1, 0x69, {"660f619d28e8000067660fc736263e42f4c74424001b000000c7442402d37a0000ff1c240f3266450f3882990d000000430f3266ba6100ec0fc77a76c7442400e5000000c74424020600ffffc7442406000000000f011c24"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x96, {"b97b0300000f3266b80d008ec0c7442400af000000c74424020a000000c7442406000000000f011424c422f91c1a660f3a21ba000000000066baf80cb8d27fb688ef66bafc0c66ed66baf80cb89ea6db86ef66bafc0c66b8980066ef6565420f01dfc7442400d4410000c74424020d000000c7442406000000000f011c24b94c0300000f32"}}, @code={0x1, 0x88, {"c421fa7f05c7000000c4c26d0b7fdf66420f38003d2c000000b9510a0000b874af0000ba000000000f303e2e6766470fc7770d0f01cbc744240003000000c7442402cb550000c7442406000000000f011c24b9010b0000b808000000ba000000000f3066ba200066b8980066ef36363e0fc7aa1d30362b"}}, @code={0x1, 0x89, {"460f01c4b9800000c00f3235000400000f30660f38811cf70f01c2c7442400d4000000c74424028d380139c7442406000000000f01142466ba200066b80a0066ef66baf80cb84c609382ef66bafc0ced8fe9389399ae0000008099db8c00006548b800000000000000800f23d00f21f835300000040f23f8"}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x69, {"0fc7aa5c5e188348b80e000000000000000f23d80f21f835400000e00f23f8c74424003b000000c744240247560000ff1c2466ba400066ed66b8e5000f00d02e400f01cb0fd40fb9c20300000f3236410f795c61304723c0"}}, @uexit={0x0, 0x18, 0xfffffffffffffffe}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x5d, {"420f09470f08c40215a81ec7442400736e0000c744240200000000c7442406000000000f01142464650fc71c2440aa440f07666666440f38828c1e7200000065650fc224ea0c66470f388106"}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x100}, @uexit={0x0, 0x18, 0x3}], 0x3ae}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=404): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x15}) fcntl$notify(r0, 0x402, 0x21) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) kernel console output (not intermixed with test programs): vsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.012706][ T5055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.015514][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.046195][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.055489][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.068375][ T5807] veth0_macvtap: entered promiscuous mode [ 65.076660][ T30] audit: type=1400 audit(1747457723.588:91): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.Jj6Fqh/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.113042][ T30] audit: type=1400 audit(1747457723.628:92): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.136307][ T30] audit: type=1400 audit(1747457723.628:93): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.Jj6Fqh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.165247][ T30] audit: type=1400 audit(1747457723.628:94): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.172252][ T5812] veth0_macvtap: entered promiscuous mode [ 65.196582][ T30] audit: type=1400 audit(1747457723.628:95): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.Jj6Fqh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.228694][ T5807] veth1_macvtap: entered promiscuous mode [ 65.234344][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.245538][ T30] audit: type=1400 audit(1747457723.628:96): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/root/syzkaller.Jj6Fqh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.284537][ T30] audit: type=1400 audit(1747457723.638:97): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.285006][ T5812] veth1_macvtap: entered promiscuous mode [ 65.305357][ T30] audit: type=1400 audit(1747457723.648:98): avc: denied { mounton } for pid=5813 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.337859][ T30] audit: type=1400 audit(1747457723.648:99): avc: denied { mount } for pid=5813 comm="syz-executor" name="/" dev="gadgetfs" ino=6513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.425761][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.465862][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.505677][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.542763][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.569924][ T5807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.589691][ T5807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.598541][ T5807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.607615][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.622364][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.788264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 65.900412][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.991611][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.010953][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.019892][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.028787][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.050560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.059157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.081692][ T5908] capability: warning: `syz.3.7' uses deprecated v2 capabilities in a way that may be insecure [ 66.139095][ T5907] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 66.189503][ T963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.202020][ T963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.230238][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.239818][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.271168][ T5819] Bluetooth: hci1: command tx timeout [ 66.271206][ T54] Bluetooth: hci2: command tx timeout [ 66.276598][ T5819] Bluetooth: hci3: command tx timeout [ 66.282523][ T54] Bluetooth: hci0: command tx timeout [ 66.358636][ T54] Bluetooth: hci4: command tx timeout [ 66.375215][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.375958][ T5864] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.383692][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.526153][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.537279][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.635924][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.645044][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.730502][ T5860] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.750753][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 66.762500][ T5864] usb 5-1: config index 0 descriptor too short (expected 7717, got 36) [ 66.777015][ T5864] usb 5-1: config 83 has too many interfaces: 53, using maximum allowed: 32 [ 66.788246][ T5864] usb 5-1: config 83 has an invalid descriptor of length 206, skipping remainder of the config [ 66.805226][ T5864] usb 5-1: config 83 has 0 interfaces, different from the descriptor's value: 53 [ 66.945250][ T5864] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 67.106807][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.177194][ T5864] usb 5-1: Product: syz [ 67.182482][ T5864] usb 5-1: Manufacturer: syz [ 67.187233][ T5864] usb 5-1: SerialNumber: syz [ 67.226361][ T5864] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 67.243320][ T5864] usb 5-1: no configuration chosen from 1 choice [ 67.250826][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 67.258762][ T5860] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 67.271194][ T5860] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 67.280689][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.288702][ T5860] usb 4-1: Product: syz [ 67.293436][ T5860] usb 4-1: Manufacturer: syz [ 67.298953][ T5860] usb 4-1: SerialNumber: syz [ 67.306965][ T5860] usb 4-1: config 0 descriptor?? [ 67.319028][ T5860] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 67.338561][ T5860] usb 4-1: setting power ON [ 67.344030][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 67.359186][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 67.374527][ T5860] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 67.384081][ T5860] usb 4-1: media controller created [ 67.481275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.546783][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.576502][ T5860] usb 4-1: selecting invalid altsetting 6 [ 67.583447][ T5860] usb 4-1: digital interface selection failed (-22) [ 67.593105][ T5860] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 67.606216][ T5860] usb 4-1: setting power OFF [ 67.640518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.649024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.657526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.667035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.787884][ T5860] dvb-usb: bulk message failed: -22 (2/0) [ 67.820787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.871276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.963441][ T5860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 68.153640][ T5860] (NULL device *): no alternate interface [ 68.350960][ T5819] Bluetooth: hci2: command tx timeout [ 68.350957][ T5811] Bluetooth: hci3: command tx timeout [ 68.350992][ T5819] Bluetooth: hci1: command tx timeout [ 68.356747][ T54] Bluetooth: hci0: command tx timeout [ 68.430812][ T54] Bluetooth: hci4: command tx timeout [ 68.618572][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 68.618589][ T30] audit: type=1400 audit(1747457727.128:150): avc: denied { create } for pid=5934 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.666658][ T5939] Zero length message leads to an empty skb [ 69.822564][ T30] audit: type=1400 audit(1747457727.178:151): avc: denied { write } for pid=5934 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.843452][ T30] audit: type=1400 audit(1747457727.648:152): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.914739][ T5893] usb 5-1: USB disconnect, device number 2 [ 69.942411][ T5860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 70.021346][ T5860] usb 4-1: USB disconnect, device number 2 [ 70.124359][ T30] audit: type=1400 audit(1747457728.628:153): avc: denied { read write } for pid=5954 comm="syz.3.17" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.124903][ T5955] FAULT_INJECTION: forcing a failure. [ 70.124903][ T5955] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.147699][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.230366][ T5864] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.506651][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.3.17 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 70.506680][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.506690][ T5955] Call Trace: [ 70.506696][ T5955] [ 70.506703][ T5955] dump_stack_lvl+0x16c/0x1f0 [ 70.506740][ T5955] should_fail_ex+0x512/0x640 [ 70.506770][ T5955] _copy_from_user+0x2e/0xd0 [ 70.506796][ T5955] __do_sys_clock_adjtime+0x96/0x290 [ 70.506824][ T5955] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 70.506867][ T5955] ? __pfx_ksys_write+0x10/0x10 [ 70.506893][ T5955] ? rcu_is_watching+0x12/0xc0 [ 70.506917][ T5955] ? rcu_is_watching+0x12/0xc0 [ 70.506940][ T5955] do_syscall_64+0xcd/0x260 [ 70.506968][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.506986][ T5955] RIP: 0033:0x7fa56718e969 [ 70.507001][ T5955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.507016][ T5955] RSP: 002b:00007fa56805a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 70.507034][ T5955] RAX: ffffffffffffffda RBX: 00007fa5673b5fa0 RCX: 00007fa56718e969 [ 70.507045][ T5955] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 00000000ffffffd3 [ 70.507056][ T5955] RBP: 00007fa56805a090 R08: 0000000000000000 R09: 0000000000000000 [ 70.507066][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.507076][ T5955] R13: 0000000000000000 R14: 00007fa5673b5fa0 R15: 00007ffe51a1b918 [ 70.507098][ T5955] [ 70.859119][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 71.004523][ T30] audit: type=1400 audit(1747457728.628:154): avc: denied { open } for pid=5954 comm="syz.3.17" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.004781][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.028689][ T30] audit: type=1400 audit(1747457728.738:155): avc: denied { read write } for pid=5953 comm="syz.4.16" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.057451][ T30] audit: type=1400 audit(1747457728.738:156): avc: denied { open } for pid=5953 comm="syz.4.16" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.080561][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.087406][ T30] audit: type=1400 audit(1747457728.958:157): avc: denied { create } for pid=5958 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.100872][ T5967] dummy0: entered promiscuous mode [ 71.116910][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.162164][ T30] audit: type=1400 audit(1747457728.978:158): avc: denied { bind } for pid=5958 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.181113][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.187270][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 71.226207][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 71.270300][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.280928][ T30] audit: type=1400 audit(1747457729.228:159): avc: denied { accept } for pid=5958 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.315373][ T5972] bridge_slave_0: left allmulticast mode [ 71.331193][ T5864] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.362477][ T5972] bridge_slave_0: left promiscuous mode [ 71.367140][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 71.384931][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.408982][ T5972] bridge_slave_1: left allmulticast mode [ 71.430580][ T5864] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 71.437972][ T5972] bridge_slave_1: left promiscuous mode [ 71.473125][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 