last executing test programs: 51.152634496s ago: executing program 2 (id=1435): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0xd, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x290) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 49.154422904s ago: executing program 2 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 48.097006713s ago: executing program 2 (id=1445): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x40}}, 0x4000010) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001d80)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001ec0), r3) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008014}, 0x24004000) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r6 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r2, 0x80, &(0x7f0000000140)=@in6={0xa, 0x4e24, 0x401, @empty}}) io_uring_enter(r6, 0x2dbe, 0x0, 0x0, 0x0, 0x0) close(0x3) 39.858710052s ago: executing program 2 (id=1467): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x1}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_int(r2, 0x0, 0x22, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) 39.325084764s ago: executing program 2 (id=1473): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrlimit(0xe, &(0x7f0000000180)) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) 16.514958285s ago: executing program 3 (id=1519): read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020}, 0x2020) socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r4 = eventfd(0x401) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r1, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = mq_open(&(0x7f0000001040)='+\x00', 0x40, 0x0, 0x0) lseek(r5, 0x9, 0x0) setitimer(0x1000000, 0x0, 0x0) 14.492832789s ago: executing program 3 (id=1523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000000c0)) 13.372517337s ago: executing program 3 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x400, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000000)='./file0\x00') syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000002c0)={0x68, 0x0, r3, [{0x4, 0x8, 0x3, 0x7, '!\xca.'}, {0x3, 0xd1, 0x2, 0x8, '.\\'}, {0x1, 0x7, 0x0, 0x9}]}, 0x68) 12.289657956s ago: executing program 3 (id=1527): sysfs$1(0x1, &(0x7f0000000000)='^\\.$%&\x00') socket(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r3 = dup(r2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) sendfile(r3, r3, 0x0, 0xffffffff) 10.544622567s ago: executing program 0 (id=1529): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x400000000010, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 9.561188644s ago: executing program 0 (id=1531): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_io_uring_setup(0x4a9, 0x0, &(0x7f0000000000), 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 9.376429307s ago: executing program 3 (id=1532): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x39, &(0x7f00000001c0)=0x1, 0x4) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 8.417865311s ago: executing program 0 (id=1535): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000403a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000000166c1665dfffb000100000000000000000000000000000001ff0200000000000000000000000000013300004600"], 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d000000000001090224"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.432752841s ago: executing program 4 (id=1536): mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd01c8c1c2c57f657a625a688871958b0a40088fc", @ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.055272709s ago: executing program 1 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000280)=0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xbe9, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) 6.255737723s ago: executing program 0 (id=1538): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) 6.175334223s ago: executing program 4 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() mount$9p_unix(0x0, &(0x7f0000000e00)='.\x00', &(0x7f0000000e40), 0x4000, &(0x7f0000000e80)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) epoll_pwait2(r3, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={r4, r5+60000000}, &(0x7f0000000100)={[0x2a]}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) 6.023849428s ago: executing program 1 (id=1540): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r5, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) 5.218398008s ago: executing program 0 (id=1541): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) move_mount(r1, &(0x7f0000000fc0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x165) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.031853604s ago: executing program 1 (id=1542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000800)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000380), &(0x7f0000000400)=r3}, 0x20) 5.024117221s ago: executing program 4 (id=1543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="c61f6b65c4e662a0a5c3fe7b614b98ed0825ea99c9156ccb4d0a1273144cba4fcd32b18eba1b1169c3104425d267253d9dde3a884292a6593cc151240885d2b02bd4d9f55671d28245417fbfcef33121972f43f96f5b55cafc9500e97ad170dc3605dae4c1085431f46655c964f28105dca1a82eb05565b34de6285e58c794b2f2d6ee4504bf1b18ba27dd8661c0c9841358ac22b222c8342b8502470925b9e5fc5b12003fe4f8cda1f659972be91ab4646737138d910c04a79d8fd5a0339898101c665d6eeba87d25", 0xc9}], 0x1}, 0x20000000) recvmsg$can_j1939(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/201, 0xc9}], 0x1}, 0x100) 3.323418837s ago: executing program 1 (id=1544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.284951349s ago: executing program 4 (id=1545): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa001, 0x0) socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) preadv(r2, &(0x7f0000005280)=[{&(0x7f0000004280)=""/4096, 0x1000}], 0x1, 0x9, 0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, &(0x7f00000001c0)) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @raw_data=[0x8, 0x58, 0x1, 0x7, 0x1, 0xd, 0x1b8, 0x4, 0x82, 0x7, 0x5, 0x1, 0x100, 0x5, 0x766f275b, 0x9]}) socket$nl_rdma(0x10, 0x3, 0x14) 2.266883165s ago: executing program 1 (id=1546): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x1002}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x10000000, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 2.011258334s ago: executing program 2 (id=1473): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrlimit(0xe, &(0x7f0000000180)) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) 2.009968298s ago: executing program 4 (id=1547): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) socket$inet6(0xa, 0x3, 0x6) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 933.243057ms ago: executing program 3 (id=1548): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x1407, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40844) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0x2}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) 916.067515ms ago: executing program 1 (id=1549): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0xb0b}, 0x14}}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f00004a5000/0x2000)=nil, 0x2000, 0x13) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x0, 0x7fffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) 42.467965ms ago: executing program 0 (id=1550): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r0 = syz_clone(0xd014100, &(0x7f0000000b40), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="14000000040000000400000007000000000000", @ANYBLOB="000000003db8dfbf6ba20f66000000", @ANYRES32=0x0, @ANYBLOB="020000000400000000"], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 0s ago: executing program 4 (id=1551): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367", 0x13) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0xb20}, 0x48) kernel console output (not intermixed with test programs): [ T10] usb 4-1: USB disconnect, device number 3 [ 248.871590][ T30] audit: type=1400 audit(1759624116.902:572): avc: denied { read write } for pid=7938 comm="syz.2.565" name="sg0" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 248.905223][ T30] audit: type=1400 audit(1759624116.932:573): avc: denied { open } for pid=7938 comm="syz.2.565" path="/dev/sg0" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.099079][ T30] audit: type=1400 audit(1759624117.132:574): avc: denied { bind } for pid=7948 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.220126][ T30] audit: type=1400 audit(1759624117.132:575): avc: denied { setopt } for pid=7948 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.251934][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 249.871962][ T30] audit: type=1400 audit(1759624117.902:576): avc: denied { read } for pid=7953 comm="syz.4.568" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.931830][ T30] audit: type=1400 audit(1759624117.912:577): avc: denied { open } for pid=7953 comm="syz.4.568" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 250.110632][ T30] audit: type=1400 audit(1759624117.962:578): avc: denied { ioctl } for pid=7953 comm="syz.4.568" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 251.528034][ T7973] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 251.548106][ T7973] VFS: Can't find a romfs filesystem on dev nullb0. [ 251.548106][ T7973] [ 253.052338][ T7980] geneve2: entered promiscuous mode [ 253.057651][ T7980] geneve2: entered allmulticast mode [ 255.160500][ T30] audit: type=1400 audit(1759624123.172:579): avc: denied { watch } for pid=8001 comm="syz.1.581" path="/112/file1" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 255.183185][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.362918][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.369182][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.385365][ T30] audit: type=1400 audit(1759624123.172:580): avc: denied { watch_sb } for pid=8001 comm="syz.1.581" path="/112/file1" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 256.419633][ T30] audit: type=1800 audit(1759624124.062:581): pid=8015 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.583" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 256.676007][ T30] audit: type=1400 audit(1759624124.522:582): avc: denied { watch_reads } for pid=8013 comm="syz.2.584" path="/113" dev="tmpfs" ino=595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 256.872484][ T30] audit: type=1400 audit(1759624124.912:583): avc: denied { read } for pid=8018 comm="syz.1.586" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 256.896076][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.968490][ T30] audit: type=1400 audit(1759624124.912:584): avc: denied { open } for pid=8018 comm="syz.1.586" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 259.024965][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'. [ 259.189476][ T30] audit: type=1400 audit(1759624127.092:585): avc: denied { write } for pid=8041 comm="syz.3.591" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.685877][ T30] audit: type=1400 audit(1759624127.102:586): avc: denied { transfer } for pid=8041 comm="syz.3.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 259.835389][ T8050] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.594'. [ 260.048559][ T8050] netlink: zone id is out of range [ 260.088140][ T8050] netlink: zone id is out of range [ 260.550272][ T8050] netlink: zone id is out of range [ 260.591119][ T8050] netlink: get zone limit has 8 unknown bytes [ 263.967928][ T8088] syz_tun: entered allmulticast mode [ 264.043533][ T8088] dvmrp1: entered allmulticast mode [ 264.178564][ T8087] syz_tun: left allmulticast mode [ 265.740872][ T30] audit: type=1400 audit(1759624133.772:587): avc: denied { append } for pid=8108 comm="syz.2.611" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 266.377566][ T30] audit: type=1400 audit(1759624134.412:588): avc: denied { ioctl } for pid=8111 comm="syz.3.612" path="socket:[16970]" dev="sockfs" ino=16970 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.009950][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 267.785760][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 267.792732][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.814679][ T24] usb 3-1: config 0 has no interfaces? [ 267.822535][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.832197][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.840806][ T24] usb 3-1: SerialNumber: syz [ 267.852535][ T24] usb 3-1: config 0 descriptor?? [ 267.867127][ C1] hrtimer: interrupt took 74156 ns [ 269.118556][ T8141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.138331][ T10] usb 3-1: USB disconnect, device number 5 [ 269.237140][ T8146] netlink: 68 bytes leftover after parsing attributes in process `syz.4.618'. [ 269.257508][ T8147] tipc: Started in network mode [ 269.262432][ T8147] tipc: Node identity 7e89ea0b9d51, cluster identity 4711 [ 269.269706][ T8147] tipc: Enabled bearer , priority 0 [ 269.296954][ T8147] syzkaller0: entered promiscuous mode [ 269.302672][ T8147] syzkaller0: entered allmulticast mode [ 269.817313][ T8147] tipc: Resetting bearer [ 269.879661][ T8145] tipc: Resetting bearer [ 270.058635][ T8145] tipc: Disabling bearer [ 271.570844][ T30] audit: type=1400 audit(1759624139.522:589): avc: denied { create } for pid=8167 comm="syz.1.