last executing test programs: 34.526939223s ago: executing program 3 (id=757): socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x2, 0x80805, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', &(0x7f0000000280)={0x8000, 0x0, 0x10}, 0x18) userfaultfd(0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0x16}, {0x0, 0xa}}}, 0x24}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 32.483989571s ago: executing program 3 (id=762): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x10001, &(0x7f0000000000)) timerfd_create(0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x48400, 0x0) socket(0x1, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) creat(&(0x7f0000000000)='./file0\x00', 0xc2) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x2, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x1000000, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 30.75566866s ago: executing program 3 (id=767): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 29.557665207s ago: executing program 3 (id=768): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7c5f8f2f92ff25d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x0, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) write(r0, &(0x7f00000001c0)="240000001a005f0400f9f4070009040180200000000000000000000800010000000000e8", 0x24) socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 27.739914094s ago: executing program 3 (id=773): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc) bind$bt_l2cap(r4, 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000200)=0x10) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 25.324785466s ago: executing program 3 (id=780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) close_range(r4, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000012c0)=ANY=[@ANYBLOB="0200"]) 12.667278047s ago: executing program 1 (id=807): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x5) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010a"], 0x40}}, 0x0) 11.036728967s ago: executing program 1 (id=810): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$inet(0x2, 0x6, 0x0) shutdown(r1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14}) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r3) r4 = add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000340)="3e2684400b7bd5300b859df35171dbb720a647fcbcb7d76e69b814fbf6", 0x1d, r4) close_range(r0, r3, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x4800, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r5, 0x1) 10.466346805s ago: executing program 1 (id=813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000b40)=0x4) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fsc']) 8.858699305s ago: executing program 32 (id=780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) close_range(r4, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000012c0)=ANY=[@ANYBLOB="0200"]) 8.849006235s ago: executing program 0 (id=815): rename(&(0x7f0000006840)='./file1\x00', &(0x7f0000006640)='./file0/file0\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xc, &(0x7f0000000040)={0xff, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002bc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf2501000000000000000b00000000030014"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44000000) 8.847329748s ago: executing program 1 (id=816): syz_io_uring_setup(0x1114, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.798925177s ago: executing program 4 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0xfbff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000440)=0x2) 7.790787262s ago: executing program 0 (id=818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(0x0, 0x2, 0x40000) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000140)) 6.911345444s ago: executing program 1 (id=819): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x98}, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = dup(r4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) sendfile(r7, r5, 0x0, 0x89ffc) 6.553045627s ago: executing program 4 (id=820): syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.282094837s ago: executing program 1 (id=821): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x92902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x1, 0x0, 0x477f) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005"], 0x90}}, 0x0) 6.233245698s ago: executing program 2 (id=822): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001e80)={0x2020}, 0x2020) 4.627061153s ago: executing program 4 (id=823): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, 0x0, 0x0) r3 = dup(r1) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00221a"], 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x3af4701e) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 4.552591808s ago: executing program 2 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x5453, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 4.492139175s ago: executing program 0 (id=825): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f040000800700000003000000040000800000000000000000000400040000000000"], 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r2, 0x0) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) 3.602381331s ago: executing program 2 (id=826): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$packet(0x11, 0x2, 0x300) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xfffffffc, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.49818534s ago: executing program 2 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 3.319215403s ago: executing program 0 (id=828): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) fanotify_init(0x200, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000080)=@l2, &(0x7f0000000000)=0x80) connect$vsock_stream(r0, &(0x7f0000000440), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.341290171s ago: executing program 4 (id=829): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r5], 0x0, &(0x7f0000000200), &(0x7f0000000380)}) 2.249215609s ago: executing program 0 (id=830): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1.252273508s ago: executing program 4 (id=831): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x8, &(0x7f0000000040)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe888000000000000000000000000001ff020000000000000000000000000001030090780000000060fd906300003a00ff0100000000000001fc0100000000000000000000000000011e030b4c951ee12e"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 591.749323ms ago: executing program 2 (id=832): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 489.579395ms ago: executing program 2 (id=833): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x92902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5}, 0x0, 0xd8, 0x138, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x8, 0x2, 0x4}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x4e22, 0x6, 0xff81, 0x4, 0x7fff}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 'veth1_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x1, 0x0, 0x477f) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005"], 0x90}}, 0x0) 216.583859ms ago: executing program 4 (id=834): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001e80)={0x2020}, 0x2020) 0s ago: executing program 0 (id=835): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c6ba6bef4a1c4e384d8c033ed7a80ffdfef0f000060000000a2bc5603ca00000f7f8900000008000000372471083ec6991778581acb6c01", 0x48}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000140)) fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x2}) kernel console output (not intermixed with test programs): ext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.580203][ T29] audit: type=1400 audit(1734461908.832:210): avc: denied { open } for pid=5993 comm="syz.2.25" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 71.485881][ T29] audit: type=1400 audit(1734461909.612:211): avc: denied { ioctl } for pid=5993 comm="syz.2.25" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 71.510668][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.518717][ T29] audit: type=1400 audit(1734461909.742:212): avc: denied { ioctl } for pid=5993 comm="syz.2.25" path="socket:[7884]" dev="sockfs" ino=7884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.543887][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.639764][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.647067][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.657982][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.997629][ T29] audit: type=1400 audit(1734461910.312:213): avc: denied { create } for pid=6010 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.390251][ T29] audit: type=1400 audit(1734461910.662:214): avc: denied { create } for pid=6013 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.773562][ T29] audit: type=1400 audit(1734461911.052:215): avc: denied { setopt } for pid=6013 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.314609][ T6019] tty tty25: ldisc open failed (-12), clearing slot 24 [ 73.442053][ T8] usb 4-1: device descriptor read/all, error -71 [ 73.630210][ T29] audit: type=1400 audit(1734461911.902:216): avc: denied { write } for pid=6024 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.456021][ T29] audit: type=1400 audit(1734461912.512:217): avc: denied { create } for pid=6021 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.820275][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 75.820293][ T29] audit: type=1400 audit(1734461913.602:219): avc: denied { mount } for pid=6033 comm="syz.2.36" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.847931][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.972974][ T6046] overlayfs: conflicting lowerdir path [ 76.973014][ T970] cfg80211: failed to load regulatory.db [ 77.200044][ T29] audit: type=1400 audit(1734461915.492:220): avc: denied { create } for pid=6051 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.049926][ T6058] netlink: ct family unspecified [ 78.055601][ T6058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.350161][ T29] audit: type=1400 audit(1734461916.972:221): avc: denied { create } for pid=6059 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.410696][ T29] audit: type=1400 audit(1734461916.982:222): avc: denied { write } for pid=6059 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.455474][ T29] audit: type=1400 audit(1734461916.982:223): avc: denied { nlmsg_write } for pid=6059 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.711468][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.4.45'. [ 80.850289][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.45'. [ 80.859436][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.4.45'. [ 81.430269][ T6069] netlink: 36 bytes leftover after parsing attributes in process `syz.4.45'. [ 81.999703][ T6086] Zero length message leads to an empty skb [ 82.315209][ T29] audit: type=1400 audit(1734461920.332:224): avc: denied { execute } for pid=6085 comm="syz.4.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.315257][ T29] audit: type=1400 audit(1734461920.632:225): avc: denied { write } for pid=6085 comm="syz.4.49" name="route" dev="proc" ino=4026533065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 82.396625][ T6089] process 'syz.4.49' launched './file0' with NULL argv: empty string added [ 82.403433][ T29] audit: type=1400 audit(1734461920.712:226): avc: denied { execute_no_trans } for pid=6085 comm="syz.4.49" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.573250][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.127048][ T29] audit: type=1400 audit(1734461923.442:227): avc: denied { setopt } for pid=6097 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.219246][ T29] audit: type=1400 audit(1734461923.472:228): avc: denied { read } for pid=6097 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.250303][ T29] audit: type=1400 audit(1734461923.552:229): avc: denied { read } for pid=6097 comm="syz.1.52" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.273342][ T29] audit: type=1400 audit(1734461923.552:230): avc: denied { open } for pid=6097 comm="syz.1.52" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.299842][ T29] audit: type=1400 audit(1734461923.612:231): avc: denied { ioctl } for pid=6097 comm="syz.1.52" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.324620][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.706980][ T6101] input: syz0 as /devices/virtual/input/input5 [ 85.752872][ T6101] input: failed to attach handler leds to device input5, error: -6 [ 85.871499][ T29] audit: type=1400 audit(1734461924.182:232): avc: denied { create } for pid=6113 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.929433][ T29] audit: type=1400 audit(1734461924.242:233): avc: denied { bind } for pid=6113 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.167149][ T6108] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 87.990008][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 87.990019][ T29] audit: type=1400 audit(1734461925.742:241): avc: denied { create } for pid=6133 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.497819][ T29] audit: type=1400 audit(1734461926.562:242): avc: denied { getopt } for pid=6129 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.565621][ T29] audit: type=1400 audit(1734461926.882:243): avc: denied { create } for pid=6142 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.600360][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.860168][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 90.022088][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 90.031508][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.039529][ T25] usb 4-1: Product: syz [ 90.044298][ T25] usb 4-1: Manufacturer: syz [ 90.049972][ T25] usb 4-1: SerialNumber: syz [ 90.059875][ T25] usb 4-1: config 0 descriptor?? [ 91.079111][ T29] audit: type=1400 audit(1734461929.392:244): avc: denied { connect } for pid=6153 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.113131][ T29] audit: type=1400 audit(1734461929.422:245): avc: denied { create } for pid=6153 