last executing test programs: 15.190707682s ago: executing program 2 (id=782): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.996238158s ago: executing program 2 (id=785): socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0x0, 0xee00) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @any, 0x8}, 0x80) shutdown(r0, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unlink(&(0x7f0000000040)='./cgroup/../file0\x00') 13.96982195s ago: executing program 3 (id=787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5523) inotify_init1(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) 13.957957867s ago: executing program 2 (id=788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x8, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 12.69665546s ago: executing program 2 (id=791): pipe2$9p(&(0x7f0000000140), 0x4000) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local, {[@rr={0x7, 0x3, 0x92}, @end]}}, @info_request={0xf, 0x0, 0x0, 0x3492, 0x2}}}}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000000b) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r4 = syz_open_dev$vim2m(0x0, 0x100000000a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0x8, 0x1, 0x1, "4d00ca0a3c2be96e678a92ddf91f0000003cc69320004d00", 0x31303453}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x4000000000010046) 11.860367093s ago: executing program 3 (id=794): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 11.382625434s ago: executing program 3 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet6_udp(0xa, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) syz_pidfd_open(0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x68, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) 10.958968318s ago: executing program 2 (id=796): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400002}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) close(0x3) 9.978983996s ago: executing program 3 (id=799): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_register(r0, 0x0, 0x4a) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x20}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) 6.801574422s ago: executing program 4 (id=806): pipe2$9p(&(0x7f0000000140), 0x4000) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local, {[@rr={0x7, 0x3, 0x92}, @end]}}, @info_request={0xf, 0x0, 0x0, 0x3492, 0x2}}}}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000000b) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r4 = syz_open_dev$vim2m(0x0, 0x100000000a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0x8, 0x1, 0x1, "4d00ca0a3c2be96e678a92ddf91f0000003cc69320004d00", 0x31303453}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x4000000000010046) 6.393202733s ago: executing program 0 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r1, @ANYBLOB="0a0006"], 0x30}, 0x1, 0x0, 0x0, 0x20004845}, 0x80) 6.072484328s ago: executing program 0 (id=809): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x40001}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x5) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 5.418841668s ago: executing program 4 (id=811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x5, 0x4}, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_open_dev$usbfs(0x0, 0x6, 0x400000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000300)={0x0, 0xfffffff3}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x810) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) 5.298898714s ago: executing program 1 (id=812): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='+'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.633162625s ago: executing program 0 (id=813): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x100000, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x200002, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x1aa0, 0x2, 0x386, 0x1, 0xffffffc0, "3bba"}}, 0x11a) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 4.633005258s ago: executing program 1 (id=814): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',p\x00w']) 4.471538883s ago: executing program 4 (id=815): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 4.225751997s ago: executing program 4 (id=816): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 3.581921736s ago: executing program 1 (id=817): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000540)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup(r3) syz_open_procfs(0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) unshare(0x22020400) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000006040000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.579602727s ago: executing program 0 (id=827): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x100000, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x200002, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000004c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x1aa0, 0x2, 0x386, 0x1, 0xffffffc0, "3bba"}}, 0x11a) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 3.480351571s ago: executing program 4 (id=818): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xf, [{{0x9, 0x2, 0xfffffffffffffd55}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) write(0xffffffffffffffff, 0x0, 0x0) 3.245732728s ago: executing program 3 (id=819): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0xfe31}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r0 = syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.479099764s ago: executing program 0 (id=820): ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) 1.404330391s ago: executing program 0 (id=821): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@ipv4_delroute={0x3c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x3c}}, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40043) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/208, 0x33, 0xd0, 0x0, 0x7fffffff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x1f, 0xa3, 0x81, 0x20, 0x5c6, 0x9054, 0x55b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x1, 0x80, 0x0, [{{0x9, 0x4, 0x64, 0xd0, 0x0, 0xe, 0x1, 0x0, 0x4}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x18, &(0x7f00000001c0)=@string={0x18, 0x3, "a140e496544301ca039fd982546b6c18f04c316ab8b1"}}]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40186f40, 0x20000502) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40046f41, 0x20000502) unshare(0x8010000) socket$packet(0x11, 0x3, 0x300) 1.402849872s ago: executing program 1 (id=822): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.345920169s ago: executing program 3 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 901.786904ms ago: executing program 2 (id=824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 901.043106ms ago: executing program 1 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 833.024547ms ago: executing program 1 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) syz_pidfd_open(0x0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r5) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x68, r6, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) 0s ago: executing program 4 (id=826): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 51.625237][ T29] audit: type=1400 audit(1737999669.853:88): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.628429][ T5802] cgroup: Unknown subsys name 'net' [ 51.648132][ T29] audit: type=1400 audit(1737999669.853:89): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.675892][ T29] audit: type=1400 audit(1737999669.883:90): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.816371][ T5802] cgroup: Unknown subsys name 'cpuset' [ 51.823374][ T5802] cgroup: Unknown subsys name 'rlimit' [ 51.956873][ T29] audit: type=1400 audit(1737999670.183:91): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.987804][ T29] audit: type=1400 audit(1737999670.183:92): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.012584][ T29] audit: type=1400 audit(1737999670.183:93): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.028922][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.033206][ T29] audit: type=1400 audit(1737999670.183:94): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.061857][ T29] audit: type=1400 audit(1737999670.193:95): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 52.087476][ T29] audit: type=1400 audit(1737999670.193:96): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 52.110737][ T29] audit: type=1400 audit(1737999670.223:97): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.918420][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.867209][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.879890][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.887743][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.905814][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.913355][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.922147][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.929649][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.937401][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.945476][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.953259][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.957010][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.960792][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.975926][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.982591][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.983025][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.990827][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.997758][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.005548][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.015569][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.019314][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.032764][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.035759][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.047912][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.049318][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.057267][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.075582][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.084237][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.084239][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.122829][ T5814] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.132549][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.378457][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 55.414244][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 55.475996][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 55.498742][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 55.576400][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.583505][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.591572][ T5815] bridge_slave_0: entered allmulticast mode [ 55.598710][ T5815] bridge_slave_0: entered promiscuous mode [ 55.606102][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.613158][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.620393][ T5816] bridge_slave_0: entered allmulticast mode [ 55.626773][ T5816] bridge_slave_0: entered promiscuous mode [ 55.650333][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.658727][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.665985][ T5815] bridge_slave_1: entered allmulticast mode [ 55.672416][ T5815] bridge_slave_1: entered promiscuous mode [ 55.679474][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.686666][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.693756][ T5816] bridge_slave_1: entered allmulticast mode [ 55.700478][ T5816] bridge_slave_1: entered promiscuous mode [ 55.708855][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.715989][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.723080][ T5812] bridge_slave_0: entered allmulticast mode [ 55.729634][ T5812] bridge_slave_0: entered promiscuous mode [ 55.736736][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.743965][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.751079][ T5812] bridge_slave_1: entered allmulticast mode [ 55.757881][ T5812] bridge_slave_1: entered promiscuous mode [ 55.792729][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 