last executing test programs: 13.246243314s ago: executing program 2 (id=1529): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) times(&(0x7f0000000100)) r3 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf87, 0x10}, &(0x7f0000000180)=0xc) 12.462436507s ago: executing program 2 (id=1531): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) times(&(0x7f0000000100)) r3 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 12.111312926s ago: executing program 1 (id=1533): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) times(&(0x7f0000000100)) syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf87, 0x10}, &(0x7f0000000180)=0xc) 11.67906427s ago: executing program 2 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',grou']) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r7, 0x0) 10.32810782s ago: executing program 2 (id=1536): syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) epoll_create1(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x4, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) syz_io_uring_setup(0x3cb5, &(0x7f00000001c0)={0x0, 0x4cef, 0x2000, 0x1, 0x2ea}, 0x0, &(0x7f0000000140)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) 10.279103756s ago: executing program 1 (id=1537): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$MSR(0x0, 0x5, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r3, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 10.268014393s ago: executing program 0 (id=1538): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20008850) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = open(0x0, 0x145142, 0x0) ftruncate(r5, 0x2007ffc) syz_init_net_socket$ax25(0x3, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 8.051076119s ago: executing program 1 (id=1541): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) times(&(0x7f0000000100)) r3 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf87, 0x10}, &(0x7f0000000180)=0xc) 7.596792765s ago: executing program 1 (id=1542): syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e0200000200000005cd000005bf0000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000280070673effeb09b5351f5bde05400000000018789ba916638814e5708103b494e10000000000000000020008005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d7238516789dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/514, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) socket(0xa, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4211, r1, 0x1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7.561897799s ago: executing program 0 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 7.409751659s ago: executing program 0 (id=1545): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r1, 0xc0401289, 0x0) r2 = gettid() syz_io_uring_setup(0x4d47, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x32f, @tick=0xfffffffc, 0x0, {0x4}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0x80045300, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b18, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000000c0)={0x5, 0x0, 0x0, 'queue0\x00', 0x8}) tkill(r2, 0x7) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000101"], 0x44}}, 0x0) socket$inet6(0xa, 0x800, 0xfffffff9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x80000}) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020}, 0x2020) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 6.858227133s ago: executing program 2 (id=1546): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 6.825291899s ago: executing program 3 (id=1547): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$MSR(0x0, 0x5, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r2, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r4 = dup(r3) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 6.221314037s ago: executing program 4 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xb0b90b5460a932b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108) syz_io_uring_setup(0x143c, &(0x7f0000000440)={0x0, 0x4205, 0x4, 0x2, 0x40002c, 0x0, r5}, &(0x7f0000000000), 0x0) getsockopt$inet6_buf(r7, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) close_range(r6, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 5.892755488s ago: executing program 1 (id=1549): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350006000000fbab694ccf9d2b930368bae0c190"], 0x30}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 5.891011399s ago: executing program 2 (id=1550): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x5d0, 0x20050000) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.176812664s ago: executing program 0 (id=1551): syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) epoll_create1(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x4, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) syz_io_uring_setup(0x3cb5, &(0x7f00000001c0)={0x0, 0x4cef, 0x2000, 0x1, 0x2ea}, 0x0, &(0x7f0000000140)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) 4.598411657s ago: executing program 4 (id=1552): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) times(&(0x7f0000000100)) r3 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf87, 0x10}, &(0x7f0000000180)=0xc) 4.558452884s ago: executing program 3 (id=1553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20008850) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = open(0x0, 0x145142, 0x0) ftruncate(r7, 0x2007ffc) syz_init_net_socket$ax25(0x3, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3.727606054s ago: executing program 1 (id=1554): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, 0x0, 0x17) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0x3}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x0, &(0x7f0000000140), &(0x7f0000000240)=[0x1], 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x20) socket$isdn(0x22, 0x2, 0x11) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601080000000000000000000100400500010006000000050005000200000005000400000000000900020073797a31000000000c00078008000840000000d81100030068"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.09928999s ago: executing program 4 (id=1555): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) times(&(0x7f0000000100)) r3 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf87, 0x10}, &(0x7f0000000180)=0xc) 2.536207059s ago: executing program 3 (id=1556): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) times(&(0x7f0000000100)) r3 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf87, 0x10}, &(0x7f0000000180)=0xc) 2.45008044s ago: executing program 4 (id=1557): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$MSR(0x0, 0x5, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r2, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r4 = dup(r3) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 1.714002833s ago: executing program 4 (id=1558): syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/514, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) socket(0xa, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x7, 0x420002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4211, r2, 0x1, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.662807623s ago: executing program 3 (id=1559): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004503007800000000002f907800000000ffffffff000088000064907802000000030000000400000044c108fc5ce23aa1fa1930cef821fa9ef26d78b501b40000000000000000ff001261b6b63b29d2396379bcc0226ed355261e4842183ff3929a0d1927f2044ca14ce436003e70a59c0d6ec961259b5f5f087294be2de7ad39fb33575ea464d525e10f8c62609386c1ace92e5bd1c8be908cf3298ac9a2274c14471475182923225d8fc520dac24a83eb0916e68e96ab4d8f523a9f6990472ce522faf80a501612b3b9a4b347c631dd325849a4ee068e0001ba41c4f002ccc92619a9b204ffcba29f49c0130a2b7a32317e5fb8ade2710da70af66c511c9596bc0dc48a283c9e9ba14f88d845661f136dfd48f32d8a04691a16dd5a32a5bd558daf2335c1858b57cee4f199f68bda5e4a0f9d4d858d34948120b1400f88ae8d68e1f815abd4c4d469f720e584ff69a226cbcc6236b909fe9a4ce743ebbe72096b420f312df21f5d0548bc73394afa79f57b15bc05ef26ff3490479486308646a687a65e9529405e1cfaa3c7e23e825a877723100e652a3fedb76af2cf82984a8abd0073ef5bb4cef597ccfd22657964b8a1acdd588bb63960ab32bedd414c30accc91d06051ae3c041811cd048db1636a2918dcba2dd733388fec41de5e1de78daf39"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x40001, &(0x7f0000000180)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCGETA(r4, 0x8924, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) 1.082583592s ago: executing program 0 (id=1560): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 1.01649558s ago: executing program 3 (id=1561): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x306, @random="40407e20b0dd"}, 0xa8, {0x2, 0x4e20, @private=0xa010102}, 'bridge_slave_1\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 77.591543ms ago: executing program 3 (id=1562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xb0b90b5460a932b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108) syz_io_uring_setup(0x143c, &(0x7f0000000440)={0x0, 0x4205, 0x4, 0x2, 0x40002c}, &(0x7f0000000000), 0x0) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) close_range(r4, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 11.19722ms ago: executing program 0 (id=1563): ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f00000000c0)) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0xdbde8f94d813f6d3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="dd00", @ANYBLOB="0e16ccddabd1e931d3f4552d2ca32ccc687af7d7ecd988666a8116a531ce36995f17a315576988107cc09b2ce53122d58c3fce507b960f1d8d3acaf54fe8d4937c15fcf12cbf7f6366b496fad0923cd7c74e28899d6080d7b32b8e0e97f7282d01cbb771efb01b6adc801571e08794a9bc051bea1fe49cd12a2a97bd899150a181f492ef5baac1fcfac4b3c5ffb99519d31b31072381c2dc86079d71b449399a6cffe36421e86cb3fd85a780b409b24b2cee55529c3dc27bbf04b3efdffccdd7a767a91eaff02c4dfc7faa76b0de416471eeb6c7e8c68df415f8"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 4 (id=1564): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350006000000fbab694ccf9d2b930368bae0c190"], 0x30}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) kernel console output (not intermixed with test programs): Falling back to sysfs fallback for: ./file0 [ 213.055377][ T7956] random: crng reseeded on system resumption [ 213.470772][ T30] audit: type=1400 audit(1743911791.941:340): avc: denied { read write } for pid=7949 comm="syz.1.541" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 213.514124][ T30] audit: type=1400 audit(1743911791.941:341): avc: denied { ioctl open } for pid=7949 comm="syz.1.541" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.685689][ T7977] sp0: Synchronizing with TNC [ 215.055137][ T7982] ubi: mtd0 is already attached to ubi31 [ 216.542060][ T7993] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 216.551121][ T7993] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 223.719504][ T30] audit: type=1400 audit(1743911802.601:342): avc: denied { setopt } for pid=8058 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 223.815150][ T30] audit: type=1400 audit(1743911802.601:343): avc: denied { connect } for pid=8058 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 223.863085][ T30] audit: type=1400 audit(1743911802.601:344): avc: denied { name_connect } for pid=8058 comm="syz.3.567" dest=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 225.239974][ T8077] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 225.248960][ T8077] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 226.823920][ T30] audit: type=1400 audit(1743911804.631:345): avc: denied { listen } for pid=8079 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.884479][ T30] audit: type=1400 audit(1743911804.631:346): avc: denied { accept } for pid=8079 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.289574][ T30] audit: type=1400 audit(1743911806.131:347): avc: denied { bind } for pid=8064 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.769677][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 227.959639][ T5922] usb 3-1: device descriptor read/64, error -71 [ 228.285124][ T5922] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 228.639516][ T5922] usb 3-1: device descriptor read/64, error -71 [ 228.759933][ T5922] usb usb3-port1: attempt power cycle [ 229.668473][ T5922] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 229.744353][ T5922] usb 3-1: device descriptor read/8, error -71 [ 230.067557][ T8130] ubi: mtd0 is already attached to ubi31 [ 230.072763][ T30] audit: type=1400 audit(1743911808.961:348): avc: denied { create } for pid=8131 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 230.390827][ T30] audit: type=1400 audit(1743911809.271:349): avc: denied { ioctl } for pid=8131 comm="syz.3.583" path="socket:[15270]" dev="sockfs" ino=15270 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 232.155652][ T30] audit: type=1400 audit(1743911810.831:350): avc: denied { write } for pid=8144 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.303626][ T30] audit: type=1400 audit(1743911811.191:351): avc: denied { setopt } for pid=8155 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 232.409504][ T30] audit: type=1400 audit(1743911811.231:352): avc: denied { read } for pid=8155 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 233.672111][ T30] audit: type=1400 audit(1743911812.501:353): avc: denied { create } for pid=8168 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 234.103932][ T8173] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 234.139685][ T30] audit: type=1400 audit(1743911812.991:354): avc: denied { setopt } for pid=8170 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.084942][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.598'. [ 236.099775][ T30] audit: type=1400 audit(1743911814.971:355): avc: denied { create } for pid=8188 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 236.145172][ T30] audit: type=1400 audit(1743911814.971:356): avc: denied { write } for pid=8188 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 236.199661][ T30] audit: type=1400 audit(1743911815.021:357): avc: denied { create } for pid=8188 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.221845][ T5829] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 236.223591][ T30] audit: type=1400 audit(1743911815.021:358): avc: denied { setopt } for pid=8188 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.709301][ T30] audit: type=1400 audit(1743911815.061:359): avc: denied { bind } for pid=8188 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 236.748942][ T30] audit: type=1400 audit(1743911815.061:360): avc: denied { create } for pid=8188 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 236.770055][ T30] audit: type=1400 audit(1743911815.061:361): avc: denied { bind } for pid=8188 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 236.789564][ T30] audit: type=1400 audit(1743911815.061:362): avc: denied { write } for pid=8188 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 237.193600][ T30] audit: type=1400 audit(1743911816.011:363): avc: denied { shutdown } for pid=8200 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.213061][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.230379][ T30] audit: type=1400 audit(1743911816.011:364): avc: denied { name_connect } for pid=8200 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 240.687334][ T8238] sp0: Synchronizing with TNC [ 240.841624][ T8243] ubi: mtd0 is already attached to ubi31 [ 241.688247][ T8257] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 241.697328][ T8257] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 242.790619][ T8252] kvm: kvm [8250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x123 [ 242.805505][ T8252] kvm: kvm [8250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x933 [ 242.834856][ T8252] kvm: kvm [8250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x947 [ 242.867892][ T8252] kvm: kvm [8250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x165 [ 242.898681][ T8252] kvm: kvm [8250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x11b [ 244.895182][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 244.895195][ T30] audit: type=1400 audit(1743911823.781:373): avc: denied { append } for pid=8281 comm="syz.0.623" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.570227][ T30] audit: type=1400 audit(1743911825.371:374): avc: denied { read } for pid=8277 comm="syz.4.