last executing test programs: 2.238225895s ago: executing program 1 (id=2059): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="3000000000000000000000000700000001441c06"], 0x30}, 0x80) 2.125467823s ago: executing program 1 (id=2060): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r3, r0, 0x4, r0}, 0x10) 2.068077673s ago: executing program 2 (id=2061): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 2.044341607s ago: executing program 1 (id=2063): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') acct(&(0x7f0000000040)='./file0\x00') 1.401380828s ago: executing program 4 (id=2078): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10003, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff32bea0e, 0x0, 0xfffc, 0x3, 0x5c3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10) 1.182684425s ago: executing program 2 (id=2080): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x20040400) splice(r1, 0x0, r0, &(0x7f00000000c0)=0x8008, 0xfff, 0x1) 1.116877361s ago: executing program 1 (id=2082): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 1.06414046s ago: executing program 2 (id=2083): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.045964321s ago: executing program 2 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 956.103704ms ago: executing program 1 (id=2086): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x12022) 955.795437ms ago: executing program 2 (id=2087): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0x190}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 754.180843ms ago: executing program 0 (id=2091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) close_range(r3, 0xffffffffffffffff, 0x0) 581.598362ms ago: executing program 0 (id=2092): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) 581.404842ms ago: executing program 3 (id=2093): bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10, 0xf, 0x4}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x3, 0x9, 0x0, 0x6, 0x440}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 523.685533ms ago: executing program 0 (id=2094): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000"], 0x48) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x805, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0xeb, 0x2, 0x0, 0x101, 0x6, 0x1], 0xeeee8000, 0x141200}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000001800)=ANY=[@ANYBLOB="010000000000000070000040"]) 460.060771ms ago: executing program 3 (id=2095): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x20100003, 0x7ffffffd, {0x0, 0x0, 0x2}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000092) 459.903521ms ago: executing program 4 (id=2096): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 443.789411ms ago: executing program 3 (id=2097): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000680)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2b20}, 0x94) 404.2784ms ago: executing program 4 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 327.777205ms ago: executing program 3 (id=2099): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x2}) 327.535788ms ago: executing program 4 (id=2100): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002300), 0x80802, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000000240), 0x84000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x28}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 327.416125ms ago: executing program 0 (id=2101): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 316.518144ms ago: executing program 3 (id=2102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 304.46402ms ago: executing program 2 (id=2103): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) ppoll(&(0x7f0000000100)=[{r2, 0x4098}], 0x1, 0x0, 0x0, 0x0) 151.949563ms ago: executing program 0 (id=2104): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x200}, &(0x7f0000000100)=0x8) 151.826805ms ago: executing program 4 (id=2105): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="2192f10e6b8f", 0x6}], 0x1) 151.655587ms ago: executing program 3 (id=2106): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f"], 0x48) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 82.355013ms ago: executing program 1 (id=2107): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x6, 0x5, 0x0, @remote, @mcast1, 0x8000, 0x80, 0x400, 0x9bd}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00), 0x0, 0xde, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000b00), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x6, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000cc0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000d00)={@dev}, &(0x7f0000000d40)=0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x28, 0x2, 0x3) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r6, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000e40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000010c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'syztnl0\x00', r2, 0x29, 0x8, 0x70, 0xb7, 0x18, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x20, 0xb7a5, 0x11}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48044}, 0x800) semop(r1, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r1, 0x4, 0xf, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) 61.445409ms ago: executing program 0 (id=2108): ioperm(0xc, 0x9, 0x1e2) prctl$PR_PAC_RESET_KEYS(0x67, 0x0) 0s ago: executing program 4 (id=2109): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 7][ T5852] Cannot create hsr debugfs directory [ 70.979775][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.005339][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.017054][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.060948][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.154995][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.173905][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.188697][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.204180][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.210158][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.219734][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.279808][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.291996][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.303025][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.315902][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.399489][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.429485][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.463333][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.473168][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.533909][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.555928][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.566785][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.583481][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.592262][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.643694][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.667588][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.698521][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.707977][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.715361][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.738791][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.754594][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.770169][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.777781][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.813654][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.829838][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.842319][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.849466][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.871159][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.878474][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.889066][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.896221][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.921196][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.928310][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.938852][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.945963][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.971846][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.978949][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.053836][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.071585][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.071600][ T30] audit: type=1400 audit(1759154028.319:86): avc: denied { sys_module } for pid=5851 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.130845][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.217951][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.262412][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.269543][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.293408][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.300612][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.369431][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.468970][ T5170] Bluetooth: hci1: command tx timeout [ 72.545051][ T5170] Bluetooth: hci4: command tx timeout [ 72.550488][ T5170] Bluetooth: hci0: command tx timeout [ 72.556136][ T51] Bluetooth: hci2: command tx timeout [ 72.556344][ T5861] Bluetooth: hci3: command tx timeout [ 72.564415][ T5851] veth0_vlan: entered promiscuous mode [ 72.578638][ T5851] veth1_vlan: entered promiscuous mode [ 72.628859][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.650813][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.673763][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.751403][ T5851] veth0_macvtap: entered promiscuous mode [ 72.788951][ T5844] veth0_vlan: entered promiscuous mode [ 72.798851][ T5851] veth1_macvtap: entered promiscuous mode [ 72.830646][ T5844] veth1_vlan: entered promiscuous mode [ 72.861355][ T5853] veth0_vlan: entered promiscuous mode [ 72.876615][ T5853] veth1_vlan: entered promiscuous mode [ 72.894959][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.910144][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.937459][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.977227][ T5844] veth0_macvtap: entered promiscuous mode [ 73.006209][ T3596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.019195][ T5853] veth0_macvtap: entered promiscuous mode [ 73.031637][ T3596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.041950][ T3596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.053878][ T5853] veth1_macvtap: entered promiscuous mode [ 73.070426][ T5844] veth1_macvtap: entered promiscuous mode [ 73.077154][ T3596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.113568][ T5852] veth0_vlan: entered promiscuous mode [ 73.131571][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.149935][ T5852] veth1_vlan: entered promiscuous mode [ 73.159896][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.180719][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.200732][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.215606][ T5842] veth0_vlan: entered promiscuous mode [ 73.239278][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.277383][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289597][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299658][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.308826][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.320784][ T5842] veth1_vlan: entered promiscuous mode [ 73.327496][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.337658][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.346305][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.355364][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.377472][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.440943][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.453725][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.472684][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.481932][ T5842] veth0_macvtap: entered promiscuous mode [ 73.489407][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.500609][ T30] audit: type=1400 audit(1759154029.739:87): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.ZIOBgi/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.519893][ T5852] veth0_macvtap: entered promiscuous mode [ 73.536048][ T30] audit: type=1400 audit(1759154029.739:88): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.558961][ T30] audit: type=1400 audit(1759154029.749:89): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.ZIOBgi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.590983][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.609729][ T5852] veth1_macvtap: entered promiscuous mode [ 73.610988][ T30] audit: type=1400 audit(1759154029.759:90): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.619539][ T5842] veth1_macvtap: entered promiscuous mode [ 73.646525][ T30] audit: type=1400 audit(1759154029.759:91): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.ZIOBgi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.677854][ T30] audit: type=1400 