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.150292][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.746191][ T6160] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 91.755967][ T25] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 91.779499][ T25] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 91.792817][ T29] audit: type=1400 audit(1734461929.422:246): avc: denied { connect } for pid=6153 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.809643][ T5867] usb 4-1: USB disconnect, device number 4 [ 91.838087][ T29] audit: type=1400 audit(1734461930.062:247): avc: denied { bind } for pid=6153 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.980303][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 91.987281][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 92.057013][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.664048][ T9] usb 1-1: config 0 descriptor?? [ 92.673918][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 92.674203][ T29] audit: type=1400 audit(1734461930.392:248): avc: denied { search } for pid=6165 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.703234][ T29] audit: type=1400 audit(1734461930.982:249): avc: denied { read } for pid=6169 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.737610][ T29] audit: type=1400 audit(1734461930.982:250): avc: denied { open } for pid=6169 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.867245][ T6176] SELinux: Context unconfined is not valid (left unmapped). [ 93.016410][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 93.016470][ T29] audit: type=1400 audit(1734461931.202:253): avc: denied { relabelto } for pid=6167 comm="syz.3.68" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 93.186835][ T29] audit: type=1400 audit(1734461931.202:254): avc: denied { associate } for pid=6167 comm="syz.3.68" name="msr" dev="devtmpfs" ino=87 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="unconfined" [ 93.282912][ T9] gspca_sonixj: reg_r err -32 [ 93.287771][ T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 93.288740][ T29] audit: type=1400 audit(1734461931.352:255): avc: denied { read } for pid=6175 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1743 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.330522][ T6170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.336799][ T6170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.342966][ T6170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.348926][ T6170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.355486][ T6170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 93.435600][ T6186] overlayfs: conflicting lowerdir path [ 93.487136][ T29] audit: type=1400 audit(1734461931.352:256): avc: denied { open } for pid=6175 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1743 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.604662][ T29] audit: type=1400 audit(1734461931.832:257): avc: denied { write } for pid=6165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.020557][ T29] audit: type=1400 audit(1734461931.832:258): avc: denied { add_name } for pid=6165 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.227312][ T29] audit: type=1400 audit(1734461931.832:259): avc: denied { create } for pid=6165 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.315743][ T29] audit: type=1400 audit(1734461931.832:260): avc: denied { write } for pid=6165 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2087 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.472269][ T29] audit: type=1400 audit(1734461931.832:261): avc: denied { append } for pid=6165 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2087 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.500680][ T29] audit: type=1400 audit(1734461931.982:262): avc: denied { read } for pid=6192 comm="syz.3.71" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 94.548742][ T6207] syz.4.72 uses obsolete (PF_INET,SOCK_PACKET) [ 95.454427][ T5831] Bluetooth: hci4: command 0x0419 tx timeout [ 95.460693][ T5831] Bluetooth: hci3: command 0x0419 tx timeout [ 95.466860][ T5831] Bluetooth: hci2: command 0x0419 tx timeout [ 95.476091][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 95.478206][ T54] Bluetooth: hci0: command 0x0419 tx timeout [ 95.522591][ T25] usb 1-1: USB disconnect, device number 2 [ 96.077423][ T6241] bridge0: port 3(erspan0) entered blocking state [ 96.084003][ T6241] bridge0: port 3(erspan0) entered disabled state [ 96.090634][ T6241] erspan0: entered allmulticast mode [ 96.096797][ T6241] erspan0: entered promiscuous mode [ 96.102650][ T6241] bridge0: port 3(erspan0) entered blocking state [ 96.109316][ T6241] bridge0: port 3(erspan0) entered forwarding state [ 96.126079][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.78'. [ 97.381024][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.614734][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.652456][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.745912][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.840943][ T25] usb 1-1: config 0 descriptor?? [ 97.903228][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 98.686728][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 98.694968][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 98.714678][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 98.740248][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 98.829859][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 98.871262][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 98.954221][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 98.961720][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 98.969039][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 98.992650][ T6274] overlayfs: conflicting lowerdir path [ 98.999580][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 99.188263][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 99.194792][ T6288] xt_TCPMSS: Only works on TCP SYN packets [ 99.211575][ T6288] loop7: detected capacity change from 0 to 16384 [ 100.275089][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 100.282221][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 100.291609][ T25] pwc: recv_control_msg error -32 req 02 val 2800 [ 101.425075][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 101.602344][ T25] pwc: Registered as video103. [ 101.608904][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 101.637258][ T25] usb 1-1: USB disconnect, device number 3 [ 102.520984][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 102.521023][ T29] audit: type=1400 audit(1734461940.832:276): avc: denied { write } for pid=6316 comm="syz.3.91" path="socket:[9546]" dev="sockfs" ino=9546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 103.092522][ T29] audit: type=1400 audit(1734461940.832:277): avc: denied { nlmsg_write } for pid=6316 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.321648][ T29] audit: type=1400 audit(1734461942.612:278): avc: denied { read write } for pid=6341 comm="syz.1.96" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 104.434241][ T29] audit: type=1400 audit(1734461942.612:279): avc: denied { open } for pid=6341 comm="syz.1.96" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.620907][ T6351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.627628][ T6351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.634061][ T6351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.640023][ T6351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.645965][ T6351] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.363845][ T29] audit: type=1400 audit(1734461945.682:280): avc: denied { read } for pid=6367 comm="syz.2.100" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.441127][ T29] audit: type=1400 audit(1734461945.762:281): avc: denied { open } for pid=6367 comm="syz.2.100" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 107.708890][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 107.715002][ T5831] Bluetooth: hci0: command 0x0419 tx timeout [ 107.810925][ T54] Bluetooth: hci4: command 0x0419 tx timeout [ 107.811497][ T5128] Bluetooth: hci2: command 0x0419 tx timeout [ 107.823642][ T5831] Bluetooth: hci3: command 0x0419 tx timeout [ 108.234296][ T29] audit: type=1400 audit(1734461946.552:282): avc: denied { ioctl } for pid=6382 comm="syz.3.102" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.701220][ T29] audit: type=1400 audit(1734461947.192:283): avc: denied { create } for pid=6390 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.726534][ T29] audit: type=1400 audit(1734461947.192:284): avc: denied { connect } for pid=6390 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.676143][ T29] audit: type=1400 audit(1734461947.192:285): avc: denied { setopt } for pid=6390 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.695845][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.194201][ T29] audit: type=1400 audit(1734461949.512:286): avc: denied { create } for pid=6401 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.708125][ T6414] overlayfs: conflicting lowerdir path [ 112.633638][ T6423] ptrace attach of "./syz-executor exec"[5811] was attempted by " \x0c ¢ã­!OÇRù\x1b#\x09‡÷Ð8çÿÆåS›2K\x07‹›8K\x09à‡Æç›3M•›rš$\x0d[gó˜~óRÀÿèÑxpŒR<’\x1b\x1b]P\x0d0\x09\x096Í;x\x0dªaØè\x09êˆ/X·\x07\x22r'·ºgàç†i¦õ¨tæ*œÍÀÓ\x0cŸ1Œ\x0d¡™;Ñ`â3ßJbœo0àeÍ[‘Í\x0aá“—75³m[\x1bcÝ 0]?Fc^°ձݩŽ-t›ç½ñû;#ÜÛPu©ª¡´iÃ\x09 3Xu'\x1b(c)Ñi“Bˆýxš£}n˜²$ýD¶[13OüUÌ‚Í:Ã.Í°Œío´Ý\x0d‹8óÍD˜¾è IA½±ö·cƒp\x5cUC*ŸÚšìT¡#n€ö¨«­êvbIkÝ»B¾kû/•é\x0aVÇ\x1b1‡bõè’BÊkü‚~}¯$QŽd[¸\x0cav ¾pÞ˜ìv©ä\x0d­GóoÙ÷ÐÔ*K_…ÌÜñoôb•Ø úq–9áõœÞ&Ƶ×K\x07Š^Ã4å®\x09Œéîpwªš†~ˆ3Iué÷4ƒ¶È/¦xÊÿÙùÛ*xiØXde&ø‰¯C¦`€W\x22†R$IßFlc+5p$?˜œÎ8ôeäa\x0c !ÖS¥R ‚·¥ Žùñºéy\x09PpAØ`B\x0cVd²y!±MÁÛˆ’ý2Э{É\x0d¨l(Ù º°_`ΠÚw¨ € ¾£|àÐÔª /’(8«J [ 112.790488][ T29] audit: type=1400 audit(1734461951.102:287): avc: denied { execute } for pid=6417 comm="syz.3.109" path="/26/cpu.stat" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.630337][ T29] audit: type=1400 audit(1734461951.932:288): avc: denied { sqpoll } for pid=6432 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.681760][ T29] audit: type=1400 audit(1734461951.982:289): avc: denied { read } for pid=6436 comm="syz.2.115" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 113.770260][ T29] audit: type=1400 audit(1734461951.982:290): avc: denied { open } for pid=6436 comm="syz.2.115" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 113.863969][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 113.936287][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.100612][ T29] audit: type=1400 audit(1734461952.222:291): avc: denied { ioctl } for pid=6433 comm="syz.4.114" path="socket:[9731]" dev="sockfs" ino=9731 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.686457][ T29] audit: type=1400 audit(1734461952.972:292): avc: denied { read write } for pid=6447 comm="syz.4.116" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.709976][ T29] audit: type=1400 audit(1734461952.972:293): avc: denied { open } for pid=6447 comm="syz.4.116" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.733603][ T29] audit: type=1400 audit(1734461952.972:294): avc: denied { ioctl } for pid=6447 comm="syz.4.116" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.510245][ T5866] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.286646][ T29] audit: type=1400 audit(1734461954.572:295): avc: denied { getopt } for pid=6455 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.512522][ T29] audit: type=1400 audit(1734461954.582:296): avc: denied { write } for pid=6455 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.699864][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 116.722889][ T5866] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 116.731983][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 116.740036][ T5866] usb 5-1: Product: syz [ 116.744911][ T5866] usb 5-1: Manufacturer: syz [ 116.749526][ T5866] usb 5-1: SerialNumber: syz [ 116.757874][ T5866] usb 5-1: config 0 descriptor?? [ 116.900313][ T29] audit: type=1400 audit(1734461955.192:297): avc: denied { read } for pid=6466 comm="syz.3.121" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.097260][ T6475] Bluetooth: MGMT ver 1.23 [ 119.803178][ T5866] usb 5-1: USB disconnect, device number 2 [ 119.865758][ T6488] overlayfs: conflicting lowerdir path [ 120.933933][ T6501] overlayfs: conflicting lowerdir path [ 121.495497][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 121.495515][ T29] audit: type=1400 audit(1734461959.812:302): avc: denied { mounton } for pid=6508 comm="syz.1.131" path="/26/file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.528724][ T6509] fuse: Bad value for 'group_id' [ 121.540021][ T6509] fuse: Bad value for 'group_id' [ 123.112624][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 123.430482][ T29] audit: type=1400 audit(1734461961.752:303): avc: denied { create } for pid=6523 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 123.953208][ T29] audit: type=1400 audit(1734461962.262:304): avc: denied { write } for pid=6532 comm="syz.1.140" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.497200][ T6537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.140'. [ 124.518036][ T29] audit: type=1400 audit(1734461962.722:305): avc: denied { create } for pid=6532 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 124.534236][ T6537] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.547751][ T6537] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.557138][ T6537] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.566460][ T6537] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.037042][ T29] audit: type=1400 audit(1734461962.732:306): avc: denied { shutdown } for pid=6532 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 126.090162][ T29] audit: type=1400 audit(1734461963.612:307): avc: denied { setopt } for pid=6538 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.543426][ T29] audit: type=1400 audit(1734461963.612:308): avc: denied { bind } for pid=6538 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.626195][ T29] audit: type=1400 audit(1734461963.612:309): avc: denied { name_bind } for pid=6538 comm="syz.4.142" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 