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.394913][ T5922] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 248.646240][ T5922] usb 3-1: config 0 has no interfaces? [ 248.652073][ T5922] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 248.663578][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.707079][ T5922] usb 3-1: config 0 descriptor?? [ 249.037673][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.079841][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.123435][ T10] usb 3-1: USB disconnect, device number 8 [ 249.306178][ T30] audit: type=1400 audit(1743911828.191:375): avc: denied { setopt } for pid=8325 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.355606][ T8326] Bluetooth: MGMT ver 1.23 [ 249.579546][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 250.419521][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 250.565846][ T10] usb 3-1: config index 0 descriptor too short (expected 72, got 36) [ 250.587819][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 250.641575][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 250.685240][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.725561][ T10] usb 3-1: Product: syz [ 250.741473][ T10] usb 3-1: Manufacturer: syz [ 250.754979][ T10] usb 3-1: SerialNumber: syz [ 251.454088][ T10] usb 3-1: USB disconnect, device number 9 [ 254.059915][ T30] audit: type=1400 audit(1743911832.921:376): avc: denied { read } for pid=8375 comm="syz.1.645" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 254.420562][ T30] audit: type=1400 audit(1743911832.921:377): avc: denied { open } for pid=8375 comm="syz.1.645" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 255.409794][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.416150][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.317117][ T30] audit: type=1400 audit(1743911835.201:378): avc: denied { unlink } for pid=8390 comm="syz.3.649" name="#1" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 256.544543][ T30] audit: type=1400 audit(1743911835.301:379): avc: denied { mount } for pid=8390 comm="syz.3.649" name="/" dev="overlay" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 258.178443][ T30] audit: type=1400 audit(1743911837.061:380): avc: denied { module_load } for pid=8419 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 259.158079][ T30] audit: type=1400 audit(1743911838.041:381): avc: denied { create } for pid=8430 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.288824][ T30] audit: type=1400 audit(1743911838.071:382): avc: denied { write } for pid=8430 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.157493][ T30] audit: type=1400 audit(1743911838.071:383): avc: denied { nlmsg_write } for pid=8430 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.354501][ T30] audit: type=1400 audit(1743911838.071:384): avc: denied { execmem } for pid=8430 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 260.583837][ T30] audit: type=1400 audit(1743911838.201:385): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 260.606110][ T30] audit: type=1400 audit(1743911838.201:386): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.627926][ T30] audit: type=1400 audit(1743911838.201:387): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.650409][ T30] audit: type=1400 audit(1743911838.201:388): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.769829][ T30] audit: type=1400 audit(1743911838.201:389): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 261.198350][ T30] audit: type=1400 audit(1743911838.211:390): avc: denied { mounton } for pid=8432 comm="syz.3.661" path="/137/file1" dev="tmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.863530][ T8451] kvm: kvm [8447]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 264.369565][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 264.369604][ T30] audit: type=1400 audit(1743911843.231:430): avc: denied { setopt } for pid=8479 comm="syz.3.672" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.599764][ T30] audit: type=1400 audit(1743911843.471:431): avc: denied { create } for pid=8473 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 264.729815][ T30] audit: type=1400 audit(1743911843.501:432): avc: denied { bind } for pid=8473 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 264.826115][ T30] audit: type=1400 audit(1743911843.501:433): avc: denied { name_bind } for pid=8473 comm="syz.4.671" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 264.849849][ T30] audit: type=1400 audit(1743911843.501:434): avc: denied { node_bind } for pid=8473 comm="syz.4.671" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 264.876805][ T30] audit: type=1400 audit(1743911843.501:435): avc: denied { listen } for pid=8473 comm="syz.4.671" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 264.904264][ T30] audit: type=1400 audit(1743911843.501:436): avc: denied { connect } for pid=8473 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 264.926631][ T30] audit: type=1400 audit(1743911843.501:437): avc: denied { name_connect } for pid=8473 comm="syz.4.671" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 265.065590][ T30] audit: type=1400 audit(1743911843.621:438): avc: denied { accept } for pid=8473 comm="syz.4.671" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 265.088948][ T8490] sp0: Synchronizing with TNC [ 265.147488][ T8492] ubi: mtd0 is already attached to ubi31 [ 265.262528][ T30] audit: type=1400 audit(1743911843.621:439): avc: denied { write } for pid=8473 comm="syz.4.671" laddr=::1 lport=20000 faddr=::1 fport=59978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 266.507119][ T8508] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 266.517845][ T8508] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 267.021099][ T8511] macsec0: entered promiscuous mode [ 267.030027][ T8511] macsec0: entered allmulticast mode [ 267.035698][ T8511] veth1_macvtap: entered allmulticast mode [ 269.177543][ T8527] fuse: Bad value for 'fd' [ 269.696965][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 269.696977][ T30] audit: type=1400 audit(1743911848.581:466): avc: denied { read write } for pid=8530 comm="syz.0.686" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 269.726519][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.392927][ T30] audit: type=1400 audit(1743911848.631:467): avc: denied { open } for pid=8530 comm="syz.0.686" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 270.424339][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.962213][ T30] audit: type=1400 audit(1743911849.261:468): avc: denied { name_bind } for pid=8528 comm="syz.1.685" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 271.105612][ T30] audit: type=1400 audit(1743911849.261:469): avc: denied { node_bind } for pid=8528 comm="syz.1.685" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 271.128200][ T30] audit: type=1400 audit(1743911849.271:470): avc: denied { write } for pid=8528 comm="syz.1.685" name="netlink" dev="proc" ino=4026532814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 273.028816][ T30] audit: type=1400 audit(1743911851.501:471): avc: denied { read } for pid=8555 comm="syz.3.694" dev="nsfs" ino=4026533034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.059600][ T30] audit: type=1400 audit(1743911851.501:472): avc: denied { open } for pid=8555 comm="syz.3.694" path="net:[4026533034]" dev="nsfs" ino=4026533034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.110932][ T30] audit: type=1400 audit(1743911851.511:473): avc: denied { create } for pid=8555 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.599546][ T30] audit: type=1400 audit(1743911851.511:474): avc: denied { bind } for pid=8555 comm="syz.3.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.800651][ T8570] No control pipe specified [ 274.325897][ T8578] block device autoloading is deprecated and will be removed. [ 274.717571][ T30] audit: type=1400 audit(1743911853.561:475): avc: denied { read } for pid=8583 comm="syz.4.698" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 275.108886][ T30] audit: type=1400 audit(1743911853.561:476): avc: denied { open } for pid=8583 comm="syz.4.698" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 275.803574][ T30] audit: type=1400 audit(1743911854.681:477): avc: denied { create } for pid=8597 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.828560][ T30] audit: type=1400 audit(1743911855.711:478): avc: denied { create } for pid=8613 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 277.845937][ T30] audit: type=1400 audit(1743911856.121:479): avc: denied { write } for pid=8616 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.738010][ T8630] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 278.747118][ T8630] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 279.819762][ T30] audit: type=1400 audit(1743911856.701:480): avc: denied { connect } for pid=8613 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 279.846717][ T30] audit: type=1400 audit(1743911856.701:481): avc: denied { write } for pid=8613 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.359950][ T30] audit: type=1400 audit(1743911856.711:482): avc: denied { shutdown } for pid=8616 comm="syz.3.709" lport=37731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.409256][ T8653] sp0: Synchronizing with TNC [ 281.528668][ T30] audit: type=1400 audit(1743911860.301:483): avc: denied { create } for pid=8652 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.627350][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 281.999262][ T8653] ubi: mtd0 is already attached to ubi31 [ 282.048470][ T30] audit: type=1400 audit(1743911860.931:484): avc: denied { write } for pid=8656 comm="syz.1.717" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 282.556798][ T30] audit: type=1400 audit(1743911861.331:485): avc: denied { read write } for pid=8660 comm="syz.3.718" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 282.710791][ T30] audit: type=1400 audit(1743911861.341:486): avc: denied { open } for pid=8660 comm="syz.3.718" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 282.754114][ T30] audit: type=1400 audit(1743911861.351:487): avc: denied { ioctl } for pid=8660 comm="syz.3.718" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16232 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 282.885312][ T30] audit: type=1400 audit(1743911861.771:488): avc: denied { create } for pid=8656 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 283.319500][ T30] audit: type=1400 audit(1743911861.801:489): avc: denied { connect } for pid=8656 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 283.539598][ T5922] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 283.746689][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.920287][ T5922] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 283.929389][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.951270][ T5922] usb 4-1: Product: syz [ 283.958759][ T5922] usb 4-1: Manufacturer: syz [ 283.970451][ T8678] capability: warning: `syz.0.721' uses deprecated v2 capabilities in a way that may be insecure [ 284.088446][ T5922] usb 4-1: SerialNumber: syz [ 284.096255][ T5922] usb 4-1: config 0 descriptor?? [ 284.112026][ T5922] s2255 4-1:0.0: Could not find bulk-in endpoint [ 284.118506][ T5922] Sensoray 2255 driver load failed: 0xfffffff4 [ 284.139483][ T5922] s2255 4-1:0.0: probe with driver s2255 failed with error -12 [ 284.807807][ T8688] sp0: Synchronizing with TNC [ 284.838635][ T8673] netlink: 'syz.3.720': attribute type 21 has an invalid length. [ 284.859879][ T8673] netlink: 'syz.3.720': attribute type 20 has an invalid length. [ 285.294706][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 285.294735][ T30] audit: type=1400 audit(1743911864.181:492): avc: denied { ioctl } for pid=8692 comm="syz.0.724" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 285.646929][ T10] usb 4-1: USB disconnect, device number 3 [ 286.274491][ T30] audit: type=1400 audit(1743911865.161:493): avc: denied { create } for pid=8701 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 286.458535][ T30] audit: type=1400 audit(1743911865.201:494): avc: denied { create } for pid=8699 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.482159][ T30] audit: type=1400 audit(1743911865.311:495): avc: denied { read } for pid=8708 comm="syz.1.728" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 286.523202][ T30] audit: type=1400 audit(1743911865.311:496): avc: denied { open } for pid=8708 comm="syz.1.728" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 286.596079][ T8714] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 286.605095][ T8714] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 287.054769][ T30] audit: type=1400 audit(1743911865.331:497): avc: denied { ioctl } for pid=8708 comm="syz.1.728" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 287.280999][ T30] audit: type=1400 audit(1743911865.341:498): avc: denied { setopt } for pid=8701 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 287.443121][ T30] audit: type=1400 audit(1743911865.341:499): avc: denied { ioctl } for pid=8701 comm="syz.2.727" path="socket:[16273]" dev="sockfs" ino=16273 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 287.632795][ T30] audit: type=1400 audit(1743911866.521:500): avc: denied { append } for pid=8719 comm="syz.4.731" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.742527][ T8725] sp0: Synchronizing with TNC [ 287.819276][ T8726] ubi: mtd0 is already attached to ubi31 [ 288.019527][ T5922] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 288.832048][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 289.035064][ T8737] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 289.044030][ T8737] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 289.455917][ T5922] usb 5-1: config 0 interface 0 altsetting 56 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.472549][ T5922] usb 5-1: config 0 interface 0 altsetting 56 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.496433][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 289.525219][ T5922] usb 5-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 289.558787][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.592866][ T5922] usb 5-1: config 0 descriptor?? [ 289.773795][ T30] audit: type=1400 