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 272.490610][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.678438][ T30] audit: type=1400 audit(1759624140.702:590): avc: denied { create } for pid=8180 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.708879][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.729735][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=a9.d7 [ 272.747541][ T30] audit: type=1400 audit(1759624140.712:591): avc: denied { ioctl } for pid=8180 comm="syz.4.630" path="socket:[17058]" dev="sockfs" ino=17058 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 273.430558][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.451143][ T30] audit: type=1400 audit(1759624141.032:592): avc: denied { getopt } for pid=8182 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.509844][ T24] usb 4-1: config 0 descriptor?? [ 273.520338][ T24] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 273.989833][ T30] audit: type=1400 audit(1759624142.022:593): avc: denied { execute } for pid=8162 comm="syz.3.625" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 274.095717][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 274.240559][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 275.519617][ T24] usb 4-1: USB disconnect, device number 4 [ 276.727007][ T30] audit: type=1400 audit(1759624144.762:594): avc: denied { write } for pid=8218 comm="syz.4.640" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 276.775092][ T30] audit: type=1400 audit(1759624144.792:595): avc: denied { getopt } for pid=8218 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 276.782800][ T8219] usb usb7: usbfs: process 8219 (syz.4.640) did not claim interface 0 before use [ 277.120602][ T30] audit: type=1400 audit(1759624145.002:596): avc: denied { listen } for pid=8223 comm="syz.2.642" lport=33034 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.680709][ T30] audit: type=1400 audit(1759624145.002:597): avc: denied { accept } for pid=8223 comm="syz.2.642" lport=33034 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.034664][ T30] audit: type=1400 audit(1759624145.002:598): avc: denied { read } for pid=8223 comm="syz.2.642" lport=33034 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 278.160533][ T30] audit: type=1400 audit(1759624145.152:599): avc: denied { setopt } for pid=8223 comm="syz.2.642" lport=33034 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 280.245782][ T30] audit: type=1400 audit(1759624148.212:600): avc: denied { execute_no_trans } for pid=8247 comm="syz.2.649" path="/128/file0" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.345790][ T30] audit: type=1400 audit(1759624148.962:601): avc: denied { create } for pid=8282 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 281.417184][ T30] audit: type=1400 audit(1759624148.972:602): avc: denied { write } for pid=8282 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 281.695143][ T30] audit: type=1400 audit(1759624149.732:603): avc: denied { read write } for pid=8292 comm="syz.2.654" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 282.045529][ T8296] 9pnet_fd: Insufficient options for proto=fd [ 282.051662][ T30] audit: type=1400 audit(1759624149.732:604): avc: denied { open } for pid=8292 comm="syz.2.654" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 282.051715][ T30] audit: type=1400 audit(1759624149.762:605): avc: denied { name_bind } for pid=8292 comm="syz.2.654" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 283.886501][ T30] audit: type=1400 audit(1759624151.862:606): avc: denied { create } for pid=8313 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.360713][ T30] audit: type=1400 audit(1759624151.862:607): avc: denied { connect } for pid=8313 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.381254][ T30] audit: type=1400 audit(1759624151.862:608): avc: denied { write } for pid=8313 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.936776][ T30] audit: type=1400 audit(1759624152.942:609): avc: denied { bind } for pid=8327 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.957024][ T30] audit: type=1400 audit(1759624152.942:610): avc: denied { listen } for pid=8327 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.976822][ T30] audit: type=1400 audit(1759624152.952:611): avc: denied { connect } for pid=8327 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 284.990519][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 285.590721][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 285.601755][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 285.619264][ T10] usb 1-1: config 46 has an invalid interface number: 136 but max is 0 [ 285.654144][ T10] usb 1-1: config 46 contains an unexpected descriptor of type 0x1, skipping [ 285.664063][ T10] usb 1-1: config 46 has no interface number 0 [ 285.670307][ T10] usb 1-1: config 46 interface 136 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 285.687397][ T10] usb 1-1: config 46 interface 136 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 286.422943][ T10] usb 1-1: New USB device found, idVendor=1410, idProduct=a012, bcdDevice=96.94 [ 286.441904][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.450308][ T10] usb 1-1: Product: syz [ 286.455151][ T10] usb 1-1: Manufacturer: syz [ 286.459964][ T10] usb 1-1: SerialNumber: syz [ 286.697304][ T8347] tipc: Enabled bearer , priority 0 [ 286.709403][ T8347] syzkaller0: entered promiscuous mode [ 286.714973][ T8347] syzkaller0: entered allmulticast mode [ 286.774327][ T8347] tipc: Resetting bearer [ 286.827135][ T30] audit: type=1400 audit(1759624154.862:612): avc: denied { bind } for pid=8349 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.849852][ T8343] tipc: Resetting bearer [ 286.862481][ T8351] netlink: 'syz.3.668': attribute type 3 has an invalid length. [ 286.889900][ T8343] tipc: Disabling bearer [ 287.270663][ T30] audit: type=1400 audit(1759624155.272:613): avc: denied { mounton } for pid=8354 comm="syz.2.670" path="/133/file0" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 287.330459][ T10] usb 1-1: USB disconnect, device number 5 [ 287.345222][ T30] audit: type=1400 audit(1759624155.272:614): avc: denied { mount } for pid=8354 comm="syz.2.670" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 287.367063][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.399708][ T30] audit: type=1400 audit(1759624155.272:615): avc: denied { read write } for pid=8354 comm="syz.2.670" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.428098][ T30] audit: type=1400 audit(1759624155.272:616): avc: denied { open } for pid=8354 comm="syz.2.670" path="/133/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.450088][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.457171][ T30] audit: type=1400 audit(1759624155.292:617): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 289.855258][ T30] audit: type=1400 audit(1759624157.822:618): avc: denied { connect } for pid=8381 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.923481][ T30] audit: type=1400 audit(1759624157.822:619): avc: denied { write } for pid=8381 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.110078][ T30] audit: type=1400 audit(1759624157.872:620): avc: denied { bind } for pid=8379 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 290.382308][ T30] audit: type=1400 audit(1759624158.292:621): avc: denied { setopt } for pid=8386 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.476508][ T30] audit: type=1400 audit(1759624158.512:622): avc: denied { bind } for pid=8391 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 291.193311][ T8400] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.683'. [ 291.450620][ T1562] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 291.638622][ T1562] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 291.647033][ T1562] usb 2-1: config 0 has no interface number 0 [ 291.653472][ T1562] usb 2-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 291.667296][ T1562] usb 2-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 291.690480][ T1562] usb 2-1: config 0 interface 49 has no altsetting 0 [ 291.723423][ T1562] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 291.740484][ T1562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.762174][ T1562] usb 2-1: config 0 descriptor?? [ 292.071131][ T1562] usb 2-1: string descriptor 0 read error: -32 [ 292.080616][ T1562] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 293.358703][ T30] audit: type=1400 audit(1759624161.392:623): avc: denied { create } for pid=8422 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 293.485373][ T1562] usb 2-1: USB disconnect, device number 2 [ 293.523101][ T30] audit: type=1400 audit(1759624161.392:624): avc: denied { write } for pid=8422 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 293.973572][ T8453] ptrace attach of "./syz-executor exec"[5831] was attempted by " [ 295.842228][ T30] audit: type=1400 audit(1759624163.882:625): avc: denied { name_bind } for pid=8481 comm="syz.3.696" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 297.020510][ T5881] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 297.240540][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 297.241900][ T5881] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 297.253415][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 297.257290][ T5881] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 297.614199][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.615146][ T5881] usb 3-1: config 220 descriptor has 1 excess byte, ignoring [ 297.642263][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.662542][ T5881] usb 3-1: config 220 has no interface number 2 [ 297.667177][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.692854][ T5881] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 297.745271][ T5881] usb 3-1: config 220 interface 0 has no altsetting 0 [ 297.820288][ T5881] usb 3-1: config 220 interface 76 has no altsetting 0 [ 297.832683][ T5881] usb 3-1: config 220 interface 1 has no altsetting 0 [ 297.865577][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.879510][ T5881] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 297.886759][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.889377][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.911034][ T30] audit: type=1400 audit(1759624165.942:626): avc: denied { unmount } for pid=8510 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 297.941307][ T5881] usb 3-1: Product: syz [ 297.945490][ T5881] usb 3-1: Manufacturer: syz [ 297.977718][ T5881] usb 3-1: SerialNumber: syz [ 297.979309][ T24] usb 4-1: config 0 descriptor?? [ 298.182248][ T8517] trusted_key: encrypted_key: hex blob is missing [ 298.393478][ T5881] uvcvideo 3-1:220.1: Unknown video format c07fffff-ffff-ffff-ffff-ff0500000000 [ 298.764206][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 298.832394][ T5881] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 298.867176][ T5881] uvcvideo 3-1:220.0: No valid video chain found. [ 298.893477][ T5881] usb 3-1: selecting invalid altsetting 0 [ 298.997816][ T5881] usb 3-1: selecting invalid altsetting 0 [ 299.052560][ T5881] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 299.066674][ T5881] usb 3-1: USB disconnect, device number 6 [ 299.418892][ T10] usb 4-1: USB disconnect, device number 5 [ 300.384002][ T30] audit: type=1400 audit(1759624168.422:627): avc: denied { map } for pid=8541 comm="syz.0.716" path="socket:[17909]" dev="sockfs" ino=17909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.442770][ T30] audit: type=1400 audit(1759624168.422:628): avc: denied { read } for pid=8541 comm="syz.0.716" path="socket:[17909]" dev="sockfs" ino=17909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 301.514086][ T8563] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 301.537454][ T8563] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 301.758646][ T8560] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 304.176095][ T30] audit: type=1400 audit(1759624171.412:629): avc: denied { mount } for pid=8573 comm="syz.1.725" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.597161][ T8590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.636356][ T30] audit: type=1400 audit(1759624173.672:630): avc: denied { create } for pid=8606 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.674919][ T30] audit: type=1400 audit(1759624173.672:631): avc: denied { bind } for pid=8606 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.701464][ T30] audit: type=1400 audit(1759624173.672:632): avc: denied { listen } for pid=8606 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.721173][ T30] audit: type=1400 audit(1759624173.672:633): avc: denied { accept } for pid=8606 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.744602][ T30] audit: type=1400 audit(1759624173.732:634): avc: denied { create } for pid=8606 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 305.764223][ T30] audit: type=1400 audit(1759624173.732:635): avc: denied { ioctl } for pid=8606 comm="syz.1.732" path="socket:[18870]" dev="sockfs" ino=18870 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 305.963913][ T8615] netlink: 60 bytes leftover after parsing attributes in process `syz.3.733'. [ 306.444704][ T3466] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.470077][ T3466] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.554832][ T8590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.624850][ T30] audit: type=1400 audit(1759624174.652:636): avc: denied { create } for pid=8619 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.103888][ T3466] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.113297][ T30] audit: type=1400 audit(1759624174.652:637): avc: denied { setopt } for pid=8619 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.127950][ T3466] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.138676][ T30] audit: type=1400 audit(1759624174.652:638): avc: denied { connect } for pid=8619 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 307.161907][ T30] audit: type=1400 audit(1759624174.662:639): avc: denied { write } for pid=8619 comm="syz.1.735" laddr=fe80::4080:4aff:febd:5549 lport=60112 faddr=ff01::1 fport=19973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 309.772095][ T8590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.933637][ T8650] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 310.002494][ T8650] overlayfs: failed to set xattr on upper [ 310.008216][ T8650] overlayfs: ...falling back to redirect_dir=nofollow. [ 310.019389][ T8651] ptrace attach of ""[8653] was attempted by "./syz-executor exec"[8651] [ 310.038149][ T8650] overlayfs: ...falling back to index=off. [ 310.045998][ T8652] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 310.084400][ T8590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.088092][ T8650] overlayfs: ...falling back to uuid=null. [ 310.872863][ T8460] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.898447][ T8460] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.825769][ T8460] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.844411][ T8460] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.760601][ T8681] netlink: 165 bytes leftover after parsing attributes in process `syz.0.747'. [ 314.172415][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 314.172989][ T30] audit: type=1400 audit(1759624182.122:642): avc: denied { kexec_image_load } for pid=8682 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 316.301369][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 316.556018][ T8707] usb usb1: check_ctrlrecip: process 8707 (syz.2.759) requesting ep 01 but needs 81 [ 316.573806][ T30] audit: type=1400 audit(1759624184.562:643): avc: denied { append } for pid=8704 comm="syz.2.759" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 316.725677][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.732145][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.709286][ T30] audit: type=1400 audit(1759624186.742:644): avc: denied { create } for pid=8727 comm="syz.4.