55.808847][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.823570][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.839535][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.846719][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.854299][ T5825] bridge_slave_0: entered allmulticast mode [ 55.860729][ T5825] bridge_slave_0: entered promiscuous mode [ 55.869536][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.881286][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.897562][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.912696][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.927945][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.935192][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.942322][ T5825] bridge_slave_1: entered allmulticast mode [ 55.949018][ T5825] bridge_slave_1: entered promiscuous mode [ 55.991610][ T5812] team0: Port device team_slave_0 added [ 56.012295][ T5815] team0: Port device team_slave_0 added [ 56.019857][ T5816] team0: Port device team_slave_0 added [ 56.027210][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.037506][ T5812] team0: Port device team_slave_1 added [ 56.047563][ T5815] team0: Port device team_slave_1 added [ 56.060192][ T5816] team0: Port device team_slave_1 added [ 56.071886][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.106657][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.113620][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.139646][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.163631][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.170925][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.196818][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.212028][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.219409][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.228840][ T5817] bridge_slave_0: entered allmulticast mode [ 56.235342][ T5817] bridge_slave_0: entered promiscuous mode [ 56.242733][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.249986][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.275873][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.292140][ T5825] team0: Port device team_slave_0 added [ 56.299795][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.306914][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.332972][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.344234][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.351179][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.377216][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.388490][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.395772][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.402931][ T5817] bridge_slave_1: entered allmulticast mode [ 56.409669][ T5817] bridge_slave_1: entered promiscuous mode [ 56.422571][ T5825] team0: Port device team_slave_1 added [ 56.439326][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.446503][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.472465][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.503380][ T5816] hsr_slave_0: entered promiscuous mode [ 56.509453][ T5816] hsr_slave_1: entered promiscuous mode [ 56.522663][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.536719][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.558475][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.565691][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.591747][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.623101][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.630456][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.656911][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.677227][ T5817] team0: Port device team_slave_0 added [ 56.685697][ T5812] hsr_slave_0: entered promiscuous mode [ 56.691604][ T5812] hsr_slave_1: entered promiscuous mode [ 56.697678][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.705760][ T5812] Cannot create hsr debugfs directory [ 56.720192][ T5817] team0: Port device team_slave_1 added [ 56.739042][ T5815] hsr_slave_0: entered promiscuous mode [ 56.746917][ T5815] hsr_slave_1: entered promiscuous mode [ 56.752669][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.760423][ T5815] Cannot create hsr debugfs directory [ 56.797272][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.806472][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.832922][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.845151][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.852090][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.878070][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.918980][ T5825] hsr_slave_0: entered promiscuous mode [ 56.925451][ T5825] hsr_slave_1: entered promiscuous mode [ 56.931177][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.939489][ T5825] Cannot create hsr debugfs directory [ 57.016076][ T5817] hsr_slave_0: entered promiscuous mode [ 57.021988][ T5817] hsr_slave_1: entered promiscuous mode [ 57.028001][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.036125][ T5817] Cannot create hsr debugfs directory [ 57.095006][ T53] Bluetooth: hci0: command tx timeout [ 57.095008][ T5814] Bluetooth: hci1: command tx timeout [ 57.164458][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.174054][ T53] Bluetooth: hci2: command tx timeout [ 57.174149][ T5814] Bluetooth: hci3: command tx timeout [ 57.179520][ T5821] Bluetooth: hci4: command tx timeout [ 57.202356][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.219257][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.227650][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.258836][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.267216][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.278426][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.287699][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.323444][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.360522][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.378994][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.393082][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.405776][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.416722][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.427938][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.450270][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.493376][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.518848][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.527046][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.536745][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.601226][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.616531][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.651266][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.682754][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.698245][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.705421][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.716707][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.723755][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.738843][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.748691][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.755752][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.766787][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.773892][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.788455][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.810819][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.828747][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.850427][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.867113][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.876624][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.883691][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.902483][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.909589][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.918487][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.925566][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.939389][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.946481][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.957604][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.964729][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.980389][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.991733][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.006690][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.013758][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.078358][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 58.078372][ T29] audit: type=1400 audit(1737999676.303:111): avc: denied { sys_module } for pid=5816 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.087474][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.121667][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.192103][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.313546][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.391490][ T5816] veth0_vlan: entered promiscuous mode [ 58.429579][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.441738][ T5816] veth1_vlan: entered promiscuous mode [ 58.452064][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.498419][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.517705][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.537849][ T5816] veth0_macvtap: entered promiscuous mode [ 58.558829][ T5825] veth0_vlan: entered promiscuous mode [ 58.566550][ T5816] veth1_macvtap: entered promiscuous mode [ 58.596594][ T5825] veth1_vlan: entered promiscuous mode [ 58.611689][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.650695][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.669443][ T5812] veth0_vlan: entered promiscuous mode [ 58.677861][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.688271][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.699048][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.708016][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.729661][ T5812] veth1_vlan: entered promiscuous mode [ 58.736653][ T5817] veth0_vlan: entered promiscuous mode [ 58.744672][ T5825] veth0_macvtap: entered promiscuous mode [ 58.770339][ T5817] veth1_vlan: entered promiscuous mode [ 58.779504][ T5825] veth1_macvtap: entered promiscuous mode [ 58.800035][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.811702][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.823288][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.840654][ T5815] veth0_vlan: entered promiscuous mode [ 58.856359][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.867180][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.878060][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.893161][ T5812] veth0_macvtap: entered promiscuous mode [ 58.911629][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.922391][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.931220][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.940513][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.953060][ T5812] veth1_macvtap: entered promiscuous mode [ 58.960897][ T5815] veth1_vlan: entered promiscuous mode [ 58.971842][ T5817] veth0_macvtap: entered promiscuous mode [ 59.010999][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.016625][ T5815] veth0_macvtap: entered promiscuous mode [ 59.026306][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.031816][ T5817] veth1_macvtap: entered promiscuous mode [ 59.057055][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.069428][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.079702][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.090261][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.102172][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.111468][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.122045][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.132182][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.143359][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.154426][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.170920][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.174742][ T5821] Bluetooth: hci0: command tx timeout [ 59.181810][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.189506][ T5821] Bluetooth: hci1: command tx timeout [ 