audit(1743911868.651:501): avc: denied { create } for pid=8741 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 289.862383][ T5922] usbhid 5-1:0.0: can't add hid device: -71 [ 289.903112][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 289.943130][ T5922] usb 5-1: USB disconnect, device number 8 [ 290.400076][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 290.400128][ T30] audit: type=1400 audit(1743911869.261:503): avc: denied { read } for pid=8741 comm="syz.0.737" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 290.400415][ T30] audit: type=1400 audit(1743911869.261:504): avc: denied { open } for pid=8741 comm="syz.0.737" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 290.400607][ T30] audit: type=1400 audit(1743911869.261:505): avc: denied { read write } for pid=8741 comm="syz.0.737" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.400782][ T30] audit: type=1400 audit(1743911869.261:506): avc: denied { open } for pid=8741 comm="syz.0.737" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.400909][ T30] audit: type=1400 audit(1743911869.261:507): avc: denied { ioctl } for pid=8741 comm="syz.0.737" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.401088][ T30] audit: type=1400 audit(1743911869.261:508): avc: denied { ioctl } for pid=8741 comm="syz.0.737" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 290.738901][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.790265][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.053154][ T30] audit: type=1400 audit(1743911869.941:509): avc: denied { read write } for pid=8754 comm="syz.4.740" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.938281][ T30] audit: type=1400 audit(1743911869.971:510): avc: denied { open } for pid=8754 comm="syz.4.740" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 293.848313][ T30] audit: type=1400 audit(1743911872.731:511): avc: denied { map } for pid=8781 comm="syz.2.747" path="socket:[17790]" dev="sockfs" ino=17790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 293.871831][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.967115][ T30] audit: type=1400 audit(1743911872.731:512): avc: denied { accept } for pid=8781 comm="syz.2.747" path="socket:[17790]" dev="sockfs" ino=17790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 293.990859][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.093988][ T8787] sp0: Synchronizing with TNC [ 294.177904][ T8789] ubi: mtd0 is already attached to ubi31 [ 295.512305][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 295.512334][ T30] audit: type=1400 audit(1743911873.471:515): avc: denied { bind } for pid=8794 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.619375][ T30] audit: type=1400 audit(1743911873.471:516): avc: denied { name_bind } for pid=8794 comm="syz.2.750" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 295.786326][ T30] audit: type=1400 audit(1743911873.471:517): avc: denied { node_bind } for pid=8794 comm="syz.2.750" saddr=172.20.20.187 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 296.212490][ T30] audit: type=1400 audit(1743911873.471:518): avc: denied { setopt } for pid=8794 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 296.345162][ T30] audit: type=1400 audit(1743911875.231:519): avc: denied { read write } for pid=8803 comm="syz.4.754" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 296.375010][ T30] audit: type=1400 audit(1743911875.231:520): avc: denied { open } for pid=8803 comm="syz.4.754" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 296.402980][ T30] audit: type=1400 audit(1743911875.241:521): avc: denied { mount } for pid=8803 comm="syz.4.754" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 296.427970][ T30] audit: type=1400 audit(1743911875.261:522): avc: denied { mounton } for pid=8803 comm="syz.4.754" path="/149/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 296.602868][ T30] audit: type=1400 audit(1743911875.481:523): avc: denied { read } for pid=8808 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 298.713713][ T30] audit: type=1400 audit(1743911877.601:524): avc: denied { read } for pid=8827 comm="syz.2.761" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 300.771232][ T8840] vlan2: entered promiscuous mode [ 300.791258][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 300.791270][ T30] audit: type=1400 audit(1743911879.441:529): avc: denied { ioctl } for pid=8831 comm="syz.3.762" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 300.855019][ T8840] vlan2: entered allmulticast mode [ 300.874020][ T8840] hsr_slave_1: entered allmulticast mode [ 301.251399][ T30] audit: type=1400 audit(1743911880.131:530): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 301.271679][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 301.684028][ T30] audit: type=1400 audit(1743911880.571:531): avc: denied { connect } for pid=8851 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.154183][ T30] audit: type=1400 audit(1743911880.861:532): avc: denied { bind } for pid=8851 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.266647][ T30] audit: type=1400 audit(1743911880.861:533): avc: denied { write } for pid=8851 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.859463][ T30] audit: type=1400 audit(1743911881.741:534): avc: denied { read } for pid=8866 comm="syz.4.771" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.102733][ T30] audit: type=1400 audit(1743911881.741:535): avc: denied { open } for pid=8866 comm="syz.4.771" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.557746][ T30] audit: type=1400 audit(1743911881.741:536): avc: denied { write } for pid=8861 comm="syz.2.770" path="socket:[18594]" dev="sockfs" ino=18594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.618259][ T30] audit: type=1400 audit(1743911882.461:537): avc: denied { mount } for pid=8873 comm="syz.1.773" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 303.664281][ T30] audit: type=1400 audit(1743911882.531:538): avc: denied { unlink } for pid=8873 comm="syz.1.773" name="#3" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 304.879653][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 305.010575][ T8869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.239588][ T5935] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 309.259701][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 309.259742][ T30] audit: type=1400 audit(1743911887.471:545): avc: denied { bind } for pid=8918 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.322782][ T30] audit: type=1400 audit(1743911887.471:546): avc: denied { name_bind } for pid=8918 comm="syz.3.785" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 310.345198][ T30] audit: type=1400 audit(1743911887.471:547): avc: denied { node_bind } for pid=8918 comm="syz.3.785" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 310.469585][ T5935] usb 2-1: device descriptor read/all, error -71 [ 310.620717][ T30] audit: type=1400 audit(1743911888.811:548): avc: denied { write } for pid=8923 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 313.946784][ T30] audit: type=1326 audit(1743911892.761:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8956 comm="syz.0.804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72edf8d169 code=0x0 [ 315.229388][ T30] audit: type=1400 audit(1743911894.111:550): avc: denied { create } for pid=8969 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 315.528848][ T30] audit: type=1400 audit(1743911894.211:551): avc: denied { setopt } for pid=8964 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 315.723036][ T30] audit: type=1400 audit(1743911894.251:552): avc: denied { setopt } for pid=8969 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 315.742274][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.796816][ T30] audit: type=1400 audit(1743911894.331:553): avc: denied { connect } for pid=8969 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.860276][ T30] audit: type=1400 audit(1743911894.401:554): avc: denied { setopt } for pid=8969 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.921782][ T30] audit: type=1400 audit(1743911894.611:555): avc: denied { write } for pid=8976 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.941205][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.961150][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.967462][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.579581][ T5874] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 320.226769][ T5874] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 320.255108][ T5874] usb 4-1: config 0 has no interface number 0 [ 320.297114][ T5874] usb 4-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 320.358800][ T5874] usb 4-1: config 0 interface 11 has no altsetting 0 [ 320.382044][ T5874] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 320.431694][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.461177][ T9027] netdevsim netdevsim4: Direct firmware load for . [ 320.461177][ T9027] failed with error -2 [ 320.471904][ T9027] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 320.471904][ T9027] [ 320.492483][ T5874] usb 4-1: config 0 descriptor?? [ 320.503986][ T9017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 320.580994][ T5874] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 320.595005][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 320.611559][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 320.643689][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 320.732640][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 320.750655][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 320.788874][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 320.990998][ T5874] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 321.567008][ T30] audit: type=1400 audit(1743911900.111:556): avc: denied { setopt } for pid=9032 comm="syz.0.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.622637][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 321.639587][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 321.659612][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 321.739565][ T30] audit: type=1400 audit(1743911900.591:557): avc: denied { connect } for pid=9032 comm="syz.0.816" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 322.119601][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 322.573818][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 322.618004][ T5874] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 322.703556][ T5874] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 322.754803][ T5874] usb 4-1: USB disconnect, device number 4 [ 322.840344][ T5874] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 322.902852][ T5874] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 323.023485][ T5874] keyspan 4-1:0.11: device disconnected [ 323.990057][ T30] audit: type=1400 audit(1743911902.871:558): avc: denied { name_connect } for pid=9047 comm="syz.3.819" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 325.642029][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.651197][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.660125][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.668987][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.677907][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.686873][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.695788][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.704823][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.714001][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 325.723445][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 326.019867][ T5829] block nbd2: Receive control failed (result -107) [ 326.087691][ T9071] syz.2.824: attempt to access beyond end of device [ 326.087691][ T9071] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 326.166978][ T9071] getblk(): invalid block size 512 requested [ 326.223763][ T9071] logical block size: 1024 [ 326.257678][ T9071] CPU: 0 UID: 0 PID: 9071 Comm: syz.2.824 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 326.257715][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.257727][ T9071] Call Trace: [ 326.257733][ T9071] [ 326.257740][ T9071] dump_stack_lvl+0x16c/0x1f0 [ 326.257770][ T9071] __getblk_slow+0x4ec/0x5b0 [ 326.257792][ T9071] ? __pfx___might_resched+0x10/0x10 [ 326.257818][ T9071] ? fs_reclaim_acquire+0xae/0x150 [ 326.257848][ T9071] bdev_getblk+0xb1/0xc0 [ 326.257871][ T9071] __bread_gfp+0x86/0x3c0 [ 326.257893][ T9071] udf_read_tagged+0xae/0x740 [ 326.257921][ T9071] udf_check_anchor_block+0x89/0x4b0 [ 326.257941][ T9071] ? udf_get_last_block+0x1ce/0x2a0 [ 326.257966][ T9071] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 326.257993][ T9071] udf_load_vrs+0x3b8/0x1070 [ 326.258021][ T9071] ? __pfx_udf_load_vrs+0x10/0x10 [ 326.258042][ T9071] ? __pfx_udf_get_last_session+0x10/0x10 [ 326.258069][ T9071] ? lockdep_init_map_type+0x5c/0x280 [ 326.258090][ T9071] udf_fill_super+0x791/0x1df0 [ 326.258117][ T9071] ? __pfx_udf_fill_super+0x10/0x10 [ 326.258134][ T9071] ? do_raw_spin_lock+0x12c/0x2b0 [ 326.258153][ T9071] ? find_held_lock+0x2b/0x80 [ 326.258175][ T9071] ? set_blocksize+0x332/0x3f0 [ 326.258205][ T9071] ? sb_set_blocksize+0x176/0x1d0 [ 326.258233][ T9071] ? setup_bdev_super+0x369/0x730 [ 326.258261][ T9071] get_tree_bdev_flags+0x389/0x620 [ 326.258277][ T9071] ? __pfx_udf_fill_super+0x10/0x10 [ 326.258296][ T9071] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 326.258319][ T9071] ? bpf_lsm_capable+0x9/0x10 [ 326.258335][ T9071] ? security_capable+0x7e/0x260 [ 326.258359][ T9071] vfs_get_tree+0x8b/0x340 [ 326.258383][ T9071] path_mount+0x14d4/0x1f30 [ 326.258404][ T9071] ? kmem_cache_free+0x2d4/0x4d0 [ 326.258422][ T9071] ? __pfx_path_mount+0x10/0x10 [ 326.258446][ T9071] ? putname+0x154/0x1a0 [ 326.258469][ T9071] __x64_sys_mount+0x28d/0x310 [ 326.258490][ T9071] ? __pfx___x64_sys_mount+0x10/0x10 [ 326.258509][ T9071] ? rcu_is_watching+0x12/0xc0 [ 326.258540][ T9071] do_syscall_64+0xcd/0x260 [ 326.258566][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.258583][ T9071] RIP: 0033:0x7fd895f8d169 [ 326.258597][ T9071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.258614][ T9071] RSP: 002b:00007fd896e73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.258632][ T9071] RAX: ffffffffffffffda RBX: 00007fd8961a5fa0 RCX: 00007fd895f8d169 [ 326.258644][ T9071] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 326.258655][ T9071] RBP: 00007fd89600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 326.258665][ T9071] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 326.258675][ T9071] R13: 0000000000000000 R14: 00007fd8961a5fa0 R15: 00007ffddfbba548 [ 326.258700][ T9071] [ 326.539747][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 326.549292][ T9071] getblk(): invalid block size 512 requested [ 326.555385][ T9071] logical block size: 1024 [ 326.559952][ T9071] CPU: 0 UID: 0 PID: 9071 Comm: syz.2.824 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 326.559977][ T9071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.559988][ T9071] Call Trace: [ 326.559995][ T9071] [ 326.560003][ T9071] dump_stack_lvl+0x16c/0x1f0 [ 326.560034][ T9071] __getblk_slow+0x4ec/0x5b0 [ 326.560055][ T9071] ? __pfx___might_resched+0x10/0x10 [ 326.560083][ T9071] ? fs_reclaim_acquire+0xae/0x150 [ 326.560113][ T9071] bdev_getblk+0xb1/0xc0 [ 326.560138][ T9071] __bread_gfp+0x86/0x3c0 [ 326.560161][ T9071] udf_read_tagged+0xae/0x740 [ 326.560189][ T9071] udf_check_anchor_block+0x89/0x4b0 [ 326.560210][ T9071] ? udf_get_last_block+0x1ce/0x2a0 [ 326.560236][ T9071] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 326.560264][ T9071] udf_load_vrs+0x682/0x1070 [ 326.560292][ T9071] ? __pfx_udf_load_vrs+0x10/0x10 [ 326.560312][ T9071] ? __pfx_udf_get_last_session+0x10/0x10 [ 326.560338][ T9071] ? lockdep_init_map_type+0x5c/0x280 [ 326.560360][ T9071] udf_fill_super+0x791/0x1df0 [ 326.560382][ T9071] ? __pfx_udf_fill_super+0x10/0x10 [ 326.560399][ T9071] ? do_raw_spin_lock+0x12c/0x2b0 [ 326.560418][ T9071] ? find_held_lock+0x2b/0x80 [ 326.560440][ T9071] ? set_blocksize+0x332/0x3f0 [ 326.560469][ T9071] ? sb_set_blocksize+0x176/0x1d0 [ 326.560497][ T9071] ? setup_bdev_super+0x369/0x730 [ 326.560525][ T9071] get_tree_bdev_flags+0x389/0x620 [ 326.560540][ T9071] ? __pfx_udf_fill_super+0x10/0x10 [ 326.560558][ T9071] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 326.560580][ T9071] ? bpf_lsm_capable+0x9/0x10 [ 326.560596][ T9071] ? security_capable+0x7e/0x260 [ 326.560619][ T9071] vfs_get_tree+0x8b/0x340 [ 326.560642][ T9071] path_mount+0x14d4/0x1f30 [ 326.560663][ T9071] ? kmem_cache_free+0x2d4/0x4d0 [ 326.560680][ T9071] ? __pfx_path_mount+0x10/0x10 [ 326.560704][ T9071] ? putname+0x154/0x1a0 [ 326.560733][ T9071] __x64_sys_mount+0x28d/0x310 [ 326.560754][ T9071] ? __pfx___x64_sys_mount+0x10/0x10 [ 326.560773][ T9071] ? rcu_is_watching+0x12/0xc0 [ 326.560803][ T9071] do_syscall_64+0xcd/0x260 [ 326.560829][ T9071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.560848][ T9071] RIP: 0033:0x7fd895f8d169 [ 326.560864][ T9071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.560881][ T9071] RSP: 002b:00007fd896e73038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.560899][ T9071] RAX: ffffffffffffffda RBX: 00007fd8961a5fa0 RCX: 00007fd895f8d169 [ 326.560910][ T9071] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 326.560925][ T9071] RBP: 00007fd89600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 326.560935][ T9071] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 326.560946][ T9071] R13: 0000000000000000 R14: 00007fd8961a5fa0 R15: 00007ffddfbba548 [ 326.560970][ T9071] [ 326.561040][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 326.957325][ T9071] syz.2.824: attempt to access beyond end of device [ 326.957325][ T9071] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 327.000015][ T9071] syz.2.824: attempt to access beyond end of device [ 327.000015][ T9071] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 327.012831][ T9077] nbd2: detected capacity change from 0 to 12 [ 327.206893][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 327.535813][ T30] audit: type=1400 audit(1743911906.201:559): avc: denied { write } for pid=9089 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 327.590885][ T9071] block nbd2: Dead connection, failed to find a fallback [ 327.664051][ T9071] block nbd2: shutting down sockets [ 327.784061][ T9071] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.859623][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 327.879472][ T9071] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.910356][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 327.957333][ T5841] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.995714][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 328.108764][ T30] audit: type=1400 audit(1743911906.991:560): avc: denied { create } for pid=9100 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 328.146338][ T5841] Buffer I/O error on dev nbd2, logical block 0, async page read [ 328.154766][ T5841] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.164223][ T5841] Buffer I/O error on dev nbd2, logical block 1, async page read [ 328.172116][ T5841] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.181244][ T5841] Buffer I/O error on dev nbd2, logical block 2, async page read [ 328.189267][ T5841] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.201681][ T30] audit: type=1400 audit(1743911907.021:561): avc: denied { connect } for pid=9100 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 328.229979][ T5841] Buffer I/O error on dev nbd2, logical block 3, async page read [ 328.873857][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 328.902112][ T5841] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.963600][ T9071] I/O error, dev nbd2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 328.986496][ T5841] Buffer I/O error on dev nbd2, logical block 0, async page read [ 329.181793][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2, location=2 [ 329.199694][ T30] audit: type=1400 audit(1743911908.081:562): avc: denied { getopt } for pid=9101 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 329.234056][ T5841] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 329.249012][ T30] audit: type=1400 audit(1743911908.131:563): avc: denied { bind } for pid=9101 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.293292][ T5841] Buffer I/O error on dev nbd2, logical block 1, async page read [ 329.327834][ T9071] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 329.341722][ T5841] Buffer I/O error on dev nbd2, logical block 0, async page read [ 329.349728][ T5841] Buffer I/O error on dev nbd2, logical block 1, async page read [ 329.357700][ T5841] Buffer I/O error on dev nbd2, logical block 0, async page read [ 329.366065][ T5841] Buffer I/O error on dev nbd2, logical block 1, async page read [ 329.374918][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 329.375596][ T5841] ldm_validate_partition_table(): Disk read failed. [ 329.391868][ T5841] Dev nbd2: unable to read RDB block 0 [ 329.397946][ T5841] nbd2: unable to read partition table [ 329.402960][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 329.403807][ T5841] nbd2: partition table beyond EOD, truncated [ 329.424903][ T5841] ldm_validate_partition_table(): Disk read failed. [ 329.432344][ T5841] Dev nbd2: unable to read RDB block 0 [ 329.438388][ T5841] nbd2: unable to read partition table [ 329.444809][ T5841] nbd2: partition table beyond EOD, truncated [ 329.457486][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 329.773257][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 329.860311][ T9122] netlink: 'syz.4.836': attribute type 2 has an invalid length. [ 330.258068][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 330.280795][ T9071] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 330.393509][ T9071] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 330.816070][ T9132] vlan2: entered promiscuous mode [ 330.821245][ T9132] veth0_virt_wifi: entered promiscuous mode [ 330.828172][ T9132] vlan2: entered allmulticast mode [ 330.833374][ T9132] veth0_virt_wifi: entered allmulticast mode [ 330.972645][ T30] audit: type=1400 audit(1743911909.671:564): avc: denied { ioctl } for pid=9123 comm="syz.3.837" path="socket:[19101]" dev="sockfs" ino=19101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.470369][ T30] audit: type=1400 audit(1743911911.341:565): avc: denied { create } for pid=9141 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 332.788454][ T30] audit: type=1400 audit(1743911911.391:566): avc: denied { connect } for pid=9141 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 333.508044][ T5829] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 333.517409][ T5829] Bluetooth: hci1: Injecting HCI hardware error event [ 333.526780][ T5829] Bluetooth: hci1: hardware error 0x00 [ 333.756370][ T30] audit: type=1400 audit(1743911911.401:567): avc: denied { listen } for pid=9141 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 334.199029][ T9162] ======================================================= [ 334.199029][ T9162] WARNING: The mand mount option has been deprecated and [ 334.199029][ T9162] and is ignored by this kernel. Remove the mand [ 334.199029][ T9162] option from the mount to silence this warning. [ 334.199029][ T9162] ======================================================= [ 334.234875][ T9162] new mount options do not match the existing superblock, will be ignored [ 334.260070][ T9162] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 334.496010][ T30] audit: type=1400 audit(1743911913.141:568): avc: denied { remount } for pid=9155 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 335.601063][ T30] audit: type=1400 audit(1743911914.491:569): avc: denied { create } for pid=9171 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 335.710303][ T30] audit: type=1400 audit(1743911914.591:570): avc: denied { create } for pid=9172 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 336.082139][ T5829] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 338.062639][ T9194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.243186][ T9198] tty tty21: ldisc open failed (-12), clearing slot 20 [ 340.270395][ T30] audit: type=1400 audit(1743911918.831:571): avc: denied { sqpoll } for pid=9196 comm="syz.0.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 340.445308][ T30] audit: type=1400 audit(1743911919.281:572): avc: denied { bind } for pid=9205 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.581165][ T9181] delete_channel: no stack [ 341.136792][ T30] audit: type=1400 audit(1743911920.021:573): avc: denied { create } for pid=9205 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 341.649615][ T30] audit: type=1400 audit(1743911920.071:574): avc: denied { create } for pid=9217 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 341.723252][ T30] audit: type=1400 audit(1743911920.071:575): avc: denied { accept } for pid=9217 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 341.775607][ T30] audit: type=1400 audit(1743911920.081:576): avc: denied { lock } for pid=9211 comm="syz.2.863" path="socket:[19501]" dev="sockfs" ino=19501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.582986][ T30] audit: type=1400 audit(1743911922.471:577): avc: denied { read } for pid=9234 comm="syz.3.867" path="socket:[19237]" dev="sockfs" ino=19237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.222140][ T9250] : renamed from bond_slave_0 (while UP) [ 345.459863][ T30] audit: type=1400 audit(1743911924.341:578): avc: denied { read } for pid=9237 comm="syz.1.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.928661][ T9256] __nla_validate_parse: 43 callbacks suppressed [ 345.928682][ T9256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.871'. [ 346.082977][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'. [ 346.194892][ T9256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.871'. [ 346.296768][ T9256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.871'. [ 346.549927][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 346.818468][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 346.936966][ T30] audit: type=1400 audit(1743911925.751:579): avc: denied { mounton } for pid=9265 comm="syz.0.874" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 347.010603][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.101251][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.158625][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.190220][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.229467][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.238605][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.985240][ T5874] usb 4-1: GET_CAPABILITIES returned 0 [ 347.999239][ T5874] usbtmc 4-1:16.0: can't read capabilities [ 348.574080][ T9259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.595415][ T9259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.275583][ T30] audit: type=1400 audit(1743911928.161:580): avc: denied { sys_module } for pid=9257 comm="syz.3.873" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 349.325114][ T30] audit: type=1400 audit(1743911928.211:581): avc: denied { mount } for pid=9286 comm="syz.0.880" name="/" dev="ramfs" ino=19585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 349.435373][ T9263] syzkaller1: entered promiscuous mode [ 349.443103][ T9263] syzkaller1: entered allmulticast mode [ 350.146021][ T30] audit: type=1400 audit(1743911929.031:582): avc: denied { create } for pid=9274 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 350.289938][ T30] audit: type=1400 audit(1743911929.031:583): avc: denied { bind } for pid=9274 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 350.931784][ T5904] usb 4-1: USB disconnect, device number 5 [ 350.937891][ T30] audit: type=1400 audit(1743911929.301:584): avc: denied { override_creds } for pid=9297 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 350.979664][ T30] audit: type=1400 audit(1743911929.441:585): avc: denied { read } for pid=9297 comm="iou-wrk-9301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 350.999223][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.033270][ T9296] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 351.216641][ T9296] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 353.486048][ T9330] input: syz0 as /devices/virtual/input/input8 [ 353.502141][ T30] audit: type=1400 audit(1743911932.381:586): avc: denied { read } for pid=5182 comm="acpid" name="event4" dev="devtmpfs" ino=2866 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.753098][ T30] audit: type=1400 audit(1743911932.381:587): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2866 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.951059][ T30] audit: type=1400 audit(1743911932.381:588): avc: denied { ioctl } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2866 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.643669][ T30] audit: type=1400 audit(1743911933.141:589): avc: denied { create } for pid=9333 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 354.748266][ T30] audit: type=1400 audit(1743911933.581:590): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 355.028359][ T30] audit: type=1400 audit(1743911933.911:591): avc: denied { create } for pid=9343 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.585649][ T30] audit: type=1400 audit(1743911933.911:592): avc: denied { connect } for pid=9343 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.612591][ T30] audit: type=1400 audit(1743911933.911:593): avc: denied { ioctl } for pid=9343 comm="syz.4.893" path="socket:[19670]" dev="sockfs" ino=19670 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.637200][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.224381][ T30] audit: type=1400 audit(1743911935.111:594): avc: denied { accept } for pid=9352 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 356.281115][ T9353] nfs: Bad value for 'source' [ 356.363184][ T30] audit: type=1400 audit(1743911935.141:595): avc: denied { execute_no_trans } for pid=9352 comm="syz.0.895" path="/183/file1" dev="tmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 357.336867][ T30] audit: type=1400 audit(1743911935.231:596): avc: denied { write } for pid=9352 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 357.356002][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.362280][ T30] audit: type=1400 audit(1743911935.921:597): avc: denied { ioctl } for pid=9357 comm="syz.4.896" path="socket:[19447]" dev="sockfs" ino=19447 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.575315][ T30] audit: type=1400 audit(1743911936.461:598): avc: denied { setopt } for pid=9371 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 358.279197][ T30] audit: type=1400 audit(1743911937.031:599): avc: denied { write } for pid=9371 comm="syz.4.900" path="socket:[19799]" dev="sockfs" ino=19799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 359.169540][ T30] audit: type=1400 audit(1743911938.051:600): avc: denied { ioctl } for pid=9383 comm="syz.1.903" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 359.811929][ T30] audit: type=1400 audit(1743911938.321:601): avc: denied { getopt } for pid=9383 comm="syz.1.