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 318.711215][ T8728] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 318.900877][ T30] audit: type=1400 audit(1759624186.742:645): avc: denied { write } for pid=8727 comm="syz.4.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 319.074171][ T8730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.097666][ T8730] bond1: (slave bond2): making interface the new active one [ 319.161038][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.764'. [ 319.180848][ T8730] bond1: (slave bond2): Enslaving as an active interface with an up link [ 319.293138][ T8731] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 319.363697][ T8728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.480505][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 319.692045][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 319.732641][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 319.792158][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.837781][ T10] usb 4-1: Product: syz [ 319.978212][ T10] usb 4-1: Manufacturer: syz [ 320.048839][ T10] usb 4-1: SerialNumber: syz [ 320.196388][ T10] usb 4-1: config 0 descriptor?? [ 322.244534][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.310826][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.451489][ T30] audit: type=1400 audit(1759624190.482:646): avc: denied { append } for pid=8733 comm="syz.3.765" name="audio3" dev="devtmpfs" ino=2853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.950592][ T30] audit: type=1400 audit(1759624190.602:647): avc: denied { read write } for pid=8760 comm="syz.4.772" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 322.983391][ T30] audit: type=1400 audit(1759624190.602:648): avc: denied { open } for pid=8760 comm="syz.4.772" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 323.058036][ T30] audit: type=1400 audit(1759624190.602:649): avc: denied { ioctl } for pid=8760 comm="syz.4.772" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 324.285370][ T975] usb 4-1: USB disconnect, device number 6 [ 326.141268][ T30] audit: type=1400 audit(1759624194.122:650): avc: denied { mount } for pid=8791 comm="syz.3.779" name="/" dev="autofs" ino=18277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 327.010518][ T30] audit: type=1400 audit(1759624194.902:651): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 327.087390][ T8804] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 327.103623][ T30] audit: type=1400 audit(1759624195.112:652): avc: denied { write } for pid=8803 comm="syz.3.782" path="socket:[19457]" dev="sockfs" ino=19457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.314137][ T30] audit: type=1400 audit(1759624195.352:653): avc: denied { connect } for pid=8801 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 327.447065][ T30] audit: type=1400 audit(1759624195.372:654): avc: denied { write } for pid=8801 comm="syz.1.783" path="socket:[19463]" dev="sockfs" ino=19463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 329.452647][ T30] audit: type=1400 audit(1759624197.072:655): avc: denied { create } for pid=8815 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 329.473210][ T30] audit: type=1400 audit(1759624197.072:656): avc: denied { write } for pid=8815 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 329.530787][ T8825] syz.3.789 uses obsolete (PF_INET,SOCK_PACKET) [ 329.544047][ T30] audit: type=1400 audit(1759624197.572:657): avc: denied { ioctl } for pid=8824 comm="syz.3.789" path="socket:[18323]" dev="sockfs" ino=18323 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.418309][ T30] audit: type=1400 audit(1759624199.432:658): avc: denied { module_load } for pid=8838 comm="syz.1.792" path="/158/bus" dev="tmpfs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 331.469679][ T8841] Invalid ELF header magic: != ELF [ 333.219461][ T8860] Driver unsupported XDP return value 0 on prog (id 136) dev N/A, expect packet loss! [ 337.155978][ T8895] netlink: 'syz.2.806': attribute type 21 has an invalid length. [ 337.180814][ T8895] netlink: 128 bytes leftover after parsing attributes in process `syz.2.806'. [ 337.286283][ T8895] netlink: 'syz.2.806': attribute type 5 has an invalid length. [ 337.345042][ T8895] netlink: 'syz.2.806': attribute type 6 has an invalid length. [ 337.360814][ T8895] netlink: 3 bytes leftover after parsing attributes in process `syz.2.806'. [ 338.321068][ T30] audit: type=1400 audit(1759624206.352:659): avc: denied { connect } for pid=8905 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 338.384451][ T30] audit: type=1400 audit(1759624206.402:660): avc: denied { read write } for pid=8911 comm="syz.2.813" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 338.422066][ T30] audit: type=1400 audit(1759624206.402:661): avc: denied { open } for pid=8911 comm="syz.2.813" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 338.559704][ T30] audit: type=1400 audit(1759624206.592:662): avc: denied { read } for pid=8905 comm="syz.1.810" path="socket:[19661]" dev="sockfs" ino=19661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 339.160574][ T30] audit: type=1400 audit(1759624206.722:663): avc: denied { write } for pid=8905 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 339.660813][ T30] audit: type=1400 audit(1759624207.692:664): avc: denied { read } for pid=8929 comm="syz.2.817" path="socket:[20620]" dev="sockfs" ino=20620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.843291][ T8941] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 342.929130][ T30] audit: type=1400 audit(1759624210.962:665): avc: denied { nlmsg_read } for pid=8958 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 343.607622][ T30] audit: type=1400 audit(1759624211.612:666): avc: denied { mount } for pid=8974 comm="syz.2.830" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 344.563454][ T30] audit: type=1400 audit(1759624212.602:667): avc: denied { map } for pid=8988 comm="syz.2.833" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 344.707381][ T30] audit: type=1400 audit(1759624212.702:668): avc: denied { execute } for pid=8988 comm="syz.2.833" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 350.913640][ T30] audit: type=1400 audit(1759624218.792:669): avc: denied { ioctl } for pid=9057 comm="syz.2.850" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 351.228765][ T9065] syz_tun: entered allmulticast mode [ 351.364944][ T9063] syz_tun: left allmulticast mode [ 353.283827][ T30] audit: type=1400 audit(1759624220.932:670): avc: denied { connect } for pid=9082 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 353.331173][ T30] audit: type=1400 audit(1759624221.362:671): avc: denied { read append } for pid=9066 comm="syz.4.856" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.394498][ T9090] gfs2: gfs2 mount does not exist [ 353.744568][ T30] audit: type=1400 audit(1759624221.362:672): avc: denied { open } for pid=9066 comm="syz.4.856" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 354.052736][ T30] audit: type=1400 audit(1759624221.362:673): avc: denied { map } for pid=9066 comm="syz.4.856" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 354.146042][ T30] audit: type=1400 audit(1759624221.362:674): avc: denied { write execute } for pid=9066 comm="syz.4.856" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 354.741982][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 355.458948][ T30] audit: type=1400 audit(1759624223.492:675): avc: denied { shutdown } for pid=9097 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.544473][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 355.612438][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.714259][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 355.806431][ T30] audit: type=1400 audit(1759624223.842:676): avc: denied { create } for pid=9108 comm="syz.1.866" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 355.808129][ T9111] Invalid source name [ 355.831919][ T9111] UBIFS error (pid: 9111): cannot open "./file0", error -22 [ 356.057680][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 356.074214][ T30] audit: type=1400 audit(1759624223.842:677): avc: denied { lock } for pid=9108 comm="syz.1.866" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 356.101252][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.231704][ T10] usb 3-1: config 0 descriptor?? [ 356.298685][ T30] audit: type=1400 audit(1759624223.842:678): avc: denied { ioctl } for pid=9108 comm="syz.1.866" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 356.682252][ T30] audit: type=1400 audit(1759624223.842:679): avc: denied { mounton } for pid=9108 comm="syz.1.866" path="/172/file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 356.993953][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 357.139259][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 357.145559][ T10] HID 045e:07da: Invalid code 768 type 1 [ 357.153997][ T10] HID 045e:07da: Invalid code 769 type 1 [ 357.159869][ T10] HID 045e:07da: Invalid code 770 type 1 [ 357.165714][ T10] HID 045e:07da: Invalid code 771 type 1 [ 357.178698][ T10] HID 045e:07da: Invalid code 772 type 1 [ 357.184537][ T10] HID 045e:07da: Invalid code 773 type 1 [ 357.190262][ T10] HID 045e:07da: Invalid code 774 type 1 [ 357.196062][ T10] HID 045e:07da: Invalid code 775 type 1 [ 357.207802][ T10] HID 045e:07da: Invalid code 776 type 1 [ 357.222467][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input7 [ 357.475937][ T30] audit: type=1400 audit(1759624225.472:680): avc: denied { read } for pid=5179 comm="acpid" name="event4" dev="devtmpfs" ino=2875 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.498463][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.724707][ T10] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 357.741096][ T30] audit: type=1400 audit(1759624225.472:681): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2875 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.798036][ T10] usb 3-1: USB disconnect, device number 7 [ 358.755173][ T30] audit: type=1400 audit(1759624225.472:682): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2875 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 358.927334][ T9138] fido_id[9138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 361.510725][ T9163] vlan2: entered promiscuous mode [ 361.516984][ T9163] vlan2: entered allmulticast mode [ 361.530758][ T9163] hsr_slave_1: entered allmulticast mode [ 361.599482][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 363.816137][ T9177] netlink: 'syz.4.883': attribute type 12 has an invalid length. [ 364.458309][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 364.511259][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 365.409160][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 365.607595][ T9202] tipc: Enabled bearer , priority 0 [ 365.645273][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.660923][ T10] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 365.754906][ T10] usb 2-1: config 0 has no interface number 0 [ 365.782777][ T10] usb 2-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.803463][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 365.814613][ T10] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 365.825193][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.855111][ T10] usb 2-1: config 0 descriptor?? [ 366.449710][ T9221] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 366.574336][ T10] usb 2-1: string descriptor 0 read error: -71 [ 366.588380][ T10] usb 2-1: selecting invalid altsetting 0 [ 366.631319][ T10] usb 2-1: USB disconnect, device number 3 [ 366.855630][ T9232] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 366.999340][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 367.000343][ T9232] gretap1: entered promiscuous mode [ 367.044766][ T9232] bond2: (slave gretap1): making interface the new active one [ 367.054180][ T9232] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 367.157313][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.901'. [ 367.274107][ T9232] bond2: entered promiscuous mode [ 367.289419][ T9232] bond2: entered allmulticast mode [ 367.313613][ T9232] gretap1: entered allmulticast mode [ 367.319331][ T9232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.410474][ T30] audit: type=1400 audit(1759624235.442:683): avc: denied { read } for pid=9248 comm="syz.1.906" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 368.397441][ T9262] fuse: Bad value for 'user_id' [ 368.425990][ T9262] fuse: Bad value for 'user_id' [ 368.492053][ T30] audit: type=1400 audit(1759624236.522:684): avc: denied { bind } for pid=9263 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 368.512139][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.830505][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 369.120152][ T10] usb 5-1: config index 0 descriptor too short (expected 165, got 18) [ 369.150476][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.710115][ T10] usb 5-1: config 0 has no interfaces? [ 369.727364][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 369.745917][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.766543][ T10] usb 5-1: Product: syz [ 369.788708][ T10] usb 5-1: Manufacturer: syz [ 369.909049][ T10] usb 5-1: SerialNumber: syz [ 370.385961][ T10] usb 5-1: config 0 descriptor?? [ 371.070900][ T30] audit: type=1400 audit(1759624239.082:685): avc: denied { setopt } for pid=9263 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.204932][ T10] usb 5-1: USB disconnect, device number 7 [ 374.751613][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 374.842639][ T30] audit: type=1400 audit(1759624242.872:686): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 374.884555][ T30] audit: type=1400 audit(1759624242.902:687): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.933177][ T5888] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.941456][ T5888] usb 4-1: config 0 has no