last executing test programs: 1m43.238400217s ago: executing program 2 (id=614): timer_create(0x1, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4048c41}, 0x40040d4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xeb367000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x50) 1m41.785235998s ago: executing program 2 (id=617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m41.406266734s ago: executing program 2 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) 1m35.254682884s ago: executing program 2 (id=632): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket(0x28, 0x80000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x18c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) 1m29.931543452s ago: executing program 2 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 1m24.020010063s ago: executing program 2 (id=658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 1m8.234202324s ago: executing program 32 (id=658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 14.597177098s ago: executing program 5 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 13.354713791s ago: executing program 5 (id=813): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newchain={0x46c, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x43c, 0x2, [@TCA_ROUTE4_ACT={0x438, 0x6, [@m_police={0x434, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa63c, 0x800, 0x6, 0x7fff, 0x7, 0x10001, 0x9, 0x10001, 0x3, 0x5, 0x1, 0x6, 0x401, 0x1, 0x5, 0x6, 0xd6c0, 0x7ff, 0x5, 0x206, 0x9, 0xffffffff, 0x8, 0x3, 0x3, 0x17, 0x401, 0x9df, 0x5, 0x9e, 0x9, 0x2, 0xc4a, 0x2, 0xff, 0x3000, 0x9, 0x6, 0x8000, 0x8, 0x92e6, 0x5, 0xffff, 0x41708fa2, 0x5, 0x5, 0x7, 0x80000000, 0x9, 0xffffffff, 0x1ff, 0xd0, 0xc180, 0x80, 0xa, 0x2, 0x4, 0x8, 0x7, 0x1, 0x7ff, 0x8, 0x1, 0x5, 0x0, 0x9, 0x61fc3436, 0x7cbd, 0x8000, 0xd, 0xffffff81, 0x47, 0x6, 0x5, 0x4, 0xc87, 0xfffffff7, 0x4, 0x9, 0x4, 0xa, 0x10000, 0x1ff, 0x0, 0x10000, 0x1, 0xc000000, 0x3, 0x4, 0x7, 0x4, 0xffffffff, 0x1, 0xb58, 0x5, 0x77, 0x9, 0xa, 0x1000000, 0x6, 0x72f38f87, 0x1, 0x5, 0xae3, 0x2, 0xf, 0x2, 0x8, 0x64c, 0x8, 0x101, 0x4, 0x4, 0x0, 0x5abd, 0x2, 0x0, 0x8, 0xd, 0xd0, 0x286, 0x5, 0x649, 0x7, 0x0, 0xd, 0x4, 0x2, 0x61b4, 0x0, 0x80000001, 0x3ff, 0x7, 0x4, 0x80000001, 0x6, 0x5, 0xb, 0x3, 0x4, 0x2006, 0x55, 0x7, 0x6e2, 0x5, 0x7, 0x144, 0x3, 0x10000004, 0x2, 0x2, 0x3, 0x1, 0x6, 0x0, 0x5, 0x8, 0x8a7, 0x2, 0x1, 0xfd0, 0x7f, 0x8, 0xf, 0x800, 0xcd, 0xff, 0xbf0, 0x9a, 0x4, 0x6, 0x10005, 0xf9eb, 0x80081, 0x79ac, 0x3, 0x3, 0x0, 0x8, 0x8, 0xd, 0x1ff, 0x4000000, 0x0, 0x401, 0xc4fa, 0x1, 0x6, 0x0, 0x81, 0x1, 0x42, 0x4, 0x51, 0x9, 0xa03, 0x9, 0x5, 0x8, 0xffff, 0x7, 0xaa18, 0x3, 0x0, 0x1, 0x9, 0x4, 0x8, 0x8, 0x10000, 0x5, 0x1, 0x4, 0x0, 0x101, 0x0, 0x7, 0x400, 0x8, 0x80, 0x1ff, 0x80000000, 0x7, 0x2, 0x7fff, 0x400, 0x8, 0x2, 0x1, 0x5, 0x80000001, 0xc888, 0x5e6, 0x2, 0x4, 0x7faa, 0x8, 0x3, 0x4, 0x2, 0x7ff, 0x6, 0x1, 0x7, 0x1, 0xa25, 0x1, 0x2, 0x7, 0x10, 0x2, 0x948, 0x10, 0x6, 0x8000, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x20844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 13.306228112s ago: executing program 1 (id=814): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4044801) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e80)=""/4099, 0x1003}, {&(0x7f0000000c40)=""/127, 0x7f}], 0x2}}, {{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/253, 0xfd}, {0x0}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000280)=""/40, 0x28}], 0x5, &(0x7f0000007240)=""/4106, 0x100a}, 0x3}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)=""/67, 0x43}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/22, 0x16}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000000980)=""/169, 0xa9}, {&(0x7f0000000a40)=""/78, 0x4e}], 0x9}, 0x5}], 0x3, 0x12113, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x8004b707, 0x0) acct(0x0) acct(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 11.092514242s ago: executing program 5 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 11.041403738s ago: executing program 3 (id=820): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x7ffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 9.647685614s ago: executing program 1 (id=821): socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x82, 0x1, 0x12}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000001c0)=0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x17e) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) write$midi(0xffffffffffffffff, &(0x7f0000000580)="329ea0a7641c5f535356b0a411cc7041b72f067822b7507cb276b920a9f28301379de6c2a10c00dc0754eba2a0349e998fa14182c534de5cc7dcbea1192797d013fed97fbcf6b9", 0x47) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x100000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x807, 0x0, 0x7fffffff}, 0x0, 0x0) 7.298787369s ago: executing program 0 (id=828): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0xfffffffd, {{0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}}}, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400ca870) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x2000005, 0x100010, r1, 0xffffc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x121141) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f0209be82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) 7.187243633s ago: executing program 4 (id=829): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x7ffffffe}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x16}, @window={0x3, 0x0, 0xfffc}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) 6.550098627s ago: executing program 1 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES64=r0], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x20, &(0x7f0000000840)=ANY=[@ANYBLOB="18120000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000081e7607900f9ffffff840000e2a4000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0xffff, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x58}, @cswp={0x58, 0x114, 0x7, {{0x0, 0xf5e}, 0x0, 0x0, 0xb, 0x3, 0x5, 0x8000000000002, 0x2a, 0x9}}], 0x70}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x105, &(0x7f0000000340)={@local, @broadcast, @void, {@llc_tr={0x11, {@snap={0x1, 0x0, "23de", "a554ec", 0x6007, "469968146d84c89d53107908b15ca79645db034c012e9871bf1d8fb878874571ad0d13b2b787f7747e49b71500bf7d3d3c3ceccc009e6f05cf82eb9715c3cedae78109db2cd3112c8f9a2275fd3ce6d09b65c52897b93601c48dc059760c782cbaeed6ec5646f5ffb805a704aa693b35cdf0d7b3f6610e8507bab14cc71eae0271eb689f861900292c97b9989f163b7364a74bb2a6cf11badd45baf050c2b503e38043b6052c75c5189dd5912b738fe8d3821a69e8c2a140f34388f305d145e9e08bdadb9c09c549879db45fa50cf55242ac90887c822dad4ff6b38ccb836ddeda50ca5239462012b69c470f1bae"}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x8000}, 0x24000804) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40) r7 = syz_open_procfs(0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x25, 0x0, 0x0) r9 = semget$private(0x0, 0x3, 0x0) semop(r9, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x0, 0x200, 0x800}], 0x2) semctl$GETZCNT(r9, 0x2, 0xf, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) read$qrtrtun(r7, 0x0, 0x0) 6.125087577s ago: executing program 5 (id=831): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x1ad72f7) accept4$netrom(r3, 0x0, 0x0, 0x0) 5.827016722s ago: executing program 4 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 5.779036449s ago: executing program 3 (id=833): socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x7ffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 5.603570157s ago: executing program 0 (id=834): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x14, 0x0, 0x9, 0x305, 0x0, 0x0, {0x0, 0x0, 0x100}}, 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8) memfd_secret(0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) syz_open_dev$sndctrl(&(0x7f00000020c0), 0x9f6a, 0xbd302536eb42e10a) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 4.684952648s ago: executing program 4 (id=835): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000002640)=0x100, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x1c, &(0x7f0000002240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x14, 0x0, 0x9, 0x305, 0x0, 0x0, {0x0, 0x0, 0x100}}, 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8) memfd_secret(0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 4.684345463s ago: executing program 1 (id=836): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4.604769716s ago: executing program 5 (id=837): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r8, 0x0) ftruncate(r8, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) 1.425268396s ago: executing program 3 (id=838): ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) io_uring_enter(0xffffffffffffffff, 0x3dba, 0x8cf6, 0x9, &(0x7f00000001c0)={[0x7]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newchain={0x46c, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x5}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x43c, 0x2, [@TCA_ROUTE4_ACT={0x438, 0x6, [@m_police={0x434, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa63c, 0x800, 0x6, 0x7fff, 0x7, 0x10001, 0x9, 0x10001, 0x3, 0x5, 0x1, 0x6, 0x401, 0x1, 0x5, 0x6, 0xd6c0, 0x7ff, 0x5, 0x206, 0x9, 0xffffffff, 0x8, 0x3, 0x3, 0x17, 0x401, 0x9df, 0x5, 0x9e, 0x9, 0x2, 0xc4a, 0x2, 0xff, 0x3000, 0x9, 0x6, 0x8000, 0x8, 0x92e6, 0x5, 0xffff, 0x41708fa2, 0x5, 0x5, 0x7, 0x80000000, 0x9, 0xffffffff, 0x1ff, 0xd0, 0xc180, 0x80, 0xa, 0x2, 0x4, 0x8, 0x7, 0x1, 0x7ff, 0x8, 0x1, 0x5, 0x0, 0x9, 0x61fc3436, 0x7cbd, 0x8000, 0xd, 0xffffff81, 0x47, 0x6, 0x5, 0x4, 0xc87, 0xfffffff7, 0x4, 0x9, 0x4, 0xa, 0x10000, 0x1ff, 0x0, 0x10000, 0x1, 0xc000000, 0x3, 0x4, 0x7, 0x4, 0xffffffff, 0x1, 0xb58, 0x5, 0x77, 0x9, 0xa, 0x1000000, 0x6, 0x72f38f87, 0x1, 0x5, 0xae3, 0x2, 0xf, 0x2, 0x8, 0x64c, 0x8, 0x101, 0x4, 0x4, 0x0, 0x5abd, 0x2, 0x0, 0x8, 0xd, 0xd0, 0x286, 0x5, 0x649, 0x7, 0x0, 0xd, 0x4, 0x2, 0x61b4, 0x0, 0x80000001, 0x3ff, 0x7, 0x4, 0x80000001, 0x6, 0x5, 0xb, 0x3, 0x4, 0x2006, 0x55, 0x7, 0x6e2, 0x5, 0x7, 0x144, 0x3, 0x10000004, 0x2, 0x2, 0x3, 0x1, 0x6, 0x0, 0x5, 0x8, 0x8a7, 0x2, 0x1, 0xfd0, 0x7f, 0x8, 0xf, 0x800, 0xcd, 0xff, 0xbf0, 0x9a, 0x4, 0x6, 0x10005, 0xf9eb, 0x80081, 0x79ac, 0x3, 0x3, 0x0, 0x8, 0x8, 0xd, 0x1ff, 0x4000000, 0x0, 0x401, 0xc4fa, 0x1, 0x6, 0x0, 0x81, 0x1, 0x42, 0x4, 0x51, 0x9, 0xa03, 0x9, 0x5, 0x8, 0xffff, 0x7, 0xaa18, 0x3, 0x0, 0x1, 0x9, 0x4, 0x8, 0x8, 0x10000, 0x5, 0x1, 0x4, 0x0, 0x101, 0x0, 0x7, 0x400, 0x8, 0x80, 0x1ff, 0x80000000, 0x7, 0x2, 0x7fff, 0x400, 0x8, 0x2, 0x1, 0x5, 0x80000001, 0xc888, 0x5e6, 0x2, 0x4, 0x7faa, 0x8, 0x3, 0x4, 0x2, 0x7ff, 0x6, 0x1, 0x7, 0x1, 0xa25, 0x1, 0x2, 0x7, 0x10, 0x2, 0x948, 0x10, 0x6, 0x8000, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x800}, 0x20844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.414092148s ago: executing program 0 (id=839): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) syz_io_uring_setup(0xb0, &(0x7f0000000200)={0x0, 0x59a8, 0x0, 0x1, 0x18e}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@my=0x0}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 1.400441835s ago: executing program 4 (id=840): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001480)={0x24, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "c0756615"}, @local=@item_4={0x3, 0x2, 0x5, "42dd07f6"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27f, 0xfd, 0x1, {0x22, 0xdad}}}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000004c0)='P') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r4, &(0x7f0000000080)='3', 0x1, 0x0) r5 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x6) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0xa020, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.337443195s ago: executing program 1 (id=841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) 1.083132979s ago: executing program 0 (id=842): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c7056}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) 326.964458ms ago: executing program 3 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001080)) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 29.727365ms ago: executing program 5 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0) chdir(0x0) unlink(&(0x7f00000002c0)='./file0\x00') 0s ago: executing program 3 (id=845): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4044801) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e80)=""/4099, 0x1003}, {&(0x7f0000000c40)=""/127, 0x7f}], 0x2}}, {{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/253, 0xfd}, {0x0}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000280)=""/40, 0x28}], 0x5, &(0x7f0000007240)=""/4106, 0x100a}, 0x3}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)=""/67, 0x43}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/22, 0x16}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000000980)=""/169, 0xa9}, {&(0x7f0000000a40)=""/78, 0x4e}], 0x9}, 0x5}], 0x3, 0x12113, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x8004b707, 0x0) acct(0x0) acct(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) kernel console output (not intermixed with test programs): stem_u:object_r:node_t tclass=sctp_socket permissive=1 [ 150.595601][ T6614] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 150.742512][ T30] audit: type=1400 audit(1752665606.030:399): avc: denied { write } for pid=6593 comm="syz.0.157" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.291003][ T6619] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 151.416869][ T6635] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[6635] [ 151.467367][ T6635] overlayfs: failed to resolve './file0': -2 [ 151.697235][ T6620] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.741265][ T6620] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.906040][ T6620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.284478][ T6620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.323956][ T6620] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 152.353951][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 152.353968][ T30] audit: type=1400 audit(1752665610.870:431): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 153.226888][ T30] audit: type=1400 audit(1752665611.760:432): avc: denied { create } for pid=6643 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.296110][ T6656] Bluetooth: MGMT ver 1.23 [ 153.312290][ T30] audit: type=1400 audit(1752665611.760:433): avc: denied { connect } for pid=6643 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.458554][ T30] audit: type=1400 audit(1752665611.760:434): avc: denied { bind } for pid=6643 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.478897][ T30] audit: type=1400 audit(1752665611.760:435): avc: denied { write } for pid=6643 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.518815][ T30] audit: type=1400 audit(1752665611.830:436): avc: denied { bind } for pid=6655 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.853053][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.868081][ T30] audit: type=1400 audit(1752665611.830:437): avc: denied { write } for pid=6655 comm="syz.2.169" path="socket:[10044]" dev="sockfs" ino=10044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.625212][ T6663] program syz.4.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.640881][ T30] audit: type=1400 audit(1752665612.030:438): avc: denied { connect } for pid=6655 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.660709][ T30] audit: type=1400 audit(1752665612.030:439): avc: denied { write } for pid=6655 comm="syz.2.169" path="socket:[10374]" dev="sockfs" ino=10374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.675274][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.684279][ T30] audit: type=1400 audit(1752665612.370:440): avc: denied { write } for pid=6660 comm="syz.4.170" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.697252][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.719181][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.609768][ T6681] program syz.1.