126.655936][ T6550] overlayfs: conflicting lowerdir path [ 126.671485][ T54] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 126.679374][ T29] audit: type=1400 audit(1734461963.612:310): avc: denied { node_bind } for pid=6538 comm="syz.4.142" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 126.700784][ T29] audit: type=1400 audit(1734461963.612:311): avc: denied { write } for pid=6538 comm="syz.4.142" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.722644][ T29] audit: type=1400 audit(1734461963.612:312): avc: denied { connect } for pid=6538 comm="syz.4.142" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.743855][ T29] audit: type=1400 audit(1734461963.612:313): avc: denied { name_connect } for pid=6538 comm="syz.4.142" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 126.754793][ T6559] pim6reg: entered allmulticast mode [ 126.779922][ T29] audit: type=1400 audit(1734461964.972:314): avc: denied { read write } for pid=6551 comm="syz.1.144" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.025753][ T29] audit: type=1400 audit(1734461964.972:315): avc: denied { open } for pid=6551 comm="syz.1.144" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.035379][ T6559] pim6reg: left allmulticast mode [ 127.184390][ T29] audit: type=1326 audit(1734461965.062:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf92b85d29 code=0x7ffc0000 [ 127.208008][ T29] audit: type=1326 audit(1734461965.062:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbf92b85d29 code=0x7ffc0000 [ 127.236531][ T5128] Bluetooth: hci5: sending frame failed (-49) [ 127.244241][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 131.017960][ T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 131.026771][ T54] Bluetooth: hci0: Injecting HCI hardware error event [ 131.036001][ T54] Bluetooth: hci0: hardware error 0x00 [ 132.049044][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 132.055293][ T29] audit: type=1400 audit(1734461969.482:338): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.305136][ T29] audit: type=1400 audit(1734461970.532:339): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.519650][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.530904][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.588394][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 134.669048][ T6618] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.699324][ T29] audit: type=1400 audit(1734461973.012:340): avc: denied { write } for pid=6612 comm="syz.0.163" dev="9p" ino=2071323912119181800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.721787][ T29] audit: type=1400 audit(1734461973.012:341): avc: denied { open } for pid=6612 comm="syz.0.163" name="/" dev="9p" ino=2071323912119181800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.752729][ T29] audit: type=1400 audit(1734461973.072:342): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.838858][ T29] audit: type=1400 audit(1734461973.152:343): avc: denied { write } for pid=6617 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.170124][ T5867] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.861530][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 137.872829][ T5867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 137.890169][ T5867] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 137.899334][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.912319][ T5867] usb 2-1: config 0 descriptor?? [ 137.927327][ T5867] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.102661][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.111875][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.250135][ T9] usb 2-1: USB disconnect, device number 2 [ 139.538679][ T6666] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 140.058987][ T6670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.177'. [ 140.085492][ T29] audit: type=1400 audit(1734461978.402:344): avc: denied { read append } for pid=6669 comm="syz.0.177" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.360309][ T29] audit: type=1400 audit(1734461978.522:345): avc: denied { open } for pid=6669 comm="syz.0.177" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.577615][ T29] audit: type=1400 audit(1734461978.552:346): avc: denied { shutdown } for pid=6669 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.657276][ T29] audit: type=1400 audit(1734461978.652:347): avc: denied { read } for pid=6669 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.722846][ T29] audit: type=1400 audit(1734461979.012:348): avc: denied { ioctl } for pid=6674 comm="syz.2.178" path="socket:[10559]" dev="sockfs" ino=10559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.790156][ T29] audit: type=1400 audit(1734461979.082:349): avc: denied { connect } for pid=6674 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.466584][ T29] audit: type=1400 audit(1734461979.772:350): avc: denied { bind } for pid=6682 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.627591][ T29] audit: type=1400 audit(1734461979.772:351): avc: denied { ioctl } for pid=6682 comm="syz.0.181" path="socket:[10103]" dev="sockfs" ino=10103 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.196588][ T29] audit: type=1400 audit(1734461980.512:352): avc: denied { write } for pid=6680 comm="syz.3.180" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.565484][ T29] audit: type=1400 audit(1734461980.762:353): avc: denied { name_connect } for pid=6687 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 144.827534][ T6703] random: crng reseeded on system resumption [ 147.235626][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 147.326377][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 147.326391][ T29] audit: type=1400 audit(1734461985.642:356): avc: denied { setopt } for pid=6724 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.742904][ T29] audit: type=1400 audit(1734461986.002:357): avc: denied { create } for pid=6747 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.762310][ T29] audit: type=1400 audit(1734461986.012:358): avc: denied { mounton } for pid=6747 comm="syz.4.193" path="/proc/139/task" dev="proc" ino=10171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 148.069876][ T29] audit: type=1400 audit(1734461986.382:359): avc: denied { listen } for pid=6754 comm="syz.2.194" lport=41933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.130742][ T29] audit: type=1400 audit(1734461986.442:360): avc: denied { accept } for pid=6754 comm="syz.2.194" lport=41933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.169897][ T29] audit: type=1400 audit(1734461987.962:361): avc: denied { setopt } for pid=6756 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.267561][ T29] audit: type=1400 audit(1734461987.962:362): avc: denied { read } for pid=6756 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.337413][ T29] audit: type=1400 audit(1734461988.572:363): avc: denied { create } for pid=6786 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.631200][ T29] audit: type=1400 audit(1734461988.792:364): avc: denied { set_context_mgr } for pid=6811 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.650868][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.991007][ T29] audit: type=1400 audit(1734461989.312:365): avc: denied { map } for pid=6811 comm="syz.2.202" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.990183][ T29] audit: type=1400 audit(1734461995.252:366): avc: denied { setopt } for pid=6866 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 157.874002][ T29] audit: type=1800 audit(1734461995.582:367): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.215" name="bus" dev="overlay" ino=276 res=0 errno=0 [ 158.750720][ T29] audit: type=1400 audit(1734461997.062:368): avc: denied { map } for pid=6880 comm="syz.0.220" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.802971][ T29] audit: type=1400 audit(1734461997.062:369): avc: denied { execute } for pid=6880 comm="syz.0.220" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.753222][ T29] audit: type=1400 audit(1734461998.032:370): avc: denied { connect } for pid=6893 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.222396][ T29] audit: type=1400 audit(1734461998.294:371): avc: denied { ioctl } for pid=6897 comm="syz.2.223" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 160.503501][ T29] audit: type=1400 audit(1734461998.743:372): avc: denied { write } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.702041][ T29] audit: type=1400 audit(1734461998.743:373): avc: denied { remove_name } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.797993][ T29] audit: type=1400 audit(1734461998.743:374): avc: denied { rename } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.969204][ T29] audit: type=1400 audit(1734461998.743:375): avc: denied { add_name } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.592122][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 163.594482][ T29] audit: type=1400 audit(1734462001.624:379): avc: denied { connect } for pid=6925 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.081170][ T29] audit: type=1400 audit(1734462001.951:380): avc: denied { write } for pid=6928 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.244672][ T5831] Bluetooth: hci4: command 0x0419 tx timeout [ 166.266896][ T29] audit: type=1400 audit(1734462003.944:381): avc: denied { module_load } for pid=6947 comm="syz.2.235" path="/sys/power/pm_trace" dev="sysfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 166.365524][ T29] audit: type=1400 audit(1734462004.224:382): avc: denied { setopt } for pid=6953 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 167.169226][ T6960] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 167.430520][ T6965] syz.3.242 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 168.197823][ T29] audit: type=1326 audit(1734462005.384:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ad385d29 code=0x7ffc0000 [ 168.243210][ T29] audit: type=1326 audit(1734462005.384:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ad385d29 code=0x7ffc0000 [ 168.266556][ T29] audit: type=1326 audit(1734462005.384:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f43ad385d29 code=0x7ffc0000 [ 168.289874][ T29] audit: type=1326 audit(1734462005.384:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ad385d29 code=0x7ffc0000 [ 168.313253][ T29] audit: type=1326 audit(1734462005.384:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ad385d29 code=0x7ffc0000 [ 168.336650][ T29] audit: type=1326 audit(1734462005.393:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f43ad385d29 code=0x7ffc0000 [ 168.406192][ T6969] Cannot find del_set index 286 as target [ 168.555020][ T6969] netlink: zone id is out of range [ 168.560889][ T6969] netlink: zone id is out of range [ 168.775876][ T6969] netlink: zone id is out of range [ 168.781066][ T6969] netlink: zone id is out of range [ 168.822917][ T6969] netlink: zone id is out of range [ 168.838482][ T6969] netlink: zone id is out of range [ 168.852627][ T6969] netlink: zone id is out of range [ 169.237971][ T6984] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 169.843938][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 169.843954][ T29] audit: type=1400 audit(1734462007.470:397): avc: denied { mounton } for pid=6986 comm="syz.2.249" path="/51/file0" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 169.900922][ T6987] capability: warning: `syz.2.249' uses deprecated v2 capabilities in a way that may be insecure [ 171.263978][ T7000] overlayfs: conflicting lowerdir path [ 173.523571][ T29] audit: type=1800 audit(1734462010.501:398): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.257" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 175.354471][ T7039] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 176.446254][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.722053][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 177.363451][ T25] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 177.371818][ T25] usb 1-1: config 0 has no interface number 0 [ 177.377919][ T25] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 177.395491][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.414775][ T25] usb 1-1: config 0 descriptor?? [ 177.438595][ T29] audit: type=1400 audit(1734462014.579:399): avc: denied { setopt } for pid=7053 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 177.804061][ T29] audit: type=1400 audit(1734462014.925:400): avc: denied { ioctl } for pid=7056 comm="syz.1.269" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11014 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.193440][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.202039][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.519569][ T970] usb 1-1: USB disconnect, device number 4 [ 178.857965][ T7067] tc_dump_action: action bad kind [ 180.717168][ T7085] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.990401][ T7091] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.291904][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 185.017971][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 185.027563][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 186.284825][ T8] IPVS: starting estimator thread 0... [ 186.414831][ T7135] IPVS: using max 32 ests per chain, 76800 per kthread [ 186.531333][ T29] audit: type=1400 audit(1734462023.063:401): avc: denied { bind } for pid=7136 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.803262][ T29] audit: type=1400 audit(1734462023.344:402): avc: denied { setopt } for pid=7136 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.101398][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 187.587299][ T7139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.756556][ T970] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 187.921360][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 187.950033][ T970] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.975570][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.557298][ T970] usb 3-1: Product: syz [ 188.558744][ T7139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.561658][ T970] usb 3-1: Manufacturer: syz [ 188.576618][ T970] usb 