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 359.881953][ T9391] sp0: Synchronizing with TNC [ 360.528884][ T9396] ubi: mtd0 is already attached to ubi31 [ 361.309478][ T5940] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 361.489564][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 361.940895][ T5940] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 361.951520][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.959765][ T5940] usb 1-1: Product: syz [ 361.963940][ T5940] usb 1-1: Manufacturer: syz [ 361.968508][ T5940] usb 1-1: SerialNumber: syz [ 362.023889][ T9410] syzkaller0: entered promiscuous mode [ 362.051005][ T5940] usb 1-1: config 0 descriptor?? [ 362.054492][ T9410] syzkaller0: entered allmulticast mode [ 362.345563][ T5940] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 362.564727][ T30] audit: type=1400 audit(1743911941.391:602): avc: denied { execute } for pid=9419 comm="syz.3.911" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 364.063104][ T5940] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 364.128509][ T5940] usb 1-1: USB disconnect, device number 4 [ 365.447462][ T30] audit: type=1400 audit(1743911944.281:603): avc: denied { ioctl } for pid=9436 comm="syz.0.916" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 367.693690][ T30] audit: type=1400 audit(1743911946.411:604): avc: denied { create } for pid=9443 comm="syz.1.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 368.490408][ T6616] Bluetooth: hci5: Frame reassembly failed (-84) [ 369.140319][ T9432] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 369.157983][ T9432] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 369.342594][ T9468] netlink: 'syz.0.922': attribute type 39 has an invalid length. [ 369.358738][ T30] audit: type=1400 audit(1743911948.241:605): avc: denied { connect } for pid=9469 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 369.380236][ T9471] input: syz0 as /devices/virtual/input/input9 [ 369.417575][ T30] audit: type=1400 audit(1743911948.291:606): avc: denied { bind } for pid=9467 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.661572][ T9474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.409574][ T9483] pimreg: entered allmulticast mode [ 370.409598][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 370.421406][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 370.624175][ T9474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.216621][ T9474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.872044][ T5921] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 371.879818][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 371.891605][ T5921] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 371.986569][ T9474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.769626][ T30] audit: type=1400 audit(1743911951.621:607): avc: denied { ioctl } for pid=9503 comm="syz.3.930" path="socket:[20006]" dev="sockfs" ino=20006 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 372.879272][ T30] audit: type=1400 audit(1743911951.651:608): avc: denied { create } for pid=9503 comm="syz.3.930" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 372.977178][ T30] audit: type=1400 audit(1743911951.761:609): avc: denied { link } for pid=9503 comm="syz.3.930" name="file0" dev="tmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.098601][ T9474] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.153775][ T9474] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.171948][ T9474] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.188316][ T9474] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.299577][ T30] audit: type=1400 audit(1743911952.181:610): avc: denied { unlink } for pid=5823 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 374.018450][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 374.026014][ T5921] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 374.032201][ T5921] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 374.707681][ T30] audit: type=1400 audit(1743911953.561:611): avc: denied { ioctl } for pid=9518 comm="syz.4.935" path="socket:[20804]" dev="sockfs" ino=20804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.084865][ T5921] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 376.095044][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 376.156568][ T5921] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 378.430078][ T30] audit: type=1400 audit(1743911957.301:612): avc: denied { ioctl } for pid=9549 comm="syz.4.943" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 378.496132][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.508133][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.999260][ T30] audit: type=1400 audit(1743911957.861:613): avc: denied { create } for pid=9558 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 380.232083][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 380.290548][ T30] audit: type=1400 audit(1743911959.131:614): avc: denied { mounton } for pid=9571 comm="syz.4.947" path="/183/file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.829127][ T9589] lo: entered allmulticast mode [ 381.869451][ T5935] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 382.404353][ T9594] vivid-000: kernel_thread() failed [ 382.549476][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 382.558212][ T5935] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 382.575040][ T5935] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 382.623736][ T5935] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 382.764120][ T5935] usb 5-1: config 1 has no interface number 0 [ 382.770859][ T5935] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.782141][ T5935] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 382.795364][ T5935] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 383.360430][ T30] audit: type=1400 audit(1743911961.841:615): avc: denied { ioctl } for pid=9599 comm="syz.3.953" path="/dev/sg0" dev="devtmpfs" ino=747 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 383.428171][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.653427][ T5935] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 383.956547][ T5935] snd_usb_pod 5-1:1.1: set_interface failed [ 383.962924][ T30] audit: type=1400 audit(1743911962.851:616): avc: denied { bind } for pid=9607 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 383.997680][ T5935] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 384.037571][ T5935] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 384.059913][ T30] audit: type=1400 audit(1743911962.871:617): avc: denied { listen } for pid=9607 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 384.155573][ T5935] usb 5-1: USB disconnect, device number 9 [ 384.178901][ T30] audit: type=1400 audit(1743911962.901:618): avc: denied { connect } for pid=9607 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 384.226487][ T30] audit: type=1400 audit(1743911962.921:619): avc: denied { write } for pid=9607 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.260491][ T9627] 9pnet_fd: Insufficient options for proto=fd [ 385.665973][ T9622] pimreg: entered allmulticast mode [ 386.439357][ T30] audit: type=1400 audit(1743911965.321:620): avc: denied { relabelfrom } for pid=9636 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 387.399631][ T30] audit: type=1400 audit(1743911965.321:621): avc: denied { relabelto } for pid=9636 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 387.421823][ T30] audit: type=1400 audit(1743911965.411:622): avc: denied { cmd } for pid=9636 comm="syz.1.962" path="socket:[20924]" dev="sockfs" ino=20924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 387.803331][ T9646] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551550) [ 387.813791][ T9646] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 389.776687][ T30] audit: type=1400 audit(1743911968.431:623): avc: denied { ioctl } for pid=9653 comm="syz.2.966" path="socket:[20367]" dev="sockfs" ino=20367 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 391.449938][ T9680] ubi: mtd0 is already attached to ubi31 [ 391.879509][ T971] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 392.459619][ T971] usb 2-1: Using ep0 maxpacket: 16 [ 392.473590][ T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.680244][ T971] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.693135][ T971] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 392.708075][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.716459][ T971] usb 2-1: Product: syz [ 392.721274][ T971] usb 2-1: Manufacturer: syz [ 392.726017][ T971] usb 2-1: SerialNumber: syz [ 392.740399][ T971] usb 2-1: config 0 descriptor?? [ 393.054893][ T30] audit: type=1400 audit(1743911971.941:624): avc: denied { getopt } for pid=9681 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.619576][ T5940] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 394.258228][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 394.288714][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.329142][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.365123][ T5940] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 394.386267][ T30] audit: type=1400 audit(1743911973.271:625): avc: denied { create } for pid=9708 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 395.009193][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.023067][ T5940] usb 1-1: config 0 descriptor?? [ 395.927970][ T5940] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0003/input/input11 [ 396.248365][ T5940] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 396.304514][ T5940] usb 1-1: USB disconnect, device number 5 [ 396.517827][ T9729] netlink: 452 bytes leftover after parsing attributes in process `syz.3.988'. [ 396.752483][ T9735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.318929][ T9739] syzkaller1: entered promiscuous mode [ 397.324581][ T9739] syzkaller1: entered allmulticast mode [ 397.641949][ T971] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 399.079423][ T971] usb 3-1: config 0 has no interfaces? [ 399.155511][ T971] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 399.175087][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.253832][ T971] usb 3-1: Product: syz [ 399.253937][ T971] usb 3-1: Manufacturer: syz [ 399.253995][ T971] usb 3-1: SerialNumber: syz [ 399.305423][ T971] usb 3-1: config 0 descriptor?? [ 401.997644][ T9605] usb 3-1: USB disconnect, device number 10 [ 403.115133][ T30] audit: type=1400 audit(1743911981.621:626): avc: denied { write } for pid=9776 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.179748][ T9605] usb 2-1: USB disconnect, device number 11 [ 404.633637][ T9793] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 405.344024][ T9808] usb usb1: usbfs: process 9808 (syz.4.1006) did not claim interface 0 before use [ 405.933084][ T30] audit: type=1400 audit(1743911984.811:627): avc: denied { create } for pid=9800 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 406.244088][ T30] audit: type=1400 audit(1743911984.991:628): avc: denied { setopt } for pid=9813 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 407.949300][ T9836] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 408.519561][ T9838] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 408.771107][ T9836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.779321][ T6616] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 408.873487][ T9840] veth3: entered promiscuous mode [ 408.891094][ T9840] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 408.910518][ T6619] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 410.973380][ T9858] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 411.214503][ T30] audit: type=1400 audit(1743911990.101:629): avc: denied { ioctl } for pid=9854 comm="syz.0.1015" path="socket:[21793]" dev="sockfs" ino=21793 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 411.315591][ T30] audit: type=1400 audit(1743911990.201:630): avc: denied { listen } for pid=9859 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.807241][ T30] audit: type=1400 audit(1743911990.681:631): avc: denied { map } for pid=9865 comm="syz.2.1018" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 412.606709][ T9874] syz.3.1019: attempt to access beyond end of device [ 412.606709][ T9874] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 412.985885][ T9884] sp0: Synchronizing with TNC [ 413.409576][ T9888] ubi: mtd0 is already attached to ubi31 [ 413.970015][ T5904] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 414.894149][ T5904] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 415.129487][ T5904] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 415.164843][ T5904] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 416.140221][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.354363][ T9898] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 416.368242][ T5904] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.429446][ T30] audit: type=1400 audit(1743911996.781:632): avc: denied { watch } for pid=9919 comm="syz.3.1029" path="/213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 418.537312][ T30] audit: type=1400 audit(1743911996.781:633): avc: denied { watch_sb watch_reads } for pid=9919 comm="syz.3.1029" path="/213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 419.248774][ T30] audit: type=1400 audit(1743911997.561:634): avc: denied { read write } for pid=9929 comm="syz.4.1030" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 419.293912][ T30] audit: type=1400 audit(1743911997.561:635): avc: denied { open } for pid=9929 comm="syz.4.1030" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 419.696630][ T971] usb 1-1: USB disconnect, device number 6 [ 420.340660][ T30] audit: type=1400 audit(1743911998.831:636): avc: denied { create } for pid=9941 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 420.863274][ T30] audit: type=1400 audit(1743911998.841:637): avc: denied { setopt } for pid=9941 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 420.915501][ T9951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1032'. [ 421.655141][ T30] audit: type=1400 audit(1743912000.451:638): avc: denied { name_bind } for pid=9947 comm="syz.3.1034" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 421.866575][ T9960] input: syz0 as /devices/virtual/input/input12 [ 422.470200][ T9965] input: syz0 as /devices/virtual/input/input13 [ 430.029902][T10019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1051'. [ 430.165743][T10021] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 430.851035][ T30] audit: type=1400 audit(1743912009.741:639): avc: denied { map } for pid=10020 comm="syz.2.1049" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 431.444398][T10038] 9pnet_virtio: no channels available for device syz [ 433.380677][ T971] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 434.985111][ T30] audit: type=1400 audit(1743912013.871:640): avc: denied { ioctl } for pid=10059 comm="syz.1.1060" path="socket:[22078]" dev="sockfs" ino=22078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.039442][ T5940] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 435.051315][T10067] Illegal XDP return value 4294967262 on prog (id 120) dev N/A, expect packet loss! [ 435.352677][ T5940] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.369563][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.384694][ T5940] usb 1-1: Product: syz [ 435.388879][ T5940] usb 1-1: Manufacturer: syz [ 435.409481][ T5940] usb 1-1: SerialNumber: syz [ 435.434759][ T5940] usb 1-1: config 0 descriptor?? [ 436.330610][ T5940] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.798251][ T971] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 436.837788][ T971] usb 3-1: can't read configurations, error -71 [ 438.260087][ T971] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 438.623026][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.634195][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.687704][ T971] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 438.865045][ T30] audit: type=1400 audit(1743912017.631:641): avc: denied { bind } for pid=10089 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.027745][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.050194][ T971] usb 3-1: config 0 descriptor?? [ 439.229269][T10006] syz.4.1046 (10006): drop_caches: 3 [ 439.278997][T10078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.305578][T10078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.573387][ T5940] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 439.590275][ T5940] usb 1-1: USB disconnect, device number 7 [ 439.602587][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.612326][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.624754][ T971] ntrig 0003:1B96:000E.0004: unknown main item tag 0x0 [ 439.654123][ T971] ntrig 0003:1B96:000E.0004: unknown main item tag 0x0 [ 439.671772][ T971] ntrig 0003:1B96:000E.