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.496844][ T6692] random: crng reseeded on system resumption [ 157.506676][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 157.506688][ T30] audit: type=1400 audit(1752665616.030:456): avc: denied { append } for pid=6685 comm="syz.2.176" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.353319][ T30] audit: type=1400 audit(1752665616.890:457): avc: denied { read } for pid=6698 comm="syz.4.178" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.394120][ T30] audit: type=1400 audit(1752665616.910:458): avc: denied { read } for pid=6698 comm="syz.4.178" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.532806][ T30] audit: type=1400 audit(1752665616.910:459): avc: denied { open } for pid=6698 comm="syz.4.178" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 158.615062][ T6703] ubi0: attaching mtd0 [ 158.628493][ T6703] ubi0: scanning is finished [ 158.633189][ T6703] ubi0: empty MTD device detected [ 159.003604][ T30] audit: type=1400 audit(1752665616.910:460): avc: denied { ioctl } for pid=6698 comm="syz.4.178" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 159.369595][ T30] audit: type=1400 audit(1752665617.040:461): avc: denied { read write } for pid=6698 comm="syz.4.178" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 159.416904][ T30] audit: type=1400 audit(1752665617.040:462): avc: denied { open } for pid=6698 comm="syz.4.178" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 159.663918][ T6703] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 159.850652][ T30] audit: type=1400 audit(1752665617.040:463): avc: denied { read } for pid=6698 comm="syz.4.178" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.465165][ T30] audit: type=1400 audit(1752665617.040:464): avc: denied { ioctl } for pid=6698 comm="syz.4.178" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.618957][ T30] audit: type=1400 audit(1752665617.950:465): avc: denied { append } for pid=6706 comm="syz.2.180" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.742949][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.182'. [ 163.151496][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 163.151517][ T30] audit: type=1400 audit(1752665621.210:469): avc: denied { create } for pid=6742 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.363265][ T30] audit: type=1400 audit(1752665621.220:470): avc: denied { setopt } for pid=6742 comm="syz.0.187" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.426200][ T6749] program syz.1.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.528883][ T30] audit: type=1400 audit(1752665623.020:471): avc: denied { create } for pid=6750 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.914675][ T30] audit: type=1400 audit(1752665623.450:472): avc: denied { write } for pid=6764 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.465751][ T30] audit: type=1400 audit(1752665623.990:473): avc: denied { create } for pid=6775 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 166.477672][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.195'. [ 167.866958][ T30] audit: type=1400 audit(1752665626.400:474): avc: denied { ioctl } for pid=6795 comm="syz.2.198" path="socket:[11266]" dev="sockfs" ino=11266 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.991026][ T30] audit: type=1400 audit(1752665626.510:475): avc: denied { read } for pid=6795 comm="syz.2.198" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.053561][ T6799] bridge_slave_0: left allmulticast mode [ 168.059255][ T6799] bridge_slave_0: left promiscuous mode [ 168.365882][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.431666][ T30] audit: type=1400 audit(1752665626.520:476): avc: denied { open } for pid=6795 comm="syz.2.198" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.949155][ T30] audit: type=1400 audit(1752665626.530:477): avc: denied { ioctl } for pid=6795 comm="syz.2.198" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.974484][ T30] audit: type=1400 audit(1752665626.580:478): avc: denied { sys_module } for pid=6795 comm="syz.2.198" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 168.995463][ T30] audit: type=1400 audit(1752665627.180:479): avc: denied { map } for pid=6800 comm="syz.4.199" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.020704][ T30] audit: type=1400 audit(1752665627.180:480): avc: denied { execute } for pid=6800 comm="syz.4.199" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.355573][ T30] audit: type=1400 audit(1752665627.890:481): avc: denied { write } for pid=6795 comm="syz.2.198" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.402088][ T6799] bridge_slave_1: left allmulticast mode [ 169.407795][ T6799] bridge_slave_1: left promiscuous mode [ 169.427339][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.547352][ T6828] program syz.4.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.603303][ T6799] bond0: (slave bond_slave_0): Releasing backup interface [ 170.470528][ T5887] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.531282][ T6799] bond0: (slave bond_slave_1): Releasing backup interface [ 170.640592][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 170.653995][ T6799] team0: Port device team_slave_0 removed [ 170.667612][ T5887] usb 3-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 170.801730][ T6799] team0: Port device team_slave_1 removed [ 170.812103][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.820153][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.839220][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.347563][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.774250][ T5887] usb 3-1: string descriptor 0 read error: -71 [ 172.800631][ T5887] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 172.809807][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.898890][ T5887] usb 3-1: config 0 descriptor?? [ 173.035675][ T5887] usb 3-1: can't set config #0, error -71 [ 173.076739][ T5887] usb 3-1: USB disconnect, device number 6 [ 173.141968][ T6865] 9pnet_virtio: no channels available for device syz [ 173.301605][ T6868] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 173.394214][ T6870] loop1: detected capacity change from 0 to 524287999 [ 174.060706][ T6869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.069491][ T6884] program syz.2.219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.078961][ T6869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.215315][ T6869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.713263][ T6869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.762679][ T6869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.002465][ T30] audit: type=1400 audit(1752665633.530:482): avc: denied { setopt } for pid=6890 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.065698][ T6896] ubi0: attaching mtd0 [ 176.070755][ T6896] ubi0: scanning is finished [ 176.183236][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.211709][ T6896] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 176.219235][ T6896] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 176.226504][ T6896] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 176.233434][ T6896] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 176.240810][ T6896] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 176.247543][ T6896] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 176.255505][ T6896] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4042030247 [ 176.265464][ T6896] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 176.276338][ T6906] ubi0: background thread "ubi_bgt0d" started, PID 6906 [ 176.276410][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.725470][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.743750][ T6919] 9pnet_virtio: no channels available for device syz [ 176.808120][ T5153] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.345268][ T6912] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 178.631702][ T30] audit: type=1400 audit(1752665637.170:483): avc: denied { create } for pid=6927 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.589411][ T6920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.720787][ T6920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.726810][ T6920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.742914][ T30] audit: type=1400 audit(1752665638.270:484): avc: denied { setopt } for pid=6935 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.750222][ T6920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.293304][ T6942] fuse: Bad value for 'fd' [ 180.298578][ T6920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.305237][ T30] audit: type=1400 audit(1752665638.830:485): avc: denied { bind } for pid=6935 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.374579][ T30] audit: type=1400 audit(1752665639.910:486): avc: denied { accept } for pid=6952 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.453188][ T6957] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[6957] [ 181.671489][ T6955] ubi: mtd0 is already attached to ubi0 [ 181.760625][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.766715][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.772915][ T5153] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.321854][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.997272][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 184.307748][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 184.563222][ T43] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 184.574946][ T43] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 184.637708][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.669683][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.690106][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.740996][ T6984] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[6984] [ 184.773271][ T6984] overlayfs: workdir and upperdir must reside under the same mount [ 184.987499][ T43] usbtmc 1-1:16.0: bulk endpoints not found [ 185.024980][ T6992] 9pnet_virtio: no channels available for device syz [ 185.051163][ T30] audit: type=1400 audit(1752665643.560:487): avc: denied { ioctl } for pid=6986 comm="syz.2.249" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 185.174015][ T30] audit: type=1400 audit(1752665643.650:488): avc: denied { execute } for pid=6989 comm="syz.3.250" path="/50/pids.events" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.192560][ T43] usb 1-1: USB disconnect, device number 2 [ 186.550528][ T30] audit: type=1400 audit(1752665645.060:489): avc: denied { watch watch_reads } for pid=6997 comm="syz.3.252" path="/51" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 189.353636][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.613583][ T30] audit: type=1400 audit(1752665648.150:490): avc: denied { mount } for pid=7020 comm="syz.4.258" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 189.635315][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.889037][ T30] audit: type=1400 audit(1752665648.420:491): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.094719][ T30] audit: type=1400 audit(1752665648.460:492): avc: denied { create } for pid=6997 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.114933][ T30] audit: type=1400 audit(1752665648.470:493): avc: denied { setopt } for pid=6997 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.134131][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.858859][ T7038] random: crng reseeded on system resumption [ 192.481096][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.268'. [ 193.514252][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 193.870736][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.877075][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.476165][ T7065] overlayfs: failed to resolve './file1': -2 [ 194.600760][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 195.505589][ T30] audit: type=1400 audit(1752665653.210:494): avc: denied { cmd } for pid=7069 comm="syz.4.273" path="socket:[11754]" dev="sockfs" ino=11754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 195.721383][ T5915] usb 4-1: unable to read config index 0 descriptor/all [ 195.728392][ T5915] usb 4-1: can't read configurations, error -71 [ 198.930691][ T7101] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 199.329603][ T7112] overlayfs: failed to resolve './file1': -2 [ 199.420712][ T7114] loop1: detected capacity change from 0 to 524287999 [ 199.631993][ T7103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.639707][ T7103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.662290][ T7103] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.681015][ T7103] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.688494][ T7103] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.735305][ T7096] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7096] [ 200.116973][ T7109] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 200.302426][ T7121] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[7121] [ 200.633805][ T7127] 9pnet_virtio: no channels available for device syz [ 201.786948][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.793846][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.799942][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.816727][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.553464][ T7152] ubi: mtd0 is already attached to ubi0 [ 204.527608][ T7162] overlayfs: failed to resolve './file1': -2 [ 204.540660][ T5887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 204.744537][ T5887] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.810389][ T5887] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 204.895000][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.966133][ T5887] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.111198][ T5887] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 206.120271][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.129883][ T5887] usb 3-1: Product: syz [ 206.137621][ T5887] usb 3-1: Manufacturer: syz [ 206.169801][ T5887] cdc_wdm 3-1:1.0: skipping garbage [ 206.182620][ T5887] cdc_wdm 3-1:1.0: skipping garbage [ 206.187872][ T5887] cdc_wdm 3-1:1.0: skipping garbage [ 206.193527][ T5887] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 206.253223][ T30] audit: type=1400 audit(1752665664.790:495): avc: denied { write } for pid=7170 comm="syz.1.301" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.396518][ T30] audit: type=1400 audit(1752665664.920:496): avc: denied { create } for pid=7173 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.421072][ T30] audit: type=1400 audit(1752665664.930:497): avc: denied { ioctl } for pid=7173 comm="syz.0.302" path="socket:[12427]" dev="sockfs" ino=12427 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.465567][ T30] audit: type=1400 audit(1752665665.000:498): avc: denied { ioctl } for pid=7173 comm="syz.0.302" path="socket:[11857]" dev="sockfs" ino=11857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 206.515938][ T5948] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 206.690608][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 206.699600][ T5948] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 206.709267][ T5948] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 206.719643][ T5948] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.999190][ T5948] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.009273][ T5948] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.022488][ T5948] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.031773][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.051031][ T5948] usbtmc 4-1:16.0: bulk endpoints not found [ 207.396660][ T5948] usb 4-1: USB disconnect, device number 4 [ 208.178807][ T30] audit: type=1400 audit(1752665666.030:499): avc: denied { read } for pid=7187 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.362242][ T9] usb 3-1: USB disconnect, device number 7 [ 208.459858][ T7196] program syz.1.309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.511253][ T7192] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 209.466632][ T7201] loop1: detected capacity change from 0 to 524287999 [ 210.065181][ T7199] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.352755][ T7199] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.552808][ T7199] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.558803][ T7199] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.585869][ T5153] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 210.597639][ T5153] Bluetooth: hci4: Injecting HCI hardware error event [ 210.764646][ T5153] Bluetooth: hci4: hardware error 0x00 [ 212.640553][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.647432][ T7232] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7232] [ 