3-1: SerialNumber: syz [ 188.584648][ T7152] overlayfs: conflicting lowerdir path [ 188.587448][ T970] usb 3-1: config 0 descriptor?? [ 188.785147][ T29] audit: type=1400 audit(1734462025.196:403): avc: denied { nlmsg_read } for pid=7155 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.824002][ T7139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.920242][ T970] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.089219][ T7139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.519536][ T7139] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.557745][ T7139] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.572038][ T7139] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.598641][ T7167] trusted_key: encrypted_key: insufficient parameters specified [ 189.608867][ T7139] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.754425][ T970] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 192.092269][ T970] usb 3-1: USB disconnect, device number 2 [ 192.761395][ T29] audit: type=1400 audit(1734462028.909:404): avc: denied { ioctl } for pid=7190 comm="syz.1.301" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.952811][ T3016] Bluetooth: hci5: Frame reassembly failed (-84) [ 193.400776][ T29] audit: type=1400 audit(1734462029.480:405): avc: denied { block_suspend } for pid=7195 comm="syz.3.304" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.926486][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 195.929339][ T5128] Bluetooth: hci5: command 0x1003 tx timeout [ 196.746276][ T5897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 196.954713][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 196.955544][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.970895][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.972104][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.030163][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.052810][ T5897] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 197.078072][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.109292][ T29] audit: type=1400 audit(1734462032.978:406): avc: denied { write } for pid=7234 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.111907][ T5897] usb 1-1: config 0 descriptor?? [ 197.683157][ T29] audit: type=1400 audit(1734462033.362:407): avc: denied { bind } for pid=7249 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.805204][ T5897] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x2 [ 197.872173][ T5897] konepure 0003:1E7D:2DB4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 198.554721][ T29] audit: type=1400 audit(1734462034.335:408): avc: denied { ioctl } for pid=7236 comm="syz.0.313" path="socket:[12375]" dev="sockfs" ino=12375 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.580701][ T5831] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 198.993297][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 199.886313][ T5867] usb 1-1: USB disconnect, device number 5 [ 202.150638][ T29] audit: type=1400 audit(1734462037.113:409): avc: denied { connect } for pid=7269 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.174887][ T29] audit: type=1400 audit(1734462037.122:410): avc: denied { write } for pid=7269 comm="syz.0.322" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58408 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.262156][ T5128] Bluetooth: hci5: command 0x1003 tx timeout [ 203.262437][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.752253][ T29] audit: type=1400 audit(1734462039.189:411): avc: denied { read append } for pid=7291 comm="syz.4.326" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 203.893701][ T7298] can0: slcan on ptm0. [ 204.030461][ T29] audit: type=1400 audit(1734462039.451:412): avc: denied { open } for pid=7291 comm="syz.4.326" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 205.037520][ T7298] can0 (unregistered): slcan off ptm0. [ 205.409338][ T7286] syz.2.324 (7286): drop_caches: 2 [ 206.426492][ T29] audit: type=1400 audit(1734462040.929:413): avc: denied { read } for pid=7307 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.484406][ T29] audit: type=1400 audit(1734462041.734:414): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 208.976520][ T29] audit: type=1400 audit(1734462044.082:415): avc: denied { write } for pid=7346 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.146444][ T29] audit: type=1400 audit(1734462044.166:416): avc: denied { read write } for pid=7348 comm="syz.3.342" name="mouse0" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 209.171096][ T29] audit: type=1400 audit(1734462044.166:417): avc: denied { open } for pid=7348 comm="syz.3.342" path="/dev/input/mouse0" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 209.315163][ T29] audit: type=1400 audit(1734462044.390:418): avc: denied { write } for pid=7348 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.579046][ T29] audit: type=1400 audit(1734462044.643:419): avc: denied { ioctl } for pid=7348 comm="syz.3.342" path="/dev/input/mouse0" dev="devtmpfs" ino=990 ioctlcmd=0x5442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 210.262019][ T29] audit: type=1400 audit(1734462045.279:420): avc: denied { mount } for pid=7346 comm="syz.2.341" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 211.009644][ T7383] overlayfs: conflicting lowerdir path [ 211.772106][ T29] audit: type=1400 audit(1734462046.149:421): avc: denied { listen } for pid=7379 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.441558][ T7431] random: crng reseeded on system resumption [ 216.614685][ T5897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 216.776680][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.787132][ T5897] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 216.796182][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.977630][ T7430] Restarting kernel threads ... done. [ 216.990738][ T29] audit: type=1400 audit(1734462051.565:422): avc: denied { ioctl } for pid=7429 comm="syz.1.361" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 217.089866][ T5897] usb 1-1: config 0 descriptor?? [ 217.111922][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 217.907149][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 217.918725][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 217.927487][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 217.935720][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 217.953866][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 218.035418][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 218.074317][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 218.085737][ T7443] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[7443] [ 218.102523][ T5897] pwc: recv_control_msg error -32 req 02 val 2100 [ 218.102745][ T29] audit: type=1400 audit(1734462052.594:423): avc: denied { setopt } for pid=7441 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 218.109545][ T5897] pwc: recv_control_msg error -32 req 04 val 1500 [ 218.463468][ T5897] pwc: recv_control_msg error -32 req 02 val 2500 [ 218.472100][ T5897] pwc: recv_control_msg error -32 req 02 val 2400 [ 218.483697][ T5897] pwc: recv_control_msg error -32 req 02 val 2600 [ 218.492037][ T5897] pwc: recv_control_msg error -32 req 02 val 2900 [ 218.505058][ T5897] pwc: recv_control_msg error -32 req 02 val 2800 [ 218.524693][ T5897] pwc: recv_control_msg error -32 req 04 val 1100 [ 218.567309][ T5897] pwc: Registered as video103. [ 218.572256][ T29] audit: type=1400 audit(1734462053.052:424): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 218.626739][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 218.843043][ T5897] usb 1-1: USB disconnect, device number 6 [ 221.480676][ T7489] tipc: Started in network mode [ 221.485813][ T7489] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 221.498171][ T7489] tipc: Enabled bearer , priority 10 [ 222.216488][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 222.742534][ T5867] tipc: Node number set to 4269801488 [ 223.127575][ T29] audit: type=1400 audit(1734462057.177:425): avc: denied { map } for pid=7496 comm="syz.4.375" path="socket:[13546]" dev="sockfs" ino=13546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 223.509235][ T5128] Bluetooth: hci2: command 0x0419 tx timeout [ 223.982537][ T29] audit: type=1400 audit(1734462058.122:426): avc: denied { execute } for pid=7503 comm="syz.2.376" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 227.660446][ T7537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.385'. [ 228.812820][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.416341][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.684012][ T29] audit: type=1400 audit(1734462063.426:427): avc: denied { create } for pid=7550 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.985650][ T29] audit: type=1400 audit(1734462063.435:428): avc: denied { bind } for pid=7550 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 230.073618][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.083204][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.092544][ T8] usb 4-1: Product: syz [ 230.096867][ T8] usb 4-1: Manufacturer: syz [ 230.101478][ T8] usb 4-1: SerialNumber: syz [ 230.525085][ T29] audit: type=1400 audit(1734462064.230:429): avc: denied { read } for pid=7569 comm="syz.2.396" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.554475][ T29] audit: type=1400 audit(1734462064.230:430): avc: denied { open } for pid=7569 comm="syz.2.396" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.776038][ T29] audit: type=1326 audit(1734462064.427:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf92b85d29 code=0x7ffc0000 [ 231.315924][ T29] audit: type=1326 audit(1734462064.427:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf92b85d29 code=0x7ffc0000 [ 231.339702][ T29] audit: type=1326 audit(1734462064.436:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf92b87c47 code=0x7ffc0000 [ 231.366139][ T29] audit: type=1326 audit(1734462064.436:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbf92b87bbc code=0x7ffc0000 [ 231.391282][ T29] audit: type=1326 audit(1734462064.436:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbf92b87af4 code=0x7ffc0000 [ 231.416810][ T29] audit: type=1326 audit(1734462064.436:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbf92b8498a code=0x7ffc0000 [ 231.627436][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.400'. [ 231.819927][ T8] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 231.819956][ T8] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 231.819976][ T8] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 231.978231][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 232.357073][ T8] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 232.373023][ T8] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 232.388168][ T8] usb 4-1: USB disconnect, device number 5 [ 232.394717][ T8] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 234.126173][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 235.036093][ T6796] Bluetooth: hci5: Frame reassembly failed (-84) [ 237.130378][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 238.686210][ T7645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.413'. [ 244.350546][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 245.443911][ T54] Bluetooth: hci6: command 0x1003 tx timeout [ 245.827808][ T5128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 245.839079][ T7687] binder: 7686:7687 ioctl c0306201 200002c0 returned -14 [ 247.098397][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 247.098422][ T29] audit: type=1400 audit(1734462079.468:450): avc: denied { mount } for pid=7696 comm="syz.2.427" name="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 247.131083][ T7360] Bluetooth: hci5: Frame reassembly failed (-84) [ 247.224643][ T29] audit: type=1400 audit(1734462079.486:451): avc: denied { read } for pid=7696 comm="syz.2.427" name="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.264194][ T29] audit: type=1400 audit(1734462079.486:452): avc: denied { open } for pid=7696 comm="syz.2.427" path="/86/file0" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.318334][ T29] audit: type=1400 audit(1734462079.889:453): avc: denied { listen } for pid=7701 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 247.577095][ T29] audit: type=1400 audit(1734462080.141:454): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 248.590329][ T7715] sp0: Synchronizing with TNC [ 248.828810][ T6802] Bluetooth: hci6: Frame reassembly failed (-84) [ 249.024166][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 249.684970][ T7756] Bluetooth: hci7: Frame reassembly failed (-84) [ 249.758940][ T29] audit: type=1400 audit(1734462082.237:455): avc: denied { bind } for pid=7734 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 249.807769][ T29] audit: type=1400 audit(1734462082.237:456): avc: denied { name_bind } for pid=7734 comm="syz.0.436" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 249.831323][ T7757] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(8560899199956) <= P.seqno(0) <= S.SWH(8560899200030)) and (P.ackno exists or LAWL(249553985384397) <= P.ackno(249553985384398) <= S.AWH(249553985384398), sending SYNC... [ 250.027594][ T29] audit: type=1400 audit(1734462082.237:457): avc: denied { node_bind } for pid=7734 comm="syz.0.436" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 250.053837][ T29] audit: type=1400 audit(1734462082.237:458): avc: denied { listen } for pid=7734 comm="syz.0.436" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 250.175098][ T29] audit: type=1400 audit(1734462082.237:459): avc: denied { connect } for pid=7734 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 251.017703][ T54] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 252.660825][ T5831] Bluetooth: hci7: command 0x1003 tx timeout [ 252.707232][ T5128] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 253.209491][ T7790] Invalid source name [ 253.574845][ T7744] Bluetooth: hci5: Frame reassembly failed (-84) [ 254.025757][ T7800] sp0: Synchronizing with TNC [ 254.241224][ T7782] xt_socket: unknown flags 0x50 [ 254.324743][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 