71.491190][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.499554][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.518822][ T5864] usb 2-1: config 0 descriptor?? [ 71.857090][ T5987] netlink: 60 bytes leftover after parsing attributes in process `syz.4.22'. [ 71.866916][ T5987] unsupported nlmsg_type 40 [ 72.083753][ T5988] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24'. [ 72.176636][ T5864] usb 2-1: can't set config #0, error -71 [ 72.338042][ T5972] bond0: (slave bond_slave_0): Releasing backup interface [ 72.405243][ T5972] bond0: (slave bond_slave_1): Releasing backup interface [ 72.422362][ T5864] usb 2-1: USB disconnect, device number 2 [ 72.455971][ T5972] team0: Port device team_slave_0 removed [ 72.507384][ T5972] team0: Port device team_slave_1 removed [ 72.544078][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.565165][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.588715][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.601413][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.012647][ T6000] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.266354][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 74.266370][ T30] audit: type=1400 audit(1747457732.778:173): avc: denied { write } for pid=5996 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.643318][ T30] audit: type=1400 audit(1747457732.828:174): avc: denied { read } for pid=5996 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.779038][ T30] audit: type=1400 audit(1747457733.288:175): avc: denied { name_bind } for pid=6010 comm="syz.0.32" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.910230][ T6015] process 'syz.1.31' launched './file1' with NULL argv: empty string added [ 75.019734][ T6015] ======================================================= [ 75.019734][ T6015] WARNING: The mand mount option has been deprecated and [ 75.019734][ T6015] and is ignored by this kernel. Remove the mand [ 75.019734][ T6015] option from the mount to silence this warning. [ 75.019734][ T6015] ======================================================= [ 75.060756][ T30] audit: type=1400 audit(1747457733.418:176): avc: denied { execute } for pid=6007 comm="syz.1.31" name="file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.319970][ T30] audit: type=1400 audit(1747457733.448:177): avc: denied { execute_no_trans } for pid=6007 comm="syz.1.31" path="/5/file1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.434079][ T6022] random: crng reseeded on system resumption [ 75.495168][ T6023] kvm: kvm [6020]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 76.043105][ T30] audit: type=1400 audit(1747457733.528:178): avc: denied { remount } for pid=6007 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.122350][ T975] cfg80211: failed to load regulatory.db [ 76.155656][ T30] audit: type=1400 audit(1747457733.758:179): avc: denied { read append } for pid=6016 comm="syz.4.33" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 76.280366][ T30] audit: type=1400 audit(1747457733.758:180): avc: denied { open } for pid=6016 comm="syz.4.33" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 76.410986][ T30] audit: type=1400 audit(1747457733.948:181): avc: denied { write } for pid=6020 comm="syz.0.34" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 76.474218][ T30] audit: type=1400 audit(1747457733.948:182): avc: denied { open } for pid=6020 comm="syz.0.34" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 76.846573][ T6031] wg1: entered promiscuous mode [ 76.852740][ T6031] wg1: entered allmulticast mode [ 77.280432][ T5863] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.440311][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 77.451671][ T6036] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 77.464228][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 77.514707][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.589742][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.635407][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 77.759064][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 77.861096][ T5863] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 77.910516][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.946061][ T5863] usb 2-1: config 0 descriptor?? [ 78.101412][ T6026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.909466][ T6049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.40'. [ 79.549060][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 79.549075][ T30] audit: type=1400 audit(1747457737.998:187): avc: denied { watch } for pid=6032 comm="syz.4.37" path="/6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.750414][ T30] audit: type=1400 audit(1747457737.998:188): avc: denied { watch_sb watch_reads } for pid=6032 comm="syz.4.37" path="/6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.964865][ T6053] FAULT_INJECTION: forcing a failure. [ 79.964865][ T6053] name failslab, interval 1, probability 0, space 0, times 1 [ 79.990960][ T30] audit: type=1400 audit(1747457738.018:189): avc: denied { create } for pid=6032 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 80.010744][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.3.43 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 80.010769][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.010778][ T6053] Call Trace: [ 80.010784][ T6053] [ 80.010790][ T6053] dump_stack_lvl+0x16c/0x1f0 [ 80.010818][ T6053] should_fail_ex+0x512/0x640 [ 80.010841][ T6053] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 80.010863][ T6053] should_failslab+0xc2/0x120 [ 80.010883][ T6053] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 80.010899][ T6053] ? __alloc_skb+0x2b2/0x380 [ 80.010920][ T6053] __alloc_skb+0x2b2/0x380 [ 80.010936][ T6053] ? __pfx___alloc_skb+0x10/0x10 [ 80.010961][ T6053] netlink_alloc_large_skb+0x69/0x130 [ 80.010985][ T6053] netlink_sendmsg+0x6a1/0xdd0 [ 80.011010][ T6053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.011040][ T6053] ____sys_sendmsg+0xa98/0xc70 [ 80.011065][ T6053] ? copy_msghdr_from_user+0x10a/0x160 [ 80.011085][ T6053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.011112][ T6053] ? lockdep_hardirqs_on+0x7c/0x110 [ 80.011142][ T6053] ___sys_sendmsg+0x134/0x1d0 [ 80.011161][ T6053] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.011192][ T6053] ? find_held_lock+0x2b/0x80 [ 80.011229][ T6053] __sys_sendmmsg+0x200/0x420 [ 80.011251][ T6053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 80.011299][ T6053] __x64_sys_sendmmsg+0x9c/0x100 [ 80.011319][ T6053] do_syscall_64+0xcd/0x260 [ 80.011345][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.011363][ T6053] RIP: 0033:0x7fa56718e969 [ 80.011378][ T6053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.011393][ T6053] RSP: 002b:00007fa56805a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.011410][ T6053] RAX: ffffffffffffffda RBX: 00007fa5673b5fa0 RCX: 00007fa56718e969 [ 80.011421][ T6053] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 80.011431][ T6053] RBP: 00007fa56805a090 R08: 0000000000000000 R09: 0000000000000000 [ 80.011441][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.011451][ T6053] R13: 0000000000000000 R14: 00007fa5673b5fa0 R15: 00007ffe51a1b918 [ 80.011474][ T6053] [ 80.281133][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 80.283342][ T30] audit: type=1400 audit(1747457738.448:190): avc: denied { create } for pid=6052 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.323122][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 80.350435][ T5863] usb 2-1: USB disconnect, device number 3 [ 80.697563][ T30] audit: type=1400 audit(1747457739.208:191): avc: denied { setopt } for pid=6071 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.769532][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 80.788537][ T30] audit: type=1400 audit(1747457739.298:192): avc: denied { write } for pid=6067 comm="syz.1.47" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.797552][ T6075] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 80.871236][ T6078] nbd1: detected capacity change from 0 to 4294967296 [ 81.310981][ T6076] block nbd1: shutting down sockets [ 81.371593][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.380877][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.397296][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.426172][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.434325][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.443364][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.451210][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.461716][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.470650][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.479786][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.487667][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.496826][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.504710][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.517822][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.525736][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.534886][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.543325][ T5828] ldm_validate_partition_table(): Disk read failed. [ 81.583712][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.607684][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.643584][ T5828] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.787122][ T5828] Buffer I/O error on dev nbd1, logical block 0, async page read [ 81.795230][ T5828] Dev nbd1: unable to read RDB block 0 [ 81.801318][ T5828] nbd1: unable to read partition table [ 81.907627][ T6091] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 81.959965][ T6082] ldm_validate_partition_table(): Disk read failed. [ 82.013165][ T6091] netlink: 144 bytes leftover after parsing attributes in process `syz.4.53'. [ 82.031980][ T30] audit: type=1400 audit(1747457740.548:193): avc: denied { create } for pid=6093 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.055055][ T6082] Dev nbd1: unable to read RDB block 0 [ 82.063265][ T6082] nbd1: unable to read partition table [ 82.076937][ T5828] ldm_validate_partition_table(): Disk read failed. [ 82.084610][ T6091] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 82.103444][ T6091] netlink: 76 bytes leftover after parsing attributes in process `syz.4.53'. [ 82.108608][ T30] audit: type=1400 audit(1747457740.548:194): avc: denied { bind } for pid=6093 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.112688][ T5828] Dev nbd1: unable to read RDB block 0 [ 82.161965][ T6097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.171884][ T5828] nbd1: unable to read partition table [ 82.286832][ T30] audit: type=1400 audit(1747457740.548:195): avc: denied { node_bind } for pid=6093 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 82.806759][ T30] audit: type=1400 audit(1747457740.568:196): avc: denied { ioctl } for pid=6093 comm="syz.3.54" path="socket:[8587]" dev="sockfs" ino=8587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.002875][ T6107] binder: 6106:6107 ioctl c0306201 0 returned -14 [ 83.061167][ T6107] binder: 6106:6107 ioctl c0306201 0 returned -14 [ 83.150766][ T972] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.825430][ T972] usb 4-1: Using ep0 maxpacket: 8 [ 83.842060][ T6122] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 83.862088][ T6122] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 83.894917][ T6124] mmap: syz.4.61 (6124) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.915105][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.61'. [ 84.027176][ T6125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'. [ 84.563023][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 84.690302][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.730740][ T972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.778390][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 84.827697][ T972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 84.881329][ T972] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 84.895174][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.911740][ T972] usb 4-1: config 0 descriptor?? [ 84.931826][ T6105] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.000448][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.220383][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 85.241753][ T5893] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 85.270647][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.353169][ T5893] usb 1-1: Product: syz [ 85.383225][ T5893] usb 1-1: Manufacturer: syz [ 85.601655][ T5893] usb 1-1: SerialNumber: syz [ 85.620645][ T5893] usb 1-1: config 0 descriptor?? [ 85.639915][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 85.639945][ T5864] usb 4-1: USB disconnect, device number 3 [ 85.657625][ T5893] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 85.787193][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 85.787209][ T30] audit: type=1400 audit(1747457744.298:201): avc: denied { create } for pid=6141 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.874182][ T30] audit: type=1400 audit(1747457744.308:202): avc: denied { write } for pid=6141 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.020854][ T30] audit: type=1400 audit(1747457744.528:203): avc: denied { create } for pid=6147 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.149455][ T6154] FAULT_INJECTION: forcing a failure. [ 86.149455][ T6154] name failslab, interval 1, probability 0, space 0, times 0 [ 86.162158][ T30] audit: type=1400 audit(1747457744.658:204): avc: denied { create } for pid=6147 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.162208][ T30] audit: type=1400 audit(1747457744.658:205): avc: denied { write } for pid=6147 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.162261][ T30] audit: type=1400 audit(1747457744.658:206): avc: denied { connect } for pid=6147 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.162293][ T30] audit: type=1400 audit(1747457744.658:207): avc: denied { setopt } for pid=6147 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.243338][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: syz.1.70 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 86.243360][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.243370][ T6154] Call Trace: [ 86.243376][ T6154] [ 86.243383][ T6154] dump_stack_lvl+0x16c/0x1f0 [ 86.243411][ T6154] should_fail_ex+0x512/0x640 [ 86.243432][ T6154] ? fs_reclaim_acquire+0xae/0x150 [ 86.243450][ T6154] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 86.243472][ T6154] should_failslab+0xc2/0x120 [ 86.243491][ T6154] __kmalloc_noprof+0xd2/0x510 [ 86.243518][ T6154] tomoyo_realpath_from_path+0xc2/0x6e0 [ 86.243542][ T6154] ? tomoyo_profile+0x47/0x60 [ 86.243554][ T6154] tomoyo_path_number_perm+0x245/0x580 [ 86.243568][ T6154] ? tomoyo_path_number_perm+0x237/0x580 [ 86.243584][ T6154] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 86.243599][ T6154] ? find_held_lock+0x2b/0x80 [ 86.243643][ T6154] ? find_held_lock+0x2b/0x80 [ 86.243661][ T6154] ? hook_file_ioctl_common+0x145/0x410 [ 86.243683][ T6154] ? __fget_files+0x20e/0x3c0 [ 86.243696][ T6154] security_file_ioctl+0x9b/0x240 [ 86.243713][ T6154] __x64_sys_ioctl+0xb7/0x200 [ 86.243729][ T6154] do_syscall_64+0xcd/0x260 [ 86.243750][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.243768][ T6154] RIP: 0033:0x7f0eb438e969 [ 86.243782][ T6154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.243796][ T6154] RSP: 002b:00007f0eb511f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.243811][ T6154] RAX: ffffffffffffffda RBX: 00007f0eb45b6160 RCX: 00007f0eb438e969 [ 86.243822][ T6154] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000004 [ 86.243829][ T6154] RBP: 00007f0eb511f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.243835][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.243841][ T6154] R13: 0000000000000000 R14: 00007f0eb45b6160 R15: 00007ffd1bd9fac8 [ 86.243855][ T6154] [ 86.243891][ T6154] ERROR: Out of memory at tomoyo_realpath_from_path. [ 86.869101][ T30] audit: type=1400 audit(1747457745.378:208): avc: denied { create } for pid=6131 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.920563][ T5863] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.930448][ T30] audit: type=1400 audit(1747457745.378:209): avc: denied { setopt } for pid=6131 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.020445][ T30] audit: type=1400 audit(1747457745.488:210): avc: denied { ioctl } for pid=6131 comm="syz.0.64" path="socket:[8739]" dev="sockfs" ino=8739 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.064006][ T5893] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 87.064493][ T6161] syz.3.73 (6161): /proc/6159/oom_adj is deprecated, please use /proc/6159/oom_score_adj instead. [ 87.080729][ T5893] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 87.136720][ T5863] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.146152][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.158072][ T5863] usb 5-1: Product: syz [ 87.166186][ T6165] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(21) [ 87.172951][ T6165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.183457][ T5863] usb 5-1: Manufacturer: syz [ 87.188069][ T5863] usb 5-1: SerialNumber: syz [ 87.205535][ T6165] vhci_hcd vhci_hcd.0: Device attached [ 87.223912][ T5863] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.247729][ T5893] usb 1-1: USB disconnect, device number 2 [ 87.253774][ T6162] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 87.255806][ T975] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.260358][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.284375][ T6162] vhci_hcd vhci_hcd.0: Device attached [ 87.349987][ T6174] wg1: entered promiscuous mode [ 87.354991][ T6174] wg1: entered allmulticast mode [ 87.371429][ T6165] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(23) [ 87.378062][ T6165] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.604523][ T6175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(28) [ 87.611161][ T6175] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 87.708234][ T6162] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 87.714877][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.751457][ T6165] vhci_hcd vhci_hcd.0: Device attached [ 87.758271][ T6179] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.777814][ T6175] vhci_hcd vhci_hcd.0: Device attached [ 87.799841][ T6162] vhci_hcd vhci_hcd.0: Device attached [ 87.852918][ T6180] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.864932][ T6162] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.881597][ T6162] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(34) [ 87.888246][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.896132][ T6162] vhci_hcd vhci_hcd.0: Device attached [ 88.054391][ T5911] usb 36-1: SetAddress Request (2) to port 0 [ 88.289631][ T6176] vhci_hcd: connection closed [ 88.294174][ T6166] vhci_hcd: connection closed [ 88.299062][ T6173] vhci_hcd: connection closed [ 88.317649][ T6169] vhci_hcd: connection closed [ 88.335257][ T5911] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 88.359741][ T6170] vhci_hcd: connection closed [ 88.572616][ T5942] vhci_hcd: stop threads [ 88.696700][ T5942] vhci_hcd: release socket [ 88.840312][ T975] usb 5-1: Service connection timeout for: 256 [ 88.842610][ T5942] vhci_hcd: disconnect device [ 88.846618][ T975] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 89.113734][ T5942] vhci_hcd: stop threads [ 89.159598][ T5942] vhci_hcd: release socket [ 89.207017][ T5942] vhci_hcd: disconnect device [ 89.467221][ T5942] vhci_hcd: stop threads [ 89.512321][ T5942] vhci_hcd: release socket [ 89.551351][ T972] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.587617][ T5942] vhci_hcd: disconnect device [ 89.742635][ T5942] vhci_hcd: stop threads [ 89.772711][ T5942] vhci_hcd: release socket [ 89.786509][ T5942] vhci_hcd: disconnect device [ 89.919226][ T5942] vhci_hcd: stop threads [ 89.943518][ T5942] vhci_hcd: release socket [ 89.957149][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 89.994773][ T5942] vhci_hcd: disconnect device [ 90.197444][ T972] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 90.328406][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.443050][ T972] usb 1-1: Product: syz [ 90.513562][ T972] usb 1-1: Manufacturer: syz [ 90.585775][ T972] usb 1-1: SerialNumber: syz [ 90.695625][ T6181] vhci_hcd: connection closed [ 90.718882][ T963] vhci_hcd: stop threads [ 90.731150][ T975] ath9k_htc: Failed to initialize the device [ 90.750346][ T975] usb 5-1: ath9k_htc: USB layer deinitialized [ 90.862413][ T972] usb 1-1: config 0 descriptor?? [ 90.874655][ T972] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 90.888043][ T963] vhci_hcd: release socket [ 90.906748][ T963] vhci_hcd: disconnect device [ 90.968428][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 90.968457][ T30] audit: type=1400 audit(1747457749.478:215): avc: denied { mounton } for pid=6190 comm="syz.3.79" path="/proc/53/task" dev="proc" ino=8164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 91.697273][ T972] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 91.923917][ T972] usb 5-1: USB disconnect, device number 3 [ 91.944017][ T6191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.062135][ T30] audit: type=1400 audit(1747457750.568:216): avc: denied { read append } for pid=6204 comm="syz.2.83" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.201627][ T30] audit: type=1400 audit(1747457750.568:217): avc: denied { open } for pid=6204 comm="syz.2.83" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.278665][ T30] audit: type=1400 audit(1747457750.608:218): avc: denied { ioctl } for pid=6204 comm="syz.2.83" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.410522][ T975] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 92.533219][ T30] audit: type=1400 audit(1747457750.868:219): avc: denied { create } for pid=6209 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.607255][ T30] audit: type=1400 audit(1747457751.118:220): avc: denied { connect } for pid=6209 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.621104][ T6213] overlay: ./file0 is not a directory [ 92.650379][ T30] audit: type=1400 audit(1747457751.118:221): avc: denied { write } for pid=6209 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.669715][ T30] audit: type=1400 audit(1747457751.118:222): avc: denied { mounton } for pid=6209 comm="syz.1.85" path="/15/file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.701180][ T975] usb 5-1: Using ep0 maxpacket: 8 [ 92.732604][ T9] usb 1-1: USB disconnect, device number 3 [ 92.747813][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 92.827278][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.942402][ T975] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.952631][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 92.963942][ T975] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 92.974226][ T975] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 92.985279][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.061698][ T975] usb 5-1: config 0 descriptor?? [ 93.092367][ T6208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.137580][ T30] audit: type=1400 audit(1747457751.648:223): avc: denied { read } for pid=6220 comm="syz.0.87" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.365931][ T30] audit: type=1400 audit(1747457751.678:224): avc: denied { open } for pid=6220 comm="syz.0.87" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.575309][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 93.635807][ T6231] xt_connbytes: Forcing CT accounting to be enabled [ 93.644724][ T6231] Cannot find add_set index 0 as target [ 93.887947][ T5911] usb 36-1: device descriptor read/8, error -110 [ 94.422171][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 94.430111][ T975] usb 5-1: USB disconnect, device number 4 [ 94.742131][ T5911] usb usb36-port1: attempt power cycle [ 94.810350][ T5863] vhci_hcd: vhci_device speed not set [ 96.263890][ T6255] fuse: Unknown parameter '' [ 96.471628][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 96.471639][ T30] audit: type=1400 audit(1747457754.988:234): avc: denied { ioctl } for pid=6258 comm="syz.4.96" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 96.502900][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.583590][ T30] audit: type=1400 audit(1747457755.098:235): avc: denied { mount } for pid=6260 comm="syz.2.97" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.692159][ T6265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.999976][ T30] audit: type=1400 audit(1747457755.238:236): avc: denied { create } for pid=6260 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.180771][ T30] audit: type=1400 audit(1747457755.698:237): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.200616][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.221063][ T5911] usb usb36-port1: unable to enumerate USB device [ 97.396838][ T30] audit: type=1400 audit(1747457755.908:238): avc: denied { create } for pid=6274 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.416046][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.897752][ T6281] xt_TPROXY: Can be used only with -p tcp or -p udp [ 98.078637][ T30] audit: type=1400 audit(1747457755.988:239): avc: denied { read } for pid=6274 comm="syz.3.102" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.190843][ T5893] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.444188][ T30] audit: type=1400 audit(1747457756.148:240): avc: denied { open } for pid=6274 comm="syz.3.102" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.472603][ T30] audit: type=1400 audit(1747457756.498:241): avc: denied { write } for pid=6276 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.499549][ T30] audit: type=1400 audit(1747457756.918:242): avc: denied { write } for pid=6274 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 98.600335][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 98.678138][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 98.746025][ T6294] trusted_key: encrypted_key: key user:syz not found [ 99.132909][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 99.153429][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 99.163345][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.196755][ T30] audit: type=1400 audit(1747457757.708:243): avc: denied { ioctl } for pid=6295 comm="syz.4.107" path="socket:[8980]" dev="sockfs" ino=8980 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.965142][ T5893] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 99.999073][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.474232][ T5911] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.542230][ T6299] syz.4.107 (6299) used greatest stack depth: 17912 bytes left [ 100.595042][ T5893] usb 3-1: Product: syz [ 100.599272][ T5893] usb 3-1: Manufacturer: syz [ 100.605652][ T5893] usb 3-1: SerialNumber: syz [ 100.865841][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 100.881840][ T5893] usb 3-1: config 0 descriptor?? [ 100.910502][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 100.960399][ T5893] usb 3-1: can't set config #0, error -71 [ 101.046637][ T5893] usb 3-1: USB disconnect, device