interface number 0 [ 374.947585][ T5888] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.070513][ T30] audit: type=1400 audit(1759624242.902:688): avc: denied { search } for pid=5489 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.112402][ T30] audit: type=1400 audit(1759624242.902:689): avc: denied { search } for pid=5489 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.138580][ T5888] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.144637][ T30] audit: type=1400 audit(1759624242.902:690): avc: denied { read } for pid=5489 comm="dhcpcd" name="n101" dev="tmpfs" ino=5444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.171084][ T30] audit: type=1400 audit(1759624242.902:691): avc: denied { open } for pid=5489 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=5444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 375.195508][ T5888] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 375.940509][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.960660][ T30] audit: type=1400 audit(1759624242.912:692): avc: denied { getattr } for pid=5489 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=5444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 376.027219][ T5888] usb 4-1: config 0 descriptor?? [ 376.986000][ T30] audit: type=1400 audit(1759624244.452:693): avc: denied { read open } for pid=9342 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.015995][ T30] audit: type=1400 audit(1759624244.452:694): avc: denied { getattr } for pid=9342 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.200792][ T5888] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 377.361799][ T5888] hid_prodikeys: hid-prodikeys: failed to find output report [ 377.361799][ T5888] [ 377.411234][ T5888] usb 4-1: USB disconnect, device number 7 [ 377.945584][ T9349] fido_id[9349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 378.163657][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.169976][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.820836][ T30] audit: type=1400 audit(1759624246.852:695): avc: denied { add_name } for pid=9335 comm="dhcpcd-run-hook" name="resolv.conf.netdevsim0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.496809][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.936'. [ 380.184897][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 380.271190][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 380.271206][ T30] audit: type=1400 audit(1759624248.302:699): avc: denied { remove_name } for pid=9380 comm="rm" name="resolv.conf.netdevsim0.link" dev="tmpfs" ino=5481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.301238][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.402905][ T30] audit: type=1400 audit(1759624248.342:700): avc: denied { unlink } for pid=9380 comm="rm" name="resolv.conf.netdevsim0.link" dev="tmpfs" ino=5481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 381.311791][ T30] audit: type=1804 audit(1759624249.282:701): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.940" name="file0" dev="ramfs" ino=22556 res=1 errno=0 [ 381.333049][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.509352][ T9398] overlayfs: failed to clone upperpath [ 381.880553][ T30] audit: type=1400 audit(1759624249.902:702): avc: denied { read } for pid=9391 comm="syz.4.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 383.814972][ T9425] netlink: 44 bytes leftover after parsing attributes in process `syz.2.951'. [ 383.825087][ T9425] netlink: 44 bytes leftover after parsing attributes in process `syz.2.951'. [ 387.483354][ T30] audit: type=1400 audit(1759624255.062:703): avc: denied { setopt } for pid=9449 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 387.717376][ T9460] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 387.763215][ T9460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.790381][ T9460] vlan2: entered promiscuous mode [ 387.795723][ T9460] bond1: entered promiscuous mode [ 387.800951][ T9460] vlan2: entered allmulticast mode [ 387.806072][ T9460] bond1: entered allmulticast mode [ 387.829030][ T9460] bond1: (slave gretap1): making interface the new active one [ 387.892427][ T9460] gretap1: entered promiscuous mode [ 387.898852][ T9460] gretap1: entered allmulticast mode [ 387.906990][ T9460] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 387.919168][ T9465] syzkaller0: entered promiscuous mode [ 387.925136][ T9465] syzkaller0: entered allmulticast mode [ 389.125278][ T30] audit: type=1400 audit(1759624257.152:704): avc: denied { write } for pid=9473 comm="syz.2.965" name="mouse0" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 390.429666][ T30] audit: type=1400 audit(1759624258.172:705): avc: denied { mounton } for pid=9469 comm="syz.1.963" path="/193/file0" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 393.425209][ T9510] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 393.944256][ T9510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.059219][ T9510] bond2: (slave gretap1): making interface the new active one [ 394.069867][ T9510] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 394.103791][ T9513] vlan2: entered promiscuous mode [ 394.122360][ T9513] bond2: entered promiscuous mode [ 394.222555][ T9513] gretap1: entered promiscuous mode [ 394.445008][ T9513] vlan2: entered allmulticast mode [ 394.492029][ T9513] bond2: entered allmulticast mode [ 394.502511][ T9513] gretap1: entered allmulticast mode [ 394.765973][ T975] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 395.151043][ T30] audit: type=1326 audit(1759624263.192:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.2.981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92fb18eec9 code=0x0 [ 395.178474][ T975] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 395.188931][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.205376][ T975] usb 4-1: config 0 descriptor?? [ 395.794190][ T975] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 396.052760][ T975] [drm:udl_init] *ERROR* Selecting channel failed [ 396.847993][ T975] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 396.854871][ T975] [drm] Initialized udl on minor 2 [ 396.863048][ T975] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 397.041548][ T975] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 397.052501][ T5888] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 397.063092][ T975] usb 4-1: USB disconnect, device number 8 [ 397.073343][ T5888] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 397.970694][ T30] audit: type=1800 audit(1759624265.252:707): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.984" name="bus" dev="overlay" ino=1025 res=0 errno=0 [ 398.340231][ T30] audit: type=1400 audit(1759624266.302:708): avc: denied { setattr } for pid=9561 comm="syz.1.989" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 404.060518][ T30] audit: type=1800 audit(1759624271.302:709): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1003" name="bus" dev="overlay" ino=994 res=0 errno=0 [ 404.580555][ T30] audit: type=1400 audit(1759624272.532:710): avc: denied { listen } for pid=9621 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.175331][ T30] audit: type=1400 audit(1759624275.212:711): avc: denied { ioctl } for pid=9651 comm="syz.0.1013" path="socket:[21992]" dev="sockfs" ino=21992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.217299][ T9653] vxcan1: tx drop: invalid da for name 0x0000000000000004 [ 407.234903][ T30] audit: type=1400 audit(1759624275.252:712): avc: denied { connect } for pid=9651 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.544486][ T30] audit: type=1400 audit(1759624275.252:713): avc: denied { setopt } for pid=9651 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 409.006759][ T5833] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 412.329066][ T9681] syz.0.1022: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 412.348113][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.0.1022 Not tainted syzkaller #0 PREEMPT(full) [ 412.348130][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.348136][ T9681] Call Trace: [ 412.348140][ T9681] [ 412.348145][ T9681] dump_stack_lvl+0x16c/0x1f0 [ 412.348164][ T9681] warn_alloc+0x248/0x3a0 [ 412.348184][ T9681] ? __pfx_warn_alloc+0x10/0x10 [ 412.348212][ T9681] ? hash_netport4_resize+0x1d8/0x1c50 [ 412.348224][ T9681] ? __vmalloc_node_noprof+0xad/0xf0 [ 412.348242][ T9681] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 412.348263][ T9681] ? hash_netport4_resize+0x1d8/0x1c50 [ 412.348278][ T9681] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 412.348296][ T9681] ? ___kmalloc_large_node+0xed/0x160 [ 412.348313][ T9681] __kvmalloc_node_noprof+0x431/0x9c0 [ 412.348326][ T9681] ? hash_netport4_resize+0x1d8/0x1c50 [ 412.348338][ T9681] ? trace_kmalloc+0x2b/0xd0 [ 412.348350][ T9681] ? __kmalloc_noprof+0x34f/0x880 [ 412.348365][ T9681] ? hash_netport4_resize+0x1d8/0x1c50 [ 412.348380][ T9681] ? hash_netport4_resize+0x1d8/0x1c50 [ 412.348390][ T9681] hash_netport4_resize+0x1d8/0x1c50 [ 412.348402][ T9681] ? __pfx_hash_netport4_add+0x10/0x10 [ 412.348414][ T9681] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 412.348431][ T9681] ? __pfx___mutex_lock+0x10/0x10 [ 412.348453][ T9681] ? __pfx_hash_netport4_resize+0x10/0x10 [ 412.348467][ T9681] call_ad.constprop.0+0x36d/0x940 [ 412.348479][ T9681] ? __pfx_hash_netport4_resize+0x10/0x10 [ 412.348492][ T9681] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 412.348503][ T9681] ? __pfx___nla_validate_parse+0x10/0x10 [ 412.348528][ T9681] ? __nla_parse+0x40/0x60 [ 412.348545][ T9681] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 412.348560][ T9681] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 412.348574][ T9681] ? process_srcu+0x910/0x1920 [ 412.348600][ T9681] ? find_held_lock+0x2b/0x80 [ 412.348620][ T9681] nfnetlink_rcv_msg+0x9f9/0x1200 [ 412.348636][ T9681] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 412.348650][ T9681] ? __lock_acquire+0x62e/0x1ce0 [ 412.348674][ T9681] ? avc_has_perm_noaudit+0x149/0x3b0 [ 412.348695][ T9681] netlink_rcv_skb+0x155/0x420 [ 412.348711][ T9681] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 412.348724][ T9681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.348746][ T9681] ? ns_capable+0xd7/0x110 [ 412.348763][ T9681] nfnetlink_rcv+0x1b3/0x430 [ 412.348774][ T9681] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 412.348784][ T9681] ? netlink_deliver_tap+0x1ae/0xd30 [ 412.348802][ T9681] netlink_unicast+0x5aa/0x870 [ 412.348819][ T9681] ? __pfx_netlink_unicast+0x10/0x10 [ 412.348834][ T9681] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 412.348854][ T9681] netlink_sendmsg+0x8c8/0xdd0 [ 412.348872][ T9681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.348893][ T9681] ____sys_sendmsg+0xa95/0xc70 [ 412.348911][ T9681] ? copy_msghdr_from_user+0x10a/0x160 [ 412.348925][ T9681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.348946][ T9681] ? __pfx_futex_wake_mark+0x10/0x10 [ 412.348964][ T9681] ___sys_sendmsg+0x134/0x1d0 [ 412.348978][ T9681] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.349010][ T9681] __sys_sendmsg+0x16d/0x220 [ 412.349024][ T9681] ? __pfx___sys_sendmsg+0x10/0x10 [ 412.349037][ T9681] ? __x64_sys_futex+0x1e0/0x4c0 [ 412.349058][ T9681] do_syscall_64+0xcd/0x4e0 [ 412.349074][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.349086][ T9681] RIP: 0033:0x7f65dc78eec9 [ 412.349096][ T9681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.349107][ T9681] RSP: 002b:00007f65dd57b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.349118][ T9681] RAX: ffffffffffffffda RBX: 00007f65dc9e5fa0 RCX: 00007f65dc78eec9 [ 412.349125][ T9681] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 412.349132][ T9681] RBP: 00007f65dc811f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.349139][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.349145][ T9681] R13: 00007f65dc9e6038 R14: 00007f65dc9e5fa0 R15: 00007ffd9a5ed788 [ 412.349159][ T9681] [ 412.349248][ T9681] Mem-Info: [ 412.746224][ T9681] active_anon:18412 inactive_anon:0 isolated_anon:0 [ 412.746224][ T9681] active_file:16433 inactive_file:41269 isolated_file:0 [ 412.746224][ T9681] unevictable:768 dirty:449 writeback:50 [ 412.746224][ T9681] slab_reclaimable:11952 slab_unreclaimable:102355 [ 412.746224][ T9681] mapped:32548 shmem:9144 pagetables:1358 [ 412.746224][ T9681] sec_pagetables:0 bounce:0 [ 412.746224][ T9681] kernel_misc_reclaimable:0 [ 412.746224][ T9681] free:1270780 free_pcp:17339 free_cma:0 [ 412.791753][ T9681] Node 0 active_anon:73648kB inactive_anon:0kB active_file:65732kB inactive_file:164876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130192kB dirty:1792kB writeback:200kB shmem:35040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12436kB pagetables:5260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.823801][ T9681] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.854201][ T9681] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.884008][ T9681] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 412.889735][ T9681] Node 0 DMA32 free:1167564kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73648kB inactive_anon:0kB active_file:65732kB inactive_file:164876kB unevictable:1536kB writepending:1992kB zspages:0kB present:3129332kB managed:2547940kB mlocked:0kB bounce:0kB free_pcp:50420kB local_pcp:23732kB free_cma:0kB [ 412.923093][ T9681] lowmem_reserve[]: 0 0 0 0 0 [ 412.927776][ T9681] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.957503][ T9681] lowmem_reserve[]: 0 0 0 0 0 [ 412.962230][ T9681] Node 1 Normal free:3900212kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18936kB local_pcp:6572kB free_cma:0kB [ 412.994379][ T9681] lowmem_reserve[]: 0 0 0 0 0 [ 412.999049][ T9681] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 413.013372][ T9681] Node 0 DMA32: 748*4kB (UME) 472*8kB (ME) 332*16kB (UM) 396*32kB (UM) 616*64kB (UME) 214*128kB (UME) 105*256kB (UM) 35*512kB (UME) 23*1024kB (UME) 4*2048kB (UME) 244*4096kB (UM) = 1167536kB [ 413.032161][ T9681] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 413.043594][ T9681] Node 1 Normal: 3*4kB (UME) 7*8kB (UME) 9*16kB (UME) 141*32kB (UME) 47*64kB (UME) 10*128kB (UME) 2*256kB (U) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3900212kB [ 413.061880][ T9681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 413.071426][ T9681] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 413.080701][ T9681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 413.090221][ T9681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 413.099498][ T9681] 66842 total pagecache pages [ 413.104161][ T9681] 0 pages in swap cache [ 413.108283][ T9681] Free swap = 124996kB [ 413.112418][ T9681] Total swap = 124996kB [ 413.116541][ T9681] 2097051 pages RAM [ 413.120315][ T9681] 0 pages HighMem/MovableOnly [ 413.125064][ T9681] 428424 pages reserved [ 413.129186][ T9681] 0 pages cma reserved [ 414.241842][ T9704] overlayfs: failed to clone upperpath [ 414.249547][ T30] audit: type=1400 audit(1759624282.272:714): avc: denied { mount } for pid=9703 comm="syz.0.1028" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 414.530100][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1031'. [ 414.539283][ T9712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1031'. [ 414.622090][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1029'. [ 414.682443][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1029'. [ 415.856310][ T30] audit: type=1400 audit(1759624283.882:715): avc: denied { setopt } for pid=9730 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 417.085480][ T30] audit: type=1400 audit(1759624285.072:716): avc: denied { create } for pid=9741 comm="syz.3.1038" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 417.520044][ T30] audit: type=1400 audit(1759624285.072:717): avc: denied { link } for pid=9741 comm="syz.3.1038" name="file1" dev="overlay" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 417.543102][ T30] audit: type=1400 audit(1759624285.072:718): avc: denied { setattr } for pid=9741 comm="syz.3.1038" name="#16" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 417.590543][ T30] audit: type=1400 audit(1759624285.072:719): avc: denied { rename } for pid=9741 comm="syz.3.1038" name="#16" dev="tmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 417.614710][ T30] audit: type=1400 audit(1759624285.142:720): avc: denied { bind } for pid=9745 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.634115][ T30] audit: type=1400 audit(1759624285.152:721): avc: denied { listen } for pid=9745 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.654869][ T30] audit: type=1400 audit(1759624285.232:722): avc: denied { accept } for pid=9745 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.811799][ T30] audit: type=1400 audit(1759624285.792:723): avc: denied { unlink } for pid=5822 comm="syz-executor" name="file1" dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 417.949319][ T9759] tipc: Enabling of bearer rejected, failed to enable media [ 420.230829][ T9817] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1047'. [ 420.362667][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 421.421380][ T9829] bond0: entered promiscuous mode [ 421.426877][ T9829] bond_slave_0: entered promiscuous mode [ 421.493268][ T9829] bond_slave_1: entered promiscuous mode [ 421.500891][ T9829] dummy0: entered promiscuous mode [ 421.507082][ T9829] hsr1: entered promiscuous mode [ 421.647296][ T9829] hsr1: entered allmulticast mode [ 421.681154][ T9829] bond0: entered allmulticast mode [ 421.700465][ T9829] bond_slave_0: entered allmulticast mode [ 421.740623][ T9829] bond_slave_1: entered allmulticast mode [ 421.790502][ T9829] dummy0: entered allmulticast mode [ 421.892677][ T30] audit: type=1400 audit(1759624289.932:724): avc: denied { ioctl } for pid=9837 comm="syz.1.1053" path="socket:[23090]" dev="sockfs" ino=23090 ioctlcmd=0x8b15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 421.962243][ T9840] tipc: Started in network mode [ 421.977462][ T9840] tipc: Node identity 0e187879ec0b, cluster identity 4711 [ 422.010695][ T9840] tipc: Enabled bearer , priority 0 [ 422.042898][ T9840] syzkaller0: entered promiscuous mode [ 422.048594][ T9840] syzkaller0: entered allmulticast mode [ 422.119190][ T9840] tipc: Resetting bearer [ 422.179463][ T9839] tipc: Resetting bearer [ 422.381440][ T9839] tipc: Disabling bearer [ 422.941605][ T9849] tipc: Enabled bearer , priority 0 [ 423.004198][ T9849] syzkaller0: entered promiscuous mode [ 423.009699][ T9849] syzkaller0: entered allmulticast mode [ 423.318816][ T9859] netlink: 'syz.0.1059': attribute type 2 has an invalid length. [ 423.326901][ T9859] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 423.336659][ T9859] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 423.690299][ T9848] tipc: Resetting bearer [ 423.737527][ T9848] tipc: Disabling bearer [ 423.809195][ T9868] netlink: 'syz.3.1060': attribute type 11 has an invalid length. [ 423.963906][ T30] audit: type=1400 audit(1759624291.982:725): avc: denied { mount } for pid=9869 comm="syz.0.1062" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 424.225178][ T30] audit: type=1400 audit(1759624292.032:726): avc: denied { create } for pid=9869 comm="syz.0.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 425.449918][ T30] audit: type=1400 audit(1759624293.442:727): avc: denied { sys_admin } for pid=9869 comm="syz.0.1062" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 425.614674][ T30] audit: type=1400 audit(1759624293.512:728): avc: denied { associate } for pid=9881 comm="syz.0.1062" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 426.492938][ T30] audit: type=1326 audit(1759624294.522:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 426.844042][ T30] audit: type=1326 audit(1759624294.522:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 427.324956][ T30] audit: type=1326 audit(1759624294.522:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 427.364830][ T30] audit: type=1326 audit(1759624294.522:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 427.644556][ T30] audit: type=1326 audit(1759624294.522:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 427.771878][ T30] audit: type=1326 audit(1759624294.522:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 427.799822][ T30] audit: type=1326 audit(1759624294.522:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 428.162112][ T30] audit: type=1326 audit(1759624294.522:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 428.492964][ T30] audit: type=1326 audit(1759624294.522:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 428.630519][ T30] audit: type=1326 audit(1759624294.522:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 428.736411][ T30] audit: type=1326 audit(1759624294.522:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 429.278324][ T30] audit: type=1326 audit(1759624294.522:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 434.161045][ T975] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 434.499016][ T975] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 434.543285][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.645309][ T975] usb 4-1: config 0 descriptor?? [ 435.765491][ T9980] ref_ctr increment failed for inode: 0x48a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888051cf1580 [ 435.836292][ T9956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.845294][ T9956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.853158][ T975] ath6kl: Failed to read usb control message: -32 [ 435.863596][ T975] ath6kl: Unable to read the bmi data from the device: -32 [ 435.914439][ T975] ath6kl: unable to read target info byte count: -32 [ 436.054601][ T975] ath6kl: Failed to init ath6kl core: -32 [ 436.179764][ T975] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 436.210606][ T975] usb 4-1: USB disconnect, device number 9 [ 436.890637][ T9997] netlink: 'syz.2.1093': attribute type 2 has an invalid length. [ 436.964717][ T9997] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 436.980510][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 438.479891][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 438.479904][ T30] audit: type=1400 audit(1759624306.512:752): avc: denied { connect } for pid=10003 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 439.648518][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.680462][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.948358][ T42] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=42 comm=kworker/1:1 [ 440.081725][T10026] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551 [ 440.763492][T10041] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 440.778232][T10038] : entered promiscuous mode [ 441.070506][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 441.321621][ T42] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 441.357602][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.392256][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.433775][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 441.506083][ T42] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 441.517133][ T42] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 441.545986][ T42] usb 4-1: Manufacturer: syz [ 441.691429][ T42] usb 4-1: config 0 descriptor?? [ 441.911381][T10053] trusted_key: encrypted_key: insufficient parameters specified [ 441.978102][T10054] tmpfs: Bad value for 'mpol' [ 442.185362][ T30] audit: type=1400 audit(1759624310.012:753): avc: denied { mounton } for pid=10049 comm="syz.1.1110" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 442.391419][ T42] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 442.408739][ T42] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 442.592594][T10056] tipc: Enabled bearer , priority 0 [ 442.629026][T10056] syzkaller0: entered promiscuous mode [ 442.658173][T10056] syzkaller0: entered allmulticast mode [ 442.756647][T10062] netlink: 'syz.2.1111': attribute type 4 has an invalid length. [ 442.764652][T10062] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1111'. [ 442.969675][ T42] usb 4-1: USB disconnect, device number 10 [ 443.031159][T10057] fido_id[10057]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8243.0005/report_descriptor': No such device [ 443.062358][T10062] : renamed from bond0 (while UP) [ 443.149234][T10065] tipc: Resetting bearer [ 443.180835][T10055] tipc: Resetting bearer [ 443.252295][T10055] tipc: Disabling bearer [ 443.401214][ T30] audit: type=1400 audit(1759624311.442:754): avc: denied { create } for pid=10066 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 443.893687][ T30] audit: type=1400 audit(1759624311.932:755): avc: denied { ioctl } for pid=10066 comm="syz.0.1113" path="socket:[23377]" dev="sockfs" ino=23377 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 445.761934][ T30] audit: type=1400 audit(1759624313.402:756): avc: denied { read } for pid=10084 comm="syz.2.1119" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 445.850641][ T30] audit: type=1400 audit(1759624313.402:757): avc: denied { open } for pid=10084 comm="syz.2.1119" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 445.880638][ T30] audit: type=1400 audit(1759624313.422:758): avc: denied { ioctl } for pid=10084 comm="syz.2.1119" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 446.241090][ T30] audit: type=1400 audit(1759624314.252:759): avc: denied { ioctl } for pid=10095 comm="syz.2.1120" path="socket:[23966]" dev="sockfs" ino=23966 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 446.409554][T10096] netlink: 'syz.2.1120': attribute type 10 has an invalid length. [ 450.125469][ T30] audit: type=1400 audit(1759624318.162:760): avc: denied { firmware_load } for pid=10138 comm="syz.0.1130" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 450.517951][T10139] syz.0.1130 (10139) used greatest stack depth: 19720 bytes left [ 452.925564][ T30] audit: type=1400 audit(1759624320.962:761): avc: denied { connect } for pid=10157 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 452.973981][ T30] audit: type=1400 audit(1759624321.012:762): avc: denied { read } for pid=10157 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 453.065397][ T30] audit: type=1400 audit(1759624321.082:763): avc: denied { write } for pid=10157 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 454.346341][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1140'. [ 455.668164][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 458.670716][ T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 459.897804][ T42] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 459.912146][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.923712][ T42] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 459.933309][ T42] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 459.943180][ T42] usb 5-1: Product: syz [ 459.953910][ T42] usb 5-1: Manufacturer: syz [ 459.959083][ T42] usb 5-1: SerialNumber: syz [ 459.985515][ T42] usb 5-1: config 0 descriptor?? [ 460.026948][ T42] usb 5-1: selecting invalid altsetting 0 [ 460.033127][T10226] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 460.039364][T10226] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 460.526402][ T10] usb 5-1: USB disconnect, device number 8 [ 462.389250][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 462.463535][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 464.878324][ T1562] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 465.965688][ T1562] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.996189][ T1562] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.007725][ T1562] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 466.045578][ T1562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.482716][ T1562] usb 2-1: config 0 descriptor?? [ 467.314121][T10315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.003369][T10363] batadv_slave_0: entered promiscuous mode [ 470.026896][T10365] tipc: Enabling of bearer rejected, failed to enable media [ 470.110222][ T30] audit: type=1400 audit(1759624338.142:764): avc: denied { append } for pid=10366 comm="syz.2.1185" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 470.215443][ T30] audit: type=1400 audit(1759624338.252:765): avc: denied { getopt } for pid=10371 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 471.139598][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 471.773042][ T975] usb 2-1: USB disconnect, device number 4 [ 471.790794][ T5881] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 471.972935][ T5881] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 471.982102][ T5881] usb 3-1: config 0 has no interface number 0 [ 471.988495][ T5881] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 471.999895][ T5881] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 472.014772][ T5881] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 