254.324754][ T29] audit: type=1400 audit(1734462086.493:470): avc: denied { getopt } for pid=7803 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.482307][ T7807] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 254.673346][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.855003][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 254.867199][ T9] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 254.875603][ T9] usb 5-1: config 0 has no interface number 0 [ 254.903144][ T9] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 254.939403][ T9] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 254.951575][ T9] usb 5-1: config 0 interface 126 has no altsetting 0 [ 254.976697][ T9] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 254.992340][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.012636][ T9] usb 5-1: Product: syz [ 255.017295][ T9] usb 5-1: Manufacturer: syz [ 255.022034][ T9] usb 5-1: SerialNumber: syz [ 255.041854][ T9] usb 5-1: config 0 descriptor?? [ 255.056407][ T7806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.067783][ T7806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.503827][ T7737] Bluetooth: hci6: Frame reassembly failed (-84) [ 255.519948][ T9] ir_usb 5-1:0.126: IR Dongle converter detected [ 255.603450][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.735444][ T9] usb 5-1: IRDA class descriptor not found, device not bound [ 255.830267][ T9] usb 5-1: USB disconnect, device number 3 [ 256.059146][ T29] audit: type=1400 audit(1734462088.120:471): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 256.295809][ T7737] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.656089][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 257.758863][ T29] audit: type=1400 audit(1734462089.701:472): avc: denied { getopt } for pid=7838 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.867757][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 259.488339][ T5128] Bluetooth: hci4: command 0x0419 tx timeout [ 259.497703][ T7849] use of bytesused == 0 is deprecated and will be removed in the future, [ 259.512614][ T7849] use the actual size instead. [ 259.559500][ T7850] trusted_key: syz.0.464 sent an empty control message without MSG_MORE. [ 261.230908][ T7871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.470'. [ 262.178097][ T7877] bridge0: port 3(syz_tun) entered blocking state [ 262.184867][ T7877] bridge0: port 3(syz_tun) entered disabled state [ 262.191684][ T7877] syz_tun: entered allmulticast mode [ 262.199558][ T7877] syz_tun: entered promiscuous mode [ 262.205576][ T7877] bridge0: port 3(syz_tun) entered blocking state [ 262.213328][ T7877] bridge0: port 3(syz_tun) entered forwarding state [ 263.141504][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.147814][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.621302][ T29] audit: type=1400 audit(1734462095.080:473): avc: denied { write } for pid=7882 comm="syz.0.472" name="net" dev="proc" ino=14028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 263.647417][ T29] audit: type=1400 audit(1734462095.080:474): avc: denied { add_name } for pid=7882 comm="syz.0.472" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 264.123005][ T29] audit: type=1400 audit(1734462095.089:475): avc: denied { create } for pid=7882 comm="syz.0.472" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 264.144354][ T29] audit: type=1400 audit(1734462095.089:476): avc: denied { associate } for pid=7882 comm="syz.0.472" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 264.172813][ T29] audit: type=1400 audit(1734462095.547:477): avc: denied { mount } for pid=7881 comm="syz.2.473" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 264.194920][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.201259][ T29] audit: type=1400 audit(1734462095.585:478): avc: denied { mounton } for pid=7881 comm="syz.2.473" path="/96/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 265.134301][ T29] audit: type=1400 audit(1734462096.473:479): avc: denied { create } for pid=7897 comm="syz.3.478" name="#29" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.460098][ T29] audit: type=1400 audit(1734462096.483:480): avc: denied { link } for pid=7897 comm="syz.3.478" name="#29" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.545651][ T29] audit: type=1400 audit(1734462096.529:481): avc: denied { rename } for pid=7897 comm="syz.3.478" name="#2a" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 266.878497][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.482'. [ 267.161288][ T29] audit: type=1400 audit(1734462098.513:482): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 268.873737][ T7938] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 269.777340][ T7942] unsupported nlmsg_type 40 [ 270.196276][ T29] audit: type=1400 audit(1734462101.047:483): avc: denied { connect } for pid=7917 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 270.431482][ T29] audit: type=1400 audit(1734462101.440:484): avc: denied { getopt } for pid=7943 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.126880][ T7956] infiniband syz2: set active [ 272.131818][ T7956] infiniband syz2: added team_slave_1 [ 272.153753][ T29] audit: type=1400 audit(1734462103.087:485): avc: denied { write } for pid=7953 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 272.409367][ T7956] RDS/IB: syz2: added [ 272.414318][ T7956] smc: adding ib device syz2 with port count 1 [ 272.420830][ T7956] smc: ib device syz2 port 1 has pnetid [ 272.590947][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 273.180408][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 273.191937][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 273.201666][ T9] usb 5-1: config 4 has an invalid interface number: 111 but max is 0 [ 273.236288][ T9] usb 5-1: config 4 has no interface number 0 [ 273.275089][ T9] usb 5-1: config 4 interface 111 has no altsetting 0 [ 273.291001][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 273.307036][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.315734][ T9] usb 5-1: Product: syz [ 273.320222][ T9] usb 5-1: Manufacturer: syz [ 273.326127][ T9] usb 5-1: SerialNumber: syz [ 274.333353][ T29] audit: type=1400 audit(1734462105.107:486): avc: denied { open } for pid=7977 comm="syz.1.498" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 274.749782][ T29] audit: type=1400 audit(1734462105.144:487): avc: denied { ioctl } for pid=7977 comm="syz.1.498" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 274.778667][ T29] audit: type=1400 audit(1734462105.163:488): avc: denied { watch } for pid=7977 comm="syz.1.498" path="/93/net_prio.prioidx" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 274.789355][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 274.802412][ T29] audit: type=1400 audit(1734462105.163:489): avc: denied { watch_sb watch_reads } for pid=7977 comm="syz.1.498" path="/93/net_prio.prioidx" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 274.809360][ T9] pvrusb2: ********** [ 274.809370][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 274.809381][ T9] pvrusb2: Important functionality might not be entirely working. [ 274.809389][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 274.809398][ T9] pvrusb2: ********** [ 274.809842][ T9] usb 5-1: selecting invalid altsetting 0 [ 274.883360][ T2333] pvrusb2: control-write URB failure, status=-71 [ 274.930930][ T9] usb 5-1: USB disconnect, device number 4 [ 274.945040][ T2333] pvrusb2: Device being rendered inoperable [ 274.951698][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 275.029942][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 275.436074][ T6106] Bluetooth: hci5: Frame reassembly failed (-84) [ 277.871938][ T29] audit: type=1400 audit(1734462108.063:490): avc: denied { connect } for pid=8016 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 278.030996][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 279.580007][ T29] audit: type=1400 audit(1734462110.111:491): avc: denied { ioctl } for pid=8045 comm="syz.1.512" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 283.261139][ T8082] Cannot find set identified by id 0 to match [ 283.607742][ T5867] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 283.903492][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 284.119983][ T5867] usb 2-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 284.202534][ T5867] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 284.212929][ T5867] usb 2-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 284.222358][ T5867] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 284.231501][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.464526][ T5867] usb 2-1: probing VID:PID(2201:012C) [ 284.477974][ T5867] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 285.162964][ T5867] vub300 2-1:63.0: probe with driver vub300 failed with error -22 [ 285.649018][ T8104] warning: `syz.3.525' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.670305][ T5869] usb 2-1: USB disconnect, device number 3 [ 285.846674][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 285.870919][ T29] audit: type=1400 audit(1734462115.986:492): avc: denied { setopt } for pid=8111 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.470894][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 287.083250][ T29] audit: type=1326 audit(1734462117.080:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bec985d29 code=0x7ffc0000 [ 287.949088][ T29] audit: type=1326 audit(1734462117.080:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bec985d29 code=0x7ffc0000 [ 288.199125][ T29] audit: type=1326 audit(1734462117.090:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bec987c47 code=0x7ffc0000 [ 288.547989][ T29] audit: type=1326 audit(1734462117.090:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9bec987bbc code=0x7ffc0000 [ 288.680675][ T29] audit: type=1326 audit(1734462117.090:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9bec987af4 code=0x7ffc0000 [ 289.137823][ T29] audit: type=1326 audit(1734462117.090:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9bec98498a code=0x7ffc0000 [ 289.164490][ T29] audit: type=1326 audit(1734462117.090:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bec985d29 code=0x7ffc0000 [ 289.187883][ T29] audit: type=1326 audit(1734462117.090:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bec985d29 code=0x7ffc0000 [ 289.211278][ T29] audit: type=1326 audit(1734462117.108:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.1.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9bec985d29 code=0x7ffc0000 [ 289.527714][ T7728] Bluetooth: hci5: Frame reassembly failed (-84) [ 291.673597][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 291.738093][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 291.738104][ T29] audit: type=1326 audit(1734462121.505:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8161 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a4a185d29 code=0x7fc00000 [ 292.250920][ T29] audit: type=1326 audit(1734462121.916:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 292.274458][ T29] audit: type=1326 audit(1734462121.926:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 292.297894][ T29] audit: type=1326 audit(1734462121.926:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 292.321562][ T29] audit: type=1326 audit(1734462121.926:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 292.345118][ T29] audit: type=1326 audit(1734462121.926:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 292.368654][ T29] audit: type=1326 audit(1734462121.926:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 292.392282][ T29] audit: type=1326 audit(1734462121.935:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 292.415705][ T29] audit: type=1326 audit(1734462121.935:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 292.439073][ T29] audit: type=1326 audit(1734462121.935:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.0.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 296.600513][ T8221] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 296.608604][ T8221] netlink: 224 bytes leftover after parsing attributes in process `syz.3.550'. [ 296.933355][ T7756] Bluetooth: hci5: Frame reassembly failed (-84) [ 297.540021][ T7754] Bluetooth: hci6: Frame reassembly failed (-84) [ 298.184822][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 298.707953][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 299.103725][ T8] usb 5-1: config index 0 descriptor too short (expected 1042, got 18) [ 299.125025][ T8] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 299.133878][ T8] usb 5-1: config 8 has no interface number 0 [ 299.140128][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 299.140169][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 299.154629][ T8] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.207872][ T8] usb 5-1: config 8 interface 177 has no altsetting 0 [ 299.215367][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 299.226909][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.373253][ T8254] input: syz1 as /devices/virtual/input/input9 [ 299.652366][ T5128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 299.838606][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 299.838622][ T29] audit: type=1400 audit(1734462129.072:537): avc: denied { append } for pid=8246 comm="syz.4.556" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.658644][ T29] audit: type=1400 audit(1734462130.110:538): avc: denied { write } for pid=8269 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 301.828624][ T8] usb 5-1: string descriptor 0 read error: -71 [ 301.850159][ T8] ir_toy 5-1:8.177: required endpoints not found [ 302.074335][ T8] usb 5-1: USB disconnect, device number 5 [ 303.419936][ T29] audit: type=1400 audit(1734462132.421:539): avc: denied { create } for pid=8284 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 306.518385][ T8324] sg_write: data in/out 11/10 bytes for SCSI command 0xfd-- guessing data in; [ 306.518385][ T8324] program syz.2.575 not setting count and/or reply_len properly [ 306.629672][ T29] audit: type=1400 