59.197246][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.212766][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.224581][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.235251][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.249119][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.256565][ T5821] Bluetooth: hci4: command tx timeout [ 59.256599][ T53] Bluetooth: hci2: command tx timeout [ 59.266695][ T5815] veth1_macvtap: entered promiscuous mode [ 59.273038][ T5821] Bluetooth: hci3: command tx timeout [ 59.279145][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.288208][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.297105][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.306240][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.332887][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.333619][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.341284][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.359003][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.369763][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.380372][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.390500][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.401123][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.412347][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.428332][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.431153][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.443767][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.445426][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.460996][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.469881][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.487223][ T29] audit: type=1400 audit(1737999677.713:112): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.XHNUe4/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.514044][ T29] audit: type=1400 audit(1737999677.713:113): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.540617][ T29] audit: type=1400 audit(1737999677.713:114): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.XHNUe4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.566818][ T29] audit: type=1400 audit(1737999677.713:115): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.595653][ T29] audit: type=1400 audit(1737999677.713:116): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.XHNUe4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.596940][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.622893][ T29] audit: type=1400 audit(1737999677.713:117): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/root/syzkaller.XHNUe4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.668272][ T29] audit: type=1400 audit(1737999677.743:118): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.686843][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.698546][ T29] audit: type=1400 audit(1737999677.763:119): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.721555][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.721572][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.721586][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.735866][ T29] audit: type=1400 audit(1737999677.763:120): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="gadgetfs" ino=7329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 59.755431][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.785698][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.795716][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.806298][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.818587][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.831510][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.843236][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.872137][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.883941][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.894654][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.905321][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.915532][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.927485][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.937421][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.948281][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.959687][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.002189][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.025808][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.050951][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.096503][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.143727][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.152787][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.168894][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.180861][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.616731][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.648044][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.838767][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.869415][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.887179][ T5905] bridge0: port 3(gretap0) entered blocking state [ 60.898747][ T5905] bridge0: port 3(gretap0) entered disabled state [ 60.905885][ T5905] gretap0: entered allmulticast mode [ 60.912712][ T5905] gretap0: entered promiscuous mode [ 60.977534][ T5905] bridge0: port 3(gretap0) entered blocking state [ 60.984332][ T5905] bridge0: port 3(gretap0) entered forwarding state [ 61.063032][ T5908] gretap0: left allmulticast mode [ 61.079492][ T5908] gretap0: left promiscuous mode [ 61.085717][ T5908] bridge0: port 3(gretap0) entered disabled state [ 61.117990][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.138430][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.215758][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.234613][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.254528][ T5821] Bluetooth: hci1: command tx timeout [ 61.260451][ T5821] Bluetooth: hci0: command tx timeout [ 61.343800][ T53] Bluetooth: hci3: command tx timeout [ 61.354076][ T53] Bluetooth: hci4: command tx timeout [ 61.360209][ T5821] Bluetooth: hci2: command tx timeout [ 62.370717][ T5918] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 63.335094][ T5821] Bluetooth: hci0: command tx timeout [ 63.340757][ T5821] Bluetooth: hci1: command tx timeout [ 63.414699][ T53] Bluetooth: hci2: command tx timeout [ 63.444990][ T5821] Bluetooth: hci3: command tx timeout [ 63.446315][ T5814] Bluetooth: hci4: command tx timeout [ 63.604782][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 63.604801][ T29] audit: type=1400 audit(1737999681.813:153): avc: denied { block_suspend } for pid=5925 comm="syz.4.9" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.327904][ T29] audit: type=1400 audit(1737999682.513:154): avc: denied { create } for pid=5925 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.350355][ T29] audit: type=1400 audit(1737999682.553:155): avc: denied { read } for pid=5938 comm="syz.2.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.355422][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 64.373911][ T29] audit: type=1400 audit(1737999682.553:156): avc: denied { open } for pid=5938 comm="syz.2.13" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.405656][ T29] audit: type=1400 audit(1737999682.553:157): avc: denied { ioctl } for pid=5938 comm="syz.2.13" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.430765][ T29] audit: type=1400 audit(1737999682.583:158): avc: denied { write } for pid=5925 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.471904][ T29] audit: type=1400 audit(1737999682.693:159): avc: denied { ioctl } for pid=5938 comm="syz.2.13" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8325 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.747050][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 64.849542][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 64.990002][ T29] audit: type=1400 audit(1737999683.033:160): avc: denied { create } for pid=5942 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.210719][ T5953] evm: overlay not supported [ 65.603990][ T29] audit: type=1400 audit(1737999683.043:161): avc: denied { write } for pid=5942 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.624001][ T29] audit: type=1400 audit(1737999683.043:162): avc: denied { nlmsg_write } for pid=5942 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.999109][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 68.999125][ T29] audit: type=1400 audit(1737999687.223:174): avc: denied { create } for pid=5976 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.986335][ T29] audit: type=1400 audit(1737999687.573:175): avc: denied { create } for pid=5976 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.006845][ T29] audit: type=1400 audit(1737999687.573:176): avc: denied { write } for pid=5976 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.027115][ T29] audit: type=1400 audit(1737999687.573:177): avc: denied { write } for pid=5976 comm="syz.1.21" path="socket:[8383]" dev="sockfs" ino=8383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.270899][ T29] audit: type=1400 audit(1737999687.583:178): avc: denied { nlmsg_read } for pid=5976 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 71.989146][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.995661][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.012080][ T29] audit: type=1400 audit(1737999689.813:179): avc: denied { name_bind } for pid=5991 comm="syz.4.26" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 72.044907][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 72.214142][ T29] audit: type=1400 audit(1737999689.813:180): avc: denied { node_bind } for pid=5991 comm="syz.4.26" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.124011][ T6011] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 76.632679][ T8] cfg80211: failed to load regulatory.db [ 77.084444][ T6040] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 77.180613][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 81.354550][ T6083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.403441][ T29] audit: type=1400 audit(1737999699.623:181): avc: denied { create } for pid=6082 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.447995][ T29] audit: type=1400 audit(1737999699.653:182): avc: denied { read } for pid=6082 comm="syz.2.47" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.709406][ T29] audit: type=1400 audit(1737999699.653:183): avc: denied { open } for pid=6082 comm="syz.2.47" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.178283][ T29] audit: type=1400 audit(1737999701.393:184): avc: denied { map } for pid=6082 comm="syz.2.47" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.260857][ T29] audit: type=1400 audit(1737999701.393:185): avc: denied { ioctl } for pid=6082 comm="syz.2.47" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.293676][ T29] audit: type=1400 audit(1737999701.443:186): avc: denied { connect } for pid=6082 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.317398][ T29] audit: type=1400 audit(1737999701.453:187): avc: denied { mounton } for pid=6082 comm="syz.2.47" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 83.796653][ T6121] bridge0: port 3(gretap0) entered blocking state [ 83.803495][ T6121] bridge0: port 3(gretap0) entered disabled state [ 83.810148][ T6121] gretap0: entered allmulticast mode [ 83.816465][ T6121] gretap0: entered promiscuous mode [ 83.822120][ T6121] bridge0: port 3(gretap0) entered blocking state [ 83.828639][ T6121] bridge0: port 3(gretap0) entered forwarding state [ 83.838598][ T6121] gretap0: left allmulticast mode [ 83.843683][ T6121] gretap0: left promiscuous mode [ 83.848839][ T6121] bridge0: port 3(gretap0) entered disabled state [ 84.333064][ T6124] netlink: 44 bytes leftover after parsing attributes in process `syz.2.54'. [ 87.635215][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 88.047118][ T29] audit: type=1400 audit(1737999706.263:188): avc: denied { read } for pid=6165 comm="syz.0.66" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.085548][ T29] audit: type=1400 audit(1737999706.293:189): avc: denied { open } for pid=6165 comm="syz.0.66" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.122398][ T6167] netlink: 96 bytes leftover after parsing attributes in process `syz.0.66'. [ 90.251498][ T29] audit: type=1400 