472.024169][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.032750][ T5881] usb 3-1: Product: syz [ 472.037204][ T5881] usb 3-1: Manufacturer: syz [ 472.042200][ T5881] usb 3-1: SerialNumber: syz [ 472.049559][ T5881] usb 3-1: config 0 descriptor?? [ 472.303492][ T975] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 472.373626][ T5881] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 472.500471][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 472.847689][ T5881] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 472.859545][ T5881] usb 3-1: USB disconnect, device number 8 [ 472.881132][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 472.895390][ T975] usb 2-1: config 46 has an invalid interface number: 136 but max is 0 [ 472.944394][ T975] usb 2-1: config 46 contains an unexpected descriptor of type 0x1, skipping [ 472.984332][ T975] usb 2-1: config 46 has no interface number 0 [ 473.002503][ T975] usb 2-1: config 46 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 473.603763][ T975] usb 2-1: config 46 interface 136 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 473.825452][ T975] usb 2-1: config 46 interface 136 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 473.862080][ T975] usb 2-1: New USB device found, idVendor=1410, idProduct=a012, bcdDevice=96.94 [ 473.872131][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.883918][ T975] usb 2-1: Product: syz [ 473.903199][ T975] usb 2-1: Manufacturer: syz [ 473.930626][ T975] usb 2-1: SerialNumber: syz [ 474.437425][ T30] audit: type=1400 audit(1759624342.472:766): avc: denied { mounton } for pid=10410 comm="syz.2.1197" path="/230/file0" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 474.841892][ T975] usb 2-1: USB disconnect, device number 5 [ 474.855917][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 477.473263][T10432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1203'. [ 477.822478][ T30] audit: type=1400 audit(1759624345.852:767): avc: denied { read } for pid=10433 comm="syz.3.1204" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 478.770523][ T30] audit: type=1400 audit(1759624345.852:768): avc: denied { open } for pid=10433 comm="syz.3.1204" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 478.820834][ T30] audit: type=1400 audit(1759624345.852:769): avc: denied { ioctl } for pid=10433 comm="syz.3.1204" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 481.756198][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 481.910534][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 482.895882][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 482.907161][ T30] audit: type=1400 audit(1759624350.932:770): avc: denied { write } for pid=10482 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 483.099418][ T10] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 483.140506][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.432336][ T10] usb 3-1: config 0 descriptor?? [ 483.446696][ T5888] IPVS: starting estimator thread 0... [ 483.610571][T10501] IPVS: using max 74 ests per chain, 177600 per kthread [ 483.646672][ T10] usb 3-1: USB disconnect, device number 9 [ 487.688863][T10567] can0: slcan on ptm0. [ 488.279739][ T30] audit: type=1400 audit(1759624356.232:771): avc: denied { map } for pid=10565 comm="syz.1.1232" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 488.331609][ T30] audit: type=1400 audit(1759624356.282:772): avc: denied { ioctl } for pid=10565 comm="syz.1.1232" path="socket:[25899]" dev="sockfs" ino=25899 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 488.356262][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.356820][T10550] can0 (unregistered): slcan off ptm0. [ 490.274737][ T30] audit: type=1400 audit(1759624358.292:773): avc: denied { watch } for pid=10602 comm="syz.2.1239" path="pipe:[25930]" dev="pipefs" ino=25930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 491.181621][ T30] audit: type=1400 audit(1759624358.812:774): avc: denied { setattr } for pid=10602 comm="syz.2.1239" name="" dev="pipefs" ino=25930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 493.903443][T10649] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1246'. [ 494.413202][ T30] audit: type=1400 audit(1759624362.442:775): avc: denied { unmount } for pid=10646 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 497.950559][ T42] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 498.450458][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 498.857750][ T42] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 498.867119][ T42] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 499.006461][T10706] Bluetooth: MGMT ver 1.23 [ 499.341066][ T42] usb 3-1: Product: syz [ 499.345372][ T42] usb 3-1: SerialNumber: syz [ 499.365328][ T42] usb 3-1: config 0 descriptor?? [ 499.823672][ T30] audit: type=1400 audit(1759624367.462:776): avc: denied { setopt } for pid=10704 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 499.897851][T10709] netlink: 'syz.1.1261': attribute type 3 has an invalid length. [ 499.921241][T10709] netlink: 'syz.1.1261': attribute type 1 has an invalid length. [ 499.943263][T10709] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1261'. [ 499.950275][ T42] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 499.965156][ T42] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 499.974740][T10712] tipc: Enabled bearer , priority 0 [ 499.991569][T10712] syzkaller0: entered promiscuous mode [ 500.001649][T10712] syzkaller0: entered allmulticast mode [ 500.002867][ T42] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 500.038739][T10712] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 500.060785][ T42] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 500.087722][T10712] tipc: Resetting bearer [ 500.117071][ T42] usb 3-1: USB disconnect, device number 10 [ 500.124606][T10711] tipc: Resetting bearer [ 500.175068][T10711] tipc: Disabling bearer [ 500.308953][T10723] tipc: Enabled bearer , priority 0 [ 500.318680][T10723] syzkaller0: entered promiscuous mode [ 500.324291][T10723] syzkaller0: entered allmulticast mode [ 500.910515][T10720] tipc: Resetting bearer [ 500.934472][T10720] tipc: Disabling bearer [ 501.575358][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.582334][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.876266][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.883689][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.122443][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.134657][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.345399][T10763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.505512][ T7932] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.641150][ T7932] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.650338][ T7932] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.661745][ T7932] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.142514][ T30] audit: type=1400 audit(1759624373.172:777): avc: denied { read } for pid=10768 comm="syz.1.1276" lport=53706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 505.731713][T10781] tipc: Enabled bearer , priority 0 [ 505.863986][T10781] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 505.876799][T10782] syzkaller0: entered promiscuous mode [ 505.882756][T10782] syzkaller0: entered allmulticast mode [ 506.058704][T10782] tipc: Resetting bearer [ 506.073358][T10777] tipc: Resetting bearer [ 506.601077][T10777] tipc: Disabling bearer [ 506.791656][ T42] tipc: Node number set to 3792926841 [ 506.842854][T10793] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1282'. [ 508.546013][T10811] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1286'. [ 509.325520][T10826] trusted_key: encrypted_key: insufficient parameters specified [ 509.418925][ T30] audit: type=1326 audit(1759624378.450:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10827 comm="syz.4.1290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f125cd8eec9 code=0x0 [ 509.516849][T10832] tmpfs: Bad value for 'mpol' [ 511.363940][T10851] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1295'. [ 514.693305][T10881] Device name cannot be null; rc = [-22] [ 514.738626][T10875] team0: Port device team_slave_0 removed [ 514.765272][T10881] syz.1.1301 (10881): attempted to duplicate a private mapping with mremap. This is not supported. [ 514.810280][T10884] tipc: Enabled bearer , priority 0 [ 514.922384][T10883] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 514.940493][T10883] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 515.525783][T10890] tipc: Resetting bearer [ 515.820476][ T24] tipc: Node number set to 3822643723 [ 517.101473][ T30] audit: type=1400 audit(1759624386.130:779): avc: denied { create } for pid=10913 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 518.576970][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 518.711574][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1313'. [ 518.720697][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1313'. [ 519.322954][T10941] warning: `syz.4.1315' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 519.413603][T10925] 9pnet_fd: Insufficient options for proto=fd [ 519.430442][ T30] audit: type=1400 audit(1759624388.450:780): avc: denied { ioctl } for pid=10922 comm="syz.2.1313" path="socket:[26547]" dev="sockfs" ino=26547 ioctlcmd=0x5661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 520.419983][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 520.693896][T10957] tipc: Enabling of bearer rejected, already enabled [ 524.730884][T11009] netlink: 'syz.1.1328': attribute type 39 has an invalid length. [ 525.183670][ T30] audit: type=1400 audit(1759624394.220:781): avc: denied { create } for pid=11017 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 526.872371][T11040] tipc: Enabling of bearer rejected, failed to enable media [ 529.035120][ T30] audit: type=1326 audit(1759624398.040:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 529.107612][ T30] audit: type=1326 audit(1759624398.040:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 529.858470][ T30] audit: type=1326 audit(1759624398.040:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 530.053935][ T30] audit: type=1326 audit(1759624398.040:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 530.129936][ T30] audit: type=1326 audit(1759624398.040:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 530.204277][ T30] audit: type=1326 audit(1759624398.050:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 530.370459][ T30] audit: type=1326 audit(1759624398.050:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 530.818478][ T30] audit: type=1326 audit(1759624398.050:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 530.851681][T11072] syzkaller0: entered promiscuous mode [ 531.084420][ T30] audit: type=1326 audit(1759624398.050:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 531.109535][ T30] audit: type=1326 audit(1759624398.050:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 531.134190][ T30] audit: type=1326 audit(1759624398.050:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 531.238498][T11072] syzkaller0: entered allmulticast mode [ 531.343944][ T30] audit: type=1326 audit(1759624398.050:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 531.370855][ T30] audit: type=1326 audit(1759624398.050:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 531.394982][ T30] audit: type=1326 audit(1759624398.060:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 531.848819][ T30] audit: type=1326 audit(1759624398.060:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65dc78eec9 code=0x7ffc0000 [ 534.487857][T11113] tipc: Enabling of bearer rejected, already enabled [ 534.693045][T11117] tipc: Enabled bearer , priority 0 [ 534.711059][T11117] syzkaller0: entered promiscuous mode [ 534.716623][T11117] syzkaller0: entered allmulticast mode [ 535.406927][T11117] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1359'. [ 535.425374][T11117] tipc: Resetting bearer [ 535.434672][T11116] tipc: Resetting bearer [ 535.753397][T11116] tipc: Disabling bearer [ 536.191098][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 536.191114][ T30] audit: type=1400 audit(1759624405.230:810): avc: denied { ioctl } for pid=11118 comm="syz.0.1360" path="socket:[27893]" dev="sockfs" ino=27893 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 536.341974][T11134] tipc: Enabling of bearer rejected, already enabled [ 536.621506][ T30] audit: type=1400 audit(1759624405.640:811): avc: denied { create } for pid=11139 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 536.644669][ T30] audit: type=1400 audit(1759624405.660:812): avc: denied { write } for pid=11139 comm="syz.1.1368" path="socket:[27920]" dev="sockfs" ino=27920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 536.840640][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 537.660456][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 537.681887][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 537.691507][ T10] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 537.699500][ T10] usb 5-1: Product: syz [ 537.722414][ T10] usb 5-1: SerialNumber: syz [ 537.847058][T11154] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1370'. [ 538.216476][ T10] usb 5-1: config 0 descriptor?? [ 538.303653][ T10] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 538.316360][ T10] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 538.326655][ T10] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 538.334076][ T10] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 538.870746][ T5881] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 539.150981][T11138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1365'. [ 539.251896][ T5888] usb 5-1: USB disconnect, device number 9 [ 539.270414][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 539.303072][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.320404][ T5881] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.341679][ T5881] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 539.390427][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.483902][ T5881] usb 2-1: Product: syz [ 539.490410][ T5881] usb 2-1: Manufacturer: syz [ 539.510224][ T5881] usb 2-1: SerialNumber: syz [ 539.697513][ T5881] usb 2-1: config 0 descriptor?? [ 542.132213][ T30] audit: type=1400 audit(1759624411.040:813): avc: denied { egress } for pid=11191 