audit(1734462135.321:540): avc: denied { write } for pid=8315 comm="syz.2.575" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.907029][ T8348] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 309.912847][ T8356] overlayfs: failed to resolve './file0': -2 [ 309.923633][ T8350] block nbd2: shutting down sockets [ 313.116552][ T8393] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 313.142783][ T8393] CIFS mount error: No usable UNC path provided in device string! [ 313.142783][ T8393] [ 313.153179][ T8393] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 313.245839][ T6106] Bluetooth: hci5: Frame reassembly failed (-84) [ 314.059862][ T8374] sp0: Synchronizing with TNC [ 314.152185][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 314.180800][ T8384] bridge0: port 3(syz_tun) entered blocking state [ 314.202254][ T8384] bridge0: port 3(syz_tun) entered disabled state [ 314.208773][ T8384] syz_tun: entered allmulticast mode [ 314.238676][ T8384] syz_tun: entered promiscuous mode [ 314.254430][ T8384] bridge0: port 3(syz_tun) entered blocking state [ 314.260974][ T8384] bridge0: port 3(syz_tun) entered forwarding state [ 315.011850][ T8369] xt_socket: unknown flags 0x50 [ 315.060193][ T8399] fuse: Bad value for 'fd' [ 315.163288][ T29] audit: type=1400 audit(1734462143.412:541): avc: denied { getopt } for pid=8401 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 315.282823][ T29] audit: type=1400 audit(1734462143.524:542): avc: denied { module_request } for pid=8401 comm="syz.2.598" kmod="crypto-cryptd(crct10dif-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 315.419200][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 315.877951][ T29] audit: type=1400 audit(1734462143.870:543): avc: denied { write } for pid=8403 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.237773][ T29] audit: type=1400 audit(1734462143.954:544): avc: denied { connect } for pid=8403 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 317.640507][ T8407] IPv6: Can't replace route, no match found [ 319.554836][ T29] audit: type=1400 audit(1734462147.499:545): avc: denied { bind } for pid=8449 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.617469][ T29] audit: type=1400 audit(1734462147.499:546): avc: denied { node_bind } for pid=8449 comm="syz.2.608" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 319.958795][ T8453] fuse: Bad value for 'fd' [ 323.443400][ T29] audit: type=1400 audit(1734462150.820:547): avc: denied { ioctl } for pid=8471 comm="syz.1.616" path="socket:[17432]" dev="sockfs" ino=17432 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 323.542232][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 323.612495][ T29] audit: type=1400 audit(1734462151.269:548): avc: denied { mount } for pid=8475 comm="syz.2.617" name="/" dev="autofs" ino=17441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 324.220766][ T29] audit: type=1400 audit(1734462151.886:549): avc: denied { bind } for pid=8482 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.330336][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 324.341616][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.351587][ T8] usb 4-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00 [ 324.360823][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.443358][ T8] usb 4-1: config 0 descriptor?? [ 324.718967][ T29] audit: type=1400 audit(1734462151.905:550): avc: denied { read } for pid=8482 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.738174][ T29] audit: type=1400 audit(1734462151.914:551): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 325.662642][ T8] hid-generic 0003:22ED:1010.0002: unknown main item tag 0x0 [ 325.740504][ T8] hid-generic 0003:22ED:1010.0002: hidraw0: USB HID v10.00 Device [HID 22ed:1010] on usb-dummy_hcd.3-1/input0 [ 326.959492][ T8] usb 4-1: USB disconnect, device number 6 [ 327.723723][ T8513] random: crng reseeded on system resumption [ 329.079162][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.358590][ T29] audit: type=1326 audit(1734462157.620:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7eab7cce7 code=0x7ffc0000 [ 330.417605][ T29] audit: type=1326 audit(1734462157.620:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7eab21f29 code=0x7ffc0000 [ 330.597149][ T8537] IPv6: Can't replace route, no match found [ 330.665250][ T29] audit: type=1326 audit(1734462157.620:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7eab7cce7 code=0x7ffc0000 [ 330.696684][ T29] audit: type=1326 audit(1734462157.620:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7eab21f29 code=0x7ffc0000 [ 330.722669][ T29] audit: type=1326 audit(1734462157.620:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 331.346429][ T29] audit: type=1326 audit(1734462157.620:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 331.378073][ T29] audit: type=1326 audit(1734462157.667:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 331.401461][ T29] audit: type=1326 audit(1734462157.667:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 331.496839][ T29] audit: type=1326 audit(1734462157.667:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 331.576047][ T29] audit: type=1326 audit(1734462157.667:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.0.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7eab85d29 code=0x7ffc0000 [ 331.803744][ T8546] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 332.517178][ T8553] bond0: entered promiscuous mode [ 332.522535][ T8553] bond_slave_0: entered promiscuous mode [ 332.529068][ T8553] bond_slave_1: entered promiscuous mode [ 332.764179][ T8554] binder: 8551:8554 ioctl 4018620d 0 returned -22 [ 332.821648][ T8554] sg_write: process 506 (syz.4.637) changed security contexts after opening file descriptor, this is not allowed. [ 333.917093][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 334.136587][ T5869] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 334.310327][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 334.316391][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.316470][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 334.316594][ T5869] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 334.316663][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.334033][ T5869] usb 5-1: config 0 descriptor?? [ 334.954862][ T5869] HID 045e:07da: Invalid code 65791 type 1 [ 334.959305][ T5869] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input10 [ 335.184553][ T5869] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 335.761542][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 336.022137][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 336.061331][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.090017][ T9] usb 2-1: config 0 descriptor?? [ 336.234814][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 336.250719][ T970] usb 5-1: USB disconnect, device number 6 [ 337.109868][ T9] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 337.349967][ T8643] tipc: Started in network mode [ 337.354948][ T8643] tipc: Node identity 4, cluster identity 4711 [ 337.361280][ T8643] tipc: Node number set to 4 [ 337.373380][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 337.373399][ T29] audit: type=1400 audit(1734462164.150:600): avc: denied { append } for pid=8642 comm="syz.0.648" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.460932][ T8648] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 337.472854][ T9] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 338.152636][ T8656] netlink: 'syz.1.644': attribute type 39 has an invalid length. [ 338.748354][ T8656] veth0_macvtap: left promiscuous mode [ 339.173328][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.594247][ T5867] usb 2-1: USB disconnect, device number 4 [ 339.770725][ T29] audit: type=1400 audit(1734462166.423:601): avc: denied { ioctl } for pid=8660 comm="syz.3.652" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 340.966662][ T8669] overlayfs: conflicting lowerdir path [ 341.353818][ T29] audit: type=1800 audit(1734462167.536:602): pid=8670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.654" name="bus" dev="overlay" ino=680 res=0 errno=0 [ 343.590389][ T29] audit: type=1400 audit(1734462169.986:603): avc: denied { append } for pid=8697 comm="syz.2.662" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 344.737796][ T8708] overlayfs: failed to resolve './file0': -2 [ 344.761328][ T8710] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8710] [ 345.933789][ T8725] overlayfs: failed to resolve './file0': -2 [ 346.003114][ T5869] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 346.176536][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.189693][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.644606][ T5869] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 346.654361][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.677453][ T5869] usb 5-1: config 0 descriptor?? [ 347.037465][ T8746] overlayfs: conflicting lowerdir path [ 347.513545][ T5869] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 347.539355][ T5869] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 347.562261][ T7749] Bluetooth: hci5: Frame reassembly failed (-84) [ 347.572366][ T5869] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 348.849729][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -108 [ 349.952716][ T5128] Bluetooth: hci5: command 0x1003 tx timeout [ 350.072801][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 350.087705][ T8] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 350.285708][ T8] usb 5-1: device descriptor read/64, error -32 [ 350.410180][ T29] audit: type=1400 audit(1734462176.385:604): avc: denied { accept } for pid=8761 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 350.507871][ T29] audit: type=1400 audit(1734462176.469:605): avc: denied { write } for pid=8770 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 351.091840][ T29] audit: type=1400 audit(1734462177.002:606): avc: denied { read } for pid=8778 comm="syz.3.682" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 351.178528][ T29] audit: type=1400 audit(1734462177.002:607): avc: denied { open } for pid=8778 comm="syz.3.682" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 351.315043][ T8799] overlayfs: conflicting lowerdir path [ 351.373365][ T8801] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8801] [ 352.032996][ T5867] usb 5-1: USB disconnect, device number 7 [ 353.007149][ T8819] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 353.836966][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 353.993150][ T8822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.688'. [ 354.374447][ T8822] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.383311][ T8822] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.395268][ T8822] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 354.404631][ T8822] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 355.023260][ T5128] Bluetooth: hci5: sending frame failed (-49) [ 355.031825][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 357.613286][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 357.798816][ T8] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 357.923568][ T8854] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 357.932376][ T8854] overlayfs: missing 'lowerdir' [ 357.956093][ T8] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 357.965205][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.969524][ T970] hid-generic 0000:0000:0000.0005: item fetching failed at offset 0/1 [ 357.973468][ T8] usb 2-1: Product: syz [ 357.986360][ T8] usb 2-1: Manufacturer: syz [ 357.991261][ T8] usb 2-1: SerialNumber: syz [ 358.011664][ T29] audit: type=1400 audit(1734462183.437:608): avc: denied { read write } for pid=8849 comm="syz.0.695" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 358.035113][ T29] audit: type=1400 audit(1734462183.437:609): avc: denied { open } for pid=8849 comm="syz.0.695" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 358.049844][ T970] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 358.298580][ T8863] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 359.491318][ T29] audit: type=1400 audit(1734462184.869:610): avc: denied { audit_write } for pid=8867 comm="syz.4.701" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 360.718467][ T8872] bridge0: port 3(syz_tun) entered blocking state [ 360.725043][ T8872] bridge0: port 3(syz_tun) entered disabled state [ 360.731580][ T8872] syz_tun: entered allmulticast mode [ 360.737935][ T8872] syz_tun: entered promiscuous mode [ 360.745062][ T8872] bridge0: port 3(syz_tun) entered blocking state [ 360.751568][ T8872] bridge0: port 3(syz_tun) entered forwarding state [ 360.860172][ T8] comedi comedi0: Wrong number of endpoints [ 361.519953][ T8] ni6501 2-1:5.0: driver 'ni6501' failed to auto-configure device. [ 361.739876][ T29] audit: type=1400 audit(1734462186.964:611): avc: denied { setopt } for pid=8873 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 361.748030][ T8] usb 2-1: USB disconnect, device number 5 [ 363.117360][ T8894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.704'. [ 363.495347][ T29] audit: type=1400 audit(1734462188.563:612): avc: denied { map } for pid=8895 comm="syz.3.707" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 364.128150][ T8888] affs: No valid root block on device nullb0 [ 364.139940][ T29] audit: type=1400 audit(1734462189.209:613): avc: denied { mounton } for pid=8887 comm="syz.0.705" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 364.510917][ T8909] syz.0.710: attempt to access beyond end of device [ 364.510917][ T8909] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 364.528358][ T8909] syz.0.710: attempt to access beyond end of device [ 364.528358][ T8909] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 364.541779][ T29] audit: type=1400 audit(1734462189.564:614): avc: denied { ioctl } for pid=8905 comm="syz.0.710" path="socket:[18041]" dev="sockfs" ino=18041 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 364.568215][ T8909] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 364.585216][ T8909] syz.0.710: attempt to access beyond