212.657774][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.937473][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 212.943579][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.110539][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 213.152902][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.192012][ T7230] overlayfs: failed to resolve './file0': -2 [ 213.227074][ T43] usb 1-1: config 0 has no interface number 0 [ 213.280539][ T5153] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 213.437563][ T43] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.447504][ T30] audit: type=1400 audit(1752665671.860:500): avc: denied { read } for pid=7241 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 213.468867][ T43] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.527079][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.475565][ T43] usb 1-1: config 0 descriptor?? [ 214.502171][ T43] usb 1-1: can't set config #0, error -71 [ 214.523345][ T43] usb 1-1: USB disconnect, device number 3 [ 218.123774][ T7290] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 218.123774][ T7290] program syz.0.335 not setting count and/or reply_len properly [ 219.291893][ T7299] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 219.957084][ T7314] loop1: detected capacity change from 0 to 524287999 [ 221.228418][ T7309] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 221.260726][ T7303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.266936][ T7303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.273022][ T7303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.278959][ T7303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.360863][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.366985][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.366999][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.553188][ T7361] bridge_slave_0: left allmulticast mode [ 224.559066][ T7361] bridge_slave_0: left promiscuous mode [ 224.591391][ T30] audit: type=1400 audit(1752665683.130:501): avc: denied { getopt } for pid=7341 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.692527][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.803030][ T7366] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 225.454198][ T5887] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.474252][ T7361] bridge_slave_1: left allmulticast mode [ 225.500521][ T30] audit: type=1400 audit(1752665683.150:502): avc: denied { read } for pid=7341 comm="syz.2.348" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 225.533222][ T7361] bridge_slave_1: left promiscuous mode [ 225.560539][ T30] audit: type=1400 audit(1752665683.150:503): avc: denied { open } for pid=7341 comm="syz.2.348" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 225.572986][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.740511][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 227.131105][ T5887] usb 1-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 227.185501][ T5887] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 227.209816][ T7361] bond0: (slave bond_slave_0): Releasing backup interface [ 227.287393][ T7361] bond0: (slave bond_slave_1): Releasing backup interface [ 227.299592][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.328409][ T7379] program syz.4.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.183258][ T5887] usb 1-1: Product: syz [ 228.188729][ T5887] usb 1-1: Manufacturer: syz [ 228.271251][ T7361] team0: Port device team_slave_0 removed [ 228.312321][ T5887] usb 1-1: SerialNumber: syz [ 228.325003][ T5887] usb 1-1: config 0 descriptor?? [ 228.430620][ T7361] team0: Port device team_slave_1 removed [ 228.437378][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.475275][ T7361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.485285][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.503107][ T7361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.577338][ T7366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.621073][ T7366] bond0: (slave wlan1): Opening slave failed [ 229.335126][ T5887] usb 1-1: can't set config #0, error -71 [ 229.959188][ T5887] usb 1-1: USB disconnect, device number 4 [ 230.395278][ T7404] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 230.499370][ T7404] loop1: detected capacity change from 0 to 524287999 [ 230.845806][ T7419] 9pnet_virtio: no channels available for device syz [ 231.182212][ T7422] [U] : [ 231.185147][ T7422] [U] [ 231.187847][ T7422] [U] [ 231.190540][ T7422] [U] [ 231.193732][ T7422] [U] [ 231.196430][ T7422] [U] [ 231.199128][ T7422] [U] [ 231.201825][ T7422] [U] [ 231.205697][ T7422] [U] [ 231.208412][ T7422] [U] [ 231.211102][ T7422] [U] [ 231.213797][ T7422] [U] [ 231.216951][ T7422] [U] [ 231.219648][ T7422] [U] [ 231.222339][ T7422] [U] [ 231.225033][ T7422] [U] [ 231.230009][ T7422] [U] [ 231.232723][ T7422] [U] [ 231.235450][ T7422] [U] [ 231.238148][ T7422] [U] [ 231.247076][ T7422] [U] [ 231.249796][ T7422] [U] [ 231.252492][ T7422] [U] [ 231.255189][ T7422] [U] [ 231.258767][ T7422] [U] [ 231.261473][ T7422] [U] [ 231.264165][ T7422] [U] [ 231.266853][ T7422] [U] [ 231.270283][ T7422] [U] [ 231.272984][ T7422] [U] [ 231.275675][ T7422] [U] [ 231.278367][ T7422] [U] [ 231.281736][ T7422] [U] [ 231.284440][ T7422] [U] [ 231.287140][ T7422] [U] [ 231.289836][ T7422] [U] [ 231.293070][ T7422] [U] [ 231.295767][ T7422] [U] [ 231.298474][ T7422] [U] [ 231.301175][ T7422] [U] [ 231.304486][ T7422] [U] [ 231.307183][ T7422] [U] [ 231.309877][ T7422] [U] [ 231.312569][ T7422] [U] [ 231.315858][ T7422] [U] [ 231.318563][ T7422] [U] [ 231.321256][ T7422] [U] [ 231.323947][ T7422] [U] [ 231.327338][ T7422] [U] [ 231.330036][ T7422] [U] [ 231.332729][ T7422] [U] [ 231.335421][ T7422] [U] [ 231.339691][ T7422] [U] [ 231.342392][ T7422] [U] [ 231.345082][ T7422] [U] [ 231.347776][ T7422] [U] [ 231.353103][ T7422] [U] [ 231.355812][ T7422] [U] [ 231.358507][ T7422] [U] [ 231.361199][ T7422] [U] [ 231.364431][ T7422] [U] [ 231.367128][ T7422] [U] [ 231.369821][ T7422] [U] [ 231.372513][ T7422] [U] [ 231.375889][ T7422] [U] [ 231.378585][ T7422] [U] [ 231.381274][ T7422] [U] [ 231.383966][ T7422] [U] [ 231.387435][ T7422] [U] [ 231.390137][ T7422] [U] [ 231.392826][ T7422] [U] [ 231.395515][ T7422] [U] [ 231.399133][ T7422] [U] [ 231.401844][ T7422] [U] [ 231.404546][ T7422] [U] [ 231.407247][ T7422] [U] [ 231.411242][ T7422] [U] [ 231.413950][ T7422] [U] [ 231.416643][ T7422] [U] [ 231.419334][ T7422] [U] [ 231.422858][ T7422] [U] [ 231.425557][ T7422] [U] [ 231.428246][ T7422] [U] [ 231.430936][ T7422] [U] [ 231.434367][ T7422] [U] [ 231.437064][ T7422] [U] [ 231.439755][ T7422] [U] [ 231.442444][ T7422] [U] [ 231.446055][ T7422] [U] [ 231.448757][ T7422] [U] [ 231.451451][ T7422] [U] [ 231.454150][ T7422] [U] [ 231.457539][ T7422] [U] [ 231.460237][ T7422] [U] [ 231.462928][ T7422] [U] [ 231.465621][ T7422] [U] [ 231.469182][ T7422] [U] [ 231.471877][ T7422] [U] [ 231.474566][ T7422] [U] [ 231.477259][ T7422] [U] [ 231.480633][ T7422] [U] [ 231.483328][ T7422] [U] [ 231.486022][ T7422] [U] [ 231.488711][ T7422] [U] [ 231.492145][ T7422] [U] [ 231.494842][ T7422] [U] [ 231.497530][ T7422] [U] [ 231.500222][ T7422] [U] [ 231.503343][ T7422] [U] [ 231.506053][ T7422] [U] [ 231.508743][ T7422] [U] [ 231.511432][ T7422] [U] [ 231.514665][ T7422] [U] [ 231.517358][ T7422] [U] [ 231.520050][ T7422] [U] [ 231.522740][ T7422] [U] [ 231.525938][ T7422] [U] [ 231.528639][ T7422] [U] [ 231.531330][ T7422] [U] [ 231.534020][ T7422] [U] [ 231.537243][ T7422] [U] [ 231.539937][ T7422] [U] [ 231.542628][ T7422] [U] [ 231.545322][ T7422] [U] [ 231.548349][ T7422] [U] [ 231.551042][ T7422] [U] [ 231.553728][ T7422] [U] [ 231.625325][ T7417] [U] [ 231.688658][ T7408] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.706680][ T7408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.723297][ T7408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.766568][ T7408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.780557][ T7421] program syz.3.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.410251][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 233.475826][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 233.772623][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.840583][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.073659][ T7444] 9pnet_virtio: no channels available for device syz [ 235.144141][ T7453] ubi: mtd0 is already attached to ubi0 [ 235.908273][ T7460] [U] : [ 235.911070][ T7460] [U] [ 235.913734][ T7460] [U] [ 235.916422][ T7460] [U] [ 235.919426][ T7460] [U] [ 235.922098][ T7460] [U] [ 235.924761][ T7460] [U] [ 235.927442][ T7460] [U] [ 235.931161][ T7460] [U] [ 235.933880][ T7460] [U] [ 235.936569][ T7460] [U] [ 235.939267][ T7460] [U] [ 235.942501][ T7460] [U] [ 235.945201][ T7460] [U] [ 235.947892][ T7460] [U] [ 235.950585][ T7460] [U] [ 235.953897][ T7460] [U] [ 235.956598][ T7460] [U] [ 235.959290][ T7460] [U] [ 235.961979][ T7460] [U] [ 235.969052][ T7460] [U] [ 235.971773][ T7460] [U] [ 235.974468][ T7460] [U] [ 235.977166][ T7460] [U] [ 235.980715][ T7460] [U] [ 235.983420][ T7460] [U] [ 235.986111][ T7460] [U] [ 235.988801][ T7460] [U] [ 235.992166][ T7460] [U] [ 235.994866][ T7460] [U] [ 235.997558][ T7460] [U] [ 236.000249][ T7460] [U] [ 236.003738][ T7460] [U] [ 236.006436][ T7460] [U] [ 236.009130][ T7460] [U] [ 236.011827][ T7460] [U] [ 236.015254][ T7460] [U] [ 236.017957][ T7460] [U] [ 236.020647][ T7460] [U] [ 236.023341][ T7460] [U] [ 236.026771][ T7460] [U] [ 236.029476][ T7460] [U] [ 236.032175][ T7460] [U] [ 236.034865][ T7460] [U] [ 236.038141][ T7460] [U] [ 236.040841][ T7460] [U] [ 236.043534][ T7460] [U] [ 236.046222][ T7460] [U] [ 236.049563][ T7460] [U] [ 236.052263][ T7460] [U] [ 236.054954][ T7460] [U] [ 236.057646][ T7460] [U] [ 236.062316][ T7460] [U] [ 236.065024][ T7460] [U] [ 236.067716][ T7460] [U] [ 236.070409][ T7460] [U] [ 236.074577][ T7460] [U] [ 236.077281][ T7460] [U] [ 236.079971][ T7460] [U] [ 236.082665][ T7460] [U] [ 236.086018][ T7460] [U] [ 236.088716][ T7460] [U] [ 236.091405][ T7460] [U] [ 236.094097][ T7460] [U] [ 236.097445][ T7460] [U] [ 236.100147][ T7460] [U] [ 236.102841][ T7460] [U] [ 236.105535][ T7460] [U] [ 236.108715][ T7460] [U] [ 236.111409][ T7460] [U] [ 236.114099][ T7460] [U] [ 236.116789][ T7460] [U] [ 236.120064][ T7460] [U] [ 236.122761][ T7460] [U] [ 236.125450][ T7460] [U] [ 236.128138][ T7460] [U] [ 236.131343][ T7460] [U] [ 236.134037][ T7460] [U] [ 236.136729][ T7460] [U] [ 236.139417][ T7460] [U] [ 236.142649][ T7460] [U] [ 236.145347][ T7460] [U] [ 236.148041][ T7460] [U] [ 236.150733][ T7460] [U] [ 236.153874][ T7460] [U] [ 236.156582][ T7460] [U] [ 236.159272][ T7460] [U] [ 236.161969][ T7460] [U] [ 236.165303][ T7460] [U] [ 236.168000][ T7460] [U] [ 236.170692][ T7460] [U] [ 236.173385][ T7460] [U] [ 236.176752][ T7460] [U] [ 236.179451][ T7460] [U] [ 236.182146][ T7460] [U] [ 236.184838][ T7460] [U] [ 236.188304][ T7460] [U] [ 236.191004][ T7460] [U] [ 236.193697][ T7460] [U] [ 236.196387][ T7460] [U] [ 236.199592][ T7460] [U] [ 236.202289][ T7460] [U] [ 236.204982][ T7460] [U] [ 236.207677][ T7460] [U] [ 236.210925][ T7460] [U] [ 236.213621][ T7460] [U] [ 236.216315][ T7460] [U] [ 236.219008][ T7460] [U] [ 236.222163][ T7460] [U] [ 236.224860][ T7460] [U] [ 236.227549][ T7460] [U] [ 236.230241][ T7460] [U] [ 236.233509][ T7460] [U] [ 236.236207][ T7460] [U] [ 236.238901][ T7460] [U] [ 236.241592][ T7460] [U] [ 236.244908][ T7460] [U] [ 236.247603][ T7460] [U] [ 236.250293][ T7460] [U] [ 236.252985][ T7460] [U] [ 236.256250][ T7460] [U] [ 236.258948][ T7460] [U] [ 236.261644][ T7460] [U] [ 236.264335][ T7460] [U] [ 236.267442][ T7460] [U] [ 236.270138][ T7460] [U] [ 236.272829][ T7460] [U] [ 236.627912][ T7458] [U] [ 237.163162][ T7469] 9pnet_virtio: no channels available for device syz [ 237.531647][ T5836] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 237.540165][ T5836] Bluetooth: hci1: Injecting HCI hardware error event [ 237.551220][ T5830] Bluetooth: hci1: hardware error 0x00 [ 237.758659][ T30] audit: type=1400 audit(1752665696.290:504): avc: denied { append } for pid=7476 comm="syz.3.389" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 237.957160][ T30] audit: type=1400 audit(1752665696.470:505): avc: denied { write } for pid=7480 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 238.543697][ T7487] random: crng reseeded on system resumption [ 238.754031][ T30] audit: type=1400 audit(1752665697.230:506): avc: denied { read } for pid=7480 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.967208][ T7497] 9pnet_virtio: no channels available for device syz [ 239.682228][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 241.784953][ T7512] [U] : [ 241.787772][ T7512] [U] [ 241.790466][ T7512] [U] [ 241.793160][ T7512] [U] [ 241.796332][ T7512] [U] [ 241.799034][ T7512] [U] [ 241.801725][ T7512] [U] [ 241.804418][ T7512] [U] [ 241.807667][ T7512] [U] [ 241.810368][ T7512] [U] [ 241.813055][ T7512] [U] [ 241.815745][ T7512] [U] [ 241.818869][ T7512] [U] [ 241.821570][ T7512] [U] [ 241.824253][ T7512] [U] [ 241.826918][ T7512] [U] [ 241.830154][ T7512] [U] [ 241.832837][ T7512] [U] [ 241.835503][ T7512] [U] [ 241.838165][ T7512] [U] [ 241.841542][ T7512] [U] [ 241.844246][ T7512] [U] [ 241.846937][ T7512] [U] [ 241.849628][ T7512] [U] [ 241.852868][ T7512] [U] [ 241.855567][ T7512] [U] [ 241.858237][ T7512] [U] [ 241.860905][ T7512] [U] [ 241.864497][ T7512] [U] [ 241.867205][ T7512] [U] [ 241.869897][ T7512] [U] [ 241.872592][ T7512] [U] [ 241.875946][ T7512] [U] [ 241.878650][ T7512] [U] [ 241.881351][ T7512] [U] [ 241.884044][ T7512] [U] [ 241.887218][ T7512] [U] [ 241.889960][ T7512] [U] [ 241.892657][ T7512] [U] [ 241.895356][ T7512] [U] [ 241.898583][ T7512] [U] [ 241.901275][ T7512] [U] [ 241.903963][ T7512] [U] [ 241.906653][ T7512] [U] [ 241.909793][ T7512] [U] [ 241.912491][ T7512] [U] [ 241.915181][ T7512] [U] [ 241.917866][ T7512] [U] [ 241.921103][ T7512] [U] [ 241.923797][ T7512] [U] [ 241.926487][ T7512] [U] [ 241.929174][ T7512] [U] [ 241.932379][ T7512] [U] [ 241.935071][ T7512] [U] [ 241.937763][ T7512] [U] [ 241.940453][ T7512] [U] [ 241.944055][ T7512] [U] [ 241.946759][ T7512] [U] [ 241.949449][ T7512] [U] [ 241.952136][ T7512] [U] [ 241.955444][ T7512] [U] [ 241.958138][ T7512] [U] [ 241.960830][ T7512] [U] [ 241.963518][ T7512] [U] [ 241.966796][ T7512] [U] [ 241.969491][ T7512] [U] [ 241.972179][ T7512] [U] [ 241.974868][ T7512] [U] [ 241.978117][ T7512] [U] [ 241.980811][ T7512] [U] [ 241.983501][ T7512] [U] [ 241.986189][ T7512] [U] [ 241.989581][ T7512] [U] [ 241.992281][ T7512] [U] [ 241.994972][ T7512] [U] [ 241.997671][ T7512] [U] [ 242.000972][ T7512] [U] [ 242.003666][ T7512] [U] [ 242.006363][ T7512] [U] [ 242.009055][ T7512] [U] [ 242.012323][ T7512] [U] [ 242.015021][ T7512] [U] [ 242.017711][ T7512] [U] [ 242.020401][ T7512] [U] [ 242.023623][ T7512] [U] [ 242.026318][ T7512] [U] [ 242.029015][ T7512] [U] [ 242.031706][ T7512] [U] [ 242.035175][ T7512] [U] [ 242.037873][ T7512] [U] [ 242.040564][ T7512] [U] [ 242.043252][ T7512] [U] [ 242.046429][ T7512] [U] [ 242.049127][ T7512] [U] [ 242.051819][ T7512] [U] [ 242.054509][ T7512] [U] [ 242.057796][ T7512] [U] [ 242.060493][ T7512] [U] [ 242.063184][ T7512] [U] [ 242.065873][ T7512] [U] [ 242.069172][ T7512] [U] [ 242.071867][ T7512] [U] [ 242.074558][ T7512] [U] [ 242.077248][ T7512] [U] [ 242.080508][ T7512] [U] [ 242.083202][ T7512] [U] [ 242.085892][ T7512] [U] [ 242.088584][ T7512] [U] [ 242.091720][ T7512] [U] [ 242.094414][ T7512] [U] [ 242.097102][ T7512] [U] [ 242.099789][ T7512] [U] [ 242.103046][ T7512] [U] [ 242.105741][ T7512] [U] [ 242.108444][ T7512] [U] [ 242.111133][ T7512] [U] [ 242.114225][ T7512] [U] [ 242.116917][ T7512] [U] [ 242.119606][ T7512] [U] [ 242.122298][ T7512] [U] [ 242.125503][ T7512] [U] [ 242.128199][ T7512] [U] [ 242.130888][ T7512] [U] [ 242.133579][ T7512] [U] [ 242.136667][ T7512] [U] [ 242.139365][ T7512] [U] [ 242.142058][ T7512] [U] [ 242.588514][ T7510] [U] [ 243.499713][ T7526] 9pnet_virtio: no channels available for device syz [ 243.703384][ T7517] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 243.745126][ T7517] loop1: detected capacity change from 0 to 524287999 [ 244.384222][ T7525] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.396682][ T7525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.413955][ T7525] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.422091][ T7532] program syz.2.404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.611238][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.617339][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.923605][ T30] audit: type=1400 audit(1752665705.210:507): avc: denied { write } for pid=7546 comm="syz.2.408" path="socket:[13199]" dev="sockfs" ino=13199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 248.280896][ T7569] program syz.2.