comm="syz.4.1379" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 542.390598][ T30] audit: type=1400 audit(1759624411.040:814): avc: denied { sendto } for pid=11191 comm="syz.4.1379" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 543.070266][ T5881] usb 2-1: USB disconnect, device number 6 [ 543.970686][ T30] audit: type=1400 audit(1759624412.910:815): avc: denied { watch } for pid=11207 comm="syz.1.1383" path="/273/bus/file1" dev="overlay" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 544.475985][T11226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.752183][T11235] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 546.125893][T11235] orangefs_mount: mount request failed with -4 [ 546.640223][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1390'. [ 548.451861][T11269] tipc: Enabled bearer , priority 0 [ 548.461904][T11269] syzkaller0: entered promiscuous mode [ 548.468993][T11269] syzkaller0: entered allmulticast mode [ 548.535471][T11269] tipc: Resetting bearer [ 548.547403][T11266] tipc: Resetting bearer [ 548.595794][T11266] tipc: Disabling bearer [ 549.328482][T11281] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 551.741615][ T30] audit: type=1400 audit(1759624420.770:816): avc: denied { ioctl } for pid=11295 comm="syz.4.1406" path="socket:[28200]" dev="sockfs" ino=28200 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 552.136730][ T30] audit: type=1400 audit(1759624421.030:817): avc: denied { ioctl } for pid=11300 comm="syz.3.1409" path="/dev/ptyqb" dev="devtmpfs" ino=129 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 553.505657][T11319] block nbd2: shutting down sockets [ 554.958360][T11326] tipc: Enabled bearer , priority 0 [ 555.029568][T11326] syzkaller0: entered promiscuous mode [ 555.060894][T11326] syzkaller0: entered allmulticast mode [ 555.297316][T11326] tipc: Resetting bearer [ 555.725951][T11320] tipc: Resetting bearer [ 555.761054][T11320] tipc: Disabling bearer [ 557.828043][ T30] audit: type=1400 audit(1759624426.860:818): avc: denied { map } for pid=11358 comm="syz.3.1421" path="socket:[28285]" dev="sockfs" ino=28285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 557.851390][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.208134][ T30] audit: type=1400 audit(1759624426.860:819): avc: denied { read accept } for pid=11358 comm="syz.3.1421" path="socket:[28285]" dev="sockfs" ino=28285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.962754][T11374] tipc: Enabling of bearer rejected, failed to enable media [ 559.943846][ T30] audit: type=1400 audit(1759624428.380:820): avc: denied { write } for pid=11379 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 562.352990][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 562.510901][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.518621][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.528469][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 563.946899][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 563.957786][T11417] bridge_slave_1: left allmulticast mode [ 563.967833][T11417] bridge_slave_1: left promiscuous mode [ 563.990095][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.161023][T11419] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 564.201374][T11417] bridge_slave_0: left allmulticast mode [ 564.207112][T11417] bridge_slave_0: left promiscuous mode [ 564.315777][T11417] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.248441][T11430] tipc: Enabling of bearer rejected, failed to enable media [ 565.615970][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 565.632302][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 567.705011][T11457] cgroup: fork rejected by pids controller in /syz2 [ 567.940182][ T5881] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 568.311582][ T5881] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 568.804019][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.291814][ T5881] usb 4-1: config 0 descriptor?? [ 569.763857][ T5881] ath6kl: Failed to submit usb control message: -71 [ 569.770953][ T5881] ath6kl: unable to send the bmi data to the device: -71 [ 569.777996][ T5881] ath6kl: Unable to send get target info: -71 [ 569.795832][ T5881] ath6kl: Failed to init ath6kl core: -71 [ 569.815977][ T5881] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 570.748092][ T5881] usb 4-1: USB disconnect, device number 11 [ 570.908088][T11607] FAT-fs (loop1): unable to read boot sector [ 572.098163][ T30] audit: type=1400 audit(1759624441.110:821): avc: denied { setopt } for pid=11618 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 572.945658][T11618] delete_channel: no stack [ 573.571755][ T30] audit: type=1400 audit(1759624442.600:822): avc: denied { shutdown } for pid=11633 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 574.772299][T11645] tipc: Enabling of bearer rejected, failed to enable media [ 575.205445][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.656068][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.465470][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.855884][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.090839][T11689] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 578.099483][T11689] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 578.108602][T11689] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 578.157526][T11689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 578.169479][T11689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 578.210388][ T30] audit: type=1400 audit(1759624447.220:823): avc: denied { mounton } for pid=11686 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 578.925868][T11704] PKCS7: Unknown OID: [5] (bad) [ 578.931057][T11704] PKCS7: Only support pkcs7_signedData type [ 579.803174][ T36] bond2 (unregistering): (slave gretap1): Releasing active interface [ 579.889551][ T36] gretap1 (unregistering): left promiscuous mode [ 580.050530][ T36] gretap1 (unregistering): left allmulticast mode [ 580.241292][ T5833] Bluetooth: hci4: command tx timeout [ 581.231227][ T36]  (unregistering): left promiscuous mode [ 581.259607][ T36] bond_slave_0: left promiscuous mode [ 581.283105][ T36] bond_slave_1: left promiscuous mode [ 581.300931][ T36]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.323618][ T36] bond_slave_0: left allmulticast mode [ 581.335359][ T36]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.345593][ T36] bond_slave_1: left allmulticast mode [ 581.355008][ T36]  (unregistering): Released all slaves [ 581.615462][T11737] mmap: syz.3.1486 (11737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 581.698551][ T36] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 581.707065][ T36] wireguard0: left promiscuous mode [ 581.725012][ T36] bond1 (unregistering): (slave wireguard1): Releasing backup interface [ 581.739783][ T36] bond1 (unregistering): Released all slaves [ 582.323330][ T5833] Bluetooth: hci4: command tx timeout [ 582.376622][ T36] bond2 (unregistering): Released all slaves [ 582.451365][T11731] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 582.572952][ T36] tipc: Disabling bearer [ 582.844674][ T36] tipc: Left network mode [ 584.404762][T11689] Bluetooth: hci4: command tx timeout [ 585.560150][T11784] hugetlbfs: syz.0.1494 (11784): Using mlock ulimits for SHM_HUGETLB is obsolete [ 586.061927][T11686] chnl_net:caif_netlink_parms(): no params data found [ 586.560544][T11689] Bluetooth: hci4: command tx timeout [ 587.017413][ T36] dummy0: left promiscuous mode [ 587.031373][ T36] hsr_slave_0: left promiscuous mode [ 587.037326][ T36] hsr_slave_1: left promiscuous mode [ 587.044037][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.051710][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.094664][ T30] audit: type=1400 audit(1759624456.100:824): avc: denied { mounton } for pid=11797 comm="syz.1.1497" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 587.134865][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.164650][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.267278][ T36] veth1_macvtap: left promiscuous mode [ 587.282503][ T36] veth0_macvtap: left promiscuous mode [ 587.288482][ T36] veth1_vlan: left promiscuous mode [ 587.296218][ T36] veth0_vlan: left promiscuous mode [ 590.807688][ T36] team0 (unregistering): Port device team_slave_1 removed [ 590.838624][ T36] team0 (unregistering): Port device team_slave_0 removed [ 591.114976][T11823] macsec1: entered promiscuous mode [ 591.120736][T11823] bridge0: entered promiscuous mode [ 591.126947][T11823] bridge0: port 3(macsec1) entered blocking state [ 591.133519][T11823] bridge0: port 3(macsec1) entered disabled state [ 591.140176][T11823] macsec1: entered allmulticast mode [ 591.145511][T11823] bridge0: entered allmulticast mode [ 591.154319][T11823] macsec1: left allmulticast mode [ 591.159352][T11823] bridge0: left allmulticast mode [ 591.167559][T11823] bridge0: left promiscuous mode [ 591.767044][ T30] audit: type=1400 audit(1759624460.660:825): avc: denied { append } for pid=11828 comm="syz.4.1503" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 591.864143][T11686] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.878444][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.886459][T11686] bridge_slave_0: entered allmulticast mode [ 591.894239][T11686] bridge_slave_0: entered promiscuous mode [ 591.909733][T11686] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.924969][T11686] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.941419][T11686] bridge_slave_1: entered allmulticast mode [ 591.958182][T11686] bridge_slave_1: entered promiscuous mode [ 592.983223][ T30] audit: type=1400 audit(1759624461.440:826): avc: denied { lock } for pid=11840 comm="syz.3.1506" path="socket:[30215]" dev="sockfs" ino=30215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 593.862176][T11686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.899823][T11686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.045878][ T30] audit: type=1400 audit(1759624463.080:827): avc: denied { watch_mount } for pid=11853 comm="syz.0.1508" path="/336" dev="tmpfs" ino=1782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 594.232481][T11686] team0: Port device team_slave_0 added [ 594.246562][T11686] team0: Port device team_slave_1 added [ 594.807626][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 595.698680][T11686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.705750][T11686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.917212][T11686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.978385][T11686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.128581][T11686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.549956][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 596.602033][T11686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.720831][T11686] hsr_slave_0: entered promiscuous mode [ 596.733284][T11686] hsr_slave_1: entered promiscuous mode [ 596.739411][T11686] debugfs: 'hsr0' already exists in 'hsr' [ 596.745812][T11686] Cannot create hsr debugfs directory [ 596.770392][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 596.779134][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.829628][ T5888] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 596.839011][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.854201][ T5888] usb 5-1: config 0 descriptor?? [ 596.939160][T11895] tipc: Enabled bearer , priority 0 [ 596.952584][T11892] syzkaller0: entered promiscuous mode [ 597.070408][T11892] syzkaller0: entered allmulticast mode [ 597.250864][T11892] tipc: Resetting bearer [ 597.388427][T11891] tipc: Resetting bearer [ 597.414040][ T5888] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 597.425605][ T5888] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 597.432742][ T5888] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 597.440457][ T5888] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 597.448289][ T5888] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 597.460890][T11891] tipc: Disabling bearer [ 597.642398][ C1] usb 5-1: input irq status -75 received [ 597.863259][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.889430][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.908446][T11883] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 597.954376][ T5888] usb 5-1: USB disconnect, device number 10 [ 600.187976][ T30] audit: type=1400 audit(1759624469.210:828): avc: denied { create } for pid=11936 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 600.821992][ T30] audit: type=1400 audit(1759624469.210:829): avc: denied { setopt } for pid=11936 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 600.851255][ T30] audit: type=1400 audit(1759624469.310:830): avc: denied { ioctl } for pid=11937 comm="syz.3.1523" path="/dev/sg0" dev="devtmpfs" ino=745 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 601.235975][T11948] SQUASHFS error: Failed to read block 0x0: -5 [ 601.242546][T11948] unable to read squashfs_super_block [ 602.000565][ T30] audit: type=1400 audit(1759624471.030:831): avc: denied { read } for pid=11958 comm="syz.4.1526" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 602.205307][ T30] audit: type=1400 audit(1759624471.070:832): avc: denied { open } for pid=11958 comm="syz.4.1526" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 602.340921][T11686] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 602.373611][T11686] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.399901][T11686] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.951602][T11960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 603.000494][T11960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 603.012327][T11686] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 603.047453][T11960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 603.066916][T11960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 603.098318][T11960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 603.158164][T11960] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 603.303025][T11960] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 603.761040][T11686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.801650][T11686] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.910149][T11960] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 603.935875][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.942974][ T8464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.148822][T11686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 