audit(1759154029.759:92): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.ZIOBgi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.689691][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.712701][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.713068][ T30] audit: type=1400 audit(1759154029.769:93): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.725996][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.743718][ T30] audit: type=1400 audit(1759154029.789:94): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.773076][ T30] audit: type=1400 audit(1759154029.789:95): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="gadgetfs" ino=7908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.823148][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.863006][ T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.889662][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.900280][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.903415][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.920036][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.936906][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.947374][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.949667][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.978889][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.022678][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.082914][ T77] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.092519][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.196008][ T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.209094][ T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.293544][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.311171][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.544766][ T5861] Bluetooth: hci1: command tx timeout [ 74.624259][ T5861] Bluetooth: hci3: command tx timeout [ 74.629799][ T5856] Bluetooth: hci0: command tx timeout [ 74.642483][ T5856] Bluetooth: hci2: command tx timeout [ 74.648315][ T5856] Bluetooth: hci4: command tx timeout [ 74.800693][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.827808][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.839572][ T5976] usb usb7: usbfs: process 5976 (syz.0.6) did not claim interface 0 before use [ 74.863431][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.884371][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.142137][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.164989][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.734618][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 75.844610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.853984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.863137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.038683][ T5999] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 76.190031][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 76.237265][ T6010] veth0: entered promiscuous mode [ 76.265926][ T6010] veth0: left promiscuous mode [ 76.525528][ T6023] veth1_macvtap: left promiscuous mode [ 76.547236][ T6023] macsec0: entered promiscuous mode [ 76.598860][ T6025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.624801][ T5170] Bluetooth: hci1: command tx timeout [ 76.744328][ T5170] Bluetooth: hci3: command tx timeout [ 76.749804][ T5170] Bluetooth: hci4: command tx timeout [ 76.755380][ T5170] Bluetooth: hci2: command tx timeout [ 76.760775][ T5170] Bluetooth: hci0: command tx timeout [ 77.001102][ T6042] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 77.001102][ T6042] program syz.2.26 not setting count and/or reply_len properly [ 77.194194][ T6049] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 77.211140][ T6049] netlink: 144 bytes leftover after parsing attributes in process `syz.4.33'. [ 77.256632][ T6049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.33'. [ 77.335762][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 77.335777][ T30] audit: type=1400 audit(1759154033.569:155): avc: denied { ioctl } for pid=6050 comm="syz.0.34" path="socket:[8566]" dev="sockfs" ino=8566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.487057][ T6034] mmap: syz.3.27 (6034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.566426][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 77.664602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.796677][ T30] audit: type=1400 audit(1759154033.809:156): avc: denied { write } for pid=6026 comm="syz.3.27" name="fib_trie" dev="proc" ino=4026532826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 77.864343][ T30] audit: type=1400 audit(1759154034.089:157): avc: denied { allowed } for pid=6054 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.961339][ T30] audit: type=1400 audit(1759154034.089:158): avc: denied { create } for pid=6054 comm="syz.0.36" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.074293][ T6061] netlink: 1976 bytes leftover after parsing attributes in process `syz.4.39'. [ 78.132504][ T30] audit: type=1400 audit(1759154034.089:159): avc: denied { map } for pid=6054 comm="syz.0.36" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.256840][ T30] audit: type=1400 audit(1759154034.089:160): avc: denied { read write } for pid=6054 comm="syz.0.36" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.488354][ T30] audit: type=1400 audit(1759154034.169:161): avc: denied { unlink } for pid=5851 comm="syz-executor" name="file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.511186][ T30] audit: type=1400 audit(1759154034.529:162): avc: denied { ioctl } for pid=6067 comm="syz.2.41" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.655053][ T6072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6072 comm=syz.3.42 [ 78.669892][ T6072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.043612][ T6078] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 79.043612][ T6078] program syz.4.45 not setting count and/or reply_len properly [ 79.494319][ T30] audit: type=1400 audit(1759154035.739:163): avc: denied { create } for pid=6086 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.664055][ T30] audit: type=1400 audit(1759154035.779:164): avc: denied { connect } for pid=6086 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.089078][ T6100] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 80.114592][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 80.158838][ T5855] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.225277][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.294317][ T6110] Invalid ELF header type: 0 != 1 [ 80.324386][ T5855] usb 5-1: Using ep0 maxpacket: 16 [ 80.339368][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.359045][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.394063][ T5855] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 80.420315][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.431867][ T10] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 80.450799][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.468218][ T5855] usb 5-1: config 0 descriptor?? [ 80.482931][ T10] usb 1-1: Product: syz [ 80.570835][ T10] usb 1-1: Manufacturer: syz [ 80.570864][ T10] usb 1-1: SerialNumber: syz [ 80.582787][ T10] usb 1-1: config 0 descriptor?? [ 80.597499][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 80.638319][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.649763][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 80.649826][ T10] usb 1-1: media controller created [ 80.670463][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.816588][ T6093] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 80.863665][ T6124] process 'syz.1.64' launched '/dev/fd/6' with NULL argv: empty string added [ 80.922474][ T10] DVB: Unable to find symbol mt352_attach() [ 80.959704][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 80.970669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 80.979289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 80.992405][ T10] DVB: Unable to find symbol nxt6000_attach() [ 81.000998][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 81.010637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 81.019203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 81.028022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 81.036952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.059126][ T5855] holtek_mouse 0003:04D9:A081.0001: item fetching failed at offset 5/8 [ 81.080360][ T5855] holtek_mouse 0003:04D9:A081.0001: hid parse failed: -22 [ 81.092016][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 81.103758][ T5855] holtek_mouse 0003:04D9:A081.0001: probe with driver holtek_mouse failed with error -22 [ 81.128307][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 81.171148][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 81.221898][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 81.246908][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 81.272373][ T5959] usb 5-1: USB disconnect, device number 2 [ 81.279239][ T10] usb 1-1: USB disconnect, device number 2 [ 81.440544][ T9] cfg80211: failed to load regulatory.db [ 81.598784][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 81.634108][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.814160][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 81.844206][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.881879][ T5906] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 81.893723][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.932333][ T5906] usb 3-1: config 0 descriptor?? [ 81.970171][ T5906] xbox_remote_probe: Unexpected endpoint_in [ 81.995434][ T5906] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 82.036765][ T6151] warning: `syz.1.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.165919][ T5906] usb 3-1: USB disconnect, device number 2 [ 82.645504][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 82.645539][ T30] audit: type=1400 audit(1759154044.531:184): avc: denied { setopt } for pid=6152 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.989040][ T30] audit: type=1400 audit(1759154044.531:185): avc: denied { read } for pid=6152 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.477395][ T30] audit: type=1400 audit(1759154045.731:186): avc: denied { ioctl } for pid=6164 comm="syz.1.81" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9515 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.533984][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 83.701048][ T30] audit: type=1400 audit(1759154045.951:187): avc: denied { create } for pid=6173 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.809458][ T30] audit: type=1400 audit(1759154045.971:188): avc: denied { bind } for pid=6173 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.111766][ T30] audit: type=1400 audit(1759154045.971:189): avc: denied { setopt } for pid=6173 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.203501][ T30] audit: type=1400 audit(1759154045.981:190): avc: denied { accept } for pid=6173 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.237401][ T6189] evm: overlay not supported [ 84.300176][ T30] audit: type=1400 audit(1759154045.981:191): avc: denied { write } for pid=6173 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.420775][ T30] audit: type=1400 audit(1759154046.031:192): avc: denied { create } for pid=6177 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.440085][ T30] audit: type=1400 audit(1759154046.031:193): avc: denied { bind } for pid=6177 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.538164][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 84.829957][ T6200] Invalid ELF header type: 0 != 1 [ 86.133620][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 86.147214][ T6229] ======================================================= [ 86.147214][ T6229] WARNING: The mand mount option has been deprecated and [ 86.147214][ T6229] and is ignored by this kernel. Remove the mand [ 86.147214][ T6229] option from the mount to silence this warning. [ 86.147214][ T6229] ======================================================= [ 87.005380][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 87.160085][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 88.288022][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 88.288052][ T30] audit: type=1400 audit(1759154050.511:205): avc: denied { create } for pid=6255 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.714955][ T30] audit: type=1400 audit(1759154050.521:206): avc: denied { connect } for pid=6255 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.757703][ T30] audit: type=1400 audit(1759154050.531:207): avc: denied { write } for pid=6255 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.778564][ T30] audit: type=1400 audit(1759154050.651:208): avc: denied { write } for pid=6257 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.798553][ T30] audit: type=1400 audit(1759154050.671:209): avc: denied { create } for pid=6257 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 88.944327][ T30] audit: type=1400 audit(1759154050.671:210): avc: denied { setopt } for pid=6257 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.052728][ T6271] netlink: 'syz.4.119': attribute type 11 has an invalid length. [ 89.205128][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 