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.640551][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.040526][ T30] audit: type=1400 audit(1752665710.490:508): avc: denied { execute } for pid=7591 comm="syz.3.421" dev="hugetlbfs" ino=13530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 252.120953][ T30] audit: type=1400 audit(1752665710.500:509): avc: denied { execute_no_trans } for pid=7591 comm="syz.3.421" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=13530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 252.227481][ T30] audit: type=1400 audit(1752665710.500:510): avc: denied { read write } for pid=7591 comm="syz.3.421" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 252.302675][ T30] audit: type=1400 audit(1752665710.500:511): avc: denied { open } for pid=7591 comm="syz.3.421" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 252.329585][ T30] audit: type=1400 audit(1752665710.560:512): avc: denied { read } for pid=7590 comm="syz.1.423" dev="nsfs" ino=4026532924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.352608][ T30] audit: type=1400 audit(1752665710.560:513): avc: denied { open } for pid=7590 comm="syz.1.423" path="net:[4026532924]" dev="nsfs" ino=4026532924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.383227][ T30] audit: type=1400 audit(1752665710.560:514): avc: denied { create } for pid=7590 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.407624][ T30] audit: type=1400 audit(1752665710.560:515): avc: denied { shutdown } for pid=7590 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.441375][ T30] audit: type=1400 audit(1752665710.560:516): avc: denied { read } for pid=7590 comm="syz.1.423" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.052464][ T30] audit: type=1400 audit(1752665710.560:517): avc: denied { open } for pid=7590 comm="syz.1.423" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 255.122819][ T7615] overlayfs: missing 'lowerdir' [ 255.285116][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.318032][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.460746][ T55] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 256.137913][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 256.155900][ T7626] program syz.4.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.230685][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.390625][ T5948] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 256.579269][ T55] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 256.590479][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.622714][ T55] usb 3-1: config 0 descriptor?? [ 257.099989][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 257.100024][ T30] audit: type=1400 audit(1752665715.630:569): avc: denied { connect } for pid=7634 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 257.895990][ T30] audit: type=1400 audit(1752665715.670:570): avc: denied { write } for pid=7634 comm="syz.1.434" path="socket:[13580]" dev="sockfs" ino=13580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 257.944135][ T30] audit: type=1400 audit(1752665715.910:571): avc: denied { getopt } for pid=7616 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.964163][ T5948] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.183799][ T5948] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 258.309662][ T5948] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.321475][ T5948] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.337256][ T5948] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.346693][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.368828][ T5948] usb 4-1: Product: syz [ 258.373214][ T5948] usb 4-1: Manufacturer: syz [ 258.383360][ T5948] cdc_wdm 4-1:1.0: skipping garbage [ 258.392080][ T5948] cdc_wdm 4-1:1.0: skipping garbage [ 258.414238][ T5948] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 258.431259][ T30] audit: type=1400 audit(1752665715.910:572): avc: denied { create } for pid=7616 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 258.525385][ T30] audit: type=1400 audit(1752665715.920:573): avc: denied { bind } for pid=7616 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 258.595596][ T30] audit: type=1400 audit(1752665715.920:574): avc: denied { setopt } for pid=7616 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 258.687657][ T30] audit: type=1400 audit(1752665716.580:575): avc: denied { unlink } for pid=7636 comm="syz.4.435" name="#2d" dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 258.731921][ T30] audit: type=1400 audit(1752665716.580:576): avc: denied { mount } for pid=7636 comm="syz.4.435" name="/" dev="overlay" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 258.751516][ T7650] block device autoloading is deprecated and will be removed. [ 258.782469][ T30] audit: type=1400 audit(1752665716.660:577): avc: denied { create } for pid=7636 comm="syz.4.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.802676][ T30] audit: type=1400 audit(1752665717.120:578): avc: denied { mounton } for pid=7644 comm="syz.1.437" path="/79/file0" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 258.986517][ T55] usbhid 3-1:0.0: can't add hid device: -71 [ 259.769922][ T55] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 259.791452][ T55] usb 3-1: USB disconnect, device number 8 [ 260.062787][ T7667] overlayfs: missing 'workdir' [ 260.249736][ T5902] usb 4-1: USB disconnect, device number 5 [ 261.377605][ T7676] random: crng reseeded on system resumption [ 265.430575][ T7698] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 265.430575][ T7698] program syz.0.450 not setting count and/or reply_len properly [ 266.496665][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 266.496682][ T30] audit: type=1400 audit(1752665725.030:588): avc: denied { create } for pid=7702 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 266.736323][ T7709] overlayfs: missing 'workdir' [ 266.963590][ T30] audit: type=1400 audit(1752665725.070:589): avc: denied { create } for pid=7702 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.360967][ T7713] program syz.1.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.548680][ T30] audit: type=1400 audit(1752665726.950:590): avc: denied { read } for pid=7716 comm="syz.4.460" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 269.182625][ T30] audit: type=1400 audit(1752665726.960:591): avc: denied { open } for pid=7716 comm="syz.4.460" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 269.669498][ T30] audit: type=1400 audit(1752665726.960:592): avc: denied { ioctl } for pid=7716 comm="syz.4.460" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 269.695341][ T30] audit: type=1400 audit(1752665727.690:593): avc: denied { ioctl } for pid=7723 comm="syz.3.459" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 270.573879][ T30] audit: type=1400 audit(1752665728.310:594): avc: denied { bind } for pid=7725 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 270.630001][ T30] audit: type=1400 audit(1752665728.310:595): avc: denied { name_bind } for pid=7725 comm="syz.0.461" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 270.652221][ T30] audit: type=1400 audit(1752665728.310:596): avc: denied { node_bind } for pid=7725 comm="syz.0.461" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 270.673272][ T30] audit: type=1400 audit(1752665728.310:597): avc: denied { write } for pid=7725 comm="syz.0.461" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 270.707792][ T7724] 9pnet_virtio: no channels available for device syz [ 272.144094][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 272.144116][ T30] audit: type=1400 audit(1752665730.190:601): avc: denied { setopt } for pid=7751 comm="syz.0.467" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.987769][ T30] audit: type=1400 audit(1752665730.270:602): avc: denied { read } for pid=7751 comm="syz.0.467" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.010515][ T30] audit: type=1400 audit(1752665730.290:603): avc: denied { open } for pid=7751 comm="syz.0.467" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 273.101920][ T30] audit: type=1400 audit(1752665731.640:604): avc: denied { ioctl } for pid=7760 comm="syz.4.468" path="socket:[14620]" dev="sockfs" ino=14620 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.196526][ T7766] overlayfs: missing 'workdir' [ 273.833703][ T7769] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7769] [ 273.878557][ T30] audit: type=1400 audit(1752665732.160:605): avc: denied { mount } for pid=7762 comm="syz.1.470" name="/" dev="hugetlbfs" ino=13912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 273.954542][ T7769] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 273.964260][ T7769] overlayfs: failed to set xattr on upper [ 273.970222][ T7769] overlayfs: ...falling back to redirect_dir=nofollow. [ 273.977335][ T7769] overlayfs: ...falling back to index=off. [ 273.983434][ T7769] overlayfs: ...falling back to uuid=null. [ 273.990309][ T7769] overlayfs: maximum fs stacking depth exceeded [ 274.413721][ T30] audit: type=1400 audit(1752665732.400:606): avc: denied { mounton } for pid=7762 comm="syz.1.470" path="/88/file1/bus" dev="hugetlbfs" ino=13915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 274.520626][ T30] audit: type=1400 audit(1752665732.460:607): avc: denied { write } for pid=7762 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.670918][ T30] audit: type=1400 audit(1752665732.470:608): avc: denied { read } for pid=7762 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 274.935131][ T7772] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 274.943587][ T30] audit: type=1400 audit(1752665733.040:609): avc: denied { create } for pid=7771 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 274.986153][ T7772] loop1: detected capacity change from 0 to 524287999 [ 275.152830][ T7780] program syz.1.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.193969][ T30] audit: type=1400 audit(1752665733.040:610): avc: denied { read write } for pid=7771 comm="syz.3.471" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 275.739004][ T7775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.750126][ T7775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.767261][ T7775] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.790589][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 277.790606][ T30] audit: type=1400 audit(1752665735.570:620): avc: denied { watch watch_reads } for pid=7794 comm="syz.1.476" path="/90" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 277.819262][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.850685][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.941078][ T7804] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 278.263001][ T30] audit: type=1400 audit(1752665736.800:621): avc: denied { append } for pid=7806 comm="syz.4.480" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.330334][ T7804] loop1: detected capacity change from 0 to 524287999 [ 278.338089][ T30] audit: type=1400 audit(1752665736.800:622): avc: denied { open } for pid=7806 comm="syz.4.480" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 278.749461][ T7805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.372471][ T7805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.378494][ T7805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.442767][ T30] audit: type=1400 audit(1752665736.910:623): avc: denied { append } for pid=7794 comm="syz.1.476" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 279.502757][ T30] audit: type=1400 audit(1752665737.960:624): avc: denied { setopt } for pid=7794 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.622324][ T30] audit: type=1400 audit(1752665738.160:625): avc: denied { ioctl } for pid=7820 comm="syz.3.483" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 279.810090][ T7825] ubi: mtd0 is already attached to ubi0 [ 281.440898][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.446924][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 281.609234][ T7831] loop1: detected capacity change from 0 to 524287999 [ 281.732638][ T7826] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 281.770974][ T7828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.779221][ T7828] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.804209][ T7828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.895726][ T7839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 281.958326][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 283.285979][ T7857] fuse: Unknown parameter 'user_id00000000000000000000' [ 284.072058][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.078205][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.091646][ T30] audit: type=1400 audit(1752665742.580:626): avc: denied { mount } for pid=7864 comm="syz.4.494" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 284.422887][ T30] audit: type=1400 audit(1752665742.960:627): avc: denied { setopt } for pid=7870 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.500695][ T30] audit: type=1400 audit(1752665744.020:628): avc: denied { create } for pid=7884 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 285.507057][ T7876] bridge_slave_0: left allmulticast mode [ 285.587169][ T7876] bridge_slave_0: left promiscuous mode [ 285.641977][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.670979][ T7892] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[7892] [ 285.732223][ T30] audit: type=1400 audit(1752665744.020:629): avc: denied { read } for pid=7875 comm="syz.4.497" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.804128][ T7876] bridge_slave_1: left allmulticast mode [ 285.816500][ T7897] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 285.816500][ T7897] The task syz.3.500 (7897) triggered the difference, watch for misbehavior. [ 285.832527][ T7876] bridge_slave_1: left promiscuous mode [ 285.863161][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.873348][ T7894] overlayfs: failed to resolve './file0': -2 [ 285.908863][ T30] audit: type=1400 audit(1752665744.020:630): avc: denied { ioctl } for pid=7875 comm="syz.4.497" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.948495][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 285.976715][ T5153] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 285.995771][ T7876] bond0: (slave bond_slave_0): Releasing backup interface [ 286.071489][ T7876] bond0: (slave bond_slave_1): Releasing backup interface [ 286.078940][ T30] audit: type=1400 audit(1752665744.020:631): avc: denied { bind } for pid=7884 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 286.156089][ T7876] team0: Port device team_slave_0 removed [ 286.173249][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 286.184247][ T30] audit: type=1400 audit(1752665744.020:632): avc: denied { write } for pid=7884 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 286.191170][ T55] usb 5-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 286.210924][ T7876] team0: Port device team_slave_1 removed [ 286.232907][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.246300][ T30] audit: type=1400 audit(1752665744.370:633): avc: denied { write } for pid=7895 comm="syz.2.502" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 286.269792][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.286081][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.296142][ T55] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 286.299061][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.497723][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.520451][ T55] usb 5-1: Product: syz [ 286.524649][ T55] usb 5-1: Manufacturer: syz [ 286.529249][ T55] usb 5-1: SerialNumber: syz [ 286.567044][ T55] usb 5-1: config 0 descriptor?? [ 286.791708][ T7906] program syz.1.