number 2 [ 101.052635][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.063948][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.074525][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 101.086098][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 101.096461][ T5911] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 101.105809][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.215319][ T5911] usb 2-1: config 0 descriptor?? [ 101.332733][ T6314] netlink: 'syz.4.110': attribute type 21 has an invalid length. [ 101.341006][ T6314] netlink: 156 bytes leftover after parsing attributes in process `syz.4.110'. [ 101.355548][ T6314] netlink: 'syz.4.110': attribute type 21 has an invalid length. [ 101.363649][ T6314] netlink: 156 bytes leftover after parsing attributes in process `syz.4.110'. [ 101.674645][ T6293] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 101.704944][ T30] audit: type=1400 audit(1747457759.798:244): avc: denied { write } for pid=6310 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.063447][ T5911] usb 2-1: USB disconnect, device number 4 [ 102.071220][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 102.342859][ T30] audit: type=1400 audit(1747457760.848:245): avc: denied { write } for pid=6327 comm="syz.0.115" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 102.440781][ T975] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.721063][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 102.757224][ T975] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 102.768753][ T5893] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 102.780971][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 102.793730][ T975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 102.807240][ T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.840464][ T975] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 102.859510][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.878034][ T6337] loop6: detected capacity change from 0 to 524287999 [ 102.895935][ T975] usb 3-1: Product: syz [ 102.900679][ T975] usb 3-1: Manufacturer: syz [ 102.905289][ T975] usb 3-1: SerialNumber: syz [ 102.915166][ T6337] buffer_io_error: 39 callbacks suppressed [ 102.915181][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.925783][ T975] usb 3-1: config 0 descriptor?? [ 103.059831][ T975] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 103.077756][ T5893] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 103.086338][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.094309][ T5893] usb 2-1: config 0 has no interface number 0 [ 103.102513][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 103.113211][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.176467][ T6342] trusted_key: encrypted_key: key user:syz not found [ 103.626868][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.646613][ T5893] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 103.666672][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.666748][ T5936] bond0: (slave bond_slave_0): interface is now down [ 103.674890][ T6341] netlink: 'syz.4.118': attribute type 10 has an invalid length. [ 103.697667][ T5893] usb 2-1: Product: syz [ 103.702041][ T5893] usb 2-1: Manufacturer: syz [ 103.706720][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.716027][ T5893] usb 2-1: SerialNumber: syz [ 103.723983][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.733895][ T5893] usb 2-1: config 0 descriptor?? [ 103.749642][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.759264][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.770109][ T6337] ldm_validate_partition_table(): Disk read failed. [ 103.777173][ T5936] bond0: (slave bond_slave_1): interface is now down [ 103.786241][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.806715][ T6341] bond0: (slave netdevsim0): no link monitoring support [ 103.813972][ T6337] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.825701][ T6337] Dev loop6: unable to read RDB block 0 [ 103.832453][ T6337] loop6: unable to read partition table [ 103.838599][ T6337] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 103.868157][ T972] usb 3-1: USB disconnect, device number 3 [ 103.925040][ T6341] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 103.955772][ T5893] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 103.994165][ T5893] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 104.026348][ T5893] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 104.052302][ T5893] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 104.089357][ T5893] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 105.710927][ T52] bond0: (slave bond_slave_0): interface is now down [ 105.916006][ T6334] netlink: 225 bytes leftover after parsing attributes in process `syz.1.117'. [ 106.789277][ T52] bond0: (slave bond_slave_1): interface is now down [ 106.821691][ T30] audit: type=1400 audit(1747457764.358:246): avc: denied { sys_module } for pid=6354 comm="syz.3.121" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.121188][ T5863] usb 2-1: USB disconnect, device number 5 [ 108.131396][ T5863] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 108.153674][ T5863] keyspan 2-1:0.133: device disconnected [ 108.191910][ T30] audit: type=1400 audit(1747457764.358:247): avc: denied { kexec_image_load } for pid=6331 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 108.264925][ T30] audit: type=1400 audit(1747457764.448:248): avc: denied { ioctl } for pid=6331 comm="syz.1.117" path="socket:[9130]" dev="sockfs" ino=9130 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.300224][ T972] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 108.385638][ T30] audit: type=1400 audit(1747457766.878:249): avc: denied { connect } for pid=6366 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.503944][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 108.521199][ T30] audit: type=1400 audit(1747457767.038:250): avc: denied { create } for pid=6372 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.540846][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 108.711238][ T972] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 108.726884][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.757421][ T36] bond0: (slave bond_slave_0): interface is now down [ 108.771175][ T36] bond0: (slave bond_slave_1): interface is now down [ 108.829700][ T36] bond0: now running without any active interface! [ 108.896680][ T972] usb 3-1: config 0 descriptor?? [ 108.913741][ T6362] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.929610][ T30] audit: type=1400 audit(1747457767.428:251): avc: denied { ioctl } for pid=6361 comm="syz.2.123" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.040370][ T975] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 109.151525][ T5863] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.192123][ T975] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 109.240728][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 109.871678][ T6381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.129'. [ 109.955557][ T972] cherry 0003:046A:0023.0001: unbalanced collection at end of report description [ 109.965149][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.977500][ T972] cherry 0003:046A:0023.0001: probe with driver cherry failed with error -22 [ 110.167782][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 110.366014][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 110.380645][ T975] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 110.399141][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.410651][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.438514][ T975] usb 1-1: Product: syz [ 110.447992][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.460138][ T975] usb 1-1: Manufacturer: syz [ 110.470153][ T975] usb 1-1: SerialNumber: syz [ 110.484629][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 110.512041][ T975] usb 1-1: config 0 descriptor?? [ 110.538862][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 110.550920][ T6367] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.559853][ T975] option 1-1:0.0: GSM modem (1-port) converter detected [ 110.593916][ T5863] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 110.625384][ T6392] trusted_key: encrypted_key: key user:syz not found [ 111.013162][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.093316][ T5863] usb 2-1: config 0 descriptor?? [ 111.127672][ T975] usb 1-1: USB disconnect, device number 4 [ 111.137501][ T6364] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 111.143071][ T975] option 1-1:0.0: device disconnected [ 111.469300][ T972] usb 3-1: USB disconnect, device number 4 [ 111.520022][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 111.543282][ T5893] usb 2-1: USB disconnect, device number 6 [ 111.586314][ T6395] syz.4.132 uses obsolete (PF_INET,SOCK_PACKET) [ 111.751301][ T30] audit: type=1400 audit(1747457770.258:252): avc: denied { ioctl } for pid=6398 comm="syz.0.134" path="socket:[9614]" dev="sockfs" ino=9614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.904219][ T30] audit: type=1400 audit(1747457770.418:253): avc: denied { create } for pid=6398 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.995714][ T6403] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.017347][ T30] audit: type=1400 audit(1747457770.498:254): avc: denied { mount } for pid=6399 comm="syz.1.135" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.210310][ T30] audit: type=1400 audit(1747457770.508:255): avc: denied { unlink } for pid=6399 comm="syz.1.135" name="#1" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.254439][ T30] audit: type=1400 audit(1747457770.518:256): avc: denied { mount } for pid=6399 comm="syz.1.135" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.381737][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.801527][ T30] audit: type=1400 audit(1747457770.638:257): avc: denied { read write } for pid=6407 comm="syz.4.137" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.805506][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.864195][ T30] audit: type=1400 audit(1747457770.638:258): avc: denied { open } for pid=6407 comm="syz.4.137" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.936833][ T30] audit: type=1400 audit(1747457771.368:259): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.962885][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.010344][ T5892] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 113.019435][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.052955][ T5892] usb 5-1: config 0 descriptor?? [ 113.198871][ T30] audit: type=1400 audit(1747457771.678:260): avc: denied { mount } for pid=6414 comm="syz.1.139" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.320385][ T972] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.371709][ T6426] trusted_key: encrypted_key: key user:syz not found [ 113.825430][ T5892] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 113.870800][ T972] usb 1-1: Using ep0 maxpacket: 32 [ 113.878794][ T972] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 114.128517][ T972] usb 1-1: config 0 has no interface number 0 [ 114.148480][ T972] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 114.160304][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.172111][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.197520][ T5892] pyra 0003:1E7D:2CF6.0002: item fetching failed at offset 6/7 [ 114.230960][ T5892] pyra 0003:1E7D:2CF6.0002: parse failed [ 114.236723][ T5892] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -22 [ 114.237218][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.263956][ T972] usb 1-1: Product: syz [ 114.268128][ T972] usb 1-1: Manufacturer: syz [ 114.298539][ T972] usb 1-1: SerialNumber: syz [ 114.322459][ T972] usb 1-1: config 0 descriptor?? [ 114.367839][ T972] smsc95xx v2.0.0 [ 114.375248][ T5863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5863 comm=kworker/1:4 [ 114.403891][ T5892] usb 5-1: USB disconnect, device number 5 [ 114.437790][ T6432] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 114.661842][ T6432] sp0: Synchronizing with TNC [ 114.677585][ T30] audit: type=1400 audit(1747457773.188:261): avc: denied { bind } for pid=6439 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.840581][ T30] audit: type=1400 audit(1747457773.278:262): avc: denied { write } for pid=6439 comm="syz.2.146" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.374719][ T6448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.147'. [ 115.781260][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.790042][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.607980][ T972] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 116.658725][ T972] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 117.297572][ T972] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 117.316662][ T972] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 117.331705][ T972] usb 1-1: USB disconnect, device number 5 [ 117.662969][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 117.662984][ T30] audit: type=1400 audit(1747457776.168:272): avc: denied { setopt } for pid=6465 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.953161][ T6474] trusted_key: encrypted_key: key user:syz not found [ 118.054752][ T30] audit: type=1400 audit(1747457776.568:273): avc: denied { mounton } for pid=6473 comm="syz.0.157" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 118.106113][ T6475] syz.0.157: attempt to access beyond end of device [ 118.106113][ T6475] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 118.210405][ T975] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.432282][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 118.445955][ T975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 5 [ 118.465265][ T975] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 118.481928][ T975] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 118.512416][ T975] usb 3-1: Product: syz [ 118.516765][ T975] usb 3-1: Manufacturer: syz [ 118.532340][ T975] usb 3-1: SerialNumber: syz [ 118.554172][ T975] usb 3-1: config 0 descriptor?? [ 118.572817][ T6472] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.856480][ T6484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.158'. [ 119.550387][ T975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.699466][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.711776][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.724593][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 119.734745][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.743863][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.770341][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 119.784478][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.796682][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.807133][ T975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 120.152796][ T5911] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.174030][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.185059][ T6499] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 120.187004][ T975] usb 5-1: config 0 descriptor?? [ 120.295240][ T5892] usb 3-1: USB disconnect, device number 5 [ 120.321639][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.332795][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.342643][ T5911] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 120.353197][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.364171][ T5911] usb 1-1: config 0 descriptor?? [ 120.576675][ T6492] warning: `syz.0.