89.296563][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.413857][ T30] audit: type=1400 audit(1759154051.661:211): avc: denied { write } for pid=6288 comm="syz.0.130" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.438549][ T5861] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 89.457270][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 89.462135][ T30] audit: type=1400 audit(1759154051.661:212): avc: denied { open } for pid=6288 comm="syz.0.130" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.492259][ T30] audit: type=1400 audit(1759154051.661:213): avc: denied { ioctl } for pid=6288 comm="syz.0.130" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.520061][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.528789][ T10] usb 3-1: config 0 has no interface number 0 [ 89.537064][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 89.547481][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.892397][ T10] usb 3-1: config 0 descriptor?? [ 89.937328][ T10] usb 3-1: selecting invalid altsetting 1 [ 89.959571][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 89.966445][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 90.517505][ T10] DVB: Unable to find symbol cx22700_attach() [ 90.603535][ T30] audit: type=1400 audit(1759154052.841:214): avc: denied { read } for pid=6309 comm="syz.1.134" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.060850][ T10] DVB: Unable to find symbol tda10046_attach() [ 91.082570][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 91.120903][ T10] usb 3-1: USB disconnect, device number 3 [ 91.878639][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 93.813178][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 93.813211][ T30] audit: type=1400 audit(1759154055.691:222): avc: denied { execute } for pid=6344 comm="syz.2.145" path="/33/cpu.stat" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.841920][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.929574][ T30] audit: type=1400 audit(1759154056.111:223): avc: denied { ioctl } for pid=6349 comm="syz.1.147" path="socket:[9092]" dev="sockfs" ino=9092 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.142396][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 94.225789][ T30] audit: type=1400 audit(1759154056.331:224): avc: denied { read } for pid=6353 comm="syz.4.150" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.249102][ T30] audit: type=1400 audit(1759154056.331:225): avc: denied { open } for pid=6353 comm="syz.4.150" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.272638][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.311463][ T30] audit: type=1400 audit(1759154056.341:226): avc: denied { ioctl } for pid=6353 comm="syz.4.150" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.337423][ T30] audit: type=1400 audit(1759154056.461:227): avc: denied { sys_module } for pid=6354 comm="syz.0.148" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.358304][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.801256][ T30] audit: type=1400 audit(1759154056.641:228): avc: denied { create } for pid=6353 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.886413][ T30] audit: type=1400 audit(1759154056.661:229): avc: denied { write } for pid=6353 comm="syz.4.150" path="socket:[10195]" dev="sockfs" ino=10195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.983634][ T6373] netlink: 'syz.4.155': attribute type 21 has an invalid length. [ 94.998310][ T6373] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.165362][ T30] audit: type=1400 audit(1759154057.421:230): avc: denied { create } for pid=6376 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.380691][ T6385] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 95.551745][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 95.641013][ T30] audit: type=1400 audit(1759154057.441:231): avc: denied { setopt } for pid=6376 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.298089][ T6404] random: crng reseeded on system resumption [ 98.399021][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 99.024659][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 99.024673][ T30] audit: type=1400 audit(1759154061.281:243): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 99.379521][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 99.388186][ T6445] Zero length message leads to an empty skb [ 99.452030][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 100.004370][ T30] audit: type=1400 audit(1759154062.251:244): avc: denied { read } for pid=6450 comm="syz.1.182" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 100.064609][ T30] audit: type=1400 audit(1759154062.251:245): avc: denied { open } for pid=6450 comm="syz.1.182" path="/35/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 100.126963][ T30] audit: type=1400 audit(1759154062.381:246): avc: denied { create } for pid=6453 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.244063][ T5959] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.336497][ T6471] capability: warning: `syz.2.191' uses 32-bit capabilities (legacy support in use) [ 100.364261][ T976] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.415144][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 100.425039][ T5959] usb 5-1: config 1 interface 0 has no altsetting 0 [ 100.436403][ T5959] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c05, bcdDevice= 0.40 [ 100.464218][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.473354][ T5959] usb 5-1: Product: ᰊ [ 100.478396][ T5959] usb 5-1: Manufacturer: ꋂ쇃넨ᗱᘊ၈嶑薆㝗嫢⠙⺝뾉쮈斫纤崍ᓖ圫㽶ኺ끷楟䔛ⶇ❅⥙᥀锈䪒秎㌏勝搑㈺⠩ꚯ瀋㤈 [ 100.532697][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 100.552545][ T976] usb 1-1: config index 0 descriptor too short (expected 2084, got 36) [ 100.562547][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.577407][ T976] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 100.592666][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.610593][ T976] usb 1-1: config 0 descriptor?? [ 100.658950][ T976] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 100.785872][ T5959] usbhid 5-1:1.0: can't add hid device: -71 [ 100.812171][ T5959] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 100.840340][ T5959] usb 5-1: USB disconnect, device number 3 [ 101.846759][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 103.168659][ T5855] usb 1-1: USB disconnect, device number 3 [ 104.646327][ T6582] netlink: 'syz.0.230': attribute type 5 has an invalid length. [ 105.934606][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 105.960489][ T30] audit: type=1400 audit(1759154068.211:247): avc: denied { listen } for pid=6632 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.488469][ T5861] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 106.970367][ T5861] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 107.047857][ T30] audit: type=1400 audit(1759154069.301:248): avc: denied { getattr } for pid=6668 comm="syz.1.267" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=11758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.354551][ T30] audit: type=1400 audit(1759154069.591:249): avc: denied { mount } for pid=6684 comm="syz.3.275" name="/" dev="hugetlbfs" ino=10745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 107.446851][ T5861] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 108.186611][ T6720] kvm: pic: non byte read [ 108.191277][ T6720] kvm: pic: non byte read [ 108.213494][ T6720] kvm: pic: non byte read [ 108.221113][ T6720] kvm: pic: non byte read [ 108.234298][ T6720] kvm: pic: non byte read [ 108.238754][ T6720] kvm: pic: non byte read [ 108.249235][ T6720] kvm: pic: non byte read [ 108.253674][ T6720] kvm: pic: non byte read [ 108.258735][ T6720] kvm: pic: non byte read [ 108.263415][ T6720] kvm: pic: non byte read [ 108.804918][ T30] audit: type=1400 audit(1759154071.051:250): avc: denied { read } for pid=6733 comm="syz.1.293" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.506298][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 109.527417][ T6766] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 109.527417][ T6766] program syz.3.299 not setting count and/or reply_len properly [ 109.692333][ T6766] bond1: entered allmulticast mode [ 111.355740][ T30] audit: type=1400 audit(1759154073.571:251): avc: denied { sqpoll } for pid=6814 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 112.163135][ T30] audit: type=1400 audit(1759154074.411:252): avc: denied { ioctl } for pid=6824 comm="syz.1.326" path="socket:[12340]" dev="sockfs" ino=12340 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.333920][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.330'. [ 112.483406][ T6835] futex_wake_op: syz.3.331 tries to shift op by 36; fix this program [ 113.203334][ T30] audit: type=1400 audit(1759154075.451:253): avc: denied { watch } for pid=6846 comm="syz.4.338" path="/55" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.409123][ T6859] netlink: 'syz.3.341': attribute type 15 has an invalid length. [ 113.496208][ T30] audit: type=1400 audit(1759154075.741:254): avc: denied { write } for pid=6861 comm="syz.0.343" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 113.912687][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 114.307958][ T30] audit: type=1326 audit(1759154076.561:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 114.637946][ T30] audit: type=1326 audit(1759154076.591:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 114.792743][ T30] audit: type=1326 audit(1759154076.591:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 114.845771][ T30] audit: type=1326 audit(1759154076.591:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 114.897493][ T30] audit: type=1326 audit(1759154076.591:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 114.969088][ T30] audit: type=1326 audit(1759154076.601:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 115.191527][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 115.447992][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 117.625023][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 117.750717][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 117.750732][ T30] audit: type=1400 audit(1759154080.001:274): avc: denied { create } for pid=6972 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.852482][ T30] audit: type=1400 audit(1759154080.101:275): avc: denied { listen } for pid=6972 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.264037][ T30] audit: type=1326 audit(1759154081.511:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0cd8eec9 code=0x7ffc0000 [ 119.409158][ T30] audit: type=1326 audit(1759154081.511:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0cd8eec9 code=0x7ffc0000 [ 119.432975][ T30] audit: type=1326 audit(1759154081.511:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0cd8eec9 code=0x7ffc0000 [ 119.456355][ T30] audit: type=1326 audit(1759154081.511:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7eff0cd8eec9 code=0x7ffc0000 [ 119.479515][ T30] audit: type=1326 audit(1759154081.511:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0cd8eec9 code=0x7ffc0000 [ 119.503593][ T30] audit: type=1326 audit(1759154081.511:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0cd8eec9 code=0x7ffc0000 [ 119.560822][ T30] audit: type=1326 audit(1759154081.511:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff0cd8eec9 code=0x7ffc0000 [ 119.595226][ T30] audit: type=1326 audit(1759154081.511:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7eff0cd8eec9 code=0x7ffc0000 [ 119.854667][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.025860][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.039628][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.058339][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.068748][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.092081][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.101609][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.119050][ T9] usb 4-1: Manufacturer: syz [ 120.127700][ T9] usb 4-1: config 0 descriptor?? [ 120.697729][ T9] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 120.763288][ T9] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 121.220044][ T5906] usb 4-1: USB disconnect, device number 2 [ 121.368540][ T7036] fido_id[7036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 123.357499][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 123.357514][ T30] audit: type=1326 audit(1759154085.611:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 123.482623][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.436'. [ 123.513012][ T30] audit: type=1326 audit(1759154085.641:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 123.591616][ T30] audit: type=1326 audit(1759154085.641:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 123.630769][ T30] audit: type=1326 audit(1759154085.641:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 123.746026][ T30] audit: type=1326 audit(1759154085.641:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 123.930455][ T30] audit: type=1326 audit(1759154085.641:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 123.991008][ T30] audit: type=1326 