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.715075][ T5902] usb 5-1: USB disconnect, device number 2 [ 288.030053][ T7915] 9pnet_virtio: no channels available for device syz [ 288.522274][ T7916] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[7916] [ 288.563036][ T7916] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 288.570121][ T7916] overlayfs: failed to set xattr on upper [ 288.576020][ T7916] overlayfs: ...falling back to redirect_dir=nofollow. [ 288.582973][ T7916] overlayfs: ...falling back to index=off. [ 288.588812][ T7916] overlayfs: ...falling back to uuid=null. [ 288.594780][ T7916] overlayfs: maximum fs stacking depth exceeded [ 289.627390][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'. [ 290.019214][ T7925] overlayfs: missing 'lowerdir' [ 290.032559][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 290.042218][ T5830] Bluetooth: hci2: Injecting HCI hardware error event [ 290.052438][ T5153] Bluetooth: hci2: hardware error 0x00 [ 292.650566][ T5153] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 293.181358][ T7953] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7953] [ 293.217442][ T7953] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 293.224644][ T7953] overlayfs: failed to set xattr on upper [ 293.230444][ T7953] overlayfs: ...falling back to redirect_dir=nofollow. [ 293.237368][ T7953] overlayfs: ...falling back to index=off. [ 293.243395][ T7953] overlayfs: ...falling back to uuid=null. [ 293.249309][ T7953] overlayfs: maximum fs stacking depth exceeded [ 293.465225][ T7950] 9pnet_virtio: no channels available for device syz [ 293.524546][ T7956] program syz.0.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.495229][ T30] audit: type=1400 audit(1752665754.030:634): avc: denied { create } for pid=7967 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.515704][ T30] audit: type=1400 audit(1752665754.030:635): avc: denied { write } for pid=7967 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.539588][ T30] audit: type=1400 audit(1752665754.080:636): avc: denied { write } for pid=7969 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.569897][ T30] audit: type=1400 audit(1752665754.100:637): avc: denied { module_request } for pid=7967 comm="syz.4.520" kmod="net-pf-10-proto-254-type-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 295.638463][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 296.152659][ T30] audit: type=1400 audit(1752665754.150:638): avc: denied { sqpoll } for pid=7967 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 296.497779][ T30] audit: type=1400 audit(1752665754.150:639): avc: denied { create } for pid=7967 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.728483][ T30] audit: type=1400 audit(1752665754.150:640): avc: denied { ioctl } for pid=7967 comm="syz.4.520" path="socket:[15386]" dev="sockfs" ino=15386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 298.493184][ T30] audit: type=1400 audit(1752665754.150:641): avc: denied { bind } for pid=7967 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 298.633755][ T30] audit: type=1400 audit(1752665754.160:642): avc: denied { connect } for pid=7967 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 298.733936][ T30] audit: type=1400 audit(1752665754.170:643): avc: denied { setopt } for pid=7967 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 298.842505][ T7994] loop1: detected capacity change from 0 to 524287999 [ 298.876880][ T7991] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 299.416410][ T7993] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.426293][ T8004] fuse: Bad value for 'fd' [ 299.431023][ T7993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.443156][ T8005] fuse: Bad value for 'fd' [ 301.797392][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.655071][ T8048] geneve3: entered promiscuous mode [ 303.663325][ T8048] geneve3: entered allmulticast mode [ 303.679225][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 303.679241][ T30] audit: type=1400 audit(1752665762.210:648): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 303.706609][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.860659][ T30] audit: type=1400 audit(1752665762.390:649): avc: denied { search } for pid=5497 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.965976][ T30] audit: type=1400 audit(1752665762.420:650): avc: denied { search } for pid=5497 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.060616][ T30] audit: type=1400 audit(1752665762.420:651): avc: denied { search } for pid=5497 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.082965][ T30] audit: type=1400 audit(1752665762.420:652): avc: denied { read } for pid=5497 comm="dhcpcd" name="n102" dev="tmpfs" ino=3752 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.138801][ T8056] loop1: detected capacity change from 0 to 524287999 [ 304.162316][ T8052] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 304.176261][ T30] audit: type=1400 audit(1752665762.420:653): avc: denied { open } for pid=5497 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3752 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.221146][ T30] audit: type=1400 audit(1752665762.420:654): avc: denied { getattr } for pid=5497 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=3752 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.404893][ T30] audit: type=1400 audit(1752665762.930:655): avc: denied { read open } for pid=8063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.510793][ T30] audit: type=1400 audit(1752665762.930:656): avc: denied { getattr } for pid=8063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.537501][ T30] audit: type=1400 audit(1752665762.990:657): avc: denied { ioctl } for pid=8060 comm="syz.4.544" path="socket:[15562]" dev="sockfs" ino=15562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 304.736356][ T8053] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.760622][ T8053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.801773][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 306.800861][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.807083][ T5153] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 307.189661][ T8104] geneve3: entered promiscuous mode [ 307.194995][ T8104] geneve3: entered allmulticast mode [ 310.583725][ T8137] loop1: detected capacity change from 0 to 524287999 [ 310.779998][ T8128] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 310.850827][ T8135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 310.940596][ T8135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.096454][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'. [ 311.865495][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.561'. [ 311.866209][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 311.866223][ T30] audit: type=1400 audit(1752665770.400:669): avc: denied { read } for pid=8124 comm="syz.2.558" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 311.968358][ T30] audit: type=1400 audit(1752665770.440:670): avc: denied { open } for pid=8124 comm="syz.2.558" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.163071][ T30] audit: type=1400 audit(1752665770.460:671): avc: denied { ioctl } for pid=8124 comm="syz.2.558" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.600617][ T8176] binder: BINDER_SET_CONTEXT_MGR already set [ 312.606869][ T8176] binder: 8172:8176 ioctl 4018620d 200000000040 returned -16 [ 313.460647][ T30] audit: type=1400 audit(1752665771.120:672): avc: denied { ioctl } for pid=8172 comm="syz.0.568" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.488376][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.495423][ T8175] program syz.4.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.504866][ T30] audit: type=1400 audit(1752665771.120:673): avc: denied { set_context_mgr } for pid=8172 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 313.524598][ T30] audit: type=1400 audit(1752665771.130:674): avc: denied { map } for pid=8172 comm="syz.0.568" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.645277][ T8179] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[8179] [ 313.688450][ T8179] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 313.695839][ T8179] overlayfs: failed to set xattr on upper [ 313.701781][ T8179] overlayfs: ...falling back to redirect_dir=nofollow. [ 313.708741][ T8179] overlayfs: ...falling back to index=off. [ 313.714742][ T8179] overlayfs: ...falling back to uuid=null. [ 313.720923][ T8179] overlayfs: maximum fs stacking depth exceeded [ 316.056724][ T8205] ubi: mtd0 is already attached to ubi0 [ 316.780913][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.787380][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.877874][ T30] audit: type=1400 audit(1752665775.410:675): avc: denied { mount } for pid=8209 comm="syz.4.580" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 316.960352][ T30] audit: type=1400 audit(1752665775.490:676): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 316.960612][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.119394][ T30] audit: type=1400 audit(1752665775.630:677): avc: denied { create } for pid=8194 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.138848][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.461736][ T30] audit: type=1400 audit(1752665775.630:678): avc: denied { bind } for pid=8194 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.625456][ T30] audit: type=1400 audit(1752665775.630:679): avc: denied { accept } for pid=8194 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 317.902412][ T8221] program syz.2.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.736226][ T8234] ubi: mtd0 is already attached to ubi0 [ 319.345086][ T8228] netlink: 'syz.4.585': attribute type 10 has an invalid length. [ 319.544605][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.609082][ T8228] bond0: (slave wlan1): Opening slave failed [ 320.250675][ T55] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 320.421666][ T30] audit: type=1400 audit(1752665778.740:680): avc: denied { accept } for pid=8239 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 321.666513][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 321.923737][ T55] usb 5-1: device descriptor read/all, error -71 [ 322.004409][ T30] audit: type=1400 audit(1752665778.740:681): avc: denied { read } for pid=8239 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.776942][ T8281] program syz.0.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.935047][ T8287] ubi: mtd0 is already attached to ubi0 [ 327.539070][ T5153] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 327.754329][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 327.880601][ T30] audit: type=1400 audit(1752665786.410:682): avc: denied { getopt } for pid=8293 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.899903][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.941968][ T30] audit: type=1400 audit(1752665786.410:683): avc: denied { read } for pid=8293 comm="syz.1.603" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 328.010489][ T30] audit: type=1400 audit(1752665786.410:684): avc: denied { open } for pid=8293 comm="syz.1.603" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 328.469040][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 328.921819][ T8328] program syz.0.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.932363][ T8338] ubi: mtd0 is already attached to ubi0 [ 330.531978][ T8336] program syz.0.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.539143][ T8362] binder: BINDER_SET_CONTEXT_MGR already set [ 332.545275][ T8362] binder: 8359:8362 ioctl 4018620d 200000000040 returned -16 [ 334.878854][ T8377] program syz.0.623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.812101][ T8409] geneve2: entered promiscuous mode [ 338.821707][ T8409] geneve2: entered allmulticast mode [ 339.324592][ T8419] program syz.1.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.352164][ T8421] program syz.3.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.465772][ T30] audit: type=1400 audit(1752665800.870:685): avc: denied { call } for pid=8428 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 344.078179][ T8460] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 344.125949][ T8460] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 344.271934][ T8470] geneve3: entered promiscuous mode [ 344.277312][ T8470] geneve3: entered allmulticast mode [ 345.169913][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 345.495714][ T24] usb 4-1: config 0 has no interfaces? [ 345.538452][ T8490] program syz.4.648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.618077][ T30] audit: type=1400 audit(1752665804.140:686): avc: denied { audit_write } for pid=8487 comm="syz.0.647" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 346.496087][ T30] audit: type=1800 audit(1752665805.030:687): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.646" name="/bus" dev="overlay" ino=730 res=0 errno=0 [ 346.571061][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 346.677742][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.728354][ T24] usb 4-1: Product: syz [ 346.825978][ T24] usb 4-1: Manufacturer: syz [ 346.831904][ T24] usb 4-1: SerialNumber: syz [ 346.846248][ T24] usb 4-1: config 0 descriptor?? [ 348.004305][ T8512] ubi: mtd0 is already attached to ubi0 [ 348.822652][ T9] usb 4-1: USB disconnect, device number 6 [ 349.569794][ T30] audit: type=1400 audit(1752665808.100:688): avc: denied { read } for pid=8522 comm="syz.0.654" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 349.602445][ T30] audit: type=1400 audit(1752665808.100:689): avc: denied { open } for pid=8522 comm="syz.0.654" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 349.850734][ T5902] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 350.176983][ T30] audit: type=1400 audit(1752665808.690:690): avc: denied { read } for pid=8520 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 350.210469][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 350.251152][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.356365][ T5902] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 350.365688][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.381200][ T5902] usb 1-1: config 0 descriptor?? [ 350.399148][ T5902] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 350.476312][ T30] audit: type=1400 audit(1752665809.010:691): avc: denied { read } for pid=5187 comm="acpid" name="mouse1" dev="devtmpfs" ino=2862 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.604552][ T30] audit: type=1400 audit(1752665809.010:692): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2862 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.843671][ T8524] netlink: 'syz.0.654': attribute type 4 has an invalid length. [ 351.965817][ T8547] program syz.1.661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.831688][ T30] audit: type=1400 audit(1752665811.370:693): avc: denied { ioctl } for pid=8522 comm="syz.0.654" path="socket:[16897]" dev="sockfs" ino=16897 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.016548][ T5187] bcm5974 1-1:0.0: could not read from device [ 353.035340][ T5902] bcm5974 1-1:0.0: could not read from device [ 353.050249][ T5902] input: failed to attach handler mousedev to device input6, error: -5 [ 353.076230][ T5902] usb 1-1: USB disconnect, device number 5 [ 353.091491][ T5187] bcm5974 1-1:0.0: could not read from device [ 355.096586][ T8565] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 355.221629][ T8565] loop1: detected capacity change from 0 to 524287999 [ 356.519554][ T8572] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 357.095154][ T8572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 358.679347][ T8602] ubi: mtd0 is already attached to ubi0 [ 359.120482][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 359.747343][ T30] audit: type=1400 audit(1752665818.280:694): avc: denied { ioctl } for pid=8611 comm="syz.3.681" path="socket:[17558]" dev="sockfs" ino=17558 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 359.819762][ T8616] bridge_slave_0: left allmulticast mode [ 359.825988][ T8616] bridge_slave_0: left promiscuous mode [ 359.826455][ T30] audit: type=1400 audit(1752665818.370:695): avc: denied { sys_module } for pid=8611 comm="syz.3.681" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 359.832103][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.884735][ T8619] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 359.918661][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.680'. [ 359.948250][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.680'. [ 