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000e] on usb-dummy_hcd.2-1/input0 [ 440.360498][ T30] audit: type=1400 audit(1743912018.871:642): avc: denied { lock } for pid=10101 comm="syz.0.1071" path="socket:[22890]" dev="sockfs" ino=22890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 440.583938][ T971] usb 3-1: USB disconnect, device number 12 [ 440.649767][ T30] audit: type=1400 audit(1743912019.541:643): avc: denied { write } for pid=10104 comm="syz.3.1072" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 440.795762][ T30] audit: type=1400 audit(1743912019.681:644): avc: denied { read append } for pid=10113 comm="syz.1.1073" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 440.882421][ T30] audit: type=1400 audit(1743912019.721:645): avc: denied { open } for pid=10113 comm="syz.1.1073" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 440.903905][T10116] tmpfs: Unknown parameter 'huge½alway' [ 441.255380][ T30] audit: type=1400 audit(1743912020.091:646): avc: denied { bind } for pid=10117 comm="syz.1.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 441.731205][ T30] audit: type=1400 audit(1743912020.611:647): avc: denied { ioctl } for pid=10115 comm="syz.0.1074" path="socket:[22164]" dev="sockfs" ino=22164 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 441.777929][T10117] delete_channel: no stack [ 442.031908][ T30] audit: type=1400 audit(1743912020.911:648): avc: denied { read } for pid=10130 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.175389][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 442.202237][ T30] audit: type=1400 audit(1743912020.911:649): avc: denied { open } for pid=10130 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.891852][ T30] audit: type=1400 audit(1743912020.911:650): avc: denied { getattr } for pid=10130 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.080175][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 444.139551][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 444.139568][ T30] audit: type=1400 audit(1743912023.021:653): avc: denied { map } for pid=10142 comm="syz.1.1080" path="socket:[22187]" dev="sockfs" ino=22187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.331889][ T30] audit: type=1400 audit(1743912023.021:654): avc: denied { read accept } for pid=10142 comm="syz.1.1080" path="socket:[22187]" dev="sockfs" ino=22187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 444.528099][ T30] audit: type=1400 audit(1743912023.281:655): avc: denied { write } for pid=10110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.553787][ T30] audit: type=1400 audit(1743912023.281:656): avc: denied { add_name } for pid=10110 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.849432][ T5904] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 445.209445][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 445.235006][ T5904] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 445.283343][ T30] audit: type=1400 audit(1743912023.281:657): avc: denied { create } for pid=10110 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 445.312078][ T30] audit: type=1400 audit(1743912023.281:658): avc: denied { write } for pid=10110 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=5330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 445.353232][ T5904] usb 3-1: config 0 has no interface number 0 [ 445.370567][ T5904] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 445.437427][ T30] audit: type=1400 audit(1743912023.291:659): avc: denied { append } for pid=10110 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=5330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 445.552999][ T5904] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 445.570624][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.589394][ T5904] usb 3-1: Product: syz [ 445.593623][ T5904] usb 3-1: Manufacturer: syz [ 445.598262][ T5904] usb 3-1: SerialNumber: syz [ 446.352656][ T30] audit: type=1400 audit(1743912023.891:660): avc: denied { ioctl } for pid=10162 comm="syz.0.1083" path="socket:[22224]" dev="sockfs" ino=22224 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 446.452638][ T5904] usb 3-1: config 0 descriptor?? [ 446.706289][ T30] audit: type=1400 audit(1743912024.481:661): avc: denied { remove_name } for pid=10178 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=5330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.732627][ T30] audit: type=1400 audit(1743912024.481:662): avc: denied { unlink } for pid=10178 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=5330 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 447.534042][ T5904] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input15 [ 447.893825][T10198] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 447.920469][T10198] cramfs: wrong magic [ 449.051168][ T9605] usb 3-1: USB disconnect, device number 13 [ 451.719777][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 451.719807][ T30] audit: type=1400 audit(1743912030.601:669): avc: denied { read } for pid=10215 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 452.070122][T10234] x_tables: duplicate underflow at hook 3 [ 452.736698][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 452.745689][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 452.754634][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 452.769260][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 452.778193][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 454.507456][T10255] lo speed is unknown, defaulting to 1000 [ 454.518683][T10255] lo speed is unknown, defaulting to 1000 [ 454.526804][T10255] lo speed is unknown, defaulting to 1000 [ 454.715445][T10254] siw: device registration error -23 [ 454.779069][T10255] infiniband sz1: set down [ 454.783811][T10255] infiniband sz1: added lo [ 454.807251][T10255] RDS/IB: sz1: added [ 454.811741][T10255] smc: adding ib device sz1 with port count 1 [ 454.818276][T10255] smc: ib device sz1 port 1 has pnetid [ 454.825732][T10255] lo speed is unknown, defaulting to 1000 [ 454.955073][T10255] lo speed is unknown, defaulting to 1000 [ 455.038863][T10255] lo speed is unknown, defaulting to 1000 [ 455.121691][T10255] lo speed is unknown, defaulting to 1000 [ 455.204789][T10255] lo speed is unknown, defaulting to 1000 [ 455.287710][ T5921] lo speed is unknown, defaulting to 1000 [ 455.304124][ T5921] lo speed is unknown, defaulting to 1000 [ 455.369795][T10261] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1103'. [ 459.669633][T10287] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 459.698470][ T30] audit: type=1400 audit(1743912038.541:670): avc: denied { getopt } for pid=10285 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 459.887202][T10289] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 459.893849][T10289] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 459.951128][T10289] vhci_hcd vhci_hcd.0: Device attached [ 460.031152][T10298] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1112'. [ 460.077685][T10287] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 460.084322][T10287] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 460.161118][T10287] vhci_hcd vhci_hcd.0: Device attached [ 460.173168][T10284] vhci_hcd vhci_hcd.0: port 0 already used [ 460.189241][T10287] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 460.195876][T10287] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 460.205362][T10287] vhci_hcd vhci_hcd.0: Device attached [ 460.216542][T10284] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.227089][T10284] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.294628][T10287] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(27) [ 460.301299][T10287] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 460.315831][T10287] vhci_hcd vhci_hcd.0: Device attached [ 460.640001][ T30] audit: type=1400 audit(1743912039.531:671): avc: denied { connect } for pid=10299 comm="syz.1.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 460.790956][T10301] vhci_hcd: connection closed [ 460.791153][T10291] vhci_hcd: connection closed [ 460.832989][ T6616] vhci_hcd: stop threads [ 460.846158][T10306] vhci_hcd: connection closed [ 460.846352][T10319] vhci_hcd: connection closed [ 460.856591][ T6616] vhci_hcd: release socket [ 460.999670][ T6616] vhci_hcd: disconnect device [ 461.016699][ T6616] vhci_hcd: stop threads [ 461.049333][ T6616] vhci_hcd: release socket [ 461.059021][ T6616] vhci_hcd: disconnect device [ 461.066437][ T6616] vhci_hcd: stop threads [ 461.071031][ T6616] vhci_hcd: release socket [ 461.080057][ T6616] vhci_hcd: disconnect device [ 461.189404][ T6616] vhci_hcd: stop threads [ 461.197502][ T6616] vhci_hcd: release socket [ 461.221011][ T6616] vhci_hcd: disconnect device [ 461.503729][T10334] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1119'. [ 462.880296][ T30] audit: type=1400 audit(1743912041.771:672): avc: denied { name_connect } for pid=10341 comm="syz.4.1121" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 463.679004][ T30] audit: type=1400 audit(1743912042.551:673): avc: denied { write } for pid=10341 comm="syz.4.1121" lport=36576 faddr=::ffff:172.20.255.187 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 464.420631][ T30] audit: type=1400 audit(1743912043.311:674): avc: denied { read } for pid=10366 comm="syz.4.1127" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 464.443776][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.472013][ T30] audit: type=1400 audit(1743912043.311:675): avc: denied { open } for pid=10366 comm="syz.4.1127" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 464.495672][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.632330][T10374] tipc: Enabling of bearer rejected, failed to enable media [ 464.977217][ T30] audit: type=1326 audit(1743912043.391:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.4.1127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3486f8d169 code=0x0 [ 465.831725][ T30] audit: type=1400 audit(1743912044.431:677): avc: denied { map } for pid=10366 comm="syz.4.1127" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 466.003352][ T30] audit: type=1400 audit(1743912044.431:678): avc: denied { execute } for pid=10366 comm="syz.4.1127" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 466.508184][T10391] bridge0: port 3(netdevsim0) entered blocking state [ 466.515613][T10391] bridge0: port 3(netdevsim0) entered disabled state [ 466.523922][T10391] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 466.540216][T10391] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 466.549793][T10391] bridge0: port 3(netdevsim0) entered blocking state [ 466.558048][T10391] bridge0: port 3(netdevsim0) entered forwarding state [ 466.617231][ T30] audit: type=1400 audit(1743912045.391:679): avc: denied { ioctl } for pid=10384 comm="syz.4.1130" path="socket:[23247]" dev="sockfs" ino=23247 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.122226][T10384] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 470.099512][ T971] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 470.259653][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 470.337742][ T971] usb 5-1: config 0 has an invalid interface number: 201 but max is 0 [ 470.406733][ T971] usb 5-1: config 0 has no interface number 0 [ 470.477642][ T971] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=e9.0e [ 470.686761][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.712532][ T971] usb 5-1: Product: syz [ 470.750488][ T971] usb 5-1: Manufacturer: syz [ 470.802043][ T971] usb 5-1: SerialNumber: syz [ 471.039667][ T971] usb 5-1: config 0 descriptor?? [ 471.939372][ C1] hrtimer: interrupt took 30810 ns [ 472.159823][ T5904] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 472.309744][ T971] pcwd_usb: The device isn't a Human Interface Device [ 472.329482][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 472.335641][ T971] usb 5-1: USB disconnect, device number 10 [ 472.390389][ T5904] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 472.575218][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.610089][ T5904] usb 1-1: config 0 descriptor?? [ 472.624076][ T5904] gspca_main: sunplus-2.14.0 probing 041e:400b [ 473.562243][ T5904] gspca_sunplus: reg_w_riv err -110 [ 473.672120][ T5904] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 473.689890][ T30] audit: type=1400 audit(1743912052.571:680): avc: denied { bind } for pid=10439 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 474.362148][T10461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1148'. [ 474.373405][T10461] netlink: 'syz.4.1148': attribute type 7 has an invalid length. [ 474.381891][T10461] netlink: 'syz.4.1148': attribute type 8 has an invalid length. [ 474.391582][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 474.405536][T10461] syz_tun: entered promiscuous mode [ 474.417174][T10461] syz_tun: left promiscuous mode [ 475.976083][ T30] audit: type=1400 audit(1743912054.861:681): avc: denied { bind } for pid=10467 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 476.091581][ T30] audit: type=1400 