audit(1759154085.641:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 124.171708][ T30] audit: type=1326 audit(1759154085.651:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 124.242165][ T30] audit: type=1326 audit(1759154085.651:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 124.270630][ T30] audit: type=1326 audit(1759154085.671:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 125.385608][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 125.422895][ T7145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7145 comm=syz.1.454 [ 126.116883][ T7163] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.638285][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 127.113633][ T7203] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 127.172484][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 127.355538][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 127.559595][ T7216] bond1 (unregistering): Released all slaves [ 128.085356][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 128.421442][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 128.421457][ T30] audit: type=1326 audit(1759154090.671:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 128.477979][ T30] audit: type=1326 audit(1759154090.671:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 128.609721][ T30] audit: type=1326 audit(1759154090.681:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 128.679470][ T30] audit: type=1326 audit(1759154090.681:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 128.769531][ T30] audit: type=1326 audit(1759154090.711:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 128.862696][ T30] audit: type=1326 audit(1759154090.711:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 128.896767][ T7276] Invalid ELF header type: 0 != 1 [ 129.095954][ T30] audit: type=1326 audit(1759154090.711:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 129.157988][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.208839][ T30] audit: type=1326 audit(1759154090.721:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 129.319028][ T30] audit: type=1326 audit(1759154090.721:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 129.353341][ T5906] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 129.382298][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.414058][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.436699][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 129.473273][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 129.512935][ T5906] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 129.545706][ T5906] usb 4-1: Manufacturer: syz [ 129.569949][ T5906] usb 4-1: config 0 descriptor?? [ 129.595881][ T30] audit: type=1400 audit(1759154091.851:333): avc: denied { create } for pid=7290 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.837032][ T7297] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 129.837032][ T7297] program syz.2.520 not setting count and/or reply_len properly [ 129.992310][ T7297] bond1: entered allmulticast mode [ 130.263317][ T5906] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 130.314308][ T5906] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 130.510991][ T7307] Invalid ELF header type: 0 != 1 [ 130.556021][ T5906] usb 4-1: USB disconnect, device number 3 [ 130.625611][ T7305] fido_id[7305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 131.309786][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.527'. [ 132.627860][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.642841][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.159879][ T7382] netlink: 44 bytes leftover after parsing attributes in process `syz.3.555'. [ 134.618604][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 134.632773][ T7393] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 134.632773][ T7393] program syz.1.557 not setting count and/or reply_len properly [ 134.789757][ T7393] bond1: entered allmulticast mode [ 135.305568][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 135.305583][ T30] audit: type=1400 audit(1759154097.561:345): avc: denied { getopt } for pid=7399 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.409347][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 136.719799][ T30] audit: type=1400 audit(1759154098.971:346): avc: denied { watch_reads } for pid=7434 comm="syz.1.577" path="/136" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.252870][ T7466] bond2 (unregistering): Released all slaves [ 138.650852][ T30] audit: type=1326 audit(1759154100.891:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 138.674068][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.730664][ T30] audit: type=1326 audit(1759154100.891:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 138.753943][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.826758][ T30] audit: type=1326 audit(1759154100.891:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 138.913593][ T30] audit: type=1326 audit(1759154100.891:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 138.936855][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.004149][ T30] audit: type=1326 audit(1759154100.891:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 139.093467][ T30] audit: type=1326 audit(1759154100.891:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 139.179559][ T30] audit: type=1326 audit(1759154100.891:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 139.278539][ T30] audit: type=1326 audit(1759154100.891:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 139.699132][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 139.710312][ T7501] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.710312][ T7501] program syz.1.603 not setting count and/or reply_len properly [ 139.768708][ T7501] bond2: entered allmulticast mode [ 140.943669][ T7551] Invalid ELF header type: 0 != 1 [ 141.085760][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 141.085778][ T30] audit: type=1400 audit(1759154103.341:437): avc: denied { watch } for pid=7557 comm="syz.1.630" path="/151/file0" dev="tmpfs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.174709][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 143.939528][ T30] audit: type=1400 audit(1759154106.191:438): avc: denied { mounton } for pid=7636 comm="syz.3.667" path="/proc/332/task" dev="proc" ino=17864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 144.106377][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 144.274609][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 145.068638][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 145.082809][ T7687] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 145.082809][ T7687] program syz.4.684 not setting count and/or reply_len properly [ 145.296395][ T7687] bond1: entered allmulticast mode [ 145.412983][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 145.450283][ T30] audit: type=1400 audit(1759154107.681:439): avc: denied { setopt } for pid=7690 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.538775][ T7695] bond2 (unregistering): Released all slaves [ 146.077606][ T7734] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 146.175953][ T7730] netlink: 2 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.254903][ T7730] netlink: 2 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.295054][ T7730] netlink: 2 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.332687][ T7730] netlink: 2 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.363852][ T7730] netlink: 2 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.373800][ T7730] netlink: 2 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.382945][ T7730] netlink: 2 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.413396][ T7730] netlink: 2 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.744028][ T30] audit: type=1400 audit(1759154108.991:440): avc: denied { mounton } for pid=7763 comm="syz.4.722" path="/117/file0" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 147.130247][ T30] audit: type=1400 audit(1759154109.381:441): avc: denied { write } for pid=7775 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.842246][ T30] audit: type=1400 audit(1759154110.091:442): avc: denied { mount } for pid=7800 comm="syz.4.736" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 147.926409][ T30] audit: type=1400 audit(1759154110.151:443): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.136757][ T7804] bond3 (unregistering): Released all slaves [ 148.244443][ T30] audit: type=1400 audit(1759154110.491:444): avc: denied { relabelfrom } for pid=7810 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.371470][ T30] audit: type=1400 audit(1759154110.491:445): avc: denied { relabelto } for pid=7810 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 149.174208][ T30] audit: type=1400 audit(1759154111.401:446): avc: denied { connect } for pid=7837 comm="syz.2.750" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.891728][ T7864] syz.4.762 uses obsolete (PF_INET,SOCK_PACKET) [ 149.930236][ T30] audit: type=1400 audit(1759154112.181:447): avc: denied { bind } for pid=7863 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.178158][ T7874] __nla_validate_parse: 18 callbacks suppressed [ 150.178175][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 150.940149][ T7894] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.523273][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 152.401271][ T30] audit: type=1400 audit(1759154114.651:448): avc: denied { read } for pid=7949 comm="syz.3.800" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.431986][ T30] audit: type=1400 audit(1759154114.651:449): avc: denied { open } for pid=7949 comm="syz.3.800" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.460927][ T30] audit: type=1400 audit(1759154114.651:450): avc: denied { ioctl } for pid=7949 comm="syz.3.800" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.514682][ T5861] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 154.144609][ T7986] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 154.164207][ T5861] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 154.983796][ T30] audit: type=1400 audit(1759154117.231:451): avc: denied { execute } for pid=8040 comm="syz.2.839" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 155.193866][ T30] audit: type=1400 audit(1759154117.441:452): avc: denied { append } for pid=8049 comm="syz.2.840" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.184187][ T30] audit: type=1800 audit(1759154118.411:453): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.841" name="/" dev="fuse" ino=9 res=0 errno=0 [ 156.813307][ T8101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.860'. [ 157.161455][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 157.759274][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 157.769018][ T8142] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 157.769018][ T8142] program syz.2.878 not setting count and/or reply_len properly [ 157.826225][ T8142] bond2: entered allmulticast mode [ 157.869883][ T30] audit: type=1326 audit(1759154120.101:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 157.907722][ T30] audit: type=1326 audit(1759154120.121:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 157.931048][ T30] audit: type=1326 audit(1759154120.121:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 157.954516][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.960572][ T30] audit: type=1326 audit(1759154120.121:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 157.983891][ T30] audit: type=1326 audit(1759154120.121:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 158.007088][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.029874][ T30] audit: type=1326 audit(1759154120.121:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 158.081331][ T30] audit: type=1326 audit(1759154120.121:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 158.111582][ T30] audit: type=1326 audit(1759154120.121:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 158.146364][ T30] audit: type=1326 audit(1759154120.121:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 158.173157][ T30] audit: type=1326 audit(1759154120.121:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7ffc0000 [ 158.586826][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 158.598212][ T8179] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 158.598212][ T8179] program syz.3.893 not setting count and/or reply_len properly [ 158.646052][ T8179] bond2: entered allmulticast mode [ 158.807472][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 158.825613][ T8184] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 158.825613][ T8184] program syz.2.890 not setting count and/or reply_len properly [ 159.031910][ T8184] bond3: entered allmulticast mode [ 160.167295][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'. [ 161.768842][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 162.475859][ T8319] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 163.559728][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 163.929601][ T8374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8374 comm=syz.0.979 [ 164.049200][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 164.120188][ T8382] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 164.120188][ T8382] program syz.2.977 not setting count and/or reply_len properly [ 164.186836][ T8382] bond4: entered allmulticast mode [ 165.046945][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 165.046965][ T30] audit: type=1400 audit(1759154128.297:539): avc: denied { write } for pid=8413 comm="syz.0.996" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.566452][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'. [ 165.802814][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 165.833713][ T8444] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 165.833713][ T8444] program syz.0.1003 not setting count and/or reply_len properly [ 165.980563][ T8444] bond1: entered allmulticast mode [ 166.837004][ T8482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8482 comm=syz.4.1023 [ 166.907001][ T30] audit: type=1400 audit(1759154130.157:540): avc: denied { setopt } for pid=8483 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.671307][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1036'. [ 168.021999][ T30] audit: type=1400 audit(1759154131.267:541): avc: denied { create } for pid=8504 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.091586][ T30] audit: type=1400 audit(1759154131.267:542): avc: denied { connect } for pid=8504 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.167065][ T30] audit: type=1400 audit(1759154131.267:543): avc: denied { bind } for pid=8504 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.242119][ T30] audit: type=1400 audit(1759154131.267:544): avc: denied { setopt } for pid=8504 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.323626][ T30] audit: type=1400 audit(1759154131.267:545): avc: denied { write } for pid=8504 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.391444][ T30] audit: type=1400 audit(1759154131.267:546): avc: denied { read } for pid=8504 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.967116][ T8542] netlink: 'syz.0.1046': attribute type 1 has an invalid length. [ 169.020338][ T8542] bond2: entered promiscuous mode [ 169.026866][ T8542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.090470][ T8542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.128538][ T8542] bond3: entered promiscuous mode [ 169.160121][ T8542] bond2: (slave bond3): Enslaving as an active interface with an up link [ 169.228730][ T8545] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 169.269525][ T30] audit: type=1400 audit(1759154132.517:547): avc: denied { read } for pid=8548 comm="syz.2.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.280410][ T8545] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 169.321959][ T8545] bond2: (slave ipvlan2): Error -95 calling set_mac_address [ 169.613512][ T30] audit: type=1400 audit(1759154132.857:548): avc: denied { read write } for pid=8557 comm="syz.0.1053" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.714295][ T8562] tmpfs: Bad value for 'mpol' [ 170.005520][ T8574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.135305][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 170.135322][ T30] audit: type=1400 audit(1759154133.387:551): avc: denied { name_connect } for pid=8577 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 171.162111][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1063'. [ 172.627800][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 173.043562][ T8626] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 173.043562][ T8626] program syz.1.1080 not setting count and/or reply_len properly [ 173.191633][ T8626] bond3: entered allmulticast mode [ 173.354183][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.564149][ T976] usb 5-1: device descriptor read/64, error -71 [ 173.959087][ T976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.083591][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 174.095862][ T8637] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 174.095862][ T8637] program syz.1.1085 not setting count and/or reply_len properly [ 174.137945][ T976] usb 5-1: device descriptor read/64, error -71 [ 174.206519][ T8637] bond4: entered allmulticast mode [ 174.360257][ T976] usb usb5-port1: attempt power cycle [ 174.944588][ T976] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 175.006934][ T976] usb 5-1: device descriptor read/8, error -71 [ 175.155212][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 175.254049][ T976] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.346186][ T976] usb 5-1: device descriptor read/8, error -71 [ 175.464468][ T976] usb usb5-port1: unable to enumerate USB device [ 175.990254][ T8673] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 176.050624][ T8673] bond3: entered promiscuous mode [ 176.061733][ T8673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.248739][ T8675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.259140][ T8675] bond4: entered promiscuous mode [ 176.265316][ T8675] bond3: (slave bond4): Enslaving as an active interface with an up link [ 176.284433][ T8673] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.299984][ T8673] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 176.310669][ T8673] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 176.814975][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 176.912380][ T8696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.919963][ T8696] IPv6: NLM_F_CREATE should be set when creating new route [ 178.201098][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'. [ 178.409313][ T8735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1124'. [ 178.667428][ T30] audit: type=1400 audit(1759154141.907:552): avc: denied { read write } for pid=8750 comm="syz.0.1129" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.735443][ T30] audit: type=1400 audit(1759154141.907:553): avc: denied { open } for pid=8750 comm="syz.0.1129" path="/198/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.758904][ T30] audit: type=1400 audit(1759154142.007:554): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.779061][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.988862][ T30] audit: type=1400 audit(1759154142.227:555): avc: denied { execute_no_trans } for pid=8766 comm="syz.2.1137" path="/257/file0" dev="tmpfs" ino=1334 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 179.012343][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.698176][ T8788] fuse: Bad value for 'fd' [ 180.424075][ T5855] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 180.606775][ T5855] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.640000][ T5855] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.650849][ T5855] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.664830][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.696763][ T8817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 180.729091][ T5855] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.962903][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.967216][ T30] audit: type=1400 audit(1759154144.207:556): avc: denied { read write } for pid=8814 comm="syz.4.1154" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 180.995998][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.020485][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.040696][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.049367][ T30] audit: type=1400 audit(1759154144.207:557): avc: denied { open } for pid=8814 comm="syz.4.1154" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 181.079479][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.097013][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1165'. [ 181.247930][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 181.886520][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 181.896832][ T8867] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 181.896832][ T8867] program syz.3.1175 not setting count and/or reply_len properly [ 181.925882][ T8867] bond5: entered allmulticast mode [ 181.950208][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 183.089773][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 183.261127][ T5855] usb 5-1: USB disconnect, device number 8 [ 183.273141][ T8901] bond4 (unregistering): Released all slaves [ 183.524746][ T8920] veth0_to_bridge: entered promiscuous mode [ 183.581213][ T8918] veth0_to_bridge: left promiscuous mode [ 183.671386][ T8931] 9pnet: p9_errstr2errno: server reported unknown error  [ 183.749932][ T30] audit: type=1400 audit(1759154146.997:558): avc: denied { read } for pid=8936 comm="syz.3.1205" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 183.868776][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 185.002620][ T8989] bond4 (unregistering): Released all slaves [ 185.550081][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 185.560145][ T9025] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 185.560145][ T9025] program syz.4.1241 not setting count and/or reply_len properly [ 185.598664][ T9025] bond2: entered allmulticast mode [ 185.736040][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 185.746730][ T9032] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 185.746730][ T9032] program syz.3.1239 not setting count and/or reply_len properly [ 185.990180][ T9032] bond6: entered allmulticast mode [ 186.031929][ T9036] netlink: 572 bytes leftover after parsing attributes in process `syz.2.1246'. [ 186.101682][ T9040] overlayfs: failed to clone upperpath [ 186.377715][ T9052] fuse: Bad value for 'fd' [ 186.505736][ T9062] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1258'. [ 186.582671][ T30] audit: type=1400 audit(1759154149.827:559): avc: denied { accept } for pid=9065 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.180491][ T9078] loop7: detected capacity change from 0 to 7 [ 187.211720][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.225909][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.234432][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.249831][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.269427][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.277597][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.287331][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.315959][ T9078] ldm_validate_partition_table(): Disk read failed. [ 187.397024][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.429742][ T9087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 187.443288][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.529650][ T9087] bond5 (unregistering): Released all slaves [ 187.568320][ T9078] Buffer I/O error on dev loop7, logical block 0, async page read [ 187.648293][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 187.661764][ T9078] Dev loop7: unable to read RDB block 0 [ 187.670425][ T9078] loop7: unable to read partition table [ 187.677620][ T9078] loop7: partition table beyond EOD, truncated [ 187.683797][ T9078] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 187.735549][ T5219] ldm_validate_partition_table(): Disk read failed. [ 187.743521][ T5219] Dev loop7: unable to read RDB block 0 [ 187.762096][ T9097] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1272'. [ 187.796507][ T5219] loop7: unable to read partition table [ 187.802398][ T5219] loop7: partition table beyond EOD, truncated [ 187.941004][ T9103] netlink: 'syz.4.1274': attribute type 1 has an invalid length. [ 188.052397][ T9103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.138770][ T9114] vlan2: entered allmulticast mode [ 188.171635][ T9114] bond3: entered allmulticast mode [ 188.220855][ T9103] bond3: (slave gretap1): making interface the new active one [ 188.239525][ T9103] gretap1: entered allmulticast mode [ 188.265681][ T9103] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 189.471791][ T9144] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1288'. [ 189.945195][ T9164] veth0_to_bridge: entered promiscuous mode [ 189.975727][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 189.994325][ T9164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.097266][ T9164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.270784][ T9163] veth0_to_bridge: left promiscuous mode [ 190.491513][ T30] audit: type=1400 audit(1759154153.737:560): avc: denied { name_bind } for pid=9170 comm="syz.3.1298" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 190.753042][ T9179] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1300'. [ 190.908898][ T9183] netlink: 572 bytes leftover after parsing attributes in process `syz.3.1302'. [ 191.025963][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 191.026443][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 191.032031][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 191.040260][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 191.044662][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 192.031639][ T9208] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1312'. [ 192.187377][ T9210] netlink: 572 bytes leftover after parsing attributes in process `syz.0.1313'. [ 192.752514][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1322'. [ 