359.965668][ T8616] bridge_slave_1: left allmulticast mode [ 359.995007][ T8616] bridge_slave_1: left promiscuous mode [ 360.014401][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.108808][ T8616] bond0: (slave bond_slave_0): Releasing backup interface [ 360.152585][ T8616] bond0: (slave bond_slave_1): Releasing backup interface [ 360.214806][ T8616] team0: Port device team_slave_0 removed [ 360.257121][ T8616] team0: Port device team_slave_1 removed [ 360.270334][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.279748][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.300637][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.308214][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.309861][ T5916] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 360.337134][ T8616] bond1: (slave geneve2): Releasing active interface [ 360.373149][ T8616] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 360.384377][ T8616] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 360.395060][ T8616] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 360.427479][ T8616] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 360.467662][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 360.530473][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 360.546757][ T5916] usb 4-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 360.558665][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.589879][ T8619] bond0: (slave wlan1): Opening slave failed [ 360.636099][ T5916] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 360.688465][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.727032][ T5916] usb 4-1: Product: syz [ 360.746296][ T5916] usb 4-1: Manufacturer: syz [ 360.815155][ T5916] usb 4-1: SerialNumber: syz [ 360.928731][ T5916] usb 4-1: config 0 descriptor?? [ 361.753732][ T5902] usb 4-1: USB disconnect, device number 7 [ 361.881274][ T30] audit: type=1400 audit(1752665820.420:696): avc: denied { ioctl } for pid=8624 comm="syz.1.682" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 362.684641][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 363.230419][ T30] audit: type=1400 audit(1752665821.760:697): avc: denied { connect } for pid=8658 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 363.327502][ T8662] ubi: mtd0 is already attached to ubi0 [ 363.333349][ T30] audit: type=1400 audit(1752665821.760:698): avc: denied { setopt } for pid=8658 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 363.560078][ T30] audit: type=1400 audit(1752665821.920:699): avc: denied { bind } for pid=8658 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 364.457422][ T30] audit: type=1400 audit(1752665822.990:700): avc: denied { create } for pid=8673 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.292990][ T30] audit: type=1400 audit(1752665822.990:701): avc: denied { setopt } for pid=8673 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.539284][ T30] audit: type=1400 audit(1752665823.220:702): avc: denied { read } for pid=8673 comm="syz.4.695" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 365.730642][ T30] audit: type=1400 audit(1752665823.220:703): avc: denied { open } for pid=8673 comm="syz.4.695" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 365.755944][ T30] audit: type=1400 audit(1752665823.230:704): avc: denied { ioctl } for pid=8673 comm="syz.4.695" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 366.602572][ T8686] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[8686] [ 366.647554][ T8686] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 366.654606][ T8686] overlayfs: failed to set xattr on upper [ 366.660343][ T8686] overlayfs: ...falling back to redirect_dir=nofollow. [ 366.667251][ T8686] overlayfs: ...falling back to index=off. [ 366.673101][ T8686] overlayfs: ...falling back to uuid=null. [ 366.678936][ T8686] overlayfs: maximum fs stacking depth exceeded [ 367.873393][ T8708] overlayfs: missing 'lowerdir' [ 368.101983][ T8713] ubi: mtd0 is already attached to ubi0 [ 368.840730][ T8722] ubi: mtd0 is already attached to ubi0 [ 368.996589][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.009647][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.024875][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.041153][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.055667][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.172487][ T30] audit: type=1400 audit(1752665827.700:705): avc: denied { mounton } for pid=8721 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 371.017909][ T8732] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 371.073696][ T8732] bond0: (slave wlan1): Opening slave failed [ 371.130575][ T5153] Bluetooth: hci5: command tx timeout [ 371.231165][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.298452][ T8750] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[8750] [ 371.323952][ T8750] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 371.331762][ T8750] overlayfs: failed to set xattr on upper [ 371.337541][ T8750] overlayfs: ...falling back to redirect_dir=nofollow. [ 371.366783][ T8750] overlayfs: ...falling back to index=off. [ 371.398111][ T2908] Bluetooth: hci2: Frame reassembly failed (-84) [ 371.454049][ T8750] overlayfs: ...falling back to uuid=null. [ 371.470615][ T8750] overlayfs: maximum fs stacking depth exceeded [ 371.494190][ T5902] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 371.518019][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.639123][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 371.720715][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 371.801359][ T5902] usb 1-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 371.815313][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.908167][ T5902] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 371.988943][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.017976][ T5902] usb 1-1: Product: syz [ 372.466498][ T5902] usb 1-1: Manufacturer: syz [ 372.520718][ T5902] usb 1-1: SerialNumber: syz [ 372.532122][ T5902] usb 1-1: config 0 descriptor?? [ 372.559854][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.702322][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.709511][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.717158][ T8721] bridge_slave_0: entered allmulticast mode [ 372.724802][ T8721] bridge_slave_0: entered promiscuous mode [ 372.746639][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.808302][ T24] usb 1-1: USB disconnect, device number 6 [ 372.820947][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.828320][ T8721] bridge_slave_1: entered allmulticast mode [ 372.835086][ T8721] bridge_slave_1: entered promiscuous mode [ 372.856388][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.867184][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.914236][ T8721] team0: Port device team_slave_0 added [ 373.075277][ T8765] ubi: mtd0 is already attached to ubi0 [ 373.208748][ T5830] Bluetooth: hci5: command tx timeout [ 373.450500][ T5153] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 373.450714][ T5830] Bluetooth: hci2: command 0x1003 tx timeout [ 374.100945][ T8721] team0: Port device team_slave_1 added [ 375.100495][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 375.210745][ T5895] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 375.270642][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.294147][ T5153] Bluetooth: hci5: command tx timeout [ 375.302662][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 375.361780][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.382628][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 375.397307][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 375.413488][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.424952][ T5895] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 375.434521][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 375.449105][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.547408][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.571596][ T5895] usb 4-1: config 0 descriptor?? [ 375.611857][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.651199][ T24] usb 2-1: Product: syz [ 375.663421][ T24] usb 2-1: Manufacturer: syz [ 375.695133][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 375.719937][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 375.752147][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 375.758242][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 376.029722][ T5895] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 376.174284][ T60] bond0 (unregistering): Released all slaves [ 376.218846][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.226446][ C1] usb 4-1: input irq status -75 received [ 376.226960][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.258408][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.268621][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.319135][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.346019][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.858684][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.883966][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 6 bytes [ 376.895114][ T30] audit: type=1400 audit(1752665835.420:706): avc: denied { read write } for pid=8772 comm="syz.1.717" name="cdc-wdm0" dev="devtmpfs" ino=2878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 376.922319][ T8796] capability: warning: `syz.4.725' uses deprecated v2 capabilities in a way that may be insecure [ 376.942378][ T30] audit: type=1400 audit(1752665835.420:707): avc: denied { open } for pid=8772 comm="syz.1.717" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 377.181073][ T30] audit: type=1400 audit(1752665835.700:708): avc: denied { execute } for pid=8774 comm="syz.3.718" dev="hugetlbfs" ino=18173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 377.308849][ T30] audit: type=1400 audit(1752665835.700:709): avc: denied { execute_no_trans } for pid=8774 comm="syz.3.718" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=18173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 377.339167][ T30] audit: type=1400 audit(1752665835.700:710): avc: denied { read write } for pid=8774 comm="syz.3.718" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 377.362524][ T5153] Bluetooth: hci5: command tx timeout [ 377.367285][ T8721] hsr_slave_0: entered promiscuous mode [ 377.373328][ T30] audit: type=1400 audit(1752665835.700:711): avc: denied { open } for pid=8774 comm="syz.3.718" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 377.399257][ T8721] hsr_slave_1: entered promiscuous mode [ 377.417231][ T8721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.426311][ T30] audit: type=1400 audit(1752665835.780:712): avc: denied { mounton } for pid=8799 comm="syz.0.726" path="/151/file0/bus" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 377.441906][ T8721] Cannot create hsr debugfs directory [ 377.468326][ T30] audit: type=1400 audit(1752665835.820:713): avc: denied { unlink } for pid=8799 comm="syz.0.726" name="#68" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 377.490292][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.513946][ T30] audit: type=1400 audit(1752665835.840:714): avc: denied { mount } for pid=8799 comm="syz.0.726" name="/" dev="overlay" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 377.548716][ T30] audit: type=1400 audit(1752665835.900:715): avc: denied { create } for pid=8804 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.298864][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.313700][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.358538][ T5916] usb 2-1: USB disconnect, device number 3 [ 378.375899][ T60] hsr_slave_0: left promiscuous mode [ 378.405964][ T5887] usb 4-1: USB disconnect, device number 8 [ 378.449076][ T60] hsr_slave_1: left promiscuous mode [ 383.849707][ T60] veth1_macvtap: left promiscuous mode [ 383.950843][ T60] veth0_macvtap: left promiscuous mode [ 383.956530][ T60] veth1_vlan: left promiscuous mode [ 383.985131][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 383.985147][ T30] audit: type=1400 audit(1752665836.150:732): avc: denied { map_create } for pid=8809 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 384.083897][ T60] veth0_vlan: left promiscuous mode [ 384.101089][ T30] audit: type=1400 audit(1752665836.210:733): avc: denied { read } for pid=8809 comm="syz.4.729" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 384.692014][ T30] audit: type=1400 audit(1752665836.210:734): avc: denied { open } for pid=8809 comm="syz.4.729" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 384.717004][ T30] audit: type=1400 audit(1752665836.220:735): avc: denied { read } for pid=8809 comm="syz.4.729" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 384.740051][ T30] audit: type=1400 audit(1752665836.220:736): avc: denied { open } for pid=8809 comm="syz.4.729" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 384.824507][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 384.840526][ T30] audit: type=1400 audit(1752665836.230:737): avc: denied { ioctl } for pid=8809 comm="syz.4.729" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 384.999022][ T8832] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[8832] [ 385.000569][ T8833] overlayfs: failed to resolve './file0': -2 [ 385.073052][ T30] audit: type=1400 audit(1752665836.360:738): avc: denied { map } for pid=8809 comm="syz.4.729" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 385.300620][ T30] audit: type=1400 audit(1752665836.360:739): avc: denied { execute } for pid=8809 comm="syz.4.729" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 385.372817][ T30] audit: type=1400 audit(1752665836.520:740): avc: denied { name_bind } for pid=8813 comm="syz.0.728" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 385.395175][ T30] audit: type=1400 audit(1752665836.540:741): avc: denied { node_bind } for pid=8813 comm="syz.0.728" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 385.823782][ T8848] 9pnet_fd: Insufficient options for proto=fd [ 386.053465][ T8849] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[8849] [ 386.053892][ T8851] overlayfs: failed to resolve './file0': -2 [ 389.283210][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 389.283227][ T30] audit: type=1400 audit(1752665847.820:801): avc: denied { prog_run } for pid=8867 comm="syz.0.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 389.491042][ T30] audit: type=1400 audit(1752665848.020:802): avc: denied { create } for pid=8867 comm="syz.0.