audit(1737999708.473:190): avc: denied { bind } for pid=6188 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.411441][ T29] audit: type=1400 audit(1737999708.563:191): avc: denied { write } for pid=6188 comm="syz.2.72" path="socket:[9595]" dev="sockfs" ino=9595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.957019][ T29] audit: type=1400 audit(1737999709.173:192): avc: denied { write } for pid=6188 comm="syz.2.72" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.890780][ T6211] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 92.961549][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 93.679371][ T6234] xt_nat: multiple ranges no longer supported [ 96.187762][ T29] audit: type=1400 audit(1737999714.403:193): avc: denied { sqpoll } for pid=6256 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.267732][ T29] audit: type=1400 audit(1737999714.413:194): avc: denied { create } for pid=6256 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.328963][ T29] audit: type=1400 audit(1737999714.413:195): avc: denied { connect } for pid=6256 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.411662][ T29] audit: type=1400 audit(1737999714.413:196): avc: denied { bind } for pid=6256 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.467347][ T29] audit: type=1400 audit(1737999714.683:197): avc: denied { write } for pid=6256 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.538523][ T29] audit: type=1400 audit(1737999714.763:198): avc: denied { name_bind } for pid=6266 comm="syz.4.90" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 99.333699][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 100.148009][ T6312] netlink: 96 bytes leftover after parsing attributes in process `syz.3.101'. [ 100.385163][ T29] audit: type=1400 audit(1737999718.593:199): avc: denied { create } for pid=6306 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.794453][ T6325] overlayfs: failed to resolve './file0': -2 [ 103.129820][ T6344] Bluetooth: MGMT ver 1.23 [ 103.387913][ T6355] netlink: 96 bytes leftover after parsing attributes in process `syz.3.114'. [ 105.155104][ T6378] netlink: 96 bytes leftover after parsing attributes in process `syz.1.122'. [ 110.040274][ T6423] Zero length message leads to an empty skb [ 110.206888][ T6428] netlink: 96 bytes leftover after parsing attributes in process `syz.4.136'. [ 113.937713][ T6457] bridge0: port 3(gretap0) entered blocking state [ 113.945460][ T6457] bridge0: port 3(gretap0) entered disabled state [ 113.952004][ T6457] gretap0: entered allmulticast mode [ 113.958098][ T6457] gretap0: entered promiscuous mode [ 113.966280][ T6457] bridge0: port 3(gretap0) entered blocking state [ 113.972783][ T6457] bridge0: port 3(gretap0) entered forwarding state [ 113.983121][ T6457] gretap0: left allmulticast mode [ 113.988942][ T6457] gretap0: left promiscuous mode [ 113.994083][ T6457] bridge0: port 3(gretap0) entered disabled state [ 122.558183][ T29] audit: type=1400 audit(1737999740.783:200): avc: denied { write } for pid=6536 comm="syz.1.167" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.376930][ T6546] capability: warning: `syz.1.167' uses deprecated v2 capabilities in a way that may be insecure [ 123.665861][ T6540] tty tty24: ldisc open failed (-12), clearing slot 23 [ 128.317547][ T6578] netlink: 'syz.2.176': attribute type 72 has an invalid length. [ 131.542216][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 131.584895][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 132.541781][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.553885][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.784894][ T29] audit: type=1400 audit(1737999755.993:201): avc: denied { sys_module } for pid=6657 comm="syz.3.197" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.815596][ T6685] bridge0: port 3(gretap0) entered blocking state [ 137.822135][ T6685] bridge0: port 3(gretap0) entered disabled state [ 137.828777][ T6685] gretap0: entered allmulticast mode [ 137.835483][ T6685] gretap0: entered promiscuous mode [ 137.841044][ T6685] bridge0: port 3(gretap0) entered blocking state [ 137.847555][ T6685] bridge0: port 3(gretap0) entered forwarding state [ 137.862398][ T6685] gretap0: left allmulticast mode [ 137.867600][ T6685] gretap0: left promiscuous mode [ 137.872706][ T6685] bridge0: port 3(gretap0) entered disabled state [ 141.623162][ T6728] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 147.455583][ T6782] bridge0: port 3(gretap0) entered blocking state [ 147.462362][ T6782] bridge0: port 3(gretap0) entered disabled state [ 147.471659][ T6782] gretap0: entered allmulticast mode [ 147.479041][ T6782] gretap0: entered promiscuous mode [ 147.484781][ T6782] bridge0: port 3(gretap0) entered blocking state [ 147.491282][ T6782] bridge0: port 3(gretap0) entered forwarding state [ 147.501052][ T6782] gretap0: left allmulticast mode [ 147.506165][ T6782] gretap0: left promiscuous mode [ 147.511226][ T6782] bridge0: port 3(gretap0) entered disabled state [ 155.095046][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 155.924106][ T29] audit: type=1400 audit(1737999774.143:202): avc: denied { connect } for pid=6833 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.578499][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 159.173651][ T29] audit: type=1400 audit(1737999777.363:203): avc: denied { create } for pid=6877 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.423555][ T29] audit: type=1400 audit(1737999777.363:204): avc: denied { connect } for pid=6877 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.687776][ T29] audit: type=1400 audit(1737999777.363:205): avc: denied { setopt } for pid=6877 comm="syz.1.249" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.763578][ T29] audit: type=1400 audit(1737999777.363:206): avc: denied { write } for pid=6877 comm="syz.1.249" path="socket:[10609]" dev="sockfs" ino=10609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.165651][ T6911] overlayfs: failed to resolve './file1': -2 [ 164.087667][ T6918] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 165.900394][ T6937] openvswitch: netlink: Message has 8 unknown bytes. [ 169.943664][ T29] audit: type=1400 audit(1737999787.933:207): avc: denied { bind } for pid=6961 comm="syz.2.272" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.104511][ T29] audit: type=1400 audit(1737999787.933:208): avc: denied { node_bind } for pid=6961 comm="syz.2.272" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 170.352302][ T6976] overlayfs: failed to resolve './file1': -2 [ 170.407790][ T29] audit: type=1400 audit(1737999788.133:209): avc: denied { write } for pid=6961 comm="syz.2.272" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.475541][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 175.117130][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 175.743538][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 176.815072][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 179.566857][ T29] audit: type=1400 audit(1737999797.793:210): avc: denied { create } for pid=7058 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 179.898250][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 181.714336][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 181.715687][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 181.720374][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 181.726394][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 181.738670][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 184.777393][ T7110] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 186.348837][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 187.133862][ T7130] overlayfs: missing 'lowerdir' [ 190.892504][ T29] audit: type=1400 audit(1737999809.053:211): avc: denied { connect } for pid=7163 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.553970][ T29] audit: type=1400 audit(1737999810.773:212): avc: denied { read } for pid=7191 comm="syz.1.331" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 192.630263][ T29] audit: type=1400 audit(1737999810.773:213): avc: denied { open } for pid=7191 comm="syz.1.331" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 192.936700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.955918][ T29] audit: type=1400 audit(1737999810.813:214): avc: denied { name_connect } for pid=7194 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 193.048804][ T29] audit: type=1400 audit(1737999810.823:215): avc: denied { create } for pid=7191 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 193.078572][ T29] audit: type=1400 audit(1737999810.823:216): avc: denied { connect } for pid=7191 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 193.113280][ T29] audit: type=1400 audit(1737999810.823:217): avc: denied { create } for pid=7196 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.176895][ T29] audit: type=1400 audit(1737999810.823:218): avc: denied { listen } for pid=7194 comm="syz.3.332" lport=55013 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.200546][ T29] audit: type=1400 audit(1737999810.833:219): avc: denied { setopt } for pid=7196 comm="syz.0.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.221549][ T29] audit: type=1400 audit(1737999810.833:220): avc: denied { ioctl } for pid=7196 comm="syz.0.333" path="socket:[11251]" dev="sockfs" ino=11251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.243881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 193.464733][ T866] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 193.673868][ T866] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 193.704106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 193.723407][ T866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.746587][ T866] usb 5-1: config 0 descriptor?? [ 193.765228][ T866] cp210x 5-1:0.0: cp210x converter detected [ 194.168657][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.175018][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.274384][ T7208] syz.4.335 (7208): drop_caches: 2 [ 196.284331][ T7208] syz.4.335 (7208): drop_caches: 2 [ 196.443905][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 196.443937][ T29] audit: type=1326 audit(1737999814.513:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.0.349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb6c98cd29 code=0x0 [ 196.493956][ T5931] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 196.760979][ T5931] usb 4-1: too many configurations: 15, using maximum allowed: 8 [ 196.778690][ T5931] usb 4-1: config index 0 descriptor too short (expected 64853, got 72) [ 196.812063][ T7230] warning: `syz.2.341' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.828958][ T866] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 196.836782][ T866] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 197.181181][ T29] audit: type=1400 audit(1737999815.013:233): avc: denied { write } for pid=7250 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.223744][ T5931] usb 4-1: config index 1 descriptor too short (expected 64853, got 72) [ 197.233663][ T29] audit: type=1400 audit(1737999815.033:234): avc: denied { bind } for pid=7223 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.274174][ T5931] usb 4-1: config index 2 descriptor too short (expected 64853, got 72) [ 197.298406][ T866] usb 5-1: cp210x converter now attached to ttyUSB0 [ 197.317012][ T5931] usb 4-1: config index 3 descriptor too short (expected 64853, got 72) [ 197.328101][ T866] usb 5-1: USB disconnect, device number 2 [ 197.360115][ T866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.378259][ T5931] usb 4-1: config index 4 descriptor too short (expected 64853, got 72) [ 197.388147][ T866] cp210x 5-1:0.0: device disconnected [ 197.409146][ T5931] usb 4-1: config index 5 descriptor too short (expected 64853, got 72) [ 197.428068][ T29] audit: type=1400 audit(1737999815.633:235): avc: denied { create } for pid=7254 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 197.464202][ T5931] usb 4-1: config index 6 descriptor too short (expected 64853, got 72) [ 197.486285][ T5931] usb 4-1: config index 7 descriptor too short (expected 64853, got 72) [ 197.505235][ T5931] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 197.519423][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.533845][ T5931] usb 4-1: Product: syz [ 197.544162][ T5931] usb 4-1: Manufacturer: syz [ 197.589222][ T5931] usb 4-1: SerialNumber: syz [ 197.724373][ T5931] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 197.820559][ T5894] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 198.254759][ T5931] usb 4-1: USB disconnect, device number 2 [ 198.313890][ T866] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 198.399620][ T29] audit: type=1400 audit(1737999816.623:236): avc: denied { connect } for pid=7267 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.420506][ T1143] tipc: Subscription rejected, illegal request [ 198.428893][ T29] audit: type=1400 audit(1737999816.643:237): avc: denied { read } for pid=7267 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.454326][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 198.495038][ T866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.506289][ T866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.519748][ T866] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 198.532942][ T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.541760][ T866] usb 5-1: Product: syz [ 198.550144][ T866] usb 5-1: Manufacturer: syz [ 198.557984][ T866] usb 5-1: SerialNumber: syz [ 198.570614][ T866] usb 5-1: config 0 descriptor?? [ 198.580196][ T866] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 198.592091][ T866] usb 5-1: No valid video chain found. [ 198.613886][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 198.620527][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 198.659888][ T25] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 198.672253][ T25] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 198.683391][ T25] usb 2-1: Product: syz [ 198.687814][ T25] usb 2-1: Manufacturer: syz [ 198.692585][ T25] usb 2-1: SerialNumber: syz [ 198.706774][ T7268] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 198.868794][ T9] usb 5-1: USB disconnect, device number 3 [ 199.098690][ T5894] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 199.254343][ T5894] ath9k_htc: Failed to initialize the device [ 199.364405][ T25] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 199.372688][ T25] usb 2-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 199.389000][ T25] usb 2-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 199.397217][ T25] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 199.408469][ T25] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 199.418492][ T25] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 199.447028][ T25] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 199.457819][ T5931] usb 4-1: ath9k_htc: USB layer deinitialized [ 199.488996][ T25] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 199.521471][ T25] usb 2-1: USB disconnect, device number 2 [ 199.875938][ T7285] lo speed is unknown, defaulting to 1000 [ 199.886942][ T7285] lo speed is unknown, defaulting to 1000 [ 199.897132][ T7285] lo speed is unknown, defaulting to 1000 [ 200.126780][ T7285] infiniband sz1: set active [ 200.131685][ T7285] infiniband sz1: added lo [ 200.472402][ T29] audit: type=1400 audit(1737999817.863:238): avc: denied { create } for pid=7281 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 200.504852][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 200.516453][ T29] audit: type=1400 audit(1737999818.083:239): avc: denied { bind } for pid=7281 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 200.518621][ T5864] lo speed is unknown, defaulting to 1000 [ 200.536024][ T29] audit: type=1400 audit(1737999818.503:240): avc: denied { ioctl } for pid=7279 comm="syz.2.360" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.579082][ T7285] RDS/IB: sz1: added [ 200.583631][ T7285] smc: adding ib device sz1 with port count 1 [ 200.590123][ T7285] smc: ib device sz1 port 1 has pnetid [ 200.606955][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 200.632459][ T7285] lo speed is unknown, defaulting to 1000 [ 200.646476][ T5863] lo speed is unknown, defaulting to 1000 [ 200.667724][ T25] visor 2-1:1.0: device disconnected [ 200.687649][ T29] audit: type=1326 audit(1737999818.913:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7288 comm="syz.4.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0318cd29 code=0x7ffc0000 [ 200.810751][ T7285] lo speed is unknown, defaulting to 1000 [ 200.904522][ T7285] lo speed is unknown, defaulting to 1000 [ 201.112877][ T7297] usb usb8: usbfs: process 7297 (syz.2.364) did not claim interface 0 before use [ 201.156966][ T5894] hid-generic 1AA0:0002:0386.0001: item fetching failed at offset 0/2 [ 201.296254][ T5894] hid-generic 1AA0:0002:0386.0001: probe with driver hid-generic failed with error -22 [ 201.503264][ T7285] lo speed is unknown, defaulting to 1000 [ 201.597487][ T7285] lo speed is unknown, defaulting to 1000 [ 202.561182][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 202.561197][ T29] audit: type=1400 audit(1737999820.783:250): avc: denied { bind } for pid=7303 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.614777][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.368'. [ 202.703226][ T29] audit: type=1400 audit(1737999820.823:251): avc: denied { create } for pid=7303 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 203.211827][ T7293] trusted_key: encrypted_key: insufficient parameters specified [ 203.533149][ T29] audit: type=1400 audit(1737999821.743:252): avc: denied { read append } for pid=7320 comm="syz.4.372" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 203.620433][ T29] audit: type=1400 audit(1737999821.743:253): avc: denied { open } for pid=7320 comm="syz.4.372" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.214363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 204.324292][ T29] audit: type=1400 audit(1737999822.553:254): avc: denied { read } for pid=7334 comm="syz.1.378" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 204.372999][ T29] audit: type=1400 audit(1737999822.573:255): avc: denied { open } for pid=7334 comm="syz.1.378" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.163278][ T29] audit: type=1400 audit(1737999822.573:256): avc: denied { ioctl } for pid=7334 comm="syz.1.378" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 205.416748][ T29] audit: type=1400 audit(1737999823.033:257): avc: denied { ioctl } for pid=7339 comm="syz.2.379" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.640812][ T29] audit: type=1400 audit(1737999823.863:258): avc: denied { watch } for pid=7347 comm="syz.1.382" path="/proc/298/task" dev="proc" ino=13478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 206.243995][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 206.300930][ T7356] sctp: [Deprecated]: syz.0.385 (pid 7356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.300930][ T7356] Use struct sctp_sack_info instead [ 206.384529][ T7356] 9pnet_fd: Insufficient options for proto=fd [ 206.483983][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 206.547917][ T25] usb 3-1: config 4 has an invalid interface number: 218 but max is 0 [ 206.846338][ T25] usb 3-1: config 4 has no interface number 0 [ 206.852456][ T25] usb 3-1: config 4 interface 218 has no altsetting 0 [ 206.938792][ T29] audit: type=1326 audit(1737999825.143:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.3.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb15e78cd29 code=0x0 [ 207.396977][ T25] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=45.36 [ 207.443939][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.483427][ T25] usb 3-1: Product: syz [ 207.490225][ T25] usb 3-1: Manufacturer: syz [ 207.503763][ T25] usb 3-1: SerialNumber: syz [ 207.986371][ T25] garmin_gps 3-1:4.218: Garmin GPS usb/tty converter detected [ 208.029573][ T25] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 208.049411][ T25] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 208.101252][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 208.101267][ T29] audit: type=1400 audit(1737999826.323:266): avc: denied { create } for pid=7387 comm="syz.0.396" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 208.134049][ T25] usb 3-1: USB disconnect, device number 2 [ 208.162775][ T25] garmin_gps 3-1:4.218: device disconnected [ 208.181808][ T29] audit: type=1400 audit(1737999826.323:267): avc: denied { mounton } for pid=7387 comm="syz.0.396" path="/76/file0" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 208.262588][ T29] audit: type=1400 audit(1737999826.373:268): avc: denied { setattr } for pid=7387 comm="syz.0.396" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 208.331178][ T29] audit: type=1400 audit(1737999826.433:269): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 208.356000][ T29] audit: type=1400 audit(1737999826.453:270): avc: denied { read write } for pid=7392 comm="syz.4.399" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 208.401829][ T29] audit: type=1400 audit(1737999826.453:271): avc: denied { open } for pid=7392 comm="syz.4.399" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 208.460289][ T29] audit: type=1400 audit(1737999826.683:272): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 208.564112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 208.719116][ T7406] netlink: 156 bytes leftover after parsing attributes in process `syz.1.401'. [ 209.255783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.267279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.298707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 209.320674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 209.803314][ T29] audit: type=1400 audit(1737999828.023:273): avc: denied { connect } for pid=7417 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.824198][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 209.842981][ T29] audit: type=1400 audit(1737999828.023:274): avc: denied { ioctl } for pid=7417 comm="syz.2.408" path="socket:[13578]" dev="sockfs" ino=13578 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.881003][ T29] audit: type=1400 audit(1737999828.023:275): avc: denied { write } for pid=7417 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.295116][ T7445] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 211.573476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 211.796693][ T7454] overlayfs: missing 'lowerdir' [ 214.019731][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 214.019746][ T29] audit: type=1400 audit(1737999832.243:279): avc: denied { read } for pid=7478 comm="syz.0.430" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.855559][ T29] audit: type=1400 audit(1737999832.243:280): avc: denied { open } for pid=7478 comm="syz.0.430" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 214.913878][ T29] audit: type=1400 audit(1737999832.243:281): avc: denied { ioctl } for pid=7478 comm="syz.0.430" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 215.010877][ T29] audit: type=1400 audit(1737999832.783:282): avc: denied { append } for pid=7478 comm="syz.0.430" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 215.636084][ T29] audit: type=1400 audit(1737999833.423:283): avc: denied { shutdown } for pid=7483 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.689384][ T29] audit: type=1400 audit(1737999833.913:284): avc: denied { append } for pid=7498 comm="syz.2.434" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.338017][ T29] audit: type=1400 audit(1737999834.563:285): avc: denied { ioctl } for pid=7510 comm="syz.4.439" path="socket:[13699]" dev="sockfs" ino=13699 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 216.375029][ T7514] sp0: Synchronizing with TNC [ 216.422193][ T29] audit: type=1400 audit(1737999834.613:286): avc: denied { search } for pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.460021][ T29] audit: type=1400 audit(1737999834.613:287): avc: denied { read } for pid=5484 comm="dhcpcd" name="n100" dev="tmpfs" ino=3445 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.542513][ T29] audit: type=1400 audit(1737999834.613:288): avc: denied { open } for pid=5484 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3445 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.023880][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 217.558495][ T7525] process 'syz.1.443' launched './file0' with NULL argv: empty string added [ 218.777618][ T7523] ======================================================= [ 218.777618][ T7523] WARNING: The mand mount option has been deprecated and [ 218.777618][ T7523] and is ignored by this kernel. Remove the mand [ 218.777618][ T7523] option from the mount to silence this warning. [ 218.777618][ T7523] ======================================================= [ 218.815620][ T7523] netlink: zone id is out of range [ 218.820726][ T7523] netlink: zone id is out of range [ 218.825863][ T7523] netlink: zone id is out of range [ 218.830940][ T7523] netlink: zone id is out of range [ 218.836033][ T7523] netlink: zone id is out of range [ 218.841108][ T7523] netlink: zone id is out of range [ 218.846562][ T7523] netlink: zone id is out of range [ 218.851639][ T7523] netlink: zone id is out of range [ 218.856791][ T7523] netlink: zone id is out of range [ 218.861869][ T7523] netlink: zone id is out of range [ 221.024043][ T7567] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 221.024043][ T7567] program syz.1.454 not setting count and/or reply_len properly [ 221.088536][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 221.088564][ T29] audit: type=1400 audit(1737999839.233:293): avc: denied { read write } for pid=7560 comm="syz.1.454" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.479605][ T29] audit: type=1400 audit(1737999839.233:294): avc: denied { open } for pid=7560 comm="syz.1.454" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.528802][ T29] audit: type=1400 audit(1737999839.293:295): avc: denied { mount } for pid=7560 comm="syz.1.454" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 221.623896][ T29] audit: type=1400 audit(1737999839.783:296): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 221.807229][ T7573] input: syz0 as /devices/virtual/input/input6 [ 222.009025][ T29] audit: type=1400 audit(1737999840.053:297): avc: denied { read } for pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=2766 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.108491][ T29] audit: type=1400 audit(1737999840.053:298): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2766 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.203907][ T29] audit: type=1400 audit(1737999840.223:299): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2766 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.186824][ T7597] syz_tun: entered allmulticast mode [ 223.210618][ T7596] syz_tun: left allmulticast mode [ 224.102163][ T29] audit: type=1400 audit(1737999841.863:300): avc: denied { getopt } for pid=7598 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.757399][ T29] audit: type=1400 audit(1737999842.273:301): avc: denied { read write } for pid=7600 comm="syz.2.469" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 224.989061][ T29] audit: type=1400 audit(1737999842.273:302): avc: denied { open } for pid=7600 comm="syz.2.469" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 226.384200][ T7623] xt_hashlimit: max too large, truncated to 1048576 [ 226.636333][ T7626] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 226.636333][ T7626] program syz.0.471 not setting count and/or reply_len properly [ 229.121207][ T7617] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 229.121207][ T7617] program syz.3.473 not setting count and/or reply_len properly [ 229.189275][ T29] audit: type=1400 audit(1737999847.413:303): avc: denied { open } for pid=7653 comm="syz.1.485" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 229.276904][ T29] audit: type=1400 audit(1737999847.503:304): avc: denied { ioctl } for pid=7653 comm="syz.1.485" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 229.738904][ T7669] usb usb8: usbfs: process 7669 (syz.0.487) did not claim interface 0 before use [ 230.486363][ T5863] hid-generic 1AA0:0002:0386.0002: item fetching failed at offset 0/2 [ 230.487495][ T7671] hpfs: Bad magic ... probably not HPFS [ 230.524165][ T5863] hid-generic 1AA0:0002:0386.0002: probe with driver hid-generic failed with error -22 [ 231.856427][ T7679] rdma_rxe: rxe_newlink: failed to add lo [ 232.124177][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 232.407541][ T29] audit: type=1326 audit(1737999850.633:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7683 comm="syz.2.495" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4463b8cd29 code=0x0 [ 233.331783][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 233.340830][ T7707] netlink: 96 bytes leftover after parsing attributes in process `syz.4.502'. [ 233.349971][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 233.673866][ T29] audit: type=1400 audit(1737999851.553:306): avc: denied { setopt } for pid=7698 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.868425][ T7713] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 233.868425][ T7713] program syz.0.499 not setting count and/or reply_len properly [ 234.099897][ T29] audit: type=1400 audit(1737999852.183:307): avc: denied { rename } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 234.226222][ T29] audit: type=1400 audit(1737999852.183:308): avc: denied { unlink } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 234.254972][ T7717] usb usb8: usbfs: process 7717 (syz.1.505) did not claim interface 0 before use [ 234.300609][ T29] audit: type=1400 audit(1737999852.193:309): avc: denied { create } for pid=5171 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 234.918741][ T29] audit: type=1400 audit(1737999852.603:310): avc: denied { create } for pid=7714 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 234.970903][ T29] audit: type=1400 audit(1737999852.603:311): avc: denied { connect } for pid=7714 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.005153][ T7725] rdma_rxe: rxe_newlink: failed to add lo [ 235.384040][ T29] audit: type=1400 audit(1737999853.593:312): avc: denied { bind } for pid=7739 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 235.431399][ T29] audit: type=1400 audit(1737999853.593:313): avc: denied { setopt } for pid=7739 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 235.859016][ T7750] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 235.859016][ T7750] program syz.3.519 not setting count and/or reply_len properly [ 236.455743][ T7755] usb usb8: usbfs: process 7755 (syz.4.520) did not claim interface 0 before use [ 236.696133][ T29] audit: type=1400 audit(1737999854.843:314): avc: denied { ioctl } for pid=7756 comm="syz.4.523" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 236.964116][ T5931] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 236.993107][ T7767] rdma_rxe: rxe_newlink: failed to add lo [ 237.340317][ T5931] usb 5-1: device descriptor read/64, error -71 [ 238.437686][ T5931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 238.666833][ T29] audit: type=1400 audit(1737999856.733:315): avc: denied { write } for pid=7781 comm="syz.1.531" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.053886][ T5931] usb 5-1: device descriptor read/64, error -71 [ 239.140056][ T7803] rdma_rxe: rxe_newlink: failed to add lo [ 239.164164][ T5931] usb usb5-port1: attempt power cycle [ 242.701896][ T7848] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 242.701896][ T7848] program syz.2.553 not setting count and/or reply_len properly [ 242.775492][ T29] audit: type=1400 audit(1737999860.993:316): avc: denied { create } for pid=7841 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.837920][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 242.913099][ T29] audit: type=1400 audit(1737999861.133:317): avc: denied { read write } for pid=7854 comm="syz.2.557" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.942731][ T29] audit: type=1400 audit(1737999861.163:318): avc: denied { open } for pid=7854 comm="syz.2.557" path="/115/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.581151][ T29] audit: type=1400 audit(1737999862.763:319): avc: denied { setopt } for pid=7884 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.035393][ T29] audit: type=1800 audit(1737999862.833:320): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.564" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 245.188418][ T29] audit: type=1400 audit(1737999863.373:321): avc: denied { accept } for pid=7887 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 245.266555][ T29] audit: type=1400 audit(1737999863.373:322): avc: denied { read } for pid=7887 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.943976][ T29] audit: type=1400 audit(1737999866.133:323): avc: denied { read } for pid=7916 comm="syz.2.580" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.008120][ T29] audit: type=1400 audit(1737999866.133:324): avc: denied { open } for pid=7916 comm="syz.2.580" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.878042][ T29] audit: type=1400 audit(1737999867.103:325): avc: denied { create } for pid=7926 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 248.977433][ T29] audit: type=1400 audit(1737999867.103:326): avc: denied { connect } for pid=7926 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 249.619062][ T29] audit: type=1400 audit(1737999867.133:327): avc: denied { bind } for pid=7926 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 249.670701][ T29] audit: type=1400 audit(1737999867.283:328): avc: denied { getopt } for pid=7917 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.711578][ T29] audit: type=1800 audit(1737999867.333:329): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.582" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 249.755477][ T7934] binder: 7933:7934 ioctl 9362 0 returned -22 [ 249.833982][ T7939] binder: 7933:7939 ioctl c0306201 0 returned -14 [ 250.615160][ T7950] rdma_rxe: rxe_newlink: failed to add lo [ 253.592538][ T29] audit: type=1800 audit(1737999871.813:330): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.597" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 254.414003][ T5461] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 254.565167][ T5461] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 254.591460][ T5461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14042, setting to 64 [ 254.608029][ T5461] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.636189][ T5461] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 254.648004][ T5461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.666727][ T5461] usb 3-1: Product: syz [ 254.671829][ T5461] usb 3-1: Manufacturer: syz [ 254.676904][ T5461] usb 3-1: SerialNumber: syz [ 254.699039][ T5461] usb 3-1: config 0 descriptor?? [ 254.712022][ T5461] redrat3 3-1:0.0: Couldn't find all endpoints [ 255.469329][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.475726][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.518522][ T5461] usb 3-1: USB disconnect, device number 3 [ 255.800641][ T29] audit: type=1400 audit(1737999874.023:331): avc: denied { read } for pid=8004 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.311058][ T29] audit: type=1800 audit(1737999874.523:332): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.612" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 257.125312][ T29] audit: type=1400 audit(1737999875.333:333): avc: denied { ioctl } for pid=8020 comm="syz.4.615" path="socket:[15672]" dev="sockfs" ino=15672 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.280457][ T29] audit: type=1400 audit(1737999876.503:334): avc: denied { bind } for pid=8043 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.342506][ T29] audit: type=1400 audit(1737999876.533:335): avc: denied { listen } for pid=8043 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.396250][ T29] audit: type=1400 audit(1737999876.533:336): avc: denied { write } for pid=8043 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.730402][ T8052] usb usb8: usbfs: process 8052 (syz.0.624) did not claim interface 0 before use [ 261.240612][ T8090] usb usb8: usbfs: process 8090 (syz.0.640) did not claim interface 0 before use [ 261.813371][ T5931] hid-generic 1AA0:0002:0386.0003: item fetching failed at offset 0/2 [ 261.888170][ T5931] hid-generic 1AA0:0002:0386.0003: probe with driver hid-generic failed with error -22 [ 262.419873][ T8108] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 262.419873][ T8108] program syz.0.644 not setting count and/or reply_len properly [ 263.370512][ T8116] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 263.377202][ T8116] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 