192.912047][ T9232] bond4 (unregistering): Released all slaves [ 192.976719][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'. [ 192.991177][ T9241] netlink: 572 bytes leftover after parsing attributes in process `syz.3.1324'. [ 193.016105][ T9237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.092823][ T9237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.722713][ T9266] veth0_to_bridge: entered promiscuous mode [ 193.732751][ T9265] veth0_to_bridge: left promiscuous mode [ 194.046406][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 194.071738][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.078200][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.131670][ T9280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.262265][ T9285] netlink: 572 bytes leftover after parsing attributes in process `syz.0.1341'. [ 194.286808][ T9280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.314013][ T9287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1340'. [ 194.647198][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1347'. [ 194.728974][ T9299] bridge1: port 1(veth0_to_bond) entered blocking state [ 194.748586][ T9299] bridge1: port 1(veth0_to_bond) entered disabled state [ 194.771150][ T9299] veth0_to_bond: entered allmulticast mode [ 194.800403][ T9299] veth0_to_bond: entered promiscuous mode [ 195.018069][ T9318] netlink: 572 bytes leftover after parsing attributes in process `syz.2.1355'. [ 195.136342][ T9322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1356'. [ 195.153589][ T9321] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 195.223007][ T9321] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.451126][ T9321] vlan2: entered allmulticast mode [ 195.476717][ T9321] bond5: entered allmulticast mode [ 195.918092][ T9345] netlink: 572 bytes leftover after parsing attributes in process `syz.4.1366'. [ 196.959237][ T9402] veth0_to_bridge: entered promiscuous mode [ 196.993944][ T9400] veth0_to_bridge: left promiscuous mode [ 197.064387][ T30] audit: type=1400 audit(1759154160.297:561): avc: denied { getopt } for pid=9371 comm="syz.1.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 198.430177][ T9441] __nla_validate_parse: 2 callbacks suppressed [ 198.430197][ T9441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1407'. [ 198.887583][ T30] audit: type=1400 audit(1759154162.137:562): avc: denied { write } for pid=9452 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.918663][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'. [ 198.949960][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'. [ 199.055329][ T30] audit: type=1326 audit(1759154162.287:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 199.154386][ T30] audit: type=1326 audit(1759154162.297:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 199.206298][ T5856] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 199.216245][ T30] audit: type=1326 audit(1759154162.297:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790b18eec9 code=0x7ffc0000 [ 199.434428][ T9478] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1423'. [ 200.273696][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 200.553747][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 200.563537][ T9513] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 200.563537][ T9513] program syz.1.1438 not setting count and/or reply_len properly [ 200.612343][ T9513] bond6: entered allmulticast mode [ 201.422480][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1454'. [ 201.651812][ T9570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1458'. [ 201.805337][ T9570] bond4 (unregistering): Released all slaves [ 202.397511][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 202.531631][ T9614] netlink: 'syz.3.1476': attribute type 1 has an invalid length. [ 202.580064][ T9614] bond7: entered promiscuous mode [ 202.586129][ T9614] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.604138][ T9614] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.616612][ T9614] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 202.627418][ T9614] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 203.791084][ T9641] S{ɽ [ 203.791384][ T30] audit: type=1400 audit(1759154167.037:566): avc: denied { read write } for pid=9640 comm="syz.4.1489" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 203.834252][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 203.850487][ T30] audit: type=1400 audit(1759154167.037:567): avc: denied { open } for pid=9640 comm="syz.4.1489" path="/259/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 204.008424][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.026084][ T9651] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 204.051375][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 204.342357][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 204.376349][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 204.389717][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 204.410946][ T9] usb 4-1: Manufacturer: syz [ 204.434941][ T9] usb 4-1: config 0 descriptor?? [ 204.471068][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 205.372730][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 206.654146][ T9720] fuse: Bad value for 'fd' [ 206.716023][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1520'. [ 206.742659][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1520'. [ 206.802109][ T5964] usb 4-1: USB disconnect, device number 4 [ 207.200608][ T9746] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 207.219402][ T9749] fuse: Bad value for 'fd' [ 207.242798][ T9746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.278800][ T9746] vlan0: entered allmulticast mode [ 207.284585][ T9746] bond4: entered allmulticast mode [ 207.381476][ T9756] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 207.484796][ T9759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1535'. [ 207.584669][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.754457][ T9776] fuse: Bad value for 'fd' [ 207.768534][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.802033][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.823800][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 207.855209][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.881058][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.890264][ T9] usb 5-1: Manufacturer: syz [ 207.902056][ T9] usb 5-1: config 0 descriptor?? [ 207.919976][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 208.131522][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1549'. [ 208.408219][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 208.420865][ T9795] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 208.420865][ T9795] program syz.3.1551 not setting count and/or reply_len properly [ 208.497206][ T9795] bond8: entered allmulticast mode [ 208.620343][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1554'. [ 208.751728][ T9811] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 208.808917][ T9811] bond5: entered promiscuous mode [ 208.814573][ T9811] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.982906][ T9825] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 209.049580][ T30] audit: type=1400 audit(1759154172.287:568): avc: denied { accept } for pid=9822 comm="syz.3.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 209.347715][ T9839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1566'. [ 209.486758][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1569'. [ 210.006660][ T9858] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 210.374520][ T9] usb 5-1: USB disconnect, device number 9 [ 210.473405][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 210.896736][ T9870] bond9: entered allmulticast mode [ 211.253202][ T9883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1583'. [ 211.461154][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1588'. [ 211.706852][ T9902] 9pnet_fd: Insufficient options for proto=fd [ 211.714211][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 211.869101][ T9906] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 211.886619][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.894249][ T9906] bond6: entered promiscuous mode [ 211.902263][ T9906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.906014][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.925920][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 211.958062][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.971202][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.991369][ T10] usb 4-1: Manufacturer: syz [ 212.021884][ T10] usb 4-1: config 0 descriptor?? [ 212.049443][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 212.706203][ T9938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 213.009417][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1604'. [ 213.067641][ T9947] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 213.638006][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1617'. [ 213.959124][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 214.050475][ T9977] bond5: entered allmulticast mode [ 214.503571][ T5959] usb 4-1: USB disconnect, device number 5 [ 215.451638][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 215.491460][T10010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.551461][T10010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.724136][T10044] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 216.760848][T10044] bond6: entered promiscuous mode [ 216.766567][T10044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.805536][T10044] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 216.822441][T10044] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 216.836615][T10044] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 217.171479][T10057] syz.1.1656: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.187904][T10057] CPU: 1 UID: 0 PID: 10057 Comm: syz.1.1656 Not tainted syzkaller #0 PREEMPT(full) [ 217.187931][T10057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.187943][T10057] Call Trace: [ 217.187949][T10057] [ 217.187956][T10057] dump_stack_lvl+0x16c/0x1f0 [ 217.187984][T10057] warn_alloc+0x248/0x3a0 [ 217.188006][T10057] ? __pfx_warn_alloc+0x10/0x10 [ 217.188023][T10057] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.188057][T10057] ? kasan_save_stack+0x42/0x60 [ 217.188078][T10057] ? kasan_save_stack+0x33/0x60 [ 217.188094][T10057] ? kasan_save_track+0x14/0x30 [ 217.188112][T10057] ? xskq_create+0x52/0x1d0 [ 217.188132][T10057] ? xsk_setsockopt+0x74e/0x9a0 [ 217.188149][T10057] ? do_sock_setsockopt+0xf3/0x1d0 [ 217.188177][T10057] ? xskq_create+0xfb/0x1d0 [ 217.188197][T10057] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 217.188237][T10057] ? xskq_create+0xfb/0x1d0 [ 217.188263][T10057] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.188299][T10057] ? xskq_create+0xfb/0x1d0 [ 217.188319][T10057] vmalloc_user_noprof+0x9e/0xe0 [ 217.188346][T10057] ? xskq_create+0xfb/0x1d0 [ 217.188368][T10057] xskq_create+0xfb/0x1d0 [ 217.188391][T10057] xsk_setsockopt+0x74e/0x9a0 [ 217.188412][T10057] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.188430][T10057] ? find_held_lock+0x2b/0x80 [ 217.188458][T10057] ? selinux_socket_setsockopt+0x6a/0x80 [ 217.188482][T10057] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.188501][T10057] do_sock_setsockopt+0xf3/0x1d0 [ 217.188531][T10057] __sys_setsockopt+0x1a0/0x230 [ 217.188558][T10057] __x64_sys_setsockopt+0xbd/0x160 [ 217.188578][T10057] ? do_syscall_64+0x91/0x4e0 [ 217.188603][T10057] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.188626][T10057] do_syscall_64+0xcd/0x4e0 [ 217.188652][T10057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.188670][T10057] RIP: 0033:0x7eff0cd8eec9 [ 217.188684][T10057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.188702][T10057] RSP: 002b:00007eff0dc8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.188719][T10057] RAX: ffffffffffffffda RBX: 00007eff0cfe5fa0 RCX: 00007eff0cd8eec9 [ 217.188731][T10057] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 217.188741][T10057] RBP: 00007eff0ce11f91 R08: 0000000000000004 R09: 0000000000000000 [ 217.188752][T10057] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 217.188763][T10057] R13: 00007eff0cfe6038 R14: 00007eff0cfe5fa0 R15: 00007ffe7f096278 [ 217.188788][T10057] [ 217.188866][T10057] Mem-Info: [ 217.477306][T10057] active_anon:26409 inactive_anon:0 isolated_anon:0 [ 217.477306][T10057] active_file:19956 inactive_file:40940 isolated_file:0 [ 217.477306][T10057] unevictable:768 dirty:282 writeback:0 [ 217.477306][T10057] slab_reclaimable:12263 slab_unreclaimable:100461 [ 217.477306][T10057] mapped:30281 shmem:19855 pagetables:1240 [ 217.477306][T10057] sec_pagetables:0 bounce:0 [ 217.477306][T10057] kernel_misc_reclaimable:0 [ 217.477306][T10057] free:1271975 free_pcp:22730 free_cma:0 [ 217.566414][T10057] Node 0 active_anon:98836kB inactive_anon:0kB active_file:79824kB inactive_file:163560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122724kB dirty:1128kB writeback:0kB