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 389.992443][ T30] audit: type=1400 audit(1752665848.130:803): avc: denied { map_read map_write } for pid=8871 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.930689][ T30] audit: type=1400 audit(1752665849.130:804): avc: denied { create } for pid=8875 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 391.034544][ T30] audit: type=1400 audit(1752665849.140:805): avc: denied { create } for pid=8875 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 391.054319][ T30] audit: type=1400 audit(1752665849.150:806): avc: denied { setopt } for pid=8875 comm="syz.3.745" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 391.075194][ T30] audit: type=1400 audit(1752665849.150:807): avc: denied { read } for pid=8875 comm="syz.3.745" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 391.105436][ T30] audit: type=1400 audit(1752665849.150:808): avc: denied { open } for pid=8875 comm="syz.3.745" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 391.265516][ T8893] netlink: 'syz.4.746': attribute type 10 has an invalid length. [ 391.281756][ T30] audit: type=1400 audit(1752665849.540:809): avc: denied { ioctl } for pid=8879 comm="syz.4.746" path="socket:[18286]" dev="sockfs" ino=18286 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.795203][ T30] audit: type=1400 audit(1752665849.540:810): avc: denied { module_request } for pid=8879 comm="syz.4.746" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 391.842652][ T8893] bond0: (slave wlan1): Opening slave failed [ 393.075436][ T8721] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 393.530765][ T8721] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 393.607371][ T5948] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 393.643368][ T8721] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 393.696378][ T8721] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 393.770472][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 393.797849][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 393.816432][ T5948] usb 5-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 393.901356][ T5948] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 393.920659][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.949450][ T5948] usb 5-1: Product: syz [ 393.968971][ T5948] usb 5-1: Manufacturer: syz [ 394.652221][ T8940] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 394.652221][ T8940] program syz.3.754 not setting count and/or reply_len properly [ 394.668960][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 394.668973][ T30] audit: type=1400 audit(1752665853.190:834): avc: denied { ioctl } for pid=8929 comm="syz.3.754" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 394.721229][ T5948] usb 5-1: SerialNumber: syz [ 396.421992][ T5948] usb 5-1: config 0 descriptor?? [ 396.428236][ T5948] usb 5-1: can't set config #0, error -71 [ 396.469787][ T5948] usb 5-1: USB disconnect, device number 5 [ 396.635570][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.683375][ T8946] program syz.4.756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.692650][ T30] audit: type=1400 audit(1752665855.210:835): avc: denied { create } for pid=8944 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.787517][ T8949] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[8949] [ 396.882955][ T8954] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 396.889916][ T8954] overlayfs: failed to set xattr on upper [ 397.034011][ T8954] overlayfs: ...falling back to redirect_dir=nofollow. [ 397.096477][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.494746][ T8954] overlayfs: ...falling back to index=off. [ 397.501055][ T8954] overlayfs: ...falling back to uuid=null. [ 397.506947][ T8954] overlayfs: maximum fs stacking depth exceeded [ 397.507085][ T30] audit: type=1400 audit(1752665855.220:836): avc: denied { setopt } for pid=8944 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 397.533900][ T30] audit: type=1400 audit(1752665855.300:837): avc: denied { create } for pid=8944 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 397.555641][ T30] audit: type=1400 audit(1752665855.540:838): avc: denied { write } for pid=8944 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 397.585784][ T8942] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.592982][ T8942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.735277][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.742488][ T8942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.914282][ T8721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.948514][ T8721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.019876][ T30] audit: type=1400 audit(1752665856.520:839): avc: denied { create } for pid=8966 comm="syz.4.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 398.832561][ T30] audit: type=1400 audit(1752665857.070:840): avc: denied { read } for pid=8959 comm="syz.1.760" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 399.460511][ T30] audit: type=1400 audit(1752665857.070:841): avc: denied { open } for pid=8959 comm="syz.1.760" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 399.484153][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.610481][ T30] audit: type=1400 audit(1752665857.220:842): avc: denied { ioctl } for pid=8959 comm="syz.1.760" path="/dev/usbmon1" dev="devtmpfs" ino=717 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 399.635560][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.766137][ T30] audit: type=1400 audit(1752665858.180:843): avc: denied { read write } for pid=8966 comm="syz.4.762" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 399.793211][ T30] audit: type=1400 audit(1752665858.180:844): avc: denied { open } for pid=8966 comm="syz.4.762" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 399.818149][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.721861][ T30] audit: type=1400 audit(1752665859.260:845): avc: denied { ioctl } for pid=8992 comm="syz.4.765" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 400.746319][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.349254][ T9003] ubi: mtd0 is already attached to ubi0 [ 401.765340][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.911172][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 403.429279][ T9036] program syz.0.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.278580][ T9041] team0: Device gtp0 is up. Set it down before adding it as a team port [ 406.850072][ T30] audit: type=1400 audit(1752665865.380:846): avc: denied { mounton } for pid=9059 comm="syz.3.776" path="/163/file0" dev="tmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 406.908543][ T30] audit: type=1400 audit(1752665865.440:847): avc: denied { mount } for pid=9059 comm="syz.3.776" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 406.945347][ T8721] veth0_vlan: entered promiscuous mode [ 407.080341][ T8721] veth1_vlan: entered promiscuous mode [ 407.095349][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 407.198753][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 407.383721][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 407.414570][ T30] audit: type=1400 audit(1752665865.910:848): avc: denied { create } for pid=9072 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 407.785324][ T30] audit: type=1400 audit(1752665865.970:849): avc: denied { bind } for pid=9072 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 407.804525][ T30] audit: type=1400 audit(1752665865.990:850): avc: denied { write } for pid=9072 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 407.863731][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 407.970883][ T30] audit: type=1400 audit(1752665866.500:851): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 408.190110][ T8721] veth0_macvtap: entered promiscuous mode [ 408.227742][ T8721] veth1_macvtap: entered promiscuous mode [ 408.277454][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.323107][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.485314][ T9093] program syz.1.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.511214][ T8721] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.520036][ T8721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.676758][ T8721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.710481][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 408.778344][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 409.660035][ T8721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.746742][ T9107] loop8: detected capacity change from 0 to 16384 [ 409.757955][ T30] audit: type=1400 audit(1752665868.280:852): avc: denied { read } for pid=9106 comm="syz.0.784" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 409.810524][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 409.824840][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.887205][ T30] audit: type=1400 audit(1752665868.280:853): avc: denied { open } for pid=9106 comm="syz.0.784" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 409.897388][ T5916] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 410.879102][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.947413][ T5916] usb 4-1: config 0 descriptor?? [ 410.977539][ T30] audit: type=1400 audit(1752665868.280:854): avc: denied { ioctl } for pid=9106 comm="syz.0.784" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 411.027881][ T30] audit: type=1400 audit(1752665868.280:855): avc: denied { getopt } for pid=9106 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.071700][ T9109] loop8: detected capacity change from 16384 to 0 [ 411.276754][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 411.277334][ T6029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.286240][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 411.303519][ T5916] usb 4-1: USB disconnect, device number 9 [ 411.355424][ T6029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.739645][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.752527][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.780678][ T5887] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 411.930634][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 412.019599][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 412.112858][ T5887] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 412.155430][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.202440][ T5887] usb 1-1: config 0 descriptor?? [ 412.524389][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 412.534279][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 412.543754][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 412.556680][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 412.613310][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 412.613328][ T30] audit: type=1400 audit(1752665871.140:872): avc: denied { read } for pid=5187 comm="acpid" name="mouse1" dev="devtmpfs" ino=2890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.663623][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 412.747922][ T30] audit: type=1400 audit(1752665871.140:873): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 413.387792][ T9158] netlink: 'syz.0.788': attribute type 4 has an invalid length. [ 414.072824][ T30] audit: type=1400 audit(1752665872.600:874): avc: denied { ioctl } for pid=9152 comm="syz.3.793" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 414.128465][ T9156] 9pnet_virtio: no channels available for device syz [ 414.175407][ T30] audit: type=1400 audit(1752665872.710:875): avc: denied { write } for pid=9161 comm="syz.3.795" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 414.338181][ T5153] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 414.418395][ T5187] bcm5974 1-1:0.0: could not read from device [ 414.446589][ T30] audit: type=1400 audit(1752665872.980:876): avc: denied { write } for pid=9164 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 414.469529][ T5887] bcm5974 1-1:0.0: could not read from device [ 414.521128][ T9170] ubi: mtd0 is already attached to ubi0 [ 414.533121][ T5187] bcm5974 1-1:0.0: could not read from device [ 414.554085][ T5887] input: failed to attach handler mousedev to device input7, error: -5 [ 414.575742][ T5187] bcm5974 1-1:0.0: could not read from device [ 414.591223][ T5887] usb 1-1: USB disconnect, device number 7 [ 414.592295][ T30] audit: type=1400 audit(1752665873.120:877): avc: denied { getopt } for pid=9138 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 415.341173][ T30] audit: type=1400 audit(1752665873.870:878): avc: denied { accept } for pid=9195 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 415.439318][ T30] audit: type=1400 audit(1752665873.870:879): avc: denied { setopt } for pid=9195 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 415.461400][ T30] audit: type=1400 audit(1752665873.870:880): avc: denied { read } for pid=9195 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 416.362858][ T30] audit: type=1400 audit(1752665874.900:881): avc: denied { create } for pid=9186 comm="syz.3.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 417.031195][ T9234] 9pnet_virtio: no channels available for device syz [ 417.131361][ T9229] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 417.189870][ T9229] loop1: detected capacity change from 0 to 524287999 [ 418.124360][ T9237] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 418.145859][ T9237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.193136][ T9237] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 418.219375][ T9237] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 418.270286][ T9237] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 418.410184][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 418.410194][ T30] audit: type=1400 audit(1752665876.940:888): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 419.178756][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.808'. [ 419.235900][ T9237] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 420.209972][ T30] audit: type=1400 audit(1752665878.740:889): avc: denied { mount } for pid=9279 comm="syz.5.812" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 420.640664][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 420.646769][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 421.229234][ T9298] ptrace attach of "./syz-executor exec"[8721] was attempted by "./syz-executor exec"[9298] [ 421.273296][ T9298] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 421.292534][ T9298] overlayfs: failed to set xattr on upper [ 421.310570][ T9298] overlayfs: ...falling back to redirect_dir=nofollow. [ 421.329802][ T9298] overlayfs: ...falling back to index=off. [ 421.336093][ T9298] overlayfs: ...falling back to uuid=null. [ 421.342002][ T9298] overlayfs: maximum fs stacking depth exceeded [ 422.720495][ T5153] Bluetooth: hci5: command 0x0c1a tx timeout [ 422.726607][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 423.064051][ T30] audit: type=1400 audit(1752665881.600:890): avc: denied { cmd } for pid=9311 comm="syz.0.818" path="socket:[20260]" dev="sockfs" ino=20260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 423.595793][ T30] audit: type=1400 audit(1752665881.840:891): avc: denied { connect } for pid=9317 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 423.615447][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.476506][ T30] audit: type=1400 audit(1752665881.850:892): avc: denied { write } for pid=9317 comm="syz.3.820" path="socket:[19442]" dev="sockfs" ino=19442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 424.810514][ T5153] Bluetooth: hci5: command 0x0c1a tx timeout [ 424.946400][ T9336] 9pnet_virtio: no channels available for device syz [ 425.197525][ T9333] 9pnet_virtio: no channels available for device syz [ 425.580594][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 425.753362][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 425.770829][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 425.852493][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 425.864267][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.895084][ T9] usb 2-1: config 0 descriptor?? [ 425.911728][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 426.437102][ T9352] netlink: 'syz.1.825': attribute type 4 has an invalid length. [ 426.821164][ T9] bcm5974 2-1:0.0: could not read from device [ 426.841200][ T5187] bcm5974 2-1:0.0: could not read from device [ 426.856027][ T9] input: failed to attach handler mousedev to device input8, error: -5 [ 426.902992][ T5187] bcm5974 2-1:0.0: could not read from device [ 426.913744][ T5187] bcm5974 2-1:0.0: could not read from device [ 426.921280][ T9] usb 2-1: USB disconnect, device number 4 [ 427.281467][ T9363] loop1: detected capacity change from 0 to 524287999 [ 427.772420][ T9357] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 427.858363][ T9365] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 427.894188][ T9360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.196812][ T9360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 428.292414][ T30] audit: type=1400 audit(1752665886.830:893): avc: denied { listen } for pid=9368 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 428.314013][ T9360] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 428.461210][ T30] audit: type=1400 audit(1752665886.830:894): avc: denied { accept } for pid=9368 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 430.255933][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 430.390494][ T5153] Bluetooth: hci5: command 0x0c1a tx timeout [ 433.044031][ T36] Bluetooth: hci2: Frame reassembly failed (-84) [ 433.053872][ T9412] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 433.061383][ T5948] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 433.123210][ T9414] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[9414] [ 433.155083][ T9414] overlayfs: failed to resolve './file0': -2 [ 433.390601][ T30] audit: type=1400 audit(1752665891.920:895): avc: denied { create } for pid=9393 comm="syz.5.