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.579223][ T30] audit: type=1400 audit(1747457779.088:274): avc: denied { append } for pid=6502 comm="syz.1.163" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.609534][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 120.626382][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 120.645233][ T5911] usb 1-1: USB disconnect, device number 6 [ 120.648752][ T6503] xt_hashlimit: max too large, truncated to 1048576 [ 120.683040][ T975] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 120.704930][ T30] audit: type=1400 audit(1747457779.108:275): avc: denied { bind } for pid=6491 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.706869][ T6503] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 120.757906][ T6503] xt_hashlimit: max too large, truncated to 1048576 [ 120.761599][ T30] audit: type=1400 audit(1747457779.108:276): avc: denied { name_bind } for pid=6491 comm="syz.0.161" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 120.768794][ T6503] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 120.863753][ T30] audit: type=1400 audit(1747457779.108:277): avc: denied { node_bind } for pid=6491 comm="syz.0.161" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 121.171251][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.190497][ T30] audit: type=1400 audit(1747457779.108:278): avc: denied { write } for pid=6491 comm="syz.0.161" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.190678][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.266364][ T30] audit: type=1400 audit(1747457779.108:279): avc: denied { name_connect } for pid=6491 comm="syz.0.161" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 121.317406][ T975] usb 5-1: USB disconnect, device number 6 [ 121.368754][ T30] audit: type=1400 audit(1747457779.528:280): avc: denied { read write } for pid=6488 comm="syz.4.159" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.394025][ T30] audit: type=1400 audit(1747457779.528:281): avc: denied { open } for pid=6488 comm="syz.4.159" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.273836][ T6522] input: syz0 as /devices/virtual/input/input6 [ 122.298525][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 122.511093][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 122.780382][ T6534] trusted_key: encrypted_key: key user:syz not found [ 123.207188][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 123.207204][ T30] audit: type=1400 audit(1747457781.718:285): avc: denied { write } for pid=6535 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.763695][ T30] audit: type=1400 audit(1747457782.178:286): avc: denied { bind } for pid=6537 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.101759][ T30] audit: type=1400 audit(1747457782.178:287): avc: denied { listen } for pid=6537 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.101801][ T30] audit: type=1400 audit(1747457782.188:288): avc: denied { getopt } for pid=6537 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.101836][ T30] audit: type=1326 audit(1747457782.188:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6537 comm="syz.3.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa56718e969 code=0x0 [ 124.631490][ T6547] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.174'. [ 124.961656][ T30] audit: type=1400 audit(1747457783.298:290): avc: denied { mount } for pid=6554 comm="syz.3.176" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 125.211652][ T6563] binfmt_misc: register: failed to install interpreter file ./file0 [ 126.764934][ T30] audit: type=1400 audit(1747457784.878:291): avc: denied { create } for pid=6565 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 126.792246][ T30] audit: type=1400 audit(1747457784.878:292): avc: denied { setopt } for pid=6565 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 126.824123][ T30] audit: type=1400 audit(1747457784.878:293): avc: denied { ioctl } for pid=6565 comm="syz.0.179" path="socket:[10056]" dev="sockfs" ino=10056 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 126.896862][ T6578] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.812650][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 128.821140][ T30] audit: type=1400 audit(1747457787.328:294): avc: denied { relabelfrom } for pid=6588 comm="syz.1.184" name="PACKET" dev="sockfs" ino=10088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.860326][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.869715][ T6589] SELinux: Context system_u:object_r:tmpreaper_exec_t:s0 is not valid (left unmapped). [ 129.011024][ T30] audit: type=1400 audit(1747457787.528:295): avc: denied { relabelto } for pid=6588 comm="syz.1.184" name="PACKET" dev="sockfs" ino=10088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:tmpreaper_exec_t:s0" [ 129.038798][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.125227][ T30] audit: type=1400 audit(1747457787.628:296): avc: denied { setopt } for pid=6588 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.157796][ T5863] usb 3-1: device descriptor read/64, error -71 [ 129.368503][ T6597] trusted_key: encrypted_key: key user:syz not found [ 129.443625][ T5863] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.674274][ T5863] usb 3-1: device descriptor read/64, error -71 [ 130.030601][ T5863] usb usb3-port1: attempt power cycle [ 131.800202][ T6620] wg1: entered promiscuous mode [ 131.805158][ T6620] wg1: entered allmulticast mode [ 132.840568][ T6632] wg1: entered promiscuous mode [ 132.845556][ T6632] wg1: entered allmulticast mode [ 132.931074][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937524][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.666938][ T6636] netlink: 'syz.3.195': attribute type 21 has an invalid length. [ 133.674990][ T6636] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 133.746928][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 133.759586][ T6638] Lens B: ================= START STATUS ================= [ 133.767438][ T6638] Lens B: Focus, Absolute: 0 [ 133.773157][ T6638] Lens B: ================== END STATUS ================== [ 134.821939][ T6647] trusted_key: encrypted_key: key user:syz not found [ 135.679645][ T6653] FAULT_INJECTION: forcing a failure. [ 135.679645][ T6653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.701251][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.4.201 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 135.701276][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.701286][ T6653] Call Trace: [ 135.701292][ T6653] [ 135.701298][ T6653] dump_stack_lvl+0x16c/0x1f0 [ 135.701328][ T6653] should_fail_ex+0x512/0x640 [ 135.701357][ T6653] _copy_from_user+0x2e/0xd0 [ 135.701383][ T6653] core_sys_select+0x35a/0xbe0 [ 135.701417][ T6653] ? __pfx_core_sys_select+0x10/0x10 [ 135.701468][ T6653] ? set_user_sigmask+0x21b/0x2b0 [ 135.701489][ T6653] ? __pfx_set_user_sigmask+0x10/0x10 [ 135.701515][ T6653] do_pselect.constprop.0+0x19f/0x1e0 [ 135.701544][ T6653] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 135.701581][ T6653] __x64_sys_pselect6+0x182/0x240 [ 135.701609][ T6653] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 135.701635][ T6653] ? rcu_is_watching+0x12/0xc0 [ 135.701664][ T6653] do_syscall_64+0xcd/0x260 [ 135.701692][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.701709][ T6653] RIP: 0033:0x7f33e178e969 [ 135.701724][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.701746][ T6653] RSP: 002b:00007f33df5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 135.701764][ T6653] RAX: ffffffffffffffda RBX: 00007f33e19b6080 RCX: 00007f33e178e969 [ 135.701774][ T6653] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 135.701784][ T6653] RBP: 00007f33df5d5090 R08: 0000200000000300 R09: 0000000000000000 [ 135.701795][ T6653] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 135.701806][ T6653] R13: 0000000000000000 R14: 00007f33e19b6080 R15: 00007fff686cfe68 [ 135.701829][ T6653] [ 136.513085][ T6659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.203'. [ 138.524034][ T30] audit: type=1400 audit(1747457796.628:297): avc: denied { accept } for pid=6665 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 139.035238][ T30] audit: type=1400 audit(1747457797.388:298): avc: denied { map } for pid=6668 comm="syz.1.198" path="socket:[10216]" dev="sockfs" ino=10216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 139.370706][ T30] audit: type=1400 audit(1747457797.868:299): avc: denied { connect } for pid=6683 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.970753][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 140.188786][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.416734][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.648655][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.655954][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 140.665520][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.709457][ T9] usb 1-1: config 0 descriptor?? [ 140.767664][ T6696] trusted_key: encrypted_key: key user:syz not found [ 141.601385][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.668446][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.018256][ T30] audit: type=1400 audit(1747457800.528:300): avc: denied { compute_member } for pid=6707 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 142.092915][ T6709] lo speed is unknown, defaulting to 1000 [ 142.098831][ T6709] lo speed is unknown, defaulting to 1000 [ 142.106914][ T6709] lo speed is unknown, defaulting to 1000 [ 142.116297][ T6709] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.128716][ T6709] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 142.707424][ T6709] lo speed is unknown, defaulting to 1000 [ 142.714887][ T6709] lo speed is unknown, defaulting to 1000 [ 142.722155][ T6709] lo speed is unknown, defaulting to 1000 [ 142.728638][ T6709] lo speed is unknown, defaulting to 1000 [ 142.735314][ T6709] lo speed is unknown, defaulting to 1000 [ 142.990391][ T30] audit: type=1400 audit(1747457800.588:301): avc: denied { ioctl } for pid=6697 comm="syz.1.214" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 143.295933][ T30] audit: type=1400 audit(1747457800.608:302): avc: denied { create } for pid=6707 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.353972][ T30] audit: type=1400 audit(1747457800.608:303): avc: denied { setopt } for pid=6707 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.507782][ T30] audit: type=1400 audit(1747457800.658:304): avc: denied { connect } for pid=6707 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.528140][ T30] audit: type=1400 audit(1747457801.868:305): avc: denied { read write } for pid=6712 comm="syz.3.217" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.575054][ T30] audit: type=1400 audit(1747457801.868:306): avc: denied { open } for pid=6712 comm="syz.3.217" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.603400][ T30] audit: type=1400 audit(1747457801.868:307): avc: denied { ioctl } for pid=6712 comm="syz.3.217" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 144.097505][ T30] audit: type=1400 audit(1747457802.608:308): avc: denied { connect } for pid=6719 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.160871][ T6725] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 144.223232][ T6725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.221'. [ 144.247303][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 144.253519][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 144.627028][ T9] usb 1-1: USB disconnect, device number 7 [ 144.633787][ T6725] team0: Port device geneve0 added [ 144.921578][ T6738] trusted_key: encrypted_key: key user:syz not found [ 145.500081][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'. [ 