end of device [ 364.585216][ T8909] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 364.598466][ T8909] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 364.612016][ T8909] syz.0.710: attempt to access beyond end of device [ 364.612016][ T8909] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 364.625660][ T8909] syz.0.710: attempt to access beyond end of device [ 364.625660][ T8909] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 364.639136][ T8909] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 364.650435][ T8909] syz.0.710: attempt to access beyond end of device [ 364.650435][ T8909] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 364.664460][ T8909] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 364.678560][ T8909] syz.0.710: attempt to access beyond end of device [ 364.678560][ T8909] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 364.693383][ T8909] syz.0.710: attempt to access beyond end of device [ 364.693383][ T8909] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 364.707036][ T8909] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 364.718705][ T8909] syz.0.710: attempt to access beyond end of device [ 364.718705][ T8909] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 364.732132][ T8909] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 364.744931][ T8909] syz.0.710: attempt to access beyond end of device [ 364.744931][ T8909] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 364.760556][ T8909] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 364.772616][ T8909] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 364.782886][ T8909] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 364.893639][ T8] libceph: connect (1)[c::]:6789 error -101 [ 364.926810][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 364.968879][ T29] audit: type=1400 audit(1734462190.004:615): avc: denied { create } for pid=8907 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 365.040694][ T8] libceph: connect (1)[c::]:6789 error -101 [ 365.342591][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 365.631332][ T8908] ceph: No mds server is up or the cluster is laggy [ 365.676349][ T8] libceph: connect (1)[c::]:6789 error -101 [ 365.754275][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 366.959635][ T29] audit: type=1400 audit(1734462191.865:616): avc: denied { create } for pid=8936 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 367.745956][ T8943] team_slave_0: entered promiscuous mode [ 367.752245][ T8943] team_slave_1: entered promiscuous mode [ 367.758982][ T8943] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 368.247893][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.718'. [ 368.532070][ T8948] xt_cgroup: invalid path, errno=-2 [ 368.618753][ T8953] bond0: (slave rose0): Enslaving as an active interface with an up link [ 370.011539][ T29] audit: type=1400 audit(1734462194.550:617): avc: denied { bind } for pid=8936 comm="syz.0.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 370.179738][ T8948] infiniband syz1: set down [ 370.196324][ T8948] infiniband syz1: added ipvlan0 [ 370.222643][ T8948] syz1: rxe_create_cq: returned err = -12 [ 370.232610][ T8948] infiniband syz1: Couldn't create ib_mad CQ [ 370.243770][ T8948] infiniband syz1: Couldn't open port 1 [ 370.274167][ T8948] RDS/IB: syz1: added [ 370.278345][ T8948] smc: adding ib device syz1 with port count 1 [ 370.284726][ T8948] smc: ib device syz1 port 1 has pnetid [ 374.338056][ T29] audit: type=1400 audit(1734462198.731:618): avc: denied { create } for pid=9037 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 374.444155][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'. [ 374.568016][ T9039] bridge0: port 4(syz_tun) entered blocking state [ 374.578136][ T9039] bridge0: port 4(syz_tun) entered disabled state [ 374.586677][ T9039] syz_tun: entered allmulticast mode [ 374.729217][ T9038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.745536][ T9039] syz_tun: entered promiscuous mode [ 374.755882][ T9039] bridge0: port 4(syz_tun) entered blocking state [ 374.762637][ T9039] bridge0: port 4(syz_tun) entered forwarding state [ 375.044302][ T9054] overlayfs: failed to resolve './file1': -2 [ 375.178731][ T7360] Bluetooth: hci5: Frame reassembly failed (-84) [ 377.326946][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 377.454101][ T9081] netlink: 'syz.3.742': attribute type 10 has an invalid length. [ 377.498466][ T9081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.528300][ T9081] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 377.599827][ T9081] syz.3.742 (9081) used greatest stack depth: 20400 bytes left [ 377.717761][ T9087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.843114][ T5128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 379.114392][ T29] audit: type=1400 audit(1734462202.669:619): avc: denied { write } for pid=9091 comm="syz.3.745" path="socket:[18527]" dev="sockfs" ino=18527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 379.218723][ T29] audit: type=1400 audit(1734462202.669:620): avc: denied { nlmsg_read } for pid=9091 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 380.280678][ T9115] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 380.487696][ T29] audit: type=1800 audit(1734462204.503:621): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.750" name="bus" dev="overlay" ino=770 res=0 errno=0 [ 381.170729][ T29] audit: type=1400 audit(1734462205.157:622): avc: denied { read } for pid=9118 comm="syz.4.753" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 381.544275][ T29] audit: type=1400 audit(1734462205.157:623): avc: denied { open } for pid=9118 comm="syz.4.753" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 381.568100][ T29] audit: type=1400 audit(1734462205.522:624): avc: denied { listen } for pid=9122 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 382.403557][ T7745] Bluetooth: hci5: Frame reassembly failed (-84) [ 382.631927][ T29] audit: type=1400 audit(1734462206.486:625): avc: denied { ioctl } for pid=9134 comm="syz.1.756" path="socket:[19529]" dev="sockfs" ino=19529 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 384.291414][ T9156] bio_check_eod: 2 callbacks suppressed [ 384.291426][ T9156] syz.3.762: attempt to access beyond end of device [ 384.291426][ T9156] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 384.307807][ T29] audit: type=1400 audit(1734462208.076:626): avc: denied { getopt } for pid=9154 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 384.852375][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 384.992204][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 385.006230][ T9156] syz.3.762: attempt to access beyond end of device [ 385.006230][ T9156] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 385.021400][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 385.224521][ T7756] Bluetooth: hci5: Frame reassembly failed (-84) [ 385.252058][ T9156] syz.3.762: attempt to access beyond end of device [ 385.252058][ T9156] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 385.290880][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 385.303550][ T9156] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 385.316844][ T9156] UDF-fs: Scanning with blocksize 512 failed [ 385.324454][ T9156] syz.3.762: attempt to access beyond end of device [ 385.324454][ T9156] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 385.356462][ T9156] syz.3.762: attempt to access beyond end of device [ 385.356462][ T9156] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 385.384895][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 385.385837][ T9171] Bluetooth: MGMT ver 1.23 [ 385.579807][ T9156] syz.3.762: attempt to access beyond end of device [ 385.579807][ T9156] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 385.595211][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 385.610705][ T29] audit: type=1400 audit(1734462209.198:627): avc: denied { setopt } for pid=9167 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 385.631862][ T9156] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 385.632989][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.654396][ T9172] bridge0: entered allmulticast mode [ 385.691506][ T9171] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 385.714042][ T9156] UDF-fs: Scanning with blocksize 1024 failed [ 385.740412][ T9156] syz.3.762: attempt to access beyond end of device [ 385.740412][ T9156] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 385.761739][ T9156] syz.3.762: attempt to access beyond end of device [ 385.761739][ T9156] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 385.781766][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 385.793189][ T9156] syz.3.762: attempt to access beyond end of device [ 385.793189][ T9156] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 385.817417][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 385.832446][ T9156] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 385.843065][ T9156] UDF-fs: Scanning with blocksize 2048 failed [ 385.854957][ T9156] syz.3.762: attempt to access beyond end of device [ 385.854957][ T9156] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 385.887140][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 385.899772][ T9156] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 385.915556][ T9156] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 385.924710][ T9156] UDF-fs: Scanning with blocksize 4096 failed [ 385.930895][ T9156] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 386.031699][ T29] audit: type=1400 audit(1734462209.704:628): avc: denied { setopt } for pid=9175 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 387.344986][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 387.351672][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 387.921094][ T29] audit: type=1400 audit(1734462211.238:629): avc: denied { write } for pid=9182 comm="syz.3.768" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 387.944085][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.098046][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 390.251637][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 391.023854][ T9214] input: syz1 as /devices/virtual/input/input13 [ 393.997831][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.654703][ T9250] mmap: syz.0.787 (9250) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 397.211721][ T29] audit: type=1800 audit(1734462220.058:630): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.790" name="bus" dev="overlay" ino=830 res=0 errno=0 [ 397.912827][ T29] audit: type=1400 audit(1734462220.807:631): avc: denied { sqpoll } for pid=9265 comm="syz.1.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 398.458570][ T9273] ======================================================= [ 398.458570][ T9273] WARNING: The mand mount option has been deprecated and [ 398.458570][ T9273] and is ignored by this kernel. Remove the mand [ 398.458570][ T9273] option from the mount to silence this warning. [ 398.458570][ T9273] ======================================================= [ 398.495534][ T9273] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 398.509787][ T9273] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 398.527662][ T9273] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 398.887844][ T9259] syz.2.789 (9259): drop_caches: 2 [ 402.486698][ T9306] Bluetooth: hci5: Frame reassembly failed (-84) [ 402.551978][ T7360] Bluetooth: hci5: Frame reassembly failed (-84) [ 404.249938][ T9325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.807'. [ 404.758825][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 404.766807][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 405.582703][ T9336] input: syz1 as /devices/virtual/input/input14 [ 405.608580][ T9331] evm: overlay not supported [ 405.955637][ T29] audit: type=1400 audit(1734462228.252:632): avc: denied { write } for pid=9338 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 405.975522][ T29] audit: type=1400 audit(1734462228.271:633): avc: denied { shutdown } for pid=9338 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 406.021888][ T6441] Bluetooth: hci5: Frame reassembly failed (-84) [ 406.029122][ T6441] Bluetooth: hci5: Frame reassembly failed (-84) [ 407.613056][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 407.946174][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 407.955563][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.988075][ T9] usb 3-1: config 0 descriptor?? [ 408.190142][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 408.211796][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 408.643177][ T9353] block device autoloading is deprecated and will be removed. [ 408.790857][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.857310][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.933961][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.995191][ T9] ath6kl: Failed to submit usb control message: -71 [ 409.008688][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 409.024901][ T9] ath6kl: Unable to send get target info: -71 [ 409.027827][ T5812] bridge0: port 4(syz_tun) entered disabled state [ 409.064844][ T9] ath6kl: Failed to init ath6kl core: -71 [ 409.091448][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 409.148723][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.151931][ T9] usb 3-1: USB disconnect, device number 3 [ 409.168749][ T5812] syz_tun (unregistering): left allmulticast mode [ 409.177032][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.282519][ T5812] syz_tun (unregistering): left promiscuous mode [ 409.288991][ T5812] bridge0: port 4(syz_tun) entered disabled state [ 409.397967][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.470932][ T29] audit: type=1400 audit(1734462231.620:634): avc: denied { mounton } for pid=9363 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 410.174301][ T29] audit: type=1400 audit(1734462232.050:635): avc: denied { read } for pid=9377 comm="syz.1.819" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.210971][ T29] audit: type=1400 audit(1734462232.050:636): avc: denied { open } for