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.460447][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 433.467091][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.525570][ T5948] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 433.548113][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.566181][ T5948] usb 5-1: config 0 descriptor?? [ 434.037419][ T5948] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 434.292688][ C0] ================================================================== [ 434.300808][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0xf94/0x1030 [ 434.308357][ C0] Read of size 1 at addr ffff88805ae03fff by task syz.3.845/9438 [ 434.316073][ C0] [ 434.318395][ C0] CPU: 0 UID: 0 PID: 9438 Comm: syz.3.845 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 434.318420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.318432][ C0] Call Trace: [ 434.318439][ C0] [ 434.318447][ C0] dump_stack_lvl+0x116/0x1f0 [ 434.318476][ C0] print_report+0xcd/0x610 [ 434.318503][ C0] ? __virt_addr_valid+0x81/0x610 [ 434.318528][ C0] ? __phys_addr+0xe8/0x180 [ 434.318553][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 434.318583][ C0] kasan_report+0xe0/0x110 [ 434.318610][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 434.318640][ C0] mcp2221_raw_event+0xf94/0x1030 [ 434.318662][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 434.318683][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 434.318702][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 434.318726][ C0] hid_irq_in+0x35e/0x870 [ 434.318751][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 434.318773][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 434.318795][ C0] dummy_timer+0x180e/0x3a20 [ 434.318817][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 434.318831][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 434.318843][ C0] ? mark_held_locks+0x49/0x80 [ 434.318858][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 434.318877][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 434.318890][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 434.318910][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 434.318928][ C0] ? read_tsc+0x9/0x20 [ 434.318947][ C0] hrtimer_run_softirq+0x17d/0x350 [ 434.318966][ C0] handle_softirqs+0x219/0x8e0 [ 434.318986][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 434.319006][ C0] __irq_exit_rcu+0x109/0x170 [ 434.319023][ C0] irq_exit_rcu+0x9/0x30 [ 434.319040][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 434.319061][ C0] [ 434.319066][ C0] [ 434.319071][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.319088][ C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 434.319111][ C0] Code: fb 09 00 00 44 8b 05 09 cc 1f 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 df d5 39 00 fb 65 48 8b 1d be e2 46 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 434.319126][ C0] RSP: 0018:ffffc9000389f0b0 EFLAGS: 00000202 [ 434.319140][ C0] RAX: 0000000000005715 RBX: ffff88807d822440 RCX: 0000000000000007 [ 434.319150][ C0] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 434.319160][ C0] RBP: ffffc9000389f0f8 R08: 0000000000000001 R09: 0000000000000001 [ 434.319170][ C0] R10: ffffffff90a98757 R11: 0000000000000001 R12: ffff8880b843a2c0 [ 434.319179][ C0] R13: ffff88802c010000 R14: 0000000000000001 R15: ffff8880b843b130 [ 434.319195][ C0] ? __switch_to+0x783/0x1170 [ 434.319213][ C0] __schedule+0x1172/0x5de0 [ 434.319236][ C0] ? __pfx___schedule+0x10/0x10 [ 434.319254][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 434.319277][ C0] ? mark_held_locks+0x49/0x80 [ 434.319291][ C0] preempt_schedule_irq+0x51/0x90 [ 434.319310][ C0] irqentry_exit+0x36/0x90 [ 434.319330][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 434.319353][ C0] RIP: 0010:cpuset_nodemask_valid_mems_allowed+0x0/0x80 [ 434.319380][ C0] Code: 60 fc ff ff e8 71 49 6b 00 e9 19 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 53 48 89 fb 65 48 8b 2d e7 4c 19 12 e8 4a 6f 04 00 [ 434.319396][ C0] RSP: 0018:ffffc9000389f390 EFLAGS: 00000283 [ 434.319409][ C0] RAX: 000000000005abf1 RBX: ffff88801ca902d8 RCX: ffffc9000e88d000 [ 434.319420][ C0] RDX: 0000000000080000 RSI: ffffffff821f41ae RDI: ffff88801ca902d8 [ 434.319432][ C0] RBP: ffff88801ca902d0 R08: 0000000000000004 R09: 0000000000000002 [ 434.319443][ C0] R10: 0000000000000002 R11: 1ffffffff1cb9fa9 R12: ffffc9000389f410 [ 434.319454][ C0] R13: 0000000000000002 R14: 0000000000440dc0 R15: 0000000000000002 [ 434.319467][ C0] ? policy_nodemask+0x42e/0x4e0 [ 434.319492][ C0] policy_nodemask+0x436/0x4e0 [ 434.319516][ C0] alloc_pages_mpol+0x8e/0x550 [ 434.319538][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 434.319562][ C0] alloc_pages_noprof+0x131/0x390 [ 434.319584][ C0] pte_alloc_one+0x1c/0x3a0 [ 434.319598][ C0] __pte_alloc+0x6d/0x3c0 [ 434.319620][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 434.319642][ C0] ? __handle_mm_fault+0x839/0x5490 [ 434.319660][ C0] __handle_mm_fault+0x4358/0x5490 [ 434.319679][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 434.319695][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 434.319719][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 434.319740][ C0] handle_mm_fault+0x589/0xd10 [ 434.319759][ C0] __get_user_pages+0x589/0x3b80 [ 434.319776][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 434.319791][ C0] ? rcu_is_watching+0x12/0xc0 [ 434.319813][ C0] __gup_longterm_locked+0x20d/0x1840 [ 434.319828][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 434.319843][ C0] ? __pfx___gup_longterm_locked+0x10/0x10 [ 434.319863][ C0] pin_user_pages_remote+0xed/0x140 [ 434.319878][ C0] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 434.319895][ C0] ? copy_page_to_iter+0x199/0x1e0 [ 434.319919][ C0] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 434.319945][ C0] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 434.319972][ C0] ? iovec_from_user+0xbb/0x140 [ 434.319994][ C0] process_vm_rw+0x2ff/0x360 [ 434.320015][ C0] ? __pfx_process_vm_rw+0x10/0x10 [ 434.320038][ C0] ? file_init_path+0x4fe/0x760 [ 434.320060][ C0] ? xfd_validate_state+0x61/0x180 [ 434.320081][ C0] ? __task_pid_nr_ns+0x17c/0x500 [ 434.320105][ C0] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 434.320127][ C0] ? do_syscall_64+0x91/0x4c0 [ 434.320147][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 434.320166][ C0] do_syscall_64+0xcd/0x4c0 [ 434.320188][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.320203][ C0] RIP: 0033:0x7fcbb298e929 [ 434.320215][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.320230][ C0] RSP: 002b:00007fcbb376c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 434.320244][ C0] RAX: ffffffffffffffda RBX: 00007fcbb2bb6080 RCX: 00007fcbb298e929 [ 434.320254][ C0] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000285 [ 434.320266][ C0] RBP: 00007fcbb2a10b39 R08: 0000000000000286 R09: 0000000000000000 [ 434.320276][ C0] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 434.320286][ C0] R13: 0000000000000000 R14: 00007fcbb2bb6080 R15: 00007ffd1ab98b98 [ 434.320300][ C0] [ 434.320305][ C0] [ 434.948850][ C0] The buggy address belongs to the physical page: [ 434.955241][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ae03 [ 434.963984][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 434.971081][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 434.979653][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 434.988216][ C0] page dumped because: kasan: bad access detected [ 434.994605][ C0] page_owner tracks the page as freed [ 434.999952][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8953, tgid 8944 (syz.4.756), ts 397015690004, free_ts 418042003536 [ 435.021207][ C0] post_alloc_hook+0x1c0/0x230 [ 435.025959][ C0] get_page_from_freelist+0x1321/0x3890 [ 435.031491][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 435.037370][ C0] alloc_pages_mpol+0x1fb/0x550 [ 435.042211][ C0] new_slab+0x23b/0x330 [ 435.046353][ C0] ___slab_alloc+0xd9c/0x1940 [ 435.051011][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 435.056368][ C0] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 435.062161][ C0] kmalloc_reserve+0x18b/0x2c0 [ 435.066908][ C0] __alloc_skb+0x166/0x380 [ 435.071326][ C0] tcp_stream_alloc_skb+0x34/0x570 [ 435.076424][ C0] tcp_sendmsg_locked+0x12d7/0x42b0 [ 435.081607][ C0] tcp_sendmsg+0x2e/0x50 [ 435.085835][ C0] inet_sendmsg+0xb9/0x140 [ 435.090242][ C0] __sys_sendto+0x43c/0x520 [ 435.094729][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 435.099478][ C0] page last free pid 9251 tgid 9251 stack trace: [ 435.105782][ C0] __free_frozen_pages+0x7fe/0x1180 [ 435.110965][ C0] qlist_free_all+0x4d/0x120 [ 435.115540][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 435.120985][ C0] __kasan_slab_alloc+0x69/0x90 [ 435.125822][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 435.131267][ C0] mas_alloc_nodes+0x18b/0x8b0 [ 435.136017][ C0] mas_node_count_gfp+0x105/0x130 [ 435.141029][ C0] mas_preallocate+0x7e0/0xde0 [ 435.145774][ C0] commit_merge+0x2a8/0x1030 [ 435.150348][ C0] vma_expand+0x3c1/0x910 [ 435.154670][ C0] vma_merge_new_range+0x2c0/0xa00 [ 435.159767][ C0] __mmap_region+0x7f1/0x25e0 [ 435.164429][ C0] mmap_region+0x1ab/0x3f0 [ 435.168831][ C0] do_mmap+0xa3e/0x1210 [ 435.172970][ C0] vm_mmap_pgoff+0x281/0x450 [ 435.177549][ C0] ksys_mmap_pgoff+0x32c/0x5c0 [ 435.182294][ C0] [ 435.184598][ C0] Memory state around the buggy address: [ 435.190208][ C0] ffff88805ae03e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 435.198251][ C0] ffff88805ae03f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 435.206297][ C0] >ffff88805ae03f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 435.214338][ C0] ^ [ 435.222291][ C0] ffff88805ae04000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.230335][ C0] ffff88805ae04080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 435.238377][ C0] ================================================================== [ 435.246420][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 435.253596][ C0] CPU: 0 UID: 0 PID: 9438 Comm: syz.3.845 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 435.265468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.275507][ C0] Call Trace: [ 435.278770][ C0] [ 435.281599][ C0] dump_stack_lvl+0x3d/0x1f0 [ 435.286183][ C0] panic+0x71c/0x800 [ 435.290070][ C0] ? __pfx_panic+0x10/0x10 [ 435.294485][ C0] ? __pfx__printk+0x10/0x10 [ 435.299063][ C0] ? end_report+0x4c/0x170 [ 435.303477][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 435.308667][ C0] check_panic_on_warn+0xab/0xb0 [ 435.313586][ C0] end_report+0x107/0x170 [ 435.317909][ C0] kasan_report+0xee/0x110 [ 435.322320][ C0] ? mcp2221_raw_event+0xf94/0x1030 [ 435.327515][ C0] mcp2221_raw_event+0xf94/0x1030 [ 435.332530][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 435.338327][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 435.344387][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 435.349843][ C0] hid_irq_in+0x35e/0x870 [ 435.354184][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 435.359548][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 435.364744][ C0] dummy_timer+0x180e/0x3a20 [ 435.369350][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 435.374282][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 435.379209][ C0] ? mark_held_locks+0x49/0x80 [ 435.383969][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 435.389776][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 435.394700][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 435.399905][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 435.405611][ C0] ? read_tsc+0x9/0x20 [ 435.409670][ C0] hrtimer_run_softirq+0x17d/0x350 [ 435.414771][ C0] handle_softirqs+0x219/0x8e0 [ 435.419526][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 435.424799][ C0] __irq_exit_rcu+0x109/0x170 [ 435.429463][ C0] irq_exit_rcu+0x9/0x30 [ 435.433691][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 435.439314][ C0] [ 435.442231][ C0] [ 435.445148][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 435.451113][ C0] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 435.457535][ C0] Code: fb 09 00 00 44 8b 05 09 cc 1f 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 df d5 39 00 fb 65 48 8b 1d be e2 46 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 435.477148][ C0] RSP: 0018:ffffc9000389f0b0 EFLAGS: 00000202 [ 435.483208][ C0] RAX: 0000000000005715 RBX: ffff88807d822440 RCX: 0000000000000007 [ 435.491165][ C0] RDX: 0000000000000000 RSI: ffffffff8de32e47 RDI: ffffffff8c158f60 [ 435.499123][ C0] RBP: ffffc9000389f0f8 R08: 0000000000000001 R09: 0000000000000001 [ 435.507080][ C0] R10: ffffffff90a98757 R11: 0000000000000001 R12: ffff8880b843a2c0 [ 435.515034][ C0] R13: ffff88802c010000 R14: 0000000000000001 R15: ffff8880b843b130 [ 435.522997][ C0] ? __switch_to+0x783/0x1170 [ 435.527678][ C0] __schedule+0x1172/0x5de0 [ 435.532176][ C0] ? __pfx___schedule+0x10/0x10 [ 435.537017][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.542207][ C0] ? mark_held_locks+0x49/0x80 [ 435.546966][ C0] preempt_schedule_irq+0x51/0x90 [ 435.551982][ C0] irqentry_exit+0x36/0x90 [ 435.556390][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 435.562358][ C0] RIP: 0010:cpuset_nodemask_valid_mems_allowed+0x0/0x80 [ 435.569287][ C0] Code: 60 fc ff ff e8 71 49 6b 00 e9 19 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 53 48 89 fb 65 48 8b 2d e7 4c 19 12 e8 4a 6f 04 00 [ 435.588879][ C0] RSP: 0018:ffffc9000389f390 EFLAGS: 00000283 [ 435.594931][ C0] RAX: 000000000005abf1 RBX: ffff88801ca902d8 RCX: ffffc9000e88d000 [ 435.602887][ C0] RDX: 0000000000080000 RSI: ffffffff821f41ae RDI: ffff88801ca902d8 [ 435.610841][ C0] RBP: ffff88801ca902d0 R08: 0000000000000004 R09: 0000000000000002 [ 435.618798][ C0] R10: 0000000000000002 R11: 1ffffffff1cb9fa9 R12: ffffc9000389f410 [ 435.626751][ C0] R13: 0000000000000002 R14: 0000000000440dc0 R15: 0000000000000002 [ 435.634707][ C0] ? policy_nodemask+0x42e/0x4e0 [ 435.639640][ C0] policy_nodemask+0x436/0x4e0 [ 435.644394][ C0] alloc_pages_mpol+0x8e/0x550 [ 435.649150][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 435.654518][ C0] alloc_pages_noprof+0x131/0x390 [ 435.659535][ C0] pte_alloc_one+0x1c/0x3a0 [ 435.664029][ C0] __pte_alloc+0x6d/0x3c0 [ 435.668352][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 435.673279][ C0] ? __handle_mm_fault+0x839/0x5490 [ 435.678463][ C0] __handle_mm_fault+0x4358/0x5490 [ 435.683564][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 435.689009][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.694206][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.699394][ C0] handle_mm_fault+0x589/0xd10 [ 435.704146][ C0] __get_user_pages+0x589/0x3b80 [ 435.709075][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 435.714436][ C0] ? rcu_is_watching+0x12/0xc0 [ 435.719197][ C0] __gup_longterm_locked+0x20d/0x1840 [ 435.724553][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 435.729491][ C0] ? __pfx___gup_longterm_locked+0x10/0x10 [ 435.735300][ C0] pin_user_pages_remote+0xed/0x140 [ 435.740486][ C0] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 435.746277][ C0] ? copy_page_to_iter+0x199/0x1e0 [ 435.751386][ C0] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 435.757449][ C0] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 435.764036][ C0] ? iovec_from_user+0xbb/0x140 [ 435.768880][ C0] process_vm_rw+0x2ff/0x360 [ 435.773459][ C0] ? __pfx_process_vm_rw+0x10/0x10 [ 435.778567][ C0] ? file_init_path+0x4fe/0x760 [ 435.783410][ C0] ? xfd_validate_state+0x61/0x180 [ 435.788513][ C0] ? __task_pid_nr_ns+0x17c/0x500 [ 435.793531][ C0] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 435.799155][ C0] ? do_syscall_64+0x91/0x4c0 [ 435.803830][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.809018][ C0] do_syscall_64+0xcd/0x4c0 [ 435.813513][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.819405][ C0] RIP: 0033:0x7fcbb298e929 [ 435.823807][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.843399][ C0] RSP: 002b:00007fcbb376c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 435.851799][ C0] RAX: ffffffffffffffda RBX: 00007fcbb2bb6080 RCX: 00007fcbb298e929 [ 435.859929][ C0] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000285 [ 435.867883][ C0] RBP: 00007fcbb2a10b39 R08: 0000000000000286 R09: 0000000000000000 [ 435.875837][ C0] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 435.883790][ C0] R13: 0000000000000000 R14: 00007fcbb2bb6080 R15: 00007ffd1ab98b98 [ 435.891751][ C0] [ 435.894946][ C0] Kernel Offset: disabled [ 435.899250][ C0] Rebooting in 86400 seconds..