604.159328][T11686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.192543][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.199627][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.405555][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 605.192207][T11689] Bluetooth: hci3: command 0x0406 tx timeout [ 605.198611][T11689] Bluetooth: hci2: command 0x0406 tx timeout [ 605.205051][T11689] Bluetooth: hci4: command 0x0c1a tx timeout [ 606.558187][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 607.281666][T11689] Bluetooth: hci3: command 0x0406 tx timeout [ 607.287780][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 607.513681][T11686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.546525][T11686] veth0_vlan: entered promiscuous mode [ 607.557863][T11686] veth1_vlan: entered promiscuous mode [ 607.700201][T11686] veth0_macvtap: entered promiscuous mode [ 607.710149][T11686] veth1_macvtap: entered promiscuous mode [ 608.203843][T11686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.256090][T11686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.289676][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.460457][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.469211][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.292982][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.441965][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 611.343384][ T7932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.374617][ T7932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.583045][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 612.076040][ T8464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.085656][ T8464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.356967][ T30] audit: type=1400 audit(1759624481.360:833): avc: denied { mounton } for pid=11686 comm="syz-executor" path="/root/syzkaller.6fLSir/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 612.470438][ T30] audit: type=1400 audit(1759624481.440:834): avc: denied { mounton } for pid=11686 comm="syz-executor" path="/root/syzkaller.6fLSir/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 612.501444][T12084] use of bytesused == 0 is deprecated and will be removed in the future, [ 612.510210][T12084] use the actual size instead. [ 612.566596][ T30] audit: type=1400 audit(1759624481.440:835): avc: denied { mounton } for pid=11686 comm="syz-executor" path="/root/syzkaller.6fLSir/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 613.089218][ T30] audit: type=1400 audit(1759624481.460:836): avc: denied { mounton } for pid=11686 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 613.175613][ T30] audit: type=1400 audit(1759624481.460:837): avc: denied { mounton } for pid=11686 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 614.070683][ T30] audit: type=1400 audit(1759624483.050:838): avc: denied { write } for pid=12098 comm="syz.3.1548" name="card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 614.407028][ T30] audit: type=1400 audit(1759624483.050:839): avc: denied { map } for pid=12098 comm="syz.3.1548" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 614.450582][ T30] audit: type=1400 audit(1759624483.050:840): avc: denied { execute } for pid=12098 comm="syz.3.1548" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 614.710224][T12099] ================================================================== [ 614.718298][T12099] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 614.725486][T12099] Read of size 8 at addr ffff888028aa1688 by task syz.3.1548/12099 [ 614.733356][T12099] [ 614.735668][T12099] CPU: 1 UID: 0 PID: 12099 Comm: syz.3.1548 Not tainted syzkaller #0 PREEMPT(full) [ 614.735684][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 614.735691][T12099] Call Trace: [ 614.735697][T12099] [ 614.735702][T12099] dump_stack_lvl+0x116/0x1f0 [ 614.735720][T12099] print_report+0xcd/0x630 [ 614.735735][T12099] ? __virt_addr_valid+0x81/0x610 [ 614.735751][T12099] ? __phys_addr+0xe8/0x180 [ 614.735767][T12099] ? __cpa_addr+0x1d3/0x220 [ 614.735787][T12099] kasan_report+0xe0/0x110 [ 614.735800][T12099] ? __cpa_addr+0x1d3/0x220 [ 614.735813][T12099] __cpa_addr+0x1d3/0x220 [ 614.735824][T12099] cpa_flush+0xec/0x8a0 [ 614.735839][T12099] ? __pfx_cpa_flush+0x10/0x10 [ 614.735852][T12099] ? pgprot2cachemode+0x9a/0x130 [ 614.735868][T12099] ? __pfx_pgprot2cachemode+0x10/0x10 [ 614.735886][T12099] set_pages_array_wb+0x238/0x280 [ 614.735900][T12099] ? __pfx_set_pages_array_wb+0x10/0x10 [ 614.735917][T12099] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 614.735930][T12099] drm_gem_shmem_vm_close+0x63/0xc0 [ 614.735941][T12099] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 614.735952][T12099] remove_vma+0x85/0x160 [ 614.735968][T12099] exit_mmap+0x50a/0xb90 [ 614.735982][T12099] ? __pfx_exit_mmap+0x10/0x10 [ 614.735997][T12099] ? rcu_is_watching+0x12/0xc0 [ 614.736013][T12099] ? kasan_quarantine_put+0x10a/0x240 [ 614.736029][T12099] __mmput+0x12a/0x410 [ 614.736044][T12099] mmput+0x62/0x70 [ 614.736058][T12099] do_exit+0x7c7/0x2bf0 [ 614.736068][T12099] ? __pfx___might_resched+0x10/0x10 [ 614.736085][T12099] ? __pfx_do_exit+0x10/0x10 [ 614.736105][T12099] ? do_raw_spin_lock+0x12c/0x2b0 [ 614.736119][T12099] ? find_held_lock+0x2b/0x80 [ 614.736136][T12099] do_group_exit+0xd3/0x2a0 [ 614.736147][T12099] get_signal+0x2671/0x26d0 [ 614.736172][T12099] ? __pfx_do_recvmmsg+0x10/0x10 [ 614.736193][T12099] ? __pfx_get_signal+0x10/0x10 [ 614.736215][T12099] ? do_futex+0x122/0x350 [ 614.736235][T12099] arch_do_signal_or_restart+0x8f/0x7c0 [ 614.736288][T12099] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 614.736307][T12099] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 614.736322][T12099] exit_to_user_mode_loop+0x85/0x130 [ 614.736337][T12099] do_syscall_64+0x419/0x4e0 [ 614.736351][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.736364][T12099] RIP: 0033:0x7f57fd58eec9 [ 614.736373][T12099] Code: Unable to access opcode bytes at 0x7f57fd58ee9f. [ 614.736378][T12099] RSP: 002b:00007f57fe3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 614.736389][T12099] RAX: 000000000000fabd RBX: 00007f57fd7e5fa0 RCX: 00007f57fd58eec9 [ 614.736396][T12099] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 614.736403][T12099] RBP: 00007f57fd611f91 R08: 0000000000000000 R09: 0000000000000000 [ 614.736409][T12099] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 614.736416][T12099] R13: 00007f57fd7e6038 R14: 00007f57fd7e5fa0 R15: 00007ffe8923ea88 [ 614.736426][T12099] [ 614.736430][T12099] [ 615.019545][T12099] Allocated by task 12103: [ 615.023927][T12099] kasan_save_stack+0x33/0x60 [ 615.028580][T12099] kasan_save_track+0x14/0x30 [ 615.033227][T12099] __kasan_kmalloc+0xaa/0xb0 [ 615.037787][T12099] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 615.043131][T12099] drm_gem_get_pages+0x144/0xa10 [ 615.048044][T12099] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 615.054083][T12099] drm_gem_shmem_mmap+0xc9/0x550 [ 615.058990][T12099] drm_gem_mmap_obj+0x1b5/0x560 [ 615.063810][T12099] drm_gem_mmap+0x40b/0x620 [ 615.068284][T12099] __mmap_region+0x1306/0x27a0 [ 615.073014][T12099] mmap_region+0x32b/0x3f0 [ 615.077397][T12099] do_mmap+0xa3e/0x1210 [ 615.081524][T12099] vm_mmap_pgoff+0x29e/0x470 [ 615.086086][T12099] ksys_mmap_pgoff+0x32c/0x5c0 [ 615.090819][T12099] __x64_sys_mmap+0x125/0x190 [ 615.095467][T12099] do_syscall_64+0xcd/0x4e0 [ 615.099953][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.105817][T12099] [ 615.108114][T12099] The buggy address belongs to the object at ffff888028aa1600 [ 615.108114][T12099] which belongs to the cache kmalloc-192 of size 192 [ 615.122137][T12099] The buggy address is located 0 bytes to the right of [ 615.122137][T12099] allocated 136-byte region [ffff888028aa1600, ffff888028aa1688) [ 615.136606][T12099] [ 615.138910][T12099] The buggy address belongs to the physical page: [ 615.145289][T12099] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28aa1 [ 615.154029][T12099] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 615.161453][T12099] page_type: f5(slab) [ 615.165416][T12099] raw: 00fff00000000000 ffff88801b0263c0 ffffea000137a000 dead000000000003 [ 615.173966][T12099] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 615.182517][T12099] page dumped because: kasan: bad access detected [ 615.188905][T12099] page_owner tracks the page as allocated [ 615.194586][T12099] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11218, tgid 11207 (syz.1.1383), ts 545190184100, free_ts 544096120385 [ 615.214002][T12099] post_alloc_hook+0x1c0/0x230 [ 615.218747][T12099] get_page_from_freelist+0x10a3/0x3a30 [ 615.224267][T12099] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 615.230136][T12099] alloc_pages_mpol+0x1fb/0x550 [ 615.234966][T12099] new_slab+0x24a/0x360 [ 615.239097][T12099] ___slab_alloc+0xdc4/0x1ae0 [ 615.243750][T12099] __slab_alloc.constprop.0+0x63/0x110 [ 615.249198][T12099] __kmalloc_cache_noprof+0x477/0x780 [ 615.254543][T12099] ovl_encode_real_fh+0xca/0x420 [ 615.259459][T12099] ovl_encode_fh+0x276/0xe80 [ 615.264016][T12099] exportfs_encode_inode_fh+0x11d/0x2d0 [ 615.269537][T12099] fanotify_encode_fh+0x3ba/0x670 [ 615.274529][T12099] fanotify_handle_event+0x3496/0x4850 [ 615.279957][T12099] fsnotify+0xc58/0x1dc0 [ 615.284169][T12099] __fsnotify_parent+0x915/0xc40 [ 615.289078][T12099] __kernel_read+0x617/0xbf0 [ 615.293640][T12099] page last free pid 11213 tgid 11213 stack trace: [ 615.300105][T12099] __free_frozen_pages+0x7df/0x1160 [ 615.305275][T12099] tlb_finish_mmu+0x237/0x7c0 [ 615.309928][T12099] exit_mmap+0x3fc/0xb90 [ 615.314143][T12099] __mmput+0x12a/0x410 [ 615.318187][T12099] mmput+0x62/0x70 [ 615.321881][T12099] do_exit+0x7c7/0x2bf0 [ 615.326004][T12099] do_group_exit+0xd3/0x2a0 [ 615.330485][T12099] __x64_sys_exit_group+0x3e/0x50 [ 615.335480][T12099] x64_sys_call+0x150b/0x1730 [ 615.340129][T12099] do_syscall_64+0xcd/0x4e0 [ 615.344606][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.350470][T12099] [ 615.352764][T12099] Memory state around the buggy address: [ 615.358360][T12099] ffff888028aa1580: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 615.366393][T12099] ffff888028aa1600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 615.374425][T12099] >ffff888028aa1680: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 615.382454][T12099] ^ [ 615.386749][T12099] ffff888028aa1700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 615.394781][T12099] ffff888028aa1780: 00 00 00 00 00 00 00 05 fc fc fc fc fc fc fc fc [ 615.402809][T12099] ================================================================== [ 615.450476][ T30] audit: type=1400 audit(1759624484.470:841): avc: denied { write } for pid=5807 comm="syz-executor" path="pipe:[4593]" dev="pipefs" ino=4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 615.514520][ T30] audit: type=1400 audit(1759624484.550:842): avc: denied { recv } for pid=5183 comm="klogd" saddr=10.128.0.169 src=47220 daddr=10.128.0.45 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 615.794733][T12099] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 615.801944][T12099] CPU: 1 UID: 0 PID: 12099 Comm: syz.3.1548 Not tainted syzkaller #0 PREEMPT(full) [ 615.811290][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 615.821334][T12099] Call Trace: [ 615.824623][T12099] [ 615.827557][T12099] dump_stack_lvl+0x3d/0x1f0 [ 615.832161][T12099] vpanic+0x640/0x6f0 [ 615.836133][T12099] panic+0xca/0xd0 [ 615.839837][T12099] ? __pfx_panic+0x10/0x10 [ 615.844234][T12099] ? __cpa_addr+0x1d3/0x220 [ 615.848723][T12099] ? preempt_schedule_common+0x44/0xc0 [ 615.854164][T12099] ? preempt_schedule_thunk+0x16/0x30 [ 615.859522][T12099] ? check_panic_on_warn+0x1f/0xb0 [ 615.864612][T12099] check_panic_on_warn+0xab/0xb0 [ 615.869527][T12099] end_report+0x107/0x170 [ 615.873838][T12099] kasan_report+0xee/0x110 [ 615.878239][T12099] ? __cpa_addr+0x1d3/0x220 [ 615.882726][T12099] __cpa_addr+0x1d3/0x220 [ 615.887038][T12099] cpa_flush+0xec/0x8a0 [ 615.891195][T12099] ? __pfx_cpa_flush+0x10/0x10 [ 615.895940][T12099] ? pgprot2cachemode+0x9a/0x130 [ 615.900866][T12099] ? __pfx_pgprot2cachemode+0x10/0x10 [ 615.906228][T12099] set_pages_array_wb+0x238/0x280 [ 615.911251][T12099] ? __pfx_set_pages_array_wb+0x10/0x10 [ 615.916790][T12099] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 615.922856][T12099] drm_gem_shmem_vm_close+0x63/0xc0 [ 615.928036][T12099] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 615.933926][T12099] remove_vma+0x85/0x160 [ 615.938157][T12099] exit_mmap+0x50a/0xb90 [ 615.942386][T12099] ? __pfx_exit_mmap+0x10/0x10 [ 615.947134][T12099] ? rcu_is_watching+0x12/0xc0 [ 615.951884][T12099] ? kasan_quarantine_put+0x10a/0x240 [ 615.957244][T12099] __mmput+0x12a/0x410 [ 615.961296][T12099] mmput+0x62/0x70 [ 615.965001][T12099] do_exit+0x7c7/0x2bf0 [ 615.969133][T12099] ? __pfx___might_resched+0x10/0x10 [ 615.974405][T12099] ? __pfx_do_exit+0x10/0x10 [ 615.978972][T12099] ? do_raw_spin_lock+0x12c/0x2b0 [ 615.983981][T12099] ? find_held_lock+0x2b/0x80 [ 615.988643][T12099] do_group_exit+0xd3/0x2a0 [ 615.993125][T12099] get_signal+0x2671/0x26d0 [ 615.997619][T12099] ? __pfx_do_recvmmsg+0x10/0x10 [ 616.002541][T12099] ? __pfx_get_signal+0x10/0x10 [ 616.007375][T12099] ? do_futex+0x122/0x350 [ 616.011686][T12099] arch_do_signal_or_restart+0x8f/0x7c0 [ 616.017230][T12099] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 616.023394][T12099] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 616.028945][T12099] exit_to_user_mode_loop+0x85/0x130 [ 616.034220][T12099] do_syscall_64+0x419/0x4e0 [ 616.038797][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.044669][T12099] RIP: 0033:0x7f57fd58eec9 [ 616.049061][T12099] Code: Unable to access opcode bytes at 0x7f57fd58ee9f. [ 616.056055][T12099] RSP: 002b:00007f57fe3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 616.064453][T12099] RAX: 000000000000fabd RBX: 00007f57fd7e5fa0 RCX: 00007f57fd58eec9 [ 616.072402][T12099] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 616.080353][T12099] RBP: 00007f57fd611f91 R08: 0000000000000000 R09: 0000000000000000 [ 616.088304][T12099] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 616.096255][T12099] R13: 00007f57fd7e6038 R14: 00007f57fd7e5fa0 R15: 00007ffe8923ea88 [ 616.104217][T12099] [ 616.107413][T12099] Kernel Offset: disabled [ 616.111710][T12099] Rebooting in 86400 seconds..