pid=9377 comm="syz.1.819" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.411425][ T29] audit: type=1400 audit(1734462232.144:637): avc: denied { write } for pid=9377 comm="syz.1.819" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.533826][ T29] audit: type=1400 audit(1734462232.724:638): avc: denied { bind } for pid=9380 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 411.556590][ T9391] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 412.069865][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 412.131753][ T7745] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.150022][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.821'. [ 412.161535][ T5128] Bluetooth: hci1: command tx timeout [ 412.271385][ T7745] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.371312][ T7745] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.431808][ T5867] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 412.630500][ T9363] chnl_net:caif_netlink_parms(): no params data found [ 412.686559][ T7745] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.789563][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.796826][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.804742][ T9363] bridge_slave_0: entered allmulticast mode [ 412.816592][ T9363] bridge_slave_0: entered promiscuous mode [ 412.834806][ T5867] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 412.843129][ T5867] usb 5-1: config 0 has no interface number 0 [ 412.849530][ T5867] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.860695][ T5867] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.865453][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.870608][ T5867] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 412.881483][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.886832][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.895076][ T5867] usb 5-1: config 0 descriptor?? [ 412.913131][ T9363] bridge_slave_1: entered allmulticast mode [ 412.925117][ T9363] bridge_slave_1: entered promiscuous mode [ 413.006413][ T9363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.016020][ T7745] erspan0: left allmulticast mode [ 413.021302][ T7745] erspan0: left promiscuous mode [ 413.029336][ T7745] bridge0: port 3(erspan0) entered disabled state [ 413.039393][ T7745] bridge_slave_1: left allmulticast mode [ 413.045555][ T7745] bridge_slave_1: left promiscuous mode [ 413.051334][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.061393][ T7745] bridge_slave_0: left allmulticast mode [ 413.067311][ T7745] bridge_slave_0: left promiscuous mode [ 413.073017][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.386332][ T5867] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 413.393568][ T5867] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 413.412834][ T5867] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 413.421123][ T5867] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 413.428515][ T5867] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 413.444489][ T5867] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 413.532206][ T5867] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 413.606078][ T5867] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 413.665561][ T6441] Bluetooth: hci5: Frame reassembly failed (-84) [ 413.729154][ T6441] Bluetooth: hci5: Frame reassembly failed (-84) [ 413.888358][ T5867] hid_prodikeys: hid-prodikeys: failed to find output report [ 413.888358][ T5867] [ 413.918299][ T29] audit: type=1400 audit(1734462235.782:639): avc: denied { bind } for pid=9414 comm="syz.0.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 413.920536][ T5867] usb 5-1: USB disconnect, device number 8 [ 414.302885][ T29] audit: type=1400 audit(1734462235.970:640): avc: denied { write } for pid=9414 comm="syz.0.828" path="socket:[19306]" dev="sockfs" ino=19306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 414.351139][ T5831] Bluetooth: hci1: command tx timeout [ 415.781122][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 416.201166][ T7756] smc: removing ib device syz1 [ 416.207081][ T7745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.221120][ T7745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.241402][ T7745] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 416.283848][ T7745] bond0 (unregistering): Released all slaves [ 416.315009][ T9363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.334237][ T9433] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 416.496798][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 416.678679][ T5128] Bluetooth: hci1: command tx timeout [ 416.755616][ T9] ================================================================== [ 416.763706][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1bf/0x200 [ 416.772544][ T9] Read of size 8 at addr ffff88805e3102e8 by task kworker/0:1/9 [ 416.780143][ T9] [ 416.782439][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 416.792928][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 416.802996][ T9] Workqueue: events smc_ib_port_event_work [ 416.808834][ T9] Call Trace: [ 416.812126][ T9] [ 416.815075][ T9] dump_stack_lvl+0x116/0x1f0 [ 416.819789][ T9] print_report+0xc3/0x620 [ 416.824229][ T9] ? __virt_addr_valid+0x5e/0x590 [ 416.829275][ T9] ? __phys_addr+0xc6/0x150 [ 416.833789][ T9] kasan_report+0xd9/0x110 [ 416.838209][ T9] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 416.844298][ T9] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 416.850387][ T9] __ethtool_get_link_ksettings+0x1bf/0x200 [ 416.856301][ T9] __ethtool_get_link_ksettings+0x145/0x200 [ 416.862213][ T9] ib_get_eth_speed+0x123/0xb50 [ 416.867075][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 416.872451][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 416.877490][ T9] ? __pfx___lock_acquire+0x10/0x10 [ 416.882703][ T9] ? __pfx_lock_release+0x10/0x10 [ 416.887733][ T9] rxe_query_port+0x72/0x200 [ 416.892335][ T9] ib_query_port+0x43e/0x8a0 [ 416.896939][ T9] smc_ib_port_event_work+0x130/0xc00 [ 416.902315][ T9] ? rcu_is_watching+0x12/0xc0 [ 416.907086][ T9] ? trace_lock_acquire+0x14e/0x1f0 [ 416.912291][ T9] ? process_one_work+0x921/0x1ba0 [ 416.917407][ T9] ? lock_acquire+0x2f/0xb0 [ 416.921917][ T9] ? process_one_work+0x921/0x1ba0 [ 416.927030][ T9] process_one_work+0x9c5/0x1ba0 [ 416.931976][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 416.937630][ T9] ? __pfx_process_one_work+0x10/0x10 [ 416.943027][ T9] ? rcu_is_watching+0x12/0xc0 [ 416.947829][ T9] ? assign_work+0x1a0/0x250 [ 416.952443][ T9] worker_thread+0x6c8/0xf00 [ 416.957066][ T9] ? __pfx_worker_thread+0x10/0x10 [ 416.962198][ T9] kthread+0x2c1/0x3a0 [ 416.966263][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.971445][ T9] ? __pfx_kthread+0x10/0x10 [ 416.976021][ T9] ret_from_fork+0x45/0x80 [ 416.980419][ T9] ? __pfx_kthread+0x10/0x10 [ 416.984993][ T9] ret_from_fork_asm+0x1a/0x30 [ 416.989747][ T9] [ 416.992745][ T9] [ 416.995046][ T9] Allocated by task 5812: [ 416.999348][ T9] kasan_save_stack+0x33/0x60 [ 417.004011][ T9] kasan_save_track+0x14/0x30 [ 417.008666][ T9] __kasan_kmalloc+0xaa/0xb0 [ 417.013236][ T9] __kmalloc_node_noprof+0x21f/0x510 [ 417.018502][ T9] __kvmalloc_node_noprof+0x6f/0x1a0 [ 417.023768][ T9] alloc_netdev_mqs+0xd9/0x1510 [ 417.028605][ T9] rtnl_create_link+0xc10/0xfa0 [ 417.033444][ T9] rtnl_newlink+0x14c3/0x1d60 [ 417.038107][ T9] rtnetlink_rcv_msg+0x95b/0xea0 [ 417.043028][ T9] netlink_rcv_skb+0x16b/0x440 [ 417.047777][ T9] netlink_unicast+0x53c/0x7f0 [ 417.052524][ T9] netlink_sendmsg+0x8b8/0xd70 [ 417.057273][ T9] __sys_sendto+0x488/0x4f0 [ 417.061760][ T9] __x64_sys_sendto+0xe0/0x1c0 [ 417.066508][ T9] do_syscall_64+0xcd/0x250 [ 417.070995][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.076874][ T9] [ 417.079174][ T9] Freed by task 7745: [ 417.083128][ T9] kasan_save_stack+0x33/0x60 [ 417.087786][ T9] kasan_save_track+0x14/0x30 [ 417.092442][ T9] kasan_save_free_info+0x3b/0x60 [ 417.097454][ T9] __kasan_slab_free+0x51/0x70 [ 417.102197][ T9] kfree+0x14f/0x4b0 [ 417.106069][ T9] kvfree+0x47/0x50 [ 417.109857][ T9] device_release+0xa1/0x240 [ 417.114432][ T9] kobject_put+0x1e4/0x5a0 [ 417.118833][ T9] netdev_run_todo+0x7bc/0x12d0 [ 417.123662][ T9] cleanup_net+0x591/0xbd0 [ 417.128058][ T9] process_one_work+0x9c5/0x1ba0 [ 417.132977][ T9] worker_thread+0x6c8/0xf00 [ 417.137546][ T9] kthread+0x2c1/0x3a0 [ 417.141599][ T9] ret_from_fork+0x45/0x80 [ 417.145999][ T9] ret_from_fork_asm+0x1a/0x30 [ 417.150748][ T9] [ 417.153048][ T9] The buggy address belongs to the object at ffff88805e310000 [ 417.153048][ T9] which belongs to the cache kmalloc-cg-8k of size 8192 [ 417.167337][ T9] The buggy address is located 744 bytes inside of [ 417.167337][ T9] freed 8192-byte region [ffff88805e310000, ffff88805e312000) [ 417.181199][ T9] [ 417.183499][ T9] The buggy address belongs to the physical page: [ 417.189884][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e310 [ 417.198622][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 417.207098][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 417.214626][ T9] page_type: f5(slab) [ 417.218588][ T9] raw: 00fff00000000040 ffff88801b04f640 dead000000000122 0000000000000000 [ 417.227153][ T9] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 417.235717][ T9] head: 00fff00000000040 ffff88801b04f640 dead000000000122 0000000000000000 [ 417.244366][ T9] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 417.253015][ T9] head: 00fff00000000003 ffffea000178c401 ffffffffffffffff 0000000000000000 [ 417.261667][ T9] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 417.270333][ T9] page dumped because: kasan: bad access detected [ 417.276896][ T9] page_owner tracks the page as allocated [ 417.282589][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5812, tgid 5812 (syz-executor), ts 54159231349, free_ts 13115446315 [ 417.305667][ T9] post_alloc_hook+0x2d1/0x350 [ 417.310416][ T9] get_page_from_freelist+0xfce/0x2f80 [ 417.315858][ T9] __alloc_pages_noprof+0x223/0x25b0 [ 417.321126][ T9] alloc_pages_mpol_noprof+0x2c9/0x610 [ 417.326569][ T9] new_slab+0x2c9/0x410 [ 417.330703][ T9] ___slab_alloc+0xd7d/0x17a0 [ 417.335361][ T9] __slab_alloc.constprop.0+0x56/0xb0 [ 417.340729][ T9] __kmalloc_node_noprof+0x2f0/0x510 [ 417.346025][ T9] __kvmalloc_node_noprof+0x6f/0x1a0 [ 417.351301][ T9] alloc_netdev_mqs+0xd9/0x1510 [ 417.356138][ T9] rtnl_create_link+0xc10/0xfa0 [ 417.360975][ T9] rtnl_newlink+0x14c3/0x1d60 [ 417.365639][ T9] rtnetlink_rcv_msg+0x95b/0xea0 [ 417.370560][ T9] netlink_rcv_skb+0x16b/0x440 [ 417.375309][ T9] netlink_unicast+0x53c/0x7f0 [ 417.380059][ T9] netlink_sendmsg+0x8b8/0xd70 [ 417.384805][ T9] page last free pid 1 tgid 1 stack trace: [ 417.390585][ T9] free_unref_page+0x661/0x1080 [ 417.395420][ T9] free_contig_range+0x133/0x3f0 [ 417.400340][ T9] destroy_args+0x802/0xa50 [ 417.404830][ T9] debug_vm_pgtable+0x168e/0x31a0 [ 417.409840][ T9] do_one_initcall+0x128/0x700 [ 417.414591][ T9] kernel_init_freeable+0x5c7/0x900 [ 417.419777][ T9] kernel_init+0x1c/0x2b0 [ 417.424093][ T9] ret_from_fork+0x45/0x80 [ 417.428488][ T9] ret_from_fork_asm+0x1a/0x30 [ 417.433238][ T9] [ 417.435537][ T9] Memory state around the buggy address: [ 417.441145][ T9] ffff88805e310180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 417.449185][ T9] ffff88805e310200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 417.457235][ T9] >ffff88805e310280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 417.465271][ T9] ^ [ 417.472701][ T9] ffff88805e310300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 417.480738][ T9] ffff88805e310380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 417.488774][ T9] ================================================================== [ 417.496923][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.410476][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 418.417722][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 418.428220][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 418.438271][ T9] Workqueue: events smc_ib_port_event_work [ 418.444083][ T9] Call Trace: [ 418.447362][ T9] [ 418.450285][ T9] dump_stack_lvl+0x3d/0x1f0 [ 418.454880][ T9] panic+0x71d/0x800 [ 418.458777][ T9] ? __pfx_panic+0x10/0x10 [ 418.463197][ T9] ? preempt_schedule_thunk+0x1a/0x30 [ 418.468562][ T9] ? preempt_schedule_common+0x44/0xc0 [ 418.474020][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 418.479126][ T9] check_panic_on_warn+0xab/0xb0 [ 418.484230][ T9] end_report+0x117/0x180 [ 418.488559][ T9] kasan_report+0xe9/0x110 [ 418.493060][ T9] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 418.499137][ T9] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 418.505217][ T9] __ethtool_get_link_ksettings+0x1bf/0x200 [ 418.511134][ T9] __ethtool_get_link_ksettings+0x145/0x200 [ 418.517040][ T9] ib_get_eth_speed+0x123/0xb50 [ 418.521900][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 418.527275][ T9] ? __pfx___mutex_lock+0x10/0x10 [ 418.532312][ T9] ? __pfx___lock_acquire+0x10/0x10 [ 418.537517][ T9] ? __pfx_lock_release+0x10/0x10 [ 418.542552][ T9] rxe_query_port+0x72/0x200 [ 418.547160][ T9] ib_query_port+0x43e/0x8a0 [ 418.551766][ T9] smc_ib_port_event_work+0x130/0xc00 [ 418.557154][ T9] ? rcu_is_watching+0x12/0xc0 [ 418.561937][ T9] ? trace_lock_acquire+0x14e/0x1f0 [ 418.567152][ T9] ? process_one_work+0x921/0x1ba0 [ 418.572269][ T9] ? lock_acquire+0x2f/0xb0 [ 418.576779][ T9] ? process_one_work+0x921/0x1ba0 [ 418.581887][ T9] process_one_work+0x9c5/0x1ba0 [ 418.586814][ T9] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 418.592431][ T9] ? __pfx_process_one_work+0x10/0x10 [ 418.597784][ T9] ? rcu_is_watching+0x12/0xc0 [ 418.602538][ T9] ? assign_work+0x1a0/0x250 [ 418.607108][ T9] worker_thread+0x6c8/0xf00 [ 418.611686][ T9] ? __pfx_worker_thread+0x10/0x10 [ 418.616780][ T9] kthread+0x2c1/0x3a0 [ 418.620836][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.626023][ T9] ? __pfx_kthread+0x10/0x10 [ 418.630598][ T9] ret_from_fork+0x45/0x80 [ 418.634996][ T9] ? __pfx_kthread+0x10/0x10 [ 418.639576][ T9] ret_from_fork_asm+0x1a/0x30 [ 418.644330][ T9] [ 418.647552][ T9] Kernel Offset: disabled [ 418.651859][ T9] Rebooting in 86400 seconds..