audit(1743912054.901:682): avc: denied { bind } for pid=10467 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 476.355265][T10453] syz.0.1144 (10453): drop_caches: 2 [ 476.379468][ T30] audit: type=1400 audit(1743912054.901:683): avc: denied { watch watch_reads } for pid=10467 comm="syz.4.1150" path="/224" dev="tmpfs" ino=1169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 476.402432][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.413158][ T30] audit: type=1400 audit(1743912054.921:684): avc: denied { mount } for pid=10467 comm="syz.4.1150" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 476.434697][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.444614][ T971] usb 1-1: USB disconnect, device number 8 [ 476.472797][ T30] audit: type=1400 audit(1743912055.361:685): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 476.794968][T10486] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 476.803934][T10486] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 476.955441][T10492] rdma_rxe: rxe_newlink: failed to add lo [ 477.053893][T10493] siw: device registration error -23 [ 477.369483][ T971] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 477.525975][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 477.548938][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 477.558143][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.584987][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 477.702728][ T971] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 477.721530][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.734172][ T971] usb 5-1: config 0 descriptor?? [ 479.497966][ T30] audit: type=1400 audit(1743912058.381:686): avc: denied { write } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.519372][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.545592][ T30] audit: type=1400 audit(1743912058.381:687): avc: denied { remove_name } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.572482][ T30] audit: type=1400 audit(1743912058.381:688): avc: denied { rename } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.595165][ T30] audit: type=1400 audit(1743912058.381:689): avc: denied { add_name } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.618377][ T30] audit: type=1400 audit(1743912058.381:690): avc: denied { unlink } for pid=5179 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.664748][ T30] audit: type=1400 audit(1743912058.381:691): avc: denied { create } for pid=5179 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 480.072988][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 480.082038][T10502] tipc: Started in network mode [ 480.086905][T10502] tipc: Node identity 1, cluster identity 4711 [ 480.093101][T10502] tipc: Node number set to 1 [ 480.462292][ T971] usbhid 5-1:0.0: can't add hid device: -71 [ 480.468380][ T971] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 480.542608][ T971] usb 5-1: USB disconnect, device number 11 [ 484.388221][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 484.422379][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 485.276572][T10574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1173'. [ 485.471942][T10574] netlink: 'syz.4.1173': attribute type 7 has an invalid length. [ 485.586444][T10574] netlink: 'syz.4.1173': attribute type 8 has an invalid length. [ 485.586463][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 485.627179][T10574] ip6gretap0: entered promiscuous mode [ 485.627693][T10574] syz_tun: entered promiscuous mode [ 485.654873][T10574] ip6gretap0: left promiscuous mode [ 485.659606][T10574] syz_tun: left promiscuous mode [ 485.710525][T10584] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 485.782669][T10584] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 485.826671][ T30] audit: type=1400 audit(1743912064.681:692): avc: denied { relabelto } for pid=10583 comm="syz.1.1176" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 485.910746][ T30] audit: type=1400 audit(1743912064.691:693): avc: denied { associate } for pid=10583 comm="syz.1.1176" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 486.239025][ T30] audit: type=1400 audit(1743912065.021:694): avc: denied { ioctl } for pid=10595 comm="syz.0.1177" path="socket:[24160]" dev="sockfs" ino=24160 ioctlcmd=0x8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 487.580169][T10620] tmpfs: Unknown parameter 'huge½alway' [ 489.292680][ T30] audit: type=1400 audit(1743912068.181:695): avc: denied { ioctl } for pid=10655 comm="syz.1.1190" path="socket:[24708]" dev="sockfs" ino=24708 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 492.646073][ T30] audit: type=1400 audit(1743912071.191:696): avc: denied { module_load } for pid=10678 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 494.676691][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 494.685941][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 494.731692][ T30] audit: type=1400 audit(1743912073.621:697): avc: denied { getopt } for pid=10701 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.880315][ T30] audit: type=1400 audit(1743912073.661:698): avc: denied { mount } for pid=10698 comm="syz.3.1200" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 496.449710][ T971] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 496.639966][ T971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.814066][ T971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 496.873625][ T971] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.901095][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.164579][ T971] usb 4-1: Product: syz [ 497.175776][ T971] usb 4-1: Manufacturer: syz [ 497.185800][ T971] usb 4-1: SerialNumber: syz [ 498.455803][ T30] audit: type=1400 audit(1743912077.341:699): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 498.549684][ T971] usb 4-1: can't set config #1, error -71 [ 498.566953][ T971] usb 4-1: USB disconnect, device number 6 [ 499.348836][T10746] netlink: 'syz.2.1210': attribute type 4 has an invalid length. [ 501.041208][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.047844][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.379518][ T30] audit: type=1400 audit(1743912080.251:700): avc: denied { write } for pid=10760 comm="syz.3.1216" path="socket:[24386]" dev="sockfs" ino=24386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 502.509447][ T5940] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 502.850780][ T5940] usb 4-1: config 0 has no interfaces? [ 502.894616][ T5940] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 503.029609][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.037665][ T5940] usb 4-1: Product: syz [ 503.476308][ T5940] usb 4-1: Manufacturer: syz [ 503.481005][ T5940] usb 4-1: SerialNumber: syz [ 503.506520][ T30] audit: type=1800 audit(1743912082.011:701): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1219" name="file1" dev="tmpfs" ino=1289 res=0 errno=0 [ 503.532015][ T5940] usb 4-1: config 0 descriptor?? [ 503.688965][T10783] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 503.698206][T10783] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 503.915041][ T5921] usb 4-1: USB disconnect, device number 7 [ 503.921182][ T30] audit: type=1400 audit(1743912082.801:702): avc: denied { execute } for pid=10786 comm="syz.1.1221" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 504.202906][ T30] audit: type=1800 audit(1743912083.071:703): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1220" name="file1" dev="tmpfs" ino=1282 res=0 errno=0 [ 505.193658][T10800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1224'. [ 505.220006][T10800] netlink: 'syz.0.1224': attribute type 7 has an invalid length. [ 505.282271][T10800] netlink: 'syz.0.1224': attribute type 8 has an invalid length. [ 505.379816][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 505.880289][T10806] lo speed is unknown, defaulting to 1000 [ 507.546113][ T30] audit: type=1800 audit(1743912086.411:704): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1229" name="file1" dev="tmpfs" ino=1362 res=0 errno=0 [ 508.879107][ T30] audit: type=1800 audit(1743912087.751:705): pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1231" name="file1" dev="tmpfs" ino=1298 res=0 errno=0 [ 510.349530][ T30] audit: type=1800 audit(1743912088.821:706): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1232" name="file1" dev="tmpfs" ino=1257 res=0 errno=0 [ 510.838782][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'. [ 510.848106][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'. [ 511.347920][ T30] audit: type=1800 audit(1743912090.231:707): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1233" name="file1" dev="tmpfs" ino=1368 res=0 errno=0 [ 511.593958][T10853] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 511.603071][T10853] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 511.979715][ T30] audit: type=1800 audit(1743912090.811:708): pid=10856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1238" name="file1" dev="tmpfs" ino=1309 res=0 errno=0 [ 513.927357][ T30] audit: type=1800 audit(1743912092.811:709): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1242" name="file1" dev="tmpfs" ino=1262 res=0 errno=0 [ 514.031477][ T30] audit: type=1400 audit(1743912092.911:710): avc: denied { write } for pid=10872 comm="syz.3.1244" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 514.321539][T10878] @: renamed from vlan0 (while UP) [ 514.386898][ T30] audit: type=1400 audit(1743912093.251:711): avc: denied { mount } for pid=10872 comm="syz.3.1244" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 517.183768][ T30] audit: type=1400 audit(1743912096.071:712): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 518.642918][ T30] audit: type=1800 audit(1743912097.101:713): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1252" name="file1" dev="tmpfs" ino=1385 res=0 errno=0 [ 518.786930][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 519.339521][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 520.168671][ T30] audit: type=1800 audit(1743912098.701:714): pid=10935 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1257" name="file1" dev="tmpfs" ino=1288 res=0 errno=0 [ 523.422770][ T30] audit: type=1800 audit(1743912101.891:715): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1263" name="file1" dev="tmpfs" ino=1304 res=0 errno=0 [ 526.406928][T10973] sp0: Synchronizing with TNC [ 526.503438][T10974] ubi: mtd0 is already attached to ubi31 [ 532.157746][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1281'. [ 543.686495][T11098] delete_channel: no stack [ 545.198761][T11147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1312'. [ 545.207970][T11147] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1312'. [ 546.211475][T11158] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 546.220399][T11158] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 546.813210][T11164] netlink: 173 bytes leftover after parsing attributes in process `syz.1.1317'. [ 549.907948][ T30] audit: type=1400 audit(1743912128.771:716): avc: denied { write } for pid=11193 comm="syz.4.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 549.957435][ T30] audit: type=1400 audit(1743912128.781:717): avc: denied { block_suspend } for pid=11193 comm="syz.4.1325" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 552.159597][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 552.234394][T11191] delete_channel: no stack [ 554.861474][T11230] delete_channel: no stack [ 562.483752][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.493259][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.551953][T11332] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 562.560960][T11332] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 562.689837][T11331] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11331 comm=syz.1.1359 [ 564.354546][T11346] sp0: Synchronizing with TNC [ 565.677054][T11352] ubi: mtd0 is already attached to ubi31 [ 566.419390][T11367] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 566.479987][ T6619] Bluetooth: hci5: Frame reassembly failed (-84) [ 568.650453][T11209] Bluetooth: hci5: command 0x1003 tx timeout [ 568.656828][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 571.373226][T11395] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 571.382252][T11395] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 575.324996][T11422] sp0: Synchronizing with TNC [ 575.930970][T11431] ubi: mtd0 is already attached to ubi31 [ 577.979213][ T6619] Bluetooth: hci5: Frame reassembly failed (-84) [ 579.388932][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 579.999486][T11473] Bluetooth: hci5: command 0x1003 tx timeout [ 580.034246][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 581.485469][ T5829] Bluetooth: hci6: command 0x1003 tx timeout [ 582.037091][T11209] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 583.117740][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 583.133402][T11476] delete_channel: no stack [ 585.036883][T11525] @: renamed from vlan0 (while UP) [ 585.119457][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 592.239206][T11562] delete_channel: no stack [ 593.039586][T11572] delete_channel: no stack [ 597.221010][ T30] audit: type=1800 audit(1743912176.091:718): pid=11643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1432" name="file1" dev="tmpfs" ino=1450 res=0 errno=0 [ 597.768257][ T6619] Bluetooth: hci5: Frame reassembly failed (-84) [ 598.709365][T11652] lo speed is unknown, defaulting to 1000 [ 599.246199][T11657] sp0: Synchronizing with TNC [ 599.420981][T11657] ubi: mtd0 is already attached to ubi31 [ 600.054481][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 603.305798][T11664] delete_channel: no stack [ 603.724985][T11706] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 603.885177][ T6630] Bluetooth: hci5: Frame reassembly failed (-84) [ 604.932219][T11678] delete_channel: no stack [ 605.819494][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 605.832879][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 606.943274][T11698] delete_channel: no stack [ 614.113382][T11782] delete_channel: no stack [ 614.184347][T11826] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 614.211599][ T6619] Bluetooth: hci5: Frame reassembly failed (-84) [ 616.266598][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 616.273200][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 616.688302][T11859] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 616.697509][T11859] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 621.740872][T11910] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 622.301677][ T6619] Bluetooth: hci5: Frame reassembly failed (-84) [ 624.322246][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.328522][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.335206][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 624.342344][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 625.163536][T11953] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 625.175704][ T3493] Bluetooth: hci5: Frame reassembly failed (-84) [ 627.277831][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 627.286027][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 628.346652][T11983] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 628.369983][ T6616] Bluetooth: hci5: Frame reassembly failed (-84) [ 628.674347][T11934] delete_channel: no stack [ 629.791836][T11996] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 630.509095][T11473] Bluetooth: hci5: command 0x1003 tx timeout [ 630.515447][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 631.434451][T12015] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 631.505819][ T6616] Bluetooth: hci5: Frame reassembly failed (-84) [ 631.528773][ T6616] Bluetooth: hci5: Frame reassembly failed (-84) [ 631.899373][T11473] Bluetooth: hci6: command 0x1003 tx timeout [ 631.939528][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 632.357166][T12027] lo speed is unknown, defaulting to 1000 [ 633.569575][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 633.575982][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 635.862009][T12063] netlink: 173 bytes leftover after parsing attributes in process `syz.0.1528'. [ 637.961264][ T30] audit: type=1800 audit(1743912216.851:719): pid=12091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1534" name="file1" dev="tmpfs" ino=1617 res=0 errno=0 [ 639.902405][T12111] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 639.943827][ T1106] Bluetooth: hci5: Frame reassembly failed (-84) [ 642.001298][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 642.008823][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 645.444212][T12174] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 645.622574][ T6630] Bluetooth: hci5: Frame reassembly failed (-84) [ 647.595801][T12197] sp0: Synchronizing with TNC [ 647.661468][T12202] ubi: mtd0 is already attached to ubi31 [ 647.680170][T11209] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 647.683403][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 651.415109][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 651.468648][T12176] delete_channel: no stack [ 651.535400][ T31] Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 [ 651.543451][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 651.552401][ T31] task:kworker/0:0 state:D stack:21880 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 651.564661][ T31] Workqueue: usb_hub_wq hub_event [ 651.569982][ T31] Call Trace: [ 651.573263][ T31] [ 651.576197][ T31] __schedule+0x116f/0x5de0 [ 651.581931][ T31] ? __lock_acquire+0x9c1/0x1ba0 [ 651.586895][ T31] ? __pfx___schedule+0x10/0x10 [ 651.592147][ T31] ? find_held_lock+0x2b/0x80 [ 651.596841][ T31] ? schedule+0x2d7/0x3a0 [ 651.624128][ T31] schedule+0xe7/0x3a0 [ 651.628408][ T31] usb_kill_urb+0x253/0x320 [ 651.633648][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 651.638851][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 651.650080][ T31] usb_start_wait_urb+0x250/0x4b0 [ 651.760603][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 651.769429][ T31] ? __asan_memset+0x23/0x50 [ 651.774077][ T31] usb_control_msg+0x326/0x4a0 [ 651.778853][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 652.249614][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 652.255850][ T31] hub_port_init+0x690/0x3a70 [ 652.260672][ T31] hub_event+0x2c67/0x4fa0 [ 652.265173][ T31] ? __pfx_hub_event+0x10/0x10 [ 652.270128][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 652.275838][ T31] ? rcu_is_watching+0x12/0xc0 [ 652.281806][ T31] process_one_work+0x9cc/0x1b70 [ 652.286810][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 652.293498][ T31] ? __pfx_process_one_work+0x10/0x10 [ 652.305779][ T31] ? assign_work+0x1a0/0x250 [ 652.315740][ T31] worker_thread+0x6c8/0xf10 [ 652.329400][ T31] ? __pfx_worker_thread+0x10/0x10 [ 652.340830][ T31] kthread+0x3c2/0x780 [ 652.347161][ T31] ? __pfx_kthread+0x10/0x10 [ 652.353211][ T31] ? __pfx_kthread+0x10/0x10 [ 652.370296][ T31] ? __pfx_kthread+0x10/0x10 [ 652.376043][ T31] ? __pfx_kthread+0x10/0x10 [ 652.389731][ T31] ? rcu_is_watching+0x12/0xc0 [ 652.400886][ T31] ? __pfx_kthread+0x10/0x10 [ 652.410625][ T31] ret_from_fork+0x45/0x80 [ 652.421971][ T31] ? __pfx_kthread+0x10/0x10 [ 652.431820][ T31] ret_from_fork_asm+0x1a/0x30 [ 652.443060][ T31] [ 652.454409][ T31] INFO: task kworker/1:0:24 blocked for more than 145 seconds. [ 652.466519][ T31] Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 [ 652.486064][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.501919][ T31] task:kworker/1:0 state:D stack:23144 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 652.514065][ T31] Workqueue: usb_hub_wq hub_event [ 652.519196][ T31] Call Trace: [ 652.525044][ T31] [ 652.529345][ T31] __schedule+0x116f/0x5de0 [ 652.533930][ T31] ? __lock_acquire+0x9c0/0x1ba0 [ 652.540822][ T31] ? __pfx___schedule+0x10/0x10 [ 652.549426][ T31] ? find_held_lock+0x2b/0x80 [ 652.554179][ T31] ? schedule+0x2d7/0x3a0 [ 652.559456][ T31] schedule+0xe7/0x3a0 [ 652.565957][ T31] usb_kill_urb+0x253/0x320 [ 652.571736][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 652.580814][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 652.590596][ T31] usb_start_wait_urb+0x250/0x4b0 [ 652.601219][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 652.609398][ T31] ? __asan_memset+0x23/0x50 [ 652.614085][ T31] usb_control_msg+0x326/0x4a0 [ 652.619515][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 652.628275][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 652.633627][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 652.642284][ T31] hub_port_init+0x690/0x3a70 [ 652.650368][ T31] hub_event+0x2c67/0x4fa0 [ 652.658156][ T31] ? __pfx_hub_event+0x10/0x10 [ 652.665563][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 652.671308][ T31] ? rcu_is_watching+0x12/0xc0 [ 652.676134][ T31] process_one_work+0x9cc/0x1b70 [ 652.682508][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 652.687856][ T31] ? __pfx_process_one_work+0x10/0x10 [ 652.693309][ T31] ? assign_work+0x1a0/0x250 [ 652.697952][ T31] worker_thread+0x6c8/0xf10 [ 652.703008][ T31] ? __pfx_worker_thread+0x10/0x10 [ 652.708177][ T31] kthread+0x3c2/0x780 [ 652.713564][ T31] ? __pfx_kthread+0x10/0x10 [ 652.718213][ T31] ? __pfx_kthread+0x10/0x10 [ 652.724016][ T31] ? __pfx_kthread+0x10/0x10 [ 652.729458][ T31] ? __pfx_kthread+0x10/0x10 [ 652.735187][ T31] ? rcu_is_watching+0x12/0xc0 [ 652.740106][ T31] ? __pfx_kthread+0x10/0x10 [ 652.744751][ T31] ret_from_fork+0x45/0x80 [ 652.749397][ T31] ? __pfx_kthread+0x10/0x10 [ 652.754233][ T31] ret_from_fork_asm+0x1a/0x30 [ 652.759412][ T31] [ 652.762519][ T31] INFO: task kworker/0:2:974 blocked for more than 145 seconds. [ 652.771124][ T31] Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 [ 652.778917][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.790150][ T31] task:kworker/0:2 state:D stack:24888 pid:974 tgid:974 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 652.802426][ T31] Workqueue: usb_hub_wq hub_event [ 652.807603][ T31] Call Trace: [ 652.811055][ T31] [ 652.814078][ T31] __schedule+0x116f/0x5de0 [ 652.819477][ T31] ? __lock_acquire+0x9c1/0x1ba0 [ 652.824490][ T31] ? __pfx___schedule+0x10/0x10 [ 652.831652][ T31] ? find_held_lock+0x2b/0x80 [ 652.836392][ T31] ? schedule+0x2d7/0x3a0 [ 652.840818][ T31] schedule+0xe7/0x3a0 [ 652.844945][ T31] usb_kill_urb+0x253/0x320 [ 652.849556][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 652.854636][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 652.862010][ T31] usb_start_wait_urb+0x250/0x4b0 [ 652.867096][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 652.872799][ T31] ? __asan_memset+0x23/0x50 [ 652.877457][ T31] usb_control_msg+0x326/0x4a0 [ 652.882337][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 652.887697][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 652.893845][ T31] hub_port_init+0x690/0x3a70 [ 652.898594][ T31] hub_event+0x2c67/0x4fa0 [ 652.904767][ T31] ? __pfx_hub_event+0x10/0x10 [ 652.912559][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 652.918256][ T31] ? rcu_is_watching+0x12/0xc0 [ 652.923271][ T31] process_one_work+0x9cc/0x1b70 [ 652.928276][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 652.935783][ T31] ? __pfx_process_one_work+0x10/0x10 [ 652.942416][ T31] ? assign_work+0x1a0/0x250 [ 652.947071][ T31] worker_thread+0x6c8/0xf10 [ 652.952032][ T31] ? __kthread_parkme+0x19e/0x250 [ 652.957125][ T31] ? __pfx_worker_thread+0x10/0x10 [ 652.962467][ T31] kthread+0x3c2/0x780 [ 652.966597][ T31] ? __pfx_kthread+0x10/0x10 [ 652.971353][ T31] ? __pfx_kthread+0x10/0x10 [ 652.975995][ T31] ? __pfx_kthread+0x10/0x10 [ 652.980801][ T31] ? __pfx_kthread+0x10/0x10 [ 652.985601][ T31] ? rcu_is_watching+0x12/0xc0 [ 652.990846][ T31] ? __pfx_kthread+0x10/0x10 [ 652.997664][ T31] ret_from_fork+0x45/0x80 [ 653.008880][ T31] ? __pfx_kthread+0x10/0x10 [ 653.013816][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.018660][ T31] [ 653.022539][ T31] [ 653.022539][ T31] Showing all locks held in the system: [ 653.031020][ T31] 5 locks held by kworker/0:0/9: [ 653.036028][ T31] #0: ffff888141a99948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 653.047352][ T31] #1: ffffc900000e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 653.059033][ T31] #2: ffff88802a742198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 653.068291][ T31] #3: ffff88802a745510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 653.078650][ T31] #4: ffff88802914b768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 653.098342][ T31] 5 locks held by kworker/1:0/24: [ 653.104751][ T31] #0: ffff888141a99948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 653.129410][ T31] #1: ffffc900001e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 653.140993][ T31] #2: ffff88802a83b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 653.150185][ T31] #3: ffff88802a83e510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 653.160558][ T31] #4: ffff888029163768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 653.170549][ T31] 1 lock held by khungtaskd/31: [ 653.175408][ T31] #0: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 653.191907][ T31] 5 locks held by kworker/0:2/974: [ 653.200722][ T31] #0: ffff888141a99948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 653.216408][ T31] #1: ffffc9000394fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 653.240988][ T31] #2: ffff888145b2d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 653.260841][ T31] #3: ffff88802a5fc510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 653.281824][ T31] #4: ffff888029134168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 653.303277][ T31] 2 locks held by getty/5585: [ 653.314722][ T31] #0: ffff88803693a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 653.333100][ T31] #1: ffffc900033532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 653.355524][ T31] 2 locks held by syz.2.1550/12155: [ 653.361368][ T31] [ 653.364847][ T31] ============================================= [ 653.364847][ T31] [ 653.380109][ T31] NMI backtrace for cpu 0 [ 653.380126][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 653.380146][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 653.380156][ T31] Call Trace: [ 653.380162][ T31] [ 653.380168][ T31] dump_stack_lvl+0x116/0x1f0 [ 653.380195][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 653.380213][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 653.380233][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 653.380253][ T31] watchdog+0xf70/0x12c0 [ 653.380275][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.380290][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 653.380314][ T31] ? __kthread_parkme+0x19e/0x250 [ 653.380339][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.380354][ T31] kthread+0x3c2/0x780 [ 653.380370][ T31] ? __pfx_kthread+0x10/0x10 [ 653.380385][ T31] ? __pfx_kthread+0x10/0x10 [ 653.380401][ T31] ? __pfx_kthread+0x10/0x10 [ 653.380417][ T31] ? __pfx_kthread+0x10/0x10 [ 653.380433][ T31] ? rcu_is_watching+0x12/0xc0 [ 653.380459][ T31] ? __pfx_kthread+0x10/0x10 [ 653.380476][ T31] ret_from_fork+0x45/0x80 [ 653.380492][ T31] ? __pfx_kthread+0x10/0x10 [ 653.380509][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.380544][ T31] [ 653.380550][ T31] Sending NMI from CPU 0 to CPUs 1: [ 653.511875][ C1] NMI backtrace for cpu 1 [ 653.511888][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 653.511905][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 653.511912][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 653.511933][ C1] Code: 95 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bc 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 653.511945][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 653.511956][ C1] RAX: 000000000312f6d7 RBX: 0000000000000001 RCX: ffffffff8b723439 [ 653.511964][ C1] RDX: 0000000000000000 RSI: ffffffff8dbeeb53 RDI: ffffffff8bf46580 [ 653.511971][ C1] RBP: ffffed1003b5a488 R08: 0000000000000001 R09: ffffed10170a65bd [ 653.511979][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 653.511987][ C1] R13: ffff88801dad2440 R14: ffffffff90865310 R15: 0000000000000000 [ 653.511995][ C1] FS: 0000000000000000(0000) GS:ffff888124ab3000(0000) knlGS:0000000000000000 [ 653.512009][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.512017][ C1] CR2: 0000200001000000 CR3: 000000007ce18000 CR4: 00000000003526f0 [ 653.512025][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 653.512032][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 653.512039][ C1] Call Trace: [ 653.512044][ C1] [ 653.512048][ C1] default_idle+0x13/0x20 [ 653.512066][ C1] default_idle_call+0x6d/0xb0 [ 653.512082][ C1] do_idle+0x391/0x510 [ 653.512101][ C1] ? __pfx_do_idle+0x10/0x10 [ 653.512116][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 653.512136][ C1] cpu_startup_entry+0x4f/0x60 [ 653.512151][ C1] start_secondary+0x21d/0x2b0 [ 653.512165][ C1] ? __pfx_start_secondary+0x10/0x10 [ 653.512179][ C1] common_startup_64+0x13e/0x148 [ 653.512200][ C1] [ 653.519656][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 653.519671][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 653.519690][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 653.519699][ T31] Call Trace: [ 653.519705][ T31] [ 653.519711][ T31] dump_stack_lvl+0x3d/0x1f0 [ 653.519737][ T31] panic+0x71c/0x800 [ 653.519752][ T31] ? __pfx_panic+0x10/0x10 [ 653.519766][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 653.519786][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 653.519803][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 653.519820][ T31] ? watchdog+0xdda/0x12c0 [ 653.519835][ T31] ? watchdog+0xdcd/0x12c0 [ 653.519854][ T31] watchdog+0xdeb/0x12c0 [ 653.519873][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.519887][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 653.519907][ T31] ? __kthread_parkme+0x19e/0x250 [ 653.519930][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.519946][ T31] kthread+0x3c2/0x780 [ 653.519962][ T31] ? __pfx_kthread+0x10/0x10 [ 653.519976][ T31] ? __pfx_kthread+0x10/0x10 [ 653.519990][ T31] ? __pfx_kthread+0x10/0x10 [ 653.520004][ T31] ? __pfx_kthread+0x10/0x10 [ 653.520019][ T31] ? rcu_is_watching+0x12/0xc0 [ 653.520038][ T31] ? __pfx_kthread+0x10/0x10 [ 653.520054][ T31] ret_from_fork+0x45/0x80 [ 653.520071][ T31] ? __pfx_kthread+0x10/0x10 [ 653.520087][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.520118][ T31] [ 653.851120][ T31] Kernel Offset: disabled [ 653.855422][ T31] Rebooting in 86400 seconds..