shmem:70984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13108kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.602817][T10057] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.648079][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 217.658371][T10057] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.692746][T10057] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 217.699055][T10057] Node 0 DMA32 free:1180704kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104604kB inactive_anon:0kB active_file:79824kB inactive_file:162236kB unevictable:1536kB writepending:1204kB present:3129332kB managed:2539304kB mlocked:0kB bounce:0kB free_pcp:72156kB local_pcp:40080kB free_cma:0kB [ 217.784115][T10057] lowmem_reserve[]: 0 0 1 1 1 [ 217.808998][T10057] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 217.904133][T10057] lowmem_reserve[]: 0 0 0 0 0 [ 217.912684][T10072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1661'. [ 217.922345][T10057] Node 1 Normal free:3891840kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19808kB local_pcp:11616kB free_cma:0kB [ 217.999893][T10057] lowmem_reserve[]: 0 0 0 0 0 [ 218.057015][T10057] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.153262][T10057] Node 0 DMA32: 704*4kB (UM) 424*8kB (ME) 82*16kB (UM) 942*32kB (UME) 418*64kB (UM) 125*128kB (UME) 70*256kB (UME) 42*512kB (UM) 14*1024kB (ME) 7*2048kB (UM) 252*4096kB (M) = 1180704kB [ 218.296038][T10057] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 218.349636][T10057] Node 1 Normal: 218*4kB (UE) 55*8kB (UME) 52*16kB (UME) 67*32kB (UME) 25*64kB (UME) 7*128kB (UME) 2*256kB (M) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (UM) = 3891840kB [ 218.428427][T10057] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.904002][T10057] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.913321][T10057] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.030170][T10057] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.110892][T10057] 86702 total pagecache pages [ 219.150330][T10057] 0 pages in swap cache [ 219.177280][T10057] Free swap = 124996kB [ 219.201811][T10057] Total swap = 124996kB [ 219.256746][T10057] 2097051 pages RAM [ 219.260590][T10057] 0 pages HighMem/MovableOnly [ 219.286024][T10084] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 219.297102][T10057] 430263 pages reserved [ 219.301281][T10057] 0 pages cma reserved [ 219.361796][T10084] bond7: entered promiscuous mode [ 219.402786][T10084] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.926111][ T30] audit: type=1400 audit(1759154183.167:569): avc: denied { setopt } for pid=10108 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.955549][ T30] audit: type=1400 audit(1759154183.197:570): avc: denied { read } for pid=10108 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.124034][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.279032][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 220.290747][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 220.306104][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 220.315947][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 220.324311][ T9] usb 5-1: Manufacturer: syz [ 220.331185][ T9] usb 5-1: config 0 descriptor?? [ 220.346210][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 222.212691][T10152] netlink: 'syz.2.1687': attribute type 1 has an invalid length. [ 222.278836][T10152] bond8: entered promiscuous mode [ 222.291583][T10152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.349536][T10152] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.383825][T10152] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 222.419288][T10152] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 222.911019][ T10] usb 5-1: USB disconnect, device number 10 [ 223.009821][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'. [ 223.020980][T10165] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 223.020980][T10165] program syz.1.1690 not setting count and/or reply_len properly [ 223.177641][T10165] bond7: entered allmulticast mode [ 223.218858][T10168] capability: warning: `syz.4.1691' uses deprecated v2 capabilities in a way that may be insecure [ 225.187105][T10215] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 225.316129][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 225.409261][T10222] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 225.409261][T10222] program syz.3.1706 not setting count and/or reply_len properly [ 225.711642][T10215] 8021q: adding VLAN 0 to HW filter on device bond9 [ 225.733603][T10222] bond10: entered allmulticast mode [ 225.763108][T10219] bond9: (slave gretap1): making interface the new active one [ 225.790908][T10219] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 226.967109][T10250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.189050][T10258] kvm: MONITOR instruction emulated as NOP! [ 228.692384][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 228.886269][ T30] audit: type=1400 audit(1759154192.137:571): avc: denied { ioctl } for pid=10312 comm="syz.1.1740" path="mnt:[4026532809]" dev="nsfs" ino=4026532809 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 229.443538][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'. [ 229.612225][T10350] netlink: 'syz.1.1752': attribute type 1 has an invalid length. [ 229.661619][T10350] bond8: entered promiscuous mode [ 229.669312][T10350] 8021q: adding VLAN 0 to HW filter on device bond8 [ 229.737914][T10355] 8021q: adding VLAN 0 to HW filter on device bond9 [ 229.781872][T10355] bond8: (slave bond9): making interface the new active one [ 229.824112][T10355] bond9: entered promiscuous mode [ 229.830041][T10355] bond8: (slave bond9): Enslaving as an active interface with an up link [ 230.330984][T10375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.532961][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 230.610749][T10386] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 230.610749][T10386] program syz.1.1758 not setting count and/or reply_len properly [ 230.847625][T10386] bond10: entered allmulticast mode [ 231.271252][ T30] audit: type=1326 audit(1759154194.517:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b1b8eec9 code=0x7fc00000 [ 231.685853][T10426] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 231.791256][T10428] tmpfs: Bad value for 'mpol' [ 232.655077][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 233.207128][T10476] netlink: 'syz.4.1798': attribute type 1 has an invalid length. [ 233.242743][T10476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.962256][ T30] audit: type=1800 audit(1759154197.207:573): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1810" name="/" dev="9p" ino=2 res=0 errno=0 [ 234.061747][T10513] fuse: Bad value for 'fd' [ 235.196420][T10548] fuse: Bad value for 'fd' [ 235.620532][T10570] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1837'. [ 236.874280][T10612] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 236.892026][T10612] bond5: entered promiscuous mode [ 236.900265][T10612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.015535][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 237.029106][T10614] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 237.029106][T10614] program syz.3.1850 not setting count and/or reply_len properly [ 237.248317][T10614] bond11: entered allmulticast mode [ 237.338503][T10616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.346879][T10616] bond5: (slave bond6): making interface the new active one [ 237.354750][T10616] bond6: entered promiscuous mode [ 237.363028][T10616] bond5: (slave bond6): Enslaving as an active interface with an up link [ 237.710633][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 237.845664][T10648] netlink: 'syz.3.1864': attribute type 1 has an invalid length. [ 238.020264][T10658] netlink: 'syz.4.1868': attribute type 1 has an invalid length. [ 238.049168][T10658] bond7: entered promiscuous mode [ 238.059613][T10658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.081853][T10658] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.091682][T10658] bond7: (slave bond8): making interface the new active one [ 238.099049][T10658] bond8: entered promiscuous mode [ 238.104913][T10658] bond7: (slave bond8): Enslaving as an active interface with an up link [ 238.681935][T10698] netlink: 'syz.0.1882': attribute type 1 has an invalid length. [ 238.723165][T10698] bond9: entered promiscuous mode [ 238.728962][T10698] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.771022][T10704] 8021q: adding VLAN 0 to HW filter on device bond10 [ 238.782057][T10704] bond9: (slave bond10): making interface the new active one [ 238.793487][T10704] bond10: entered promiscuous mode [ 238.807324][T10704] bond9: (slave bond10): Enslaving as an active interface with an up link [ 239.814986][T10740] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1898'. [ 239.835052][T10739] netlink: 'syz.3.1897': attribute type 1 has an invalid length. [ 239.923172][T10739] bond12: entered promiscuous mode [ 239.929608][ T30] audit: type=1400 audit(1759154203.187:574): avc: denied { name_bind } for pid=10745 comm="syz.4.1900" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 239.967491][T10739] 8021q: adding VLAN 0 to HW filter on device bond12 [ 240.078649][T10743] 8021q: adding VLAN 0 to HW filter on device bond13 [ 240.096133][T10743] bond12: (slave bond13): making interface the new active one [ 240.128436][T10743] bond13: entered promiscuous mode [ 240.142553][T10743] bond12: (slave bond13): Enslaving as an active interface with an up link [ 240.223231][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1899'. [ 240.754477][ T30] audit: type=1400 audit(1759154203.997:575): avc: denied { bind } for pid=10781 comm="syz.3.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 240.833844][T10788] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 240.870113][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 242.061025][T10788] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 242.077381][T10794] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 242.140865][T10801] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 242.732948][ T30] audit: type=1400 audit(1759154205.977:576): avc: denied { read } for pid=10824 comm="syz.3.1927" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 242.781929][ T30] audit: type=1400 audit(1759154205.977:577): avc: denied { open } for pid=10824 comm="syz.3.1927" path="/364/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 242.830647][T10831] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.862142][T10831] block device autoloading is deprecated and will be removed. [ 243.781490][T10878] veth0_to_bridge: entered promiscuous mode [ 243.888509][T10877] veth0_to_bridge: left promiscuous mode [ 243.980518][T10885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.014318][T10888] netlink: 'syz.2.1950': attribute type 1 has an invalid length. [ 244.047334][T10888] 8021q: adding VLAN 0 to HW filter on device bond10 [ 244.072793][T10888] vlan2: entered allmulticast mode [ 244.078155][T10888] bond10: entered allmulticast mode [ 244.303647][T10897] kvm: pic: non byte write [ 244.346131][T10902] syzkaller0: entered promiscuous mode [ 244.352056][T10902] syzkaller0: entered allmulticast mode [ 244.506257][T10911] veth0_to_bridge: entered promiscuous mode [ 244.518444][T10913] netlink: 'syz.3.1961': attribute type 1 has an invalid length. [ 244.529399][T10907] veth0_to_bridge: left promiscuous mode [ 244.593219][T10913] 8021q: adding VLAN 0 to HW filter on device bond14 [ 244.617736][T10920] vlan2: entered allmulticast mode [ 244.623109][T10920] bond14: entered allmulticast mode [ 244.645528][T10922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.852885][ T30] audit: type=1400 audit(1759154208.097:578): avc: denied { checkpoint_restore } for pid=10935 comm="syz.3.1971" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.911671][ T30] audit: type=1400 audit(1759154208.147:579): avc: denied { bind } for pid=10936 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.965547][ T30] audit: type=1400 audit(1759154208.147:580): avc: denied { setopt } for pid=10936 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.973668][T10947] veth0_to_bridge: entered promiscuous mode [ 245.008571][T10950] 9pnet_fd: Insufficient options for proto=fd [ 245.071367][T10945] veth0_to_bridge: left promiscuous mode [ 245.115977][T10957] netlink: 'syz.2.1977': attribute type 1 has an invalid length. [ 245.156049][T10957] 8021q: adding VLAN 0 to HW filter on device bond11 [ 245.180355][T10957] vlan3: entered allmulticast mode [ 245.185873][T10957] bond11: entered allmulticast mode [ 245.241740][ T30] audit: type=1400 audit(1759154208.487:581): avc: denied { append } for pid=10962 comm="syz.1.1979" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 245.273619][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 245.616368][T10980] loop7: detected capacity change from 0 to 7 [ 245.696938][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.706165][ C1] buffer_io_error: 23 callbacks suppressed [ 