146.373080][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 146.464816][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.582912][ T30] audit: type=1400 audit(1747457805.098:309): avc: denied { read write } for pid=6754 comm="syz.2.231" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 146.611236][ T30] audit: type=1400 audit(1747457805.128:310): avc: denied { open } for pid=6754 comm="syz.2.231" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 147.054316][ T30] audit: type=1400 audit(1747457805.568:311): avc: denied { write } for pid=6760 comm="syz.0.232" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 147.077573][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.089542][ T6746] lo speed is unknown, defaulting to 1000 [ 147.194483][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 147.212216][ T6763] Lens B: ================= START STATUS ================= [ 147.219702][ T6763] Lens B: Focus, Absolute: 0 [ 147.224867][ T6763] Lens B: ================== END STATUS ================== [ 148.541908][ T30] audit: type=1400 audit(1747457806.958:312): avc: denied { map } for pid=6770 comm="syz.2.236" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 148.729606][ T30] audit: type=1400 audit(1747457806.968:313): avc: denied { execute } for pid=6770 comm="syz.2.236" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 148.848743][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.099862][ T6789] ALSA: mixer_oss: invalid OSS volume '' [ 149.780874][ T6797] trusted_key: encrypted_key: key user:syz not found [ 149.957688][ T30] audit: type=1400 audit(1747457808.468:314): avc: denied { connect } for pid=6783 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 150.002798][ T6794] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 150.002798][ T6794] The task syz.3.242 (6794) triggered the difference, watch for misbehavior. [ 150.024149][ T6794] overlayfs: failed to resolve './file0': -2 [ 150.221068][ T30] audit: type=1400 audit(1747457808.738:315): avc: denied { write } for pid=6801 comm="syz.4.244" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 150.446118][ T30] audit: type=1400 audit(1747457808.768:316): avc: denied { map } for pid=6801 comm="syz.4.244" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.900642][ T5810] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.250890][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 152.399037][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 152.472380][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.488934][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.499221][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 152.510772][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 152.616794][ T5810] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 152.627039][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.637776][ T5810] usb 1-1: config 0 descriptor?? [ 152.643791][ T6815] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.946965][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 152.983187][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.992008][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.120413][ T30] audit: type=1400 audit(1747457811.568:317): avc: denied { connect } for pid=6835 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.161107][ T9] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 153.246461][ T5819] Bluetooth: hci5: unexpected event 0x12 length: 1 < 8 [ 153.254165][ T5819] Bluetooth: hci5: Malformed Event: 0x02 [ 153.260481][ T5819] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 153.260656][ T5819] Bluetooth: hci5: connection err: -111 [ 153.325189][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 153.384418][ T6842] trusted_key: encrypted_key: key user:syz not found [ 153.442031][ T9] usb 3-1: can't read configurations, error -61 [ 153.531720][ T54] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 153.549634][ T5893] usb 1-1: USB disconnect, device number 8 [ 154.228219][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 155.020931][ T9] usb 3-1: too many configurations: 206, using maximum allowed: 8 [ 155.047674][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 155.174914][ T9] usb 3-1: can't read configurations, error -61 [ 155.189915][ T9] usb usb3-port1: attempt power cycle [ 155.612570][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.888811][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 156.098724][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.148732][ T9] usb 3-1: device not accepting address 11, error -71 [ 156.164555][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.176860][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.190106][ T5893] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 156.201512][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.215772][ T5893] usb 4-1: config 0 descriptor?? [ 156.478491][ T6878] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 156.485196][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.491368][ T5810] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.494056][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 156.511448][ T6878] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(17) [ 156.518067][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.526585][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 156.534635][ T6878] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 156.541279][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.549230][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 156.559492][ T6878] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(21) [ 156.566123][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.574003][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 156.582691][ T6878] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(23) [ 156.589307][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 156.597440][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 156.604670][ T6878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.614069][ T6878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.625890][ T6878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.636933][ T6878] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(31) [ 156.643571][ T6878] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.650764][ T5893] thrustmaster 0003:044F:B65A.0004: bogus close delimiter [ 156.651707][ T6878] vhci_hcd vhci_hcd.0: Device attached [ 156.664365][ T5893] thrustmaster 0003:044F:B65A.0004: item 0 0 2 10 parsing failed [ 156.673078][ T5893] thrustmaster 0003:044F:B65A.0004: parse failed [ 156.679625][ T5893] thrustmaster 0003:044F:B65A.0004: probe with driver thrustmaster failed with error -22 [ 156.689606][ T5911] vhci_hcd: vhci_device speed not set [ 156.701299][ T5810] usb 1-1: config 8 has an invalid interface number: 21 but max is 1 [ 156.728488][ T5810] usb 1-1: config 8 has an invalid interface number: 80 but max is 1 [ 156.749506][ T6881] vhci_hcd: connection closed [ 156.749693][ T6883] vhci_hcd: connection closed [ 156.753542][ T5942] vhci_hcd: stop threads [ 156.755345][ T6879] vhci_hcd: connection closed [ 156.759199][ T5942] vhci_hcd: release socket [ 156.763935][ T6887] vhci_hcd: connection closed [ 156.768752][ T5810] usb 1-1: config 8 has no interface number 0 [ 156.772968][ T6885] vhci_hcd: connection closed [ 156.774070][ T5911] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 156.780026][ T5810] usb 1-1: config 8 has no interface number 1 [ 156.803728][ T5942] vhci_hcd: disconnect device [ 156.810406][ T6880] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 156.821087][ T5942] vhci_hcd: stop threads [ 156.829682][ T5942] vhci_hcd: release socket [ 156.832043][ T6893] team0: Port device gtp0 added [ 156.835327][ T5942] vhci_hcd: disconnect device [ 156.849461][ T5810] usb 1-1: config 8 interface 21 has no altsetting 0 [ 156.857898][ T5810] usb 1-1: config 8 interface 80 has no altsetting 0 [ 156.857922][ T5942] vhci_hcd: stop threads [ 156.872459][ T5942] vhci_hcd: release socket [ 156.875313][ T30] audit: type=1400 audit(1747457815.388:318): avc: denied { write } for pid=6862 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.877386][ T5942] vhci_hcd: disconnect device [ 156.897948][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.908237][ T5810] usb 1-1: New USB device found, idVendor=7da9, idProduct=ddb2, bcdDevice=5f.52 [ 156.929948][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.930829][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.946201][ T5942] vhci_hcd: stop threads [ 156.952171][ T5810] usb 1-1: Product: syz [ 156.973359][ T5942] vhci_hcd: release socket [ 156.977968][ T5942] vhci_hcd: disconnect device [ 157.009645][ T5942] vhci_hcd: stop threads [ 157.031530][ T972] usb 4-1: USB disconnect, device number 4 [ 157.032204][ T5810] usb 1-1: Manufacturer: syz [ 157.044567][ T5810] usb 1-1: SerialNumber: syz [ 157.045279][ T5942] vhci_hcd: release socket [ 157.087057][ T5942] vhci_hcd: disconnect device [ 157.152718][ T30] audit: type=1400 audit(1747457815.668:319): avc: denied { create } for pid=6899 comm="syz.2.268" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.194404][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.201248][ T30] audit: type=1400 audit(1747457815.678:320): avc: denied { rename } for pid=6899 comm="syz.2.268" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.244536][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.254902][ T30] audit: type=1400 audit(1747457815.678:321): avc: denied { mounton } for pid=6899 comm="syz.2.268" path="/53/file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.288280][ T6902] netlink: 'syz.2.269': attribute type 32 has an invalid length. [ 157.312282][ T975] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.328531][ T5810] rndis_host 1-1:8.21: skipping garbage [ 157.340300][ T5810] usb 1-1: bad CDC descriptors [ 157.363898][ T5810] usb 1-1: USB disconnect, device number 9 [ 157.397157][ T6889] vhci_hcd: connection closed [ 157.398139][ T1140] vhci_hcd: stop threads [ 157.456130][ T1140] vhci_hcd: release socket [ 157.470867][ T1140] vhci_hcd: disconnect device [ 157.473917][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 157.498185][ T975] usb 2-1: config index 0 descriptor too short (expected 239, got 36) [ 157.508808][ T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.656552][ T975] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 157.680199][ T975] usb 2-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 157.697534][ T975] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.709594][ T975] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 157.719943][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.744953][ T6913] netlink: 80 bytes leftover after parsing attributes in process `syz.3.273'. [ 157.763834][ T975] usb 2-1: config 0 descriptor?? [ 157.786680][ T975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 158.052227][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.738713][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 158.746590][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 158.759232][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 158.773069][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 158.783557][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.884522][ T24] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 158.893734][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.901831][ T24] usb 3-1: Product: syz [ 158.906003][ T24] usb 3-1: Manufacturer: syz [ 158.915178][ T30] audit: type=1400 audit(1747457817.428:322): avc: denied { create } for pid=6927 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.934538][ T24] usb 3-1: SerialNumber: syz [ 158.941991][ T24] usb 3-1: config 0 descriptor?? [ 158.950015][ T24] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 159.080583][ T972] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.980559][ T972] usb 1-1: device descriptor read/64, error -71 [ 159.985684][ T24] usb 3-1: USB disconnect, device number 13 [ 160.170399][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.250431][ T972] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.300367][ T5810] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.342761][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.349543][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 160.359887][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.369507][ T9] usb 5-1: config 0 descriptor?? [ 160.380454][ T972] usb 1-1: device descriptor read/64, error -71 [ 160.461835][ T5810] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.471122][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.484690][ T5810] usb 4-1: config 0 descriptor?? [ 160.496042][ T5810] cp210x 4-1:0.0: cp210x converter detected [ 160.503458][ T972] usb usb1-port1: attempt power cycle [ 160.782544][ T5819] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 161.004111][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 161.022425][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 161.033563][ T972] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 161.044193][ T9] usb 5-1: USB disconnect, device number 7 [ 161.065096][ T975] usb 2-1: USB disconnect, device number 7 [ 161.065182][ T972] usb 1-1: device descriptor read/8, error -71 [ 161.100093][ T6945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.120936][ T6945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.136329][ T5810] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 161.152982][ T5810] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 161.172033][ T5810] usb 