245.706178][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.725207][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.734398][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.759247][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.768469][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.789221][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.796220][T10985] veth0_to_bridge: entered promiscuous mode [ 245.798442][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.812802][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.822002][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.823521][T10984] veth0_to_bridge: left promiscuous mode [ 245.831560][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.844944][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.858201][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.858229][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.858589][T10980] ldm_validate_partition_table(): Disk read failed. [ 245.862142][T10989] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 245.864125][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.864163][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.865080][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.865106][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.885694][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.885725][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.885943][T10980] Dev loop7: unable to read RDB block 0 [ 245.886476][T10980] loop7: unable to read partition table [ 245.886678][T10980] loop7: partition table beyond EOD, truncated [ 245.886711][T10980] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 246.086394][T10989] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.100381][T10991] vlan3: entered allmulticast mode [ 246.100406][T10991] bond9: entered allmulticast mode [ 246.434706][T11019] fuse: Bad value for 'fd' [ 246.508230][T11021] loop7: detected capacity change from 0 to 7 [ 246.782703][T11021] Dev loop7: unable to read RDB block 7 [ 246.795291][T11035] netlink: 'syz.0.2006': attribute type 1 has an invalid length. [ 246.818631][T11021] loop7: unable to read partition table [ 246.825659][T11021] loop7: partition table beyond EOD, truncated [ 246.831875][T11021] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 246.883442][T11035] 8021q: adding VLAN 0 to HW filter on device bond11 [ 247.003601][T11040] vlan1: entered allmulticast mode [ 247.019472][T11040] bond11: entered allmulticast mode [ 247.048724][T11035] bond11: (slave gretap1): making interface the new active one [ 247.058272][T11035] gretap1: entered allmulticast mode [ 247.066823][T11035] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 247.296735][T11066] sctp: [Deprecated]: syz.2.2018 (pid 11066) Use of int in max_burst socket option. [ 247.296735][T11066] Use struct sctp_assoc_value instead [ 247.663045][T11085] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.803481][T11088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 247.850722][T11088] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 247.970813][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 248.049451][T11095] bond12: entered allmulticast mode [ 248.302836][ T30] audit: type=1400 audit(1759154211.547:582): avc: denied { watch watch_reads } for pid=11100 comm="syz.3.2032" path="/dev/pts/1" dev="devpts" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 248.529256][ T30] audit: type=1400 audit(1759154211.777:583): avc: denied { accept } for pid=11110 comm="syz.3.2035" lport=47490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.687313][T11117] netlink: 'syz.2.2037': attribute type 1 has an invalid length. [ 248.762395][T11117] bond13: entered promiscuous mode [ 248.779261][T11117] 8021q: adding VLAN 0 to HW filter on device bond13 [ 248.788908][T11123] fuse: Invalid rootmode [ 248.818084][T11121] 8021q: adding VLAN 0 to HW filter on device bond14 [ 248.827419][T11121] bond13: (slave bond14): making interface the new active one [ 248.835157][T11121] bond14: entered promiscuous mode [ 248.840956][T11121] bond13: (slave bond14): Enslaving as an active interface with an up link [ 249.052257][ T30] audit: type=1400 audit(1759154212.297:584): avc: denied { getattr } for pid=11110 comm="syz.3.2035" lport=47490 faddr=fc02:: fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 249.174037][ T5964] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 249.345478][ T5964] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 249.360447][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.390074][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.413986][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 249.431963][ T5964] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 249.445976][ T5964] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 249.455952][ T5964] usb 1-1: Manufacturer: syz [ 249.467302][ T5964] usb 1-1: config 0 descriptor?? [ 249.518577][T11148] netlink: 'syz.2.2050': attribute type 1 has an invalid length. [ 249.553166][T11148] bond15: entered promiscuous mode [ 249.559089][T11148] 8021q: adding VLAN 0 to HW filter on device bond15 [ 249.595424][T11152] fuse: Invalid rootmode [ 249.657186][T11148] 8021q: adding VLAN 0 to HW filter on device bond16 [ 249.676814][T11148] bond15: (slave bond16): making interface the new active one [ 249.689210][T11148] bond16: entered promiscuous mode [ 249.695111][T11148] bond15: (slave bond16): Enslaving as an active interface with an up link [ 250.136444][T11185] fuse: Invalid rootmode [ 250.151138][ T5964] usbhid 1-1:0.0: can't add hid device: -71 [ 250.165106][ T5964] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 250.187182][ T5964] usb 1-1: USB disconnect, device number 4 [ 250.529631][ T30] audit: type=1400 audit(1759154213.777:585): avc: denied { map } for pid=11206 comm="syz.3.2072" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 250.681392][T11214] fuse: Bad value for 'rootmode' [ 251.189243][T11246] fuse: Bad value for 'rootmode' [ 251.288295][ T30] audit: type=1326 audit(1759154214.537:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 251.312139][ T30] audit: type=1326 audit(1759154214.537:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 251.337820][ T30] audit: type=1326 audit(1759154214.537:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92c118d710 code=0x7ffc0000 [ 251.366012][ T30] audit: type=1326 audit(1759154214.537:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92c118d710 code=0x7ffc0000 [ 251.390059][ T30] audit: type=1326 audit(1759154214.537:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 251.414260][ T30] audit: type=1326 audit(1759154214.537:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 251.438401][ T30] audit: type=1326 audit(1759154214.537:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 251.461847][ T30] audit: type=1326 audit(1759154214.537:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 251.487954][ T30] audit: type=1326 audit(1759154214.537:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.0.2090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c118eec9 code=0x7ffc0000 [ 251.774710][T11268] fuse: Bad value for 'rootmode' [ 252.002050][T11279] sctp: [Deprecated]: syz.0.2104 (pid 11279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.002050][T11279] Use struct sctp_sack_info instead [ 252.078882][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 252.119594][T11283] ------------[ cut here ]------------ [ 252.125702][T11283] WARNING: CPU: 1 PID: 11283 at fs/exec.c:118 path_noexec+0x1ca/0x230 [ 252.133913][T11283] Modules linked in: [ 252.138150][T11283] CPU: 1 UID: 0 PID: 11283 Comm: syz.3.2106 Not tainted syzkaller #0 PREEMPT(full) [ 252.148119][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.158279][T11283] RIP: 0010:path_noexec+0x1ca/0x230 [ 252.163496][T11283] Code: ff 83 e3 02 48 89 de e8 44 5e 85 ff 48 85 db 41 0f 95 c4 e8 c8 62 85 ff 44 89 e0 5b 5d 41 5c e9 4c b8 61 09 e8 b7 62 85 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 59 c9 eb ff e9 a8 fe ff ff e8 4f c9 eb [ 252.165095][T11289] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 252.165095][T11289] The task syz.1.2107 (11289) triggered the difference, watch for misbehavior. [ 252.183250][T11283] RSP: 0018:ffffc90003c1fc70 EFLAGS: 00010287 [ 252.183337][T11283] RAX: 00000000000000d2 RBX: ffff88801d28afe0 RCX: ffffc9000d34a000 [ 252.216343][T11283] RDX: 0000000000080000 RSI: ffffffff82363819 RDI: 0000000000000007 [ 252.224780][T11283] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 252.232986][T11283] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000000000 [ 252.241218][T11283] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 252.249281][T11283] FS: 00007fe24e7af6c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 252.258268][T11283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.264917][T11283] CR2: 000000110c2d13ce CR3: 00000000369e5000 CR4: 00000000003526f0 [ 252.272906][T11283] Call Trace: [ 252.276237][T11283] [ 252.279178][T11283] do_mmap+0xd23/0x1210 [ 252.283362][T11283] ? __pfx_do_mmap+0x10/0x10 [ 252.288037][T11283] ? __pfx_down_write_killable+0x10/0x10 [ 252.293700][T11283] vm_mmap_pgoff+0x29e/0x470 [ 252.298351][T11283] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 252.303802][T11283] ? __fget_files+0x20e/0x3c0 [ 252.308675][T11283] ksys_mmap_pgoff+0x32c/0x5c0 [ 252.313463][T11283] __x64_sys_mmap+0x125/0x190 [ 252.318249][T11283] do_syscall_64+0xcd/0x4e0 [ 252.322773][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.326640][T11290] sctp: [Deprecated]: syz.1.2107 (pid 11290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.326640][T11290] Use struct sctp_sack_info instead [ 252.328810][T11283] RIP: 0033:0x7fe24d98eec9 [ 252.349661][T11283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.369345][T11283] RSP: 002b:00007fe24e7af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 252.377805][T11283] RAX: ffffffffffffffda RBX: 00007fe24dbe5fa0 RCX: 00007fe24d98eec9 [ 252.385849][T11283] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 252.393828][T11283] RBP: 00007fe24da11f91 R08: 0000000000000005 R09: 0000000000000000 [ 252.401868][T11283] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 252.410254][T11283] R13: 00007fe24dbe6038 R14: 00007fe24dbe5fa0 R15: 00007ffdc270d7b8 [ 252.418296][T11283] [ 252.421321][T11283] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.428602][T11283] CPU: 1 UID: 0 PID: 11283 Comm: syz.3.2106 Not tainted syzkaller #0 PREEMPT(full) [ 252.437962][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.447999][T11283] Call Trace: [ 252.451259][T11283] [ 252.454172][T11283] dump_stack_lvl+0x3d/0x1f0 [ 252.458748][T11283] vpanic+0x6e8/0x7a0 [ 252.462730][T11283] ? __pfx_vpanic+0x10/0x10 [ 252.467214][T11283] ? path_noexec+0x1ca/0x230 [ 252.471786][T11283] panic+0xca/0xd0 [ 252.475485][T11283] ? __pfx_panic+0x10/0x10 [ 252.479886][T11283] check_panic_on_warn+0xab/0xb0 [ 252.484802][T11283] __warn+0xf6/0x3c0 [ 252.488675][T11283] ? path_noexec+0x1ca/0x230 [ 252.493242][T11283] report_bug+0x3c3/0x580 [ 252.497552][T11283] ? path_noexec+0x1ca/0x230 [ 252.502118][T11283] handle_bug+0x184/0x210 [ 252.506435][T11283] exc_invalid_op+0x17/0x50 [ 252.510924][T11283] asm_exc_invalid_op+0x1a/0x20 [ 252.515755][T11283] RIP: 0010:path_noexec+0x1ca/0x230 [ 252.520931][T11283] Code: ff 83 e3 02 48 89 de e8 44 5e 85 ff 48 85 db 41 0f 95 c4 e8 c8 62 85 ff 44 89 e0 5b 5d 41 5c e9 4c b8 61 09 e8 b7 62 85 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 59 c9 eb ff e9 a8 fe ff ff e8 4f c9 eb [ 252.540532][T11283] RSP: 0018:ffffc90003c1fc70 EFLAGS: 00010287 [ 252.546595][T11283] RAX: 00000000000000d2 RBX: ffff88801d28afe0 RCX: ffffc9000d34a000 [ 252.554572][T11283] RDX: 0000000000080000 RSI: ffffffff82363819 RDI: 0000000000000007 [ 252.562534][T11283] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 252.570485][T11283] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000000000 [ 252.578433][T11283] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 252.586392][T11283] ? path_noexec+0x1c9/0x230 [ 252.590974][T11283] do_mmap+0xd23/0x1210 [ 252.595121][T11283] ? __pfx_do_mmap+0x10/0x10 [ 252.599700][T11283] ? __pfx_down_write_killable+0x10/0x10 [ 252.605323][T11283] vm_mmap_pgoff+0x29e/0x470 [ 252.609899][T11283] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 252.614996][T11283] ? __fget_files+0x20e/0x3c0 [ 252.619657][T11283] ksys_mmap_pgoff+0x32c/0x5c0 [ 252.624406][T11283] __x64_sys_mmap+0x125/0x190 [ 252.629066][T11283] do_syscall_64+0xcd/0x4e0 [ 252.633554][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.639428][T11283] RIP: 0033:0x7fe24d98eec9 [ 252.643822][T11283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.663409][T11283] RSP: 002b:00007fe24e7af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 252.671802][T11283] RAX: ffffffffffffffda RBX: 00007fe24dbe5fa0 RCX: 00007fe24d98eec9 [ 252.679752][T11283] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 252.687701][T11283] RBP: 00007fe24da11f91 R08: 0000000000000005 R09: 0000000000000000 [ 252.695650][T11283] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 252.703598][T11283] R13: 00007fe24dbe6038 R14: 00007fe24dbe5fa0 R15: 00007ffdc270d7b8 [ 252.711572][T11283] [ 252.714787][T11283] Kernel Offset: disabled [ 252.719090][T11283] Rebooting in 86400 seconds..