4-1: cp210x converter now attached to ttyUSB0 [ 161.190796][ T5810] usb 4-1: USB disconnect, device number 5 [ 161.204723][ T5810] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.221087][ T5810] cp210x 4-1:0.0: device disconnected [ 161.293316][ T6955] netlink: 80 bytes leftover after parsing attributes in process `syz.1.285'. [ 161.320322][ T972] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 161.352445][ T972] usb 1-1: device descriptor read/8, error -71 [ 161.461708][ T972] usb usb1-port1: unable to enumerate USB device [ 161.564094][ T30] audit: type=1400 audit(1747457820.078:323): avc: denied { ioctl } for pid=6965 comm="syz.4.289" path="socket:[11920]" dev="sockfs" ino=11920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.592491][ T30] audit: type=1400 audit(1747457820.098:324): avc: denied { bind } for pid=6965 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.632957][ T6968] FAULT_INJECTION: forcing a failure. [ 161.632957][ T6968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.679073][ T6968] CPU: 1 UID: 0 PID: 6968 Comm: syz.1.288 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 161.679104][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.679115][ T6968] Call Trace: [ 161.679121][ T6968] [ 161.679128][ T6968] dump_stack_lvl+0x16c/0x1f0 [ 161.679159][ T6968] should_fail_ex+0x512/0x640 [ 161.679187][ T6968] _copy_from_user+0x2e/0xd0 [ 161.679215][ T6968] video_usercopy+0xedd/0x1720 [ 161.679240][ T6968] ? __pfx___video_do_ioctl+0x10/0x10 [ 161.679261][ T6968] ? selinux_bprm_creds_for_exec+0xb80/0xc60 [ 161.679290][ T6968] ? __pfx_video_usercopy+0x10/0x10 [ 161.679331][ T6968] v4l2_ioctl+0x1ba/0x250 [ 161.679352][ T6968] ? __pfx_v4l2_ioctl+0x10/0x10 [ 161.679374][ T6968] __x64_sys_ioctl+0x193/0x200 [ 161.679401][ T6968] do_syscall_64+0xcd/0x260 [ 161.679429][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.679448][ T6968] RIP: 0033:0x7f0eb438e969 [ 161.679463][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.679480][ T6968] RSP: 002b:00007f0eb5161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.679498][ T6968] RAX: ffffffffffffffda RBX: 00007f0eb45b5fa0 RCX: 00007f0eb438e969 [ 161.679510][ T6968] RDX: 0000200000000240 RSI: 000000004014563c RDI: 0000000000000003 [ 161.679521][ T6968] RBP: 00007f0eb5161090 R08: 0000000000000000 R09: 0000000000000000 [ 161.679531][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.679542][ T6968] R13: 0000000000000000 R14: 00007f0eb45b5fa0 R15: 00007ffd1bd9fac8 [ 161.679566][ T6968] [ 162.164814][ T5911] vhci_hcd: vhci_device speed not set [ 162.430645][ T6969] overlay: ./file0 is not a directory [ 162.693414][ T30] audit: type=1400 audit(1747457821.208:325): avc: denied { ioctl } for pid=6973 comm="syz.3.290" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.872599][ T6982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.293'. [ 162.887800][ T6982] QAT: Invalid ioctl 1075883590 [ 163.020601][ T6982] QAT: Invalid ioctl 1075883590 [ 163.034675][ T6985] QAT: Invalid ioctl 35123 [ 163.042426][ T6982] QAT: Invalid ioctl 1075883590 [ 163.047387][ T30] audit: type=1400 audit(1747457821.548:326): avc: denied { create } for pid=6980 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.052365][ T6982] QAT: Invalid ioctl 1075883590 [ 163.087032][ T6982] QAT: Invalid ioctl 1075883590 [ 163.092659][ T6982] QAT: Invalid ioctl 1075883590 [ 163.097600][ T6982] QAT: Invalid ioctl 1075883590 [ 163.104865][ T6982] QAT: Invalid ioctl 1075883590 [ 163.109895][ T6982] QAT: Invalid ioctl 1075883590 [ 163.130381][ T975] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.716097][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 163.743202][ T975] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.757092][ T975] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.768201][ T975] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.778054][ T975] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 163.788304][ T5810] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 163.797968][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.823572][ T975] usb 2-1: config 0 descriptor?? [ 163.849703][ T6993] netlink: 80 bytes leftover after parsing attributes in process `syz.0.296'. [ 163.921184][ T5864] usb usb42-port1: attempt power cycle [ 163.987506][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 164.005448][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 164.017393][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 164.037227][ T5810] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 164.069028][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.107754][ T5810] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 164.131675][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.140399][ T5810] usb 3-1: Product: syz [ 164.148048][ T5810] usb 3-1: Manufacturer: syz [ 164.305241][ T975] apple 0003:05AC:0247.0005: unexpected long global item [ 164.420597][ T7003] netlink: 'syz.3.297': attribute type 21 has an invalid length. [ 164.428551][ T7003] netlink: 156 bytes leftover after parsing attributes in process `syz.3.297'. [ 164.442726][ T7003] netlink: 'syz.3.297': attribute type 21 has an invalid length. [ 164.450712][ T7003] netlink: 156 bytes leftover after parsing attributes in process `syz.3.297'. [ 164.814735][ T975] apple 0003:05AC:0247.0005: parse failed [ 164.820650][ T5810] usb 3-1: SerialNumber: syz [ 164.825932][ T975] apple 0003:05AC:0247.0005: probe with driver apple failed with error -22 [ 164.855615][ T5810] usb 3-1: config 0 descriptor?? [ 164.894741][ T5810] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 165.021239][ T5864] usb usb42-port1: unable to enumerate USB device [ 165.021248][ T5862] usb 2-1: USB disconnect, device number 8 [ 165.074504][ T6991] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 165.081155][ T6991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.094676][ T6991] vhci_hcd vhci_hcd.0: Device attached [ 165.104878][ T7000] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 165.111497][ T7000] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.200665][ T5864] usb 3-1: USB disconnect, device number 14 [ 165.237279][ T7000] vhci_hcd vhci_hcd.0: Device attached [ 165.280461][ T9] vhci_hcd: vhci_device speed not set [ 165.346055][ T7022] capability: warning: `syz.1.301' uses 32-bit capabilities (legacy support in use) [ 165.357107][ T9] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 165.550367][ T5810] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 165.602696][ T7018] lo speed is unknown, defaulting to 1000 [ 165.667540][ T7012] vhci_hcd: connection reset by peer [ 165.673235][ T7015] vhci_hcd: connection closed [ 165.673509][ T5938] vhci_hcd: stop threads [ 165.684731][ T5938] vhci_hcd: release socket [ 165.689294][ T5938] vhci_hcd: disconnect device [ 165.697050][ T5938] vhci_hcd: stop threads [ 165.702458][ T5938] vhci_hcd: release socket [ 165.707074][ T5938] vhci_hcd: disconnect device [ 165.724790][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 165.760835][ T5810] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 165.807850][ T5810] usb 1-1: config 0 has no interface number 0 [ 166.110684][ T5810] usb 1-1: config 0 interface 184 has no altsetting 0 [ 166.124782][ T5810] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 166.160303][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.193245][ T5810] usb 1-1: Product: syz [ 166.205871][ T5810] usb 1-1: Manufacturer: syz [ 166.210985][ T5810] usb 1-1: SerialNumber: syz [ 166.236986][ T5810] usb 1-1: config 0 descriptor?? [ 166.257552][ T5810] smsc75xx v1.0.0 [ 166.437415][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 166.450515][ T7038] Lens B: ================= START STATUS ================= [ 166.458018][ T7038] Lens B: Focus, Absolute: 0 [ 166.462918][ T7038] Lens B: ================== END STATUS ================== [ 167.356859][ T5810] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 167.541203][ T7049] netlink: 80 bytes leftover after parsing attributes in process `syz.4.308'. [ 167.546323][ T5810] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 167.560460][ T5810] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 167.574903][ T5810] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 167.586745][ T5810] usb 1-1: USB disconnect, device number 14 [ 167.696368][ T30] audit: type=1400 audit(1747457826.198:327): avc: denied { shutdown } for pid=7044 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.520418][ T9] vhci_hcd: vhci_device speed not set [ 171.144491][ T7069] xt_hashlimit: size too large, truncated to 1048576 [ 171.661394][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 171.673526][ T7082] Lens B: ================= START STATUS ================= [ 171.681017][ T7082] Lens B: Focus, Absolute: 0 [ 171.685734][ T7082] Lens B: ================== END STATUS ================== [ 172.218930][ T7083] random: crng reseeded on system resumption [ 172.844289][ T7093] overlayfs: overlapping lowerdir path [ 172.933625][ T7094] overlay: Unknown parameter 'appraise_type' [ 173.630658][ T7105] netlink: 80 bytes leftover after parsing attributes in process `syz.0.324'. [ 173.849588][ T7108] FAULT_INJECTION: forcing a failure. [ 173.849588][ T7108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.862978][ T7108] CPU: 1 UID: 0 PID: 7108 Comm: syz.2.323 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 173.863002][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.863012][ T7108] Call Trace: [ 173.863018][ T7108] [ 173.863025][ T7108] dump_stack_lvl+0x16c/0x1f0 [ 173.863055][ T7108] should_fail_ex+0x512/0x640 [ 173.863083][ T7108] _copy_from_user+0x2e/0xd0 [ 173.863109][ T7108] copy_msghdr_from_user+0x98/0x160 [ 173.863130][ T7108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 173.863154][ T7108] ? kfree+0x252/0x4d0 [ 173.863176][ T7108] ? __pfx__kstrtoull+0x10/0x10 [ 173.863200][ T7108] ___sys_sendmsg+0xfe/0x1d0 [ 173.863220][ T7108] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.863262][ T7108] ? __pfx___might_resched+0x10/0x10 [ 173.863292][ T7108] __sys_sendmmsg+0x200/0x420 [ 173.863314][ T7108] ? __pfx___sys_sendmmsg+0x10/0x10 [ 173.863342][ T7108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.863379][ T7108] ? fput+0x70/0xf0 [ 173.863399][ T7108] ? ksys_write+0x1b9/0x240 [ 173.863424][ T7108] ? __pfx_ksys_write+0x10/0x10 [ 173.863448][ T7108] ? rcu_is_watching+0x12/0xc0 [ 173.863473][ T7108] __x64_sys_sendmmsg+0x9c/0x100 [ 173.863491][ T7108] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.863514][ T7108] do_syscall_64+0xcd/0x260 [ 173.863541][ T7108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.863559][ T7108] RIP: 0033:0x7f133ed8e969 [ 173.863574][ T7108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.863591][ T7108] RSP: 002b:00007f133fc96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 173.863608][ T7108] RAX: ffffffffffffffda RBX: 00007f133efb6160 RCX: 00007f133ed8e969 [ 173.863619][ T7108] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 173.863630][ T7108] RBP: 00007f133fc96090 R08: 0000000000000000 R09: 0000000000000000 [ 173.863640][ T7108] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 173.863651][ T7108] R13: 0000000000000000 R14: 00007f133efb6160 R15: 00007fff7667f178 [ 173.863674][ T7108] [ 174.747569][ T30] audit: type=1400 audit(1747457833.258:328): avc: denied { relabelfrom } for pid=7122 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 174.926725][ T30] audit: type=1400 audit(1747457833.258:329): avc: denied { relabelto } for pid=7122 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 175.698784][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 175.709290][ T7130] Lens B: ================= START STATUS ================= [ 175.717131][ T7130] Lens B: Focus, Absolute: 0 [ 175.721846][ T7130] Lens B: ================== END STATUS ================== [ 176.782323][ T30] audit: type=1400 audit(1747457835.298:330): avc: denied { write } for pid=7134 comm="syz.2.332" path="socket:[13053]" dev="sockfs" ino=13053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.814952][ T7137] Cannot find add_set index 1 as target [ 176.820684][ T7135] Bluetooth: MGMT ver 1.23 [ 176.828813][ T7135] Bluetooth: hci0: unsupported parameter 2327 [ 176.881096][ T7135] Bluetooth: hci0: unsupported parameter 256 [ 176.925142][ T7135] Bluetooth: hci0: unsupported parameter 2327 [ 176.931513][ T7135] Bluetooth: hci0: unsupported parameter 256 [ 177.217709][ T30] audit: type=1400 audit(1747457835.728:331): avc: denied { read } for pid=7141 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.248481][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 179.300986][ T30] audit: type=1400 audit(1747457837.808:332): avc: denied { mount } for pid=7141 comm="syz.2.334" name="/" dev="autofs" ino=13112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 179.496965][ T30] audit: type=1400 audit(1747457837.838:333): avc: denied { read } for pid=7141 comm="syz.2.334" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.650292][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 179.661722][ T7172] Lens B: ================= START STATUS ================= [ 179.669151][ T7172] Lens B: Focus, Absolute: 0 [ 179.674043][ T7172] Lens B: ================== END STATUS ================== [ 180.431917][ T30] audit: type=1400 audit(1747457837.838:334): avc: denied { open } for pid=7141 comm="syz.2.334" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.556800][ T30] audit: type=1400 audit(1747457837.838:335): avc: denied { ioctl } for pid=7141 comm="syz.2.334" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 180.581710][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.729461][ T30] audit: type=1400 audit(1747457839.118:336): avc: denied { ioctl } for pid=7173 comm="syz.0.343" path="socket:[13120]" dev="sockfs" ino=13120 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.905239][ T7186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.347'. [ 180.917204][ T5819] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 180.918108][ T30] audit: type=1400 audit(1747457839.438:337): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 180.945293][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.990019][ T30] audit: type=1400 audit(1747457839.488:338): avc: denied { watch watch_reads } for pid=7189 comm="syz.0.348" path="/66" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.012669][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.195977][ T30] audit: type=1400 audit(1747457839.548:339): avc: denied { create } for pid=7189 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.429718][ T7197] dummy0: entered promiscuous mode [ 181.640308][ T5864] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 182.634349][ T5864] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.847573][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.918590][ T5864] usb 3-1: config 0 descriptor?? [ 182.961822][ T5864] cp210x 3-1:0.0: cp210x converter detected [ 183.527250][ T30] audit: type=1400 audit(1747457841.908:340): avc: denied { append } for pid=7209 comm="syz.3.356" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 183.798698][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 183.809341][ T7216] Lens B: ================= START STATUS ================= [ 183.816947][ T7216] Lens B: Focus, Absolute: 0 [ 183.824741][ T7217] syz.2.349: attempt to access beyond end of device [ 183.824741][ T7217] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 183.925196][ T7216] Lens B: ================== END STATUS ================== [ 184.053223][ T5864] usb 3-1: cp210x converter now attached to ttyUSB0 [ 185.241159][ T5864] usb 3-1: USB disconnect, device number 15 [ 185.261201][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 185.378622][ T7237] FAULT_INJECTION: forcing a failure. [ 185.378622][ T7237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.468572][ T7237] CPU: 0 UID: 0 PID: 7237 Comm: syz.2.361 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 185.468600][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.468611][ T7237] Call Trace: [ 185.468616][ T7237] [ 185.468623][ T7237] dump_stack_lvl+0x16c/0x1f0 [ 185.468653][ T7237] should_fail_ex+0x512/0x640 [ 185.468682][ T7237] _copy_from_iter+0x2a4/0x15b0 [ 185.468712][ T7237] ? __alloc_skb+0x200/0x380 [ 185.468732][ T7237] ? __pfx__copy_from_iter+0x10/0x10 [ 185.468765][ T7237] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 185.468796][ T7237] netlink_sendmsg+0x829/0xdd0 [ 185.468823][ T7237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.468854][ T7237] ____sys_sendmsg+0xa98/0xc70 [ 185.468879][ T7237] ? copy_msghdr_from_user+0x10a/0x160 [ 185.468898][ T7237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.468934][ T7237] ___sys_sendmsg+0x134/0x1d0 [ 185.468954][ T7237] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.469006][ T7237] __sys_sendmsg+0x16d/0x220 [ 185.469025][ T7237] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.469052][ T7237] ? rcu_is_watching+0x12/0xc0 [ 185.469080][ T7237] do_syscall_64+0xcd/0x260 [ 185.469106][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.469124][ T7237] RIP: 0033:0x7f133ed8e969 [ 185.469138][ T7237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.469155][ T7237] RSP: 002b:00007f133fcd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.469172][ T7237] RAX: ffffffffffffffda RBX: 00007f133efb5fa0 RCX: 00007f133ed8e969 [ 185.469183][ T7237] RDX: 0000000004000080 RSI: 0000200000000480 RDI: 0000000000000003 [ 185.469193][ T7237] RBP: 00007f133fcd8090 R08: 0000000000000000 R09: 0000000000000000 [ 185.469204][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.469214][ T7237] R13: 0000000000000000 R14: 00007f133efb5fa0 R15: 00007fff7667f178 [ 185.469237][ T7237] [ 185.674806][ T5864] cp210x 3-1:0.0: device disconnected [ 186.113851][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 186.116679][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 186.120137][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 186.126483][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 186.134454][ T5815] Bluetooth: hci0: command 0x0406 tx timeout [ 186.482061][ T30] audit: type=1400 audit(1747457844.998:341): avc: denied { getopt } for pid=7248 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.837263][ T5125] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 186.966608][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.987335][ T7260] bridge0: entered allmulticast mode [ 187.013894][ T7265] bridge_slave_1: left promiscuous mode [ 187.110824][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.667507][ T7265] bridge_slave_0: left allmulticast mode [ 187.674554][ T7265] bridge_slave_0: left promiscuous mode [ 187.707687][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.804012][ T7272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.654003][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 189.746194][ T30] audit: type=1400 audit(1747457848.258:342): avc: denied { ioctl } for pid=7288 comm="syz.1.375" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.772218][ T7296] wg2: entered promiscuous mode [ 189.777099][ T7296] wg2: entered allmulticast mode [ 190.724886][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.3.384'. [ 190.795428][ T30] audit: type=1400 audit(1747457849.308:343): avc: denied { bind } for pid=7311 comm="syz.2.383" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.462478][ T30] audit: type=1400 audit(1747457849.308:344): avc: denied { name_bind } for pid=7311 comm="syz.2.383" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 191.619139][ T30] audit: type=1400 audit(1747457849.308:345): avc: denied { node_bind } for pid=7311 comm="syz.2.383" saddr=10.1.1.1 src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 191.869137][ T5810] IPVS: starting estimator thread 0... [ 191.877251][ T30] audit: type=1400 audit(1747457850.378:346): avc: denied { ioctl } for pid=7317 comm="syz.4.386" path="socket:[13507]" dev="sockfs" ino=13507 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.840342][ T7330] IPVS: using max 75 ests per chain, 180000 per kthread [ 192.848448][ T7323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.340715][ T7349] random: crng reseeded on system resumption [ 193.342944][ T30] audit: type=1400 audit(1747457851.858:347): avc: denied { append } for pid=7347 comm="syz.1.394" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 193.882737][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.889069][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.785293][ T7349] 9pnet: Could not find request transport: f¶imÑ#—&0x0000000000000005184467440737095516150x0000000000000007 [ 194.984595][ T7378] netlink: 'syz.4.402': attribute type 9 has an invalid length. [ 195.010312][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.402'. [ 195.053299][ T5942] ------------[ cut here ]------------ [ 195.059043][ T5942] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 195.116946][ T5942] WARNING: CPU: 0 PID: 5942 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x1ed/0x230 [ 195.127935][ T5942] Modules linked in: [ 195.132751][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u8:10 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 195.145073][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.155651][ T5942] Workqueue: bond0 bond_mii_monitor [ 195.160968][ T5942] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 195.166945][ T5942] Code: 05 ff ff ff e8 24 fa 68 f8 c6 05 8e 2a 1b 07 01 90 ba 38 00 00 00 48 c7 c6 a0 70 c1 8c 48 c7 c7 40 70 c1 8c e8 74 87 28 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 b4 2f 85 90 e8 ce 77 ce f8 e9 [ 195.176170][ T7389] overlay: ./file0 is not a directory [ 195.186643][ T5942] RSP: 0018:ffffc9000b0dfa00 EFLAGS: 00010282 [ 195.198136][ T5942] RAX: 0000000000000000 RBX: ffff88805d31c000 RCX: ffffffff817ad548 [ 195.206213][ T5942] RDX: ffff888066dd2440 RSI: ffffffff817ad555 RDI: 0000000000000001 [ 195.214230][ T5942] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 195.222562][ T5942] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200161bf4a [ 195.230872][ T5942] R13: ffff88805d31ccc5 R14: ffffffff8c3747e0 R15: ffffffff898ae2a0 [ 195.238831][ T5942] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 195.247812][ T5942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.254409][ T5942] CR2: 0000200000ffc000 CR3: 0000000066993000 CR4: 00000000003526f0 [ 195.262399][ T5942] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.270373][ T5942] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.278322][ T5942] Call Trace: [ 195.281623][ T5942] [ 195.284553][ T5942] ethtool_op_get_link+0x1d/0x70 [ 195.289503][ T5942] bond_check_dev_link+0x3fc/0x710 [ 195.294630][ T5942] ? __pfx_bond_check_dev_link+0x10/0x10 [ 195.300317][ T5942] bond_mii_monitor+0x3c0/0x2dc0 [ 195.305267][ T5942] ? __pfx_bond_mii_monitor+0x10/0x10 [ 195.310660][ T5942] ? rcu_is_watching+0x12/0xc0 [ 195.315406][ T5942] process_one_work+0x9cf/0x1b70 [ 195.320377][ T5942] ? __pfx_batadv_nc_worker+0x10/0x10 [ 195.326040][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 195.331657][ T5942] ? assign_work+0x1a0/0x250 [ 195.336230][ T5942] worker_thread+0x6c8/0xf10 [ 195.340969][ T5942] ? __kthread_parkme+0x19e/0x250 [ 195.346005][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 195.351164][ T5942] kthread+0x3c2/0x780 [ 195.355226][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.359820][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.364452][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.369033][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.373642][ T5942] ? rcu_is_watching+0x12/0xc0 [ 195.378400][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.383033][ T5942] ret_from_fork+0x45/0x80 [ 195.387431][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.392118][ T5942] ret_from_fork_asm+0x1a/0x30 [ 195.396875][ T5942] [ 195.399884][ T5942] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.407139][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u8:10 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 195.419349][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.429397][ T5942] Workqueue: bond0 bond_mii_monitor [ 195.434598][ T5942] Call Trace: [ 195.437868][ T5942] [ 195.440792][ T5942] dump_stack_lvl+0x3d/0x1f0 [ 195.445381][ T5942] panic+0x71c/0x800 [ 195.449272][ T5942] ? __pfx_panic+0x10/0x10 [ 195.453681][ T5942] ? show_trace_log_lvl+0x29b/0x3e0 [ 195.458865][ T5942] ? check_panic_on_warn+0x1f/0xb0 [ 195.463954][ T5942] ? __linkwatch_sync_dev+0x1ed/0x230 [ 195.469309][ T5942] check_panic_on_warn+0xab/0xb0 [ 195.474228][ T5942] __warn+0xf6/0x3c0 [ 195.478114][ T5942] ? preempt_schedule_notrace+0x62/0xe0 [ 195.483640][ T5942] ? __linkwatch_sync_dev+0x1ed/0x230 [ 195.489006][ T5942] report_bug+0x3c3/0x580 [ 195.493317][ T5942] ? __linkwatch_sync_dev+0x1ed/0x230 [ 195.498674][ T5942] handle_bug+0x184/0x210 [ 195.502987][ T5942] exc_invalid_op+0x17/0x50 [ 195.507468][ T5942] asm_exc_invalid_op+0x1a/0x20 [ 195.512390][ T5942] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 195.518360][ T5942] Code: 05 ff ff ff e8 24 fa 68 f8 c6 05 8e 2a 1b 07 01 90 ba 38 00 00 00 48 c7 c6 a0 70 c1 8c 48 c7 c7 40 70 c1 8c e8 74 87 28 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 b4 2f 85 90 e8 ce 77 ce f8 e9 [ 195.537950][ T5942] RSP: 0018:ffffc9000b0dfa00 EFLAGS: 00010282 [ 195.543997][ T5942] RAX: 0000000000000000 RBX: ffff88805d31c000 RCX: ffffffff817ad548 [ 195.551955][ T5942] RDX: ffff888066dd2440 RSI: ffffffff817ad555 RDI: 0000000000000001 [ 195.559904][ T5942] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 195.567849][ T5942] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200161bf4a [ 195.575804][ T5942] R13: ffff88805d31ccc5 R14: ffffffff8c3747e0 R15: ffffffff898ae2a0 [ 195.583755][ T5942] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 195.589376][ T5942] ? __warn_printk+0x198/0x350 [ 195.594146][ T5942] ? __warn_printk+0x1a5/0x350 [ 195.598896][ T5942] ethtool_op_get_link+0x1d/0x70 [ 195.603814][ T5942] bond_check_dev_link+0x3fc/0x710 [ 195.608907][ T5942] ? __pfx_bond_check_dev_link+0x10/0x10 [ 195.614522][ T5942] bond_mii_monitor+0x3c0/0x2dc0 [ 195.619444][ T5942] ? __pfx_bond_mii_monitor+0x10/0x10 [ 195.624802][ T5942] ? rcu_is_watching+0x12/0xc0 [ 195.629548][ T5942] process_one_work+0x9cf/0x1b70 [ 195.634472][ T5942] ? __pfx_batadv_nc_worker+0x10/0x10 [ 195.639828][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 195.645181][ T5942] ? assign_work+0x1a0/0x250 [ 195.649761][ T5942] worker_thread+0x6c8/0xf10 [ 195.654336][ T5942] ? __kthread_parkme+0x19e/0x250 [ 195.659345][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 195.664444][ T5942] kthread+0x3c2/0x780 [ 195.668498][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.673063][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.677629][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.682195][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.686774][ T5942] ? rcu_is_watching+0x12/0xc0 [ 195.691530][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.696098][ T5942] ret_from_fork+0x45/0x80 [ 195.700497][ T5942] ? __pfx_kthread+0x10/0x10 [ 195.705062][ T5942] ret_from_fork_asm+0x1a/0x30 [ 195.709833][ T5942] [ 195.713104][ T5942] Kernel Offset: disabled [ 195.717411][ T5942] Rebooting in 86400 seconds..