263.385926][ T8116] vhci_hcd vhci_hcd.0: Device attached [ 264.537112][ T8116] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 264.543757][ T8116] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 264.552295][ T8116] vhci_hcd vhci_hcd.0: Device attached [ 265.263857][ T8121] vhci_hcd: connection closed [ 265.268310][ T5864] vhci_hcd: vhci_device speed not set [ 265.283821][ T6185] vhci_hcd: stop threads [ 265.288797][ T6185] vhci_hcd: release socket [ 265.791222][ T6185] vhci_hcd: disconnect device [ 265.970258][ T5864] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 266.491755][ T8117] vhci_hcd: connection reset by peer [ 266.519581][ T8066] vhci_hcd: stop threads [ 267.508568][ T8066] vhci_hcd: release socket [ 267.535212][ T8066] vhci_hcd: disconnect device [ 268.839527][ T29] audit: type=1400 audit(1737999887.063:337): avc: denied { ioctl } for pid=8151 comm="syz.4.659" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 270.212671][ T29] audit: type=1400 audit(1737999888.413:338): avc: denied { append } for pid=8170 comm="syz.1.665" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.441265][ T29] audit: type=1400 audit(1737999888.423:339): avc: denied { map } for pid=8170 comm="syz.1.665" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.494559][ T29] audit: type=1400 audit(1737999888.423:340): avc: denied { execute } for pid=8170 comm="syz.1.665" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.519328][ T29] audit: type=1400 audit(1737999888.723:341): avc: denied { read write } for pid=8179 comm="syz.0.668" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.542976][ T29] audit: type=1400 audit(1737999888.723:342): avc: denied { open } for pid=8179 comm="syz.0.668" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.745778][ T29] audit: type=1400 audit(1737999888.963:343): avc: denied { bind } for pid=8176 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.951973][ T29] audit: type=1400 audit(1737999888.963:344): avc: denied { name_bind } for pid=8176 comm="syz.2.667" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 271.095878][ T29] audit: type=1400 audit(1737999888.963:345): avc: denied { node_bind } for pid=8176 comm="syz.2.667" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 271.163916][ T5864] vhci_hcd: vhci_device speed not set [ 273.006403][ T29] audit: type=1400 audit(1737999891.233:346): avc: denied { ioctl } for pid=8213 comm="syz.2.683" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.087406][ T8215] lo speed is unknown, defaulting to 1000 [ 274.300421][ T8233] netlink: 200 bytes leftover after parsing attributes in process `syz.1.687'. [ 274.469781][ T5822] Bluetooth: hci3: unexpected event for opcode 0x6905 [ 274.938515][ T29] audit: type=1400 audit(1737999893.113:347): avc: denied { mount } for pid=8239 comm="syz.3.689" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 275.483058][ T29] audit: type=1400 audit(1737999893.703:348): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 275.495515][ T8249] program syz.0.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.577773][ T29] audit: type=1400 audit(1737999893.703:349): avc: denied { ioctl } for pid=8217 comm="syz.0.681" path="socket:[16127]" dev="sockfs" ino=16127 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.868071][ T29] audit: type=1400 audit(1737999894.093:350): avc: denied { name_bind } for pid=8258 comm="syz.4.695" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 278.033896][ T29] audit: type=1400 audit(1737999896.253:351): avc: denied { setopt } for pid=8284 comm="syz.4.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.053211][ T29] audit: type=1400 audit(1737999896.253:352): avc: denied { connect } for pid=8284 comm="syz.4.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.492140][ T8297] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 278.492140][ T8297] program syz.4.704 not setting count and/or reply_len properly [ 280.334184][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 280.934267][ T8321] rdma_rxe: rxe_newlink: failed to add lo [ 284.160177][ T5931] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 284.478121][ T29] audit: type=1326 audit(1737999902.443:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.1.721" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f231d98cd29 code=0x0 [ 284.758676][ T5931] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 284.787809][ T5931] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 284.818435][ T5931] usb 3-1: config 0 has no interface number 0 [ 285.184005][ T5931] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 285.742720][ T5931] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 285.752861][ T5931] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 285.762109][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.802770][ T5931] usb 3-1: config 0 descriptor?? [ 286.038821][ T5931] usb 3-1: string descriptor 0 read error: -71 [ 286.373090][ T8370] sz1: rxe_newlink: already configured on lo [ 287.086003][ T5931] usb 3-1: USB disconnect, device number 4 [ 290.228168][ T8408] loop6: detected capacity change from 0 to 64 [ 290.269683][ T8410] vlan2: entered promiscuous mode [ 290.285528][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 290.312414][ T8410] bond0: entered promiscuous mode [ 290.317917][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.327376][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.349982][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.359227][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.619696][ T8410] bond_slave_0: entered promiscuous mode [ 290.644450][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.653705][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.663737][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 290.672960][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 290.700620][ T8410] bond_slave_1: entered promiscuous mode [ 290.990594][ T8414] sz1: rxe_newlink: already configured on lo [ 291.099360][ T8410] bond0: left promiscuous mode [ 291.270676][ T8410] bond_slave_0: left promiscuous mode [ 291.293538][ T8410] bond_slave_1: left promiscuous mode [ 291.402037][ T8421] vlan2: entered promiscuous mode [ 291.414416][ T8421] bond0: entered promiscuous mode [ 291.429948][ T8421] bond_slave_0: entered promiscuous mode [ 291.585558][ T8421] bond_slave_1: entered promiscuous mode [ 291.629623][ T8421] bond0: left promiscuous mode [ 291.635439][ T8421] bond_slave_0: left promiscuous mode [ 291.641222][ T8421] bond_slave_1: left promiscuous mode [ 292.209033][ T8434] 9pnet_fd: Insufficient options for proto=fd [ 292.644006][ T29] audit: type=1400 audit(1737999910.823:354): avc: denied { read } for pid=8430 comm="syz.4.746" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 292.763935][ T5866] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 292.773842][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 293.030136][ T29] audit: type=1400 audit(1737999910.823:355): avc: denied { open } for pid=8430 comm="syz.4.746" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.084686][ T29] audit: type=1400 audit(1737999910.843:356): avc: denied { ioctl } for pid=8430 comm="syz.4.746" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 293.544784][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 293.564481][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.590202][ T5866] usb 3-1: config 8 has an invalid interface number: 100 but max is 0 [ 293.609614][ T29] audit: type=1326 audit(1737999911.733:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8446 comm="syz.1.751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f231d98cd29 code=0x0 [ 293.660887][ T5866] usb 3-1: config 8 has no interface number 0 [ 293.674906][ T5863] usb 1-1: config 0 has no interfaces? [ 293.728171][ T5866] usb 3-1: config 8 interface 100 has no altsetting 0 [ 293.736549][ T5863] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 293.821752][ T5866] usb 3-1: string descriptor 0 read error: -22 [ 293.835974][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.850659][ T5866] usb 3-1: New USB device found, idVendor=05c6, idProduct=9054, bcdDevice=55.b5 [ 293.926663][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.963926][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 293.973054][ T8454] netlink: 'syz.4.753': attribute type 21 has an invalid length. [ 294.048781][ T5863] usb 1-1: config 0 descriptor?? [ 294.076858][ T5866] usb 3-1: Found UVC 0.00 device (05c6:9054) [ 294.086080][ T5866] usb 3-1: No valid video chain found. [ 294.153579][ T29] audit: type=1400 audit(1737999912.373:358): avc: denied { map } for pid=8457 comm="syz.3.755" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 294.357704][ T8434] ubi0: attaching mtd0 [ 294.435689][ T5461] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 294.470323][ T8434] ubi0: scanning is finished [ 294.480203][ T5866] usb 1-1: USB disconnect, device number 2 [ 294.589050][ T8468] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 294.754441][ T29] audit: type=1400 audit(1737999912.833:359): avc: denied { getopt } for pid=8457 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.807116][ T8434] ubi0: empty MTD device detected [ 294.819882][ T5461] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.832522][ T5461] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.895400][ T5461] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.904776][ T5461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.912811][ T5461] usb 5-1: SerialNumber: syz [ 294.962744][ T8434] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 294.971912][ T8434] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 294.979276][ T8434] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 295.008626][ T8434] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 295.017301][ T8434] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 295.027295][ T8434] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 295.037088][ T8434] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3491502481 [ 295.049394][ T8434] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 295.061171][ T8472] ubi0: background thread "ubi_bgt0d" started, PID 8472 [ 295.068465][ T8469] ubi0: detaching mtd0 [ 295.078840][ T8469] ubi0: mtd0 is detached [ 295.091362][ T5866] usb 3-1: USB disconnect, device number 5 [ 295.145494][ T5461] usb 5-1: 0:2 : does not exist [ 295.181308][ T5461] usb 5-1: USB disconnect, device number 7 [ 295.418272][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.722738][ T29] audit: type=1400 audit(1737999913.943:360): avc: denied { create } for pid=8480 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 297.221735][ T29] audit: type=1400 audit(1737999915.443:361): avc: denied { map } for pid=8502 comm="syz.4.767" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 298.346452][ T29] audit: type=1400 audit(1737999916.573:362): avc: denied { create } for pid=8519 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 298.424804][ T8526] sctp: [Deprecated]: syz.4.776 (pid 8526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.424804][ T8526] Use struct sctp_sack_info instead [ 298.477421][ T8526] 9pnet_fd: Insufficient options for proto=fd [ 298.646760][ T8529] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 298.646760][ T8529] program syz.3.774 not setting count and/or reply_len properly [ 299.139701][ T8531] input: syz0 as /devices/virtual/input/input7 [ 299.729955][ T29] audit: type=1400 audit(1737999917.953:363): avc: denied { ioctl } for pid=8519 comm="syz.2.773" path="socket:[17593]" dev="sockfs" ino=17593 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 300.754451][ T8557] sz1: rxe_newlink: already configured on lo [ 301.989274][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 301.998677][ T8569] netlink: 96 bytes leftover after parsing attributes in process `syz.0.786'. [ 302.008007][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 306.623133][ T8604] lo speed is unknown, defaulting to 1000 [ 306.632468][ T8604] lo speed is unknown, defaulting to 1000 [ 306.639173][ T8604] lo speed is unknown, defaulting to 1000 [ 306.646909][ T8604] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 306.658507][ T8604] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 306.705191][ T8604] lo speed is unknown, defaulting to 1000 [ 306.711498][ T8604] lo speed is unknown, defaulting to 1000 [ 306.769162][ T8604] lo speed is unknown, defaulting to 1000 [ 306.776972][ T8604] lo speed is unknown, defaulting to 1000 [ 306.784258][ T8604] lo speed is unknown, defaulting to 1000 [ 306.798568][ T8608] rdma_rxe: rxe_newlink: failed to add lo [ 310.448132][ T8651] rdma_rxe: rxe_newlink: failed to add lo [ 311.274234][ T29] audit: type=1400 audit(1737999929.493:364): avc: denied { setattr } for pid=8658 comm="syz.4.815" name="file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 311.404427][ T9] hid-generic 1AA0:0002:0386.0004: item fetching failed at offset 0/2 [ 311.527236][ T9] hid-generic 1AA0:0002:0386.0004: probe with driver hid-generic failed with error -22 [ 313.265399][ T5863] hid-generic 1AA0:0002:0386.0005: item fetching failed at offset 0/2 [ 313.275034][ T5863] hid-generic 1AA0:0002:0386.0005: probe with driver hid-generic failed with error -22 [ 314.401292][ T8687] 9pnet_fd: Insufficient options for proto=fd [ 314.421122][ T5863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 314.575143][ T5863] usb 5-1: too many configurations: 15, using maximum allowed: 8 [ 314.585530][ T5863] usb 5-1: config index 0 descriptor too short (expected 64853, got 72) [ 314.601208][ T5863] usb 5-1: config index 1 descriptor too short (expected 64853, got 72) [ 314.613923][ T5863] usb 5-1: config index 2 descriptor too short (expected 64853, got 72) [ 314.623307][ T5863] usb 5-1: config index 3 descriptor too short (expected 64853, got 72) [ 314.632725][ T5863] usb 5-1: config index 4 descriptor too short (expected 64853, got 72) [ 314.645142][ T5863] usb 5-1: config index 5 descriptor too short (expected 64853, got 72) [ 314.654753][ T5863] usb 5-1: config index 6 descriptor too short (expected 64853, got 72) [ 314.657221][ T972] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 314.664133][ T5863] usb 5-1: config index 7 descriptor too short (expected 64853, got 72) [ 314.683834][ T5863] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 314.693667][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.701860][ T5863] usb 5-1: Product: syz [ 314.706305][ T5863] usb 5-1: Manufacturer: syz [ 314.710953][ T5863] usb 5-1: SerialNumber: syz [ 314.711412][ T8596] net_ratelimit: 28 callbacks suppressed [ 314.711424][ T8596] Set syz1 is full, maxelem 65536 reached [ 314.718763][ T5863] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 314.747263][ T5864] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 314.857150][ T972] usb 1-1: Using ep0 maxpacket: 32 [ 314.869184][ T972] usb 1-1: config 8 has an invalid interface number: 100 but max is 0 [ 314.878752][ T972] usb 1-1: config 8 has no interface number 0 [ 314.888452][ T972] usb 1-1: config 8 interface 100 has no altsetting 0 [ 314.900354][ T972] usb 1-1: string descriptor 0 read error: -22 [ 314.909906][ T972] usb 1-1: New USB device found, idVendor=05c6, idProduct=9054, bcdDevice=55.b5 [ 314.919888][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.941318][ T972] usb 1-1: Found UVC 0.00 device (05c6:9054) [ 314.951845][ T972] usb 1-1: No valid video chain found. [ 315.038511][ T972] usb 5-1: USB disconnect, device number 8 [ 315.093961][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 315.674215][ T8687] ubi0: attaching mtd0 [ 315.679226][ T8687] ubi0: scanning is finished [ 315.684452][ T8687] ================================================================== [ 315.692522][ T8687] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3ac/0x420 [ 315.700954][ T8687] Read of size 4 at addr ffff888012ce18d8 by task syz.0.821/8687 [ 315.708673][ T8687] [ 315.710986][ T8687] CPU: 0 UID: 0 PID: 8687 Comm: syz.0.821 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 315.711003][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 315.711011][ T8687] Call Trace: [ 315.711016][ T8687] [ 315.711021][ T8687] dump_stack_lvl+0x116/0x1f0 [ 315.711048][ T8687] print_report+0xc3/0x620 [ 315.711062][ T8687] ? __virt_addr_valid+0x5e/0x590 [ 315.711077][ T8687] ? __phys_addr+0xc6/0x150 [ 315.711093][ T8687] kasan_report+0xd9/0x110 [ 315.711108][ T8687] ? notifier_chain_register+0x3ac/0x420 [ 315.711124][ T8687] ? notifier_chain_register+0x3ac/0x420 [ 315.711142][ T8687] notifier_chain_register+0x3ac/0x420 [ 315.711157][ T8687] blocking_notifier_chain_register+0x76/0xd0 [ 315.711173][ T8687] ubi_wl_init+0x1018/0x17b0 [ 315.711196][ T8687] ubi_attach+0x1b92/0x4c00 [ 315.711219][ T8687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.711240][ T8687] ? lockdep_init_map_type+0x16d/0x7d0 [ 315.711260][ T8687] ? __pfx_ubi_attach+0x10/0x10 [ 315.711279][ T8687] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 315.711301][ T8687] ubi_attach_mtd_dev+0x158f/0x3590 [ 315.711325][ T8687] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 315.711345][ T8687] ? __pfx_get_mtd_device+0x10/0x10 [ 315.711363][ T8687] ctrl_cdev_ioctl+0x339/0x3d0 [ 315.711375][ T8687] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 315.711388][ T8687] ? selinux_file_ioctl+0x180/0x270 [ 315.711406][ T8687] ? selinux_file_ioctl+0xb4/0x270 [ 315.711424][ T8687] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 315.711436][ T8687] __x64_sys_ioctl+0x190/0x200 [ 315.711454][ T8687] do_syscall_64+0xcd/0x250 [ 315.711467][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.711486][ T8687] RIP: 0033:0x7feb6c98cd29 [ 315.711498][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.711512][ T8687] RSP: 002b:00007feb6d7b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.711525][ T8687] RAX: ffffffffffffffda RBX: 00007feb6cba5fa0 RCX: 00007feb6c98cd29 [ 315.711535][ T8687] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000008 [ 315.711543][ T8687] RBP: 00007feb6ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.711551][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.711559][ T8687] R13: 0000000000000000 R14: 00007feb6cba5fa0 R15: 00007ffe3bb9b048 [ 315.711572][ T8687] [ 315.711576][ T8687] [ 315.948359][ T8687] Allocated by task 8434: [ 315.952668][ T8687] kasan_save_stack+0x33/0x60 [ 315.957337][ T8687] kasan_save_track+0x14/0x30 [ 315.961992][ T8687] __kasan_kmalloc+0xaa/0xb0 [ 315.966649][ T8687] ubi_attach_mtd_dev+0x3ce/0x3590 [ 315.971766][ T8687] ctrl_cdev_ioctl+0x339/0x3d0 [ 315.976509][ T8687] __x64_sys_ioctl+0x190/0x200 [ 315.981256][ T8687] do_syscall_64+0xcd/0x250 [ 315.985754][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.991632][ T8687] [ 315.993938][ T8687] Freed by task 8469: [ 315.997899][ T8687] kasan_save_stack+0x33/0x60 [ 316.002554][ T8687] kasan_save_track+0x14/0x30 [ 316.007212][ T8687] kasan_save_free_info+0x3b/0x60 [ 316.012233][ T8687] __kasan_slab_free+0x51/0x70 [ 316.016979][ T8687] kfree+0x2c4/0x4d0 [ 316.020861][ T8687] device_release+0xa1/0x240 [ 316.025438][ T8687] kobject_put+0x1e4/0x5a0 [ 316.029836][ T8687] put_device+0x1f/0x30 [ 316.033975][ T8687] ubi_detach_mtd_dev+0x3e4/0x530 [ 316.039072][ T8687] ctrl_cdev_ioctl+0x1f5/0x3d0 [ 316.043817][ T8687] __x64_sys_ioctl+0x190/0x200 [ 316.048568][ T8687] do_syscall_64+0xcd/0x250 [ 316.053050][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.058929][ T8687] [ 316.061234][ T8687] The buggy address belongs to the object at ffff888012ce0000 [ 316.061234][ T8687] which belongs to the cache kmalloc-8k of size 8192 [ 316.075271][ T8687] The buggy address is located 6360 bytes inside of [ 316.075271][ T8687] freed 8192-byte region [ffff888012ce0000, ffff888012ce2000) [ 316.089219][ T8687] [ 316.091523][ T8687] The buggy address belongs to the physical page: [ 316.097912][ T8687] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12ce0 [ 316.106650][ T8687] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 316.115126][ T8687] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 316.122664][ T8687] page_type: f5(slab) [ 316.126632][ T8687] raw: 00fff00000000040 ffff88801b042280 ffffea0000a37800 0000000000000002 [ 316.135197][ T8687] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 316.143770][ T8687] head: 00fff00000000040 ffff88801b042280 ffffea0000a37800 0000000000000002 [ 316.152440][ T8687] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 316.161091][ T8687] head: 00fff00000000003 ffffea00004b3801 ffffffffffffffff 0000000000000000 [ 316.169741][ T8687] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 316.178386][ T8687] page dumped because: kasan: bad access detected [ 316.184775][ T8687] page_owner tracks the page as allocated [ 316.190469][ T8687] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7999, tgid 7994 (syz.3.604), ts 255656217079, free_ts 255653592610 [ 316.211722][ T8687] post_alloc_hook+0x181/0x1b0 [ 316.216480][ T8687] get_page_from_freelist+0xfce/0x2f80 [ 316.221921][ T8687] __alloc_frozen_pages_noprof+0x221/0x2470 [ 316.227798][ T8687] alloc_pages_mpol+0x1fc/0x540 [ 316.232631][ T8687] new_slab+0x23d/0x330 [ 316.236776][ T8687] ___slab_alloc+0xc5d/0x1720 [ 316.241438][ T8687] __slab_alloc.constprop.0+0x56/0xb0 [ 316.246797][ T8687] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 316.253193][ T8687] krealloc_noprof+0x1fb/0x380 [ 316.257949][ T8687] copy_array.constprop.0+0x88/0x110 [ 316.263227][ T8687] copy_verifier_state+0x9af/0xe70 [ 316.268325][ T8687] push_stack+0x1d9/0x550 [ 316.272634][ T8687] check_cond_jmp_op+0xb56/0x7a80 [ 316.277643][ T8687] do_check_common+0x7c17/0xb960 [ 316.282572][ T8687] bpf_check+0x775c/0xabe0 [ 316.286973][ T8687] bpf_prog_load+0xe3c/0x2480 [ 316.291629][ T8687] page last free pid 7999 tgid 7994 stack trace: [ 316.297933][ T8687] free_frozen_pages+0x6db/0xfb0 [ 316.302850][ T8687] __put_partials+0x14c/0x170 [ 316.307515][ T8687] qlist_free_all+0x4e/0x120 [ 316.312090][ T8687] kasan_quarantine_reduce+0x195/0x1e0 [ 316.317542][ T8687] __kasan_kmalloc+0x8a/0xb0 [ 316.322126][ T8687] push_stack+0x7c/0x550 [ 316.326348][ T8687] check_cond_jmp_op+0xb56/0x7a80 [ 316.331357][ T8687] do_check_common+0x7c17/0xb960 [ 316.336280][ T8687] bpf_check+0x775c/0xabe0 [ 316.340683][ T8687] bpf_prog_load+0xe3c/0x2480 [ 316.345339][ T8687] __sys_bpf+0x4043/0x49c0 [ 316.349735][ T8687] __x64_sys_bpf+0x78/0xc0 [ 316.354134][ T8687] do_syscall_64+0xcd/0x250 [ 316.358620][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.364501][ T8687] [ 316.366806][ T8687] Memory state around the buggy address: [ 316.372412][ T8687] ffff888012ce1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.380468][ T8687] ffff888012ce1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.388509][ T8687] >ffff888012ce1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.396546][ T8687] ^ [ 316.403454][ T8687] ffff888012ce1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.411492][ T8687] ffff888012ce1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.419529][ T8687] ================================================================== [ 316.479990][ T8687] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 316.487238][ T8687] CPU: 0 UID: 0 PID: 8687 Comm: syz.0.821 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 316.497567][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 316.507628][ T8687] Call Trace: [ 316.510897][ T8687] [ 316.513818][ T8687] dump_stack_lvl+0x3d/0x1f0 [ 316.518424][ T8687] panic+0x71d/0x800 [ 316.522305][ T8687] ? __pfx_panic+0x10/0x10 [ 316.526707][ T8687] ? irqentry_exit+0x3b/0x90 [ 316.531286][ T8687] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.536478][ T8687] ? preempt_schedule_thunk+0x1a/0x30 [ 316.541853][ T8687] ? preempt_schedule_common+0x44/0xc0 [ 316.547304][ T8687] check_panic_on_warn+0xab/0xb0 [ 316.552227][ T8687] end_report+0x117/0x180 [ 316.556542][ T8687] kasan_report+0xe9/0x110 [ 316.560940][ T8687] ? notifier_chain_register+0x3ac/0x420 [ 316.566556][ T8687] ? notifier_chain_register+0x3ac/0x420 [ 316.572174][ T8687] notifier_chain_register+0x3ac/0x420 [ 316.577617][ T8687] blocking_notifier_chain_register+0x76/0xd0 [ 316.583669][ T8687] ubi_wl_init+0x1018/0x17b0 [ 316.588259][ T8687] ubi_attach+0x1b92/0x4c00 [ 316.592770][ T8687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.599108][ T8687] ? lockdep_init_map_type+0x16d/0x7d0 [ 316.604565][ T8687] ? __pfx_ubi_attach+0x10/0x10 [ 316.609416][ T8687] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 316.614781][ T8687] ubi_attach_mtd_dev+0x158f/0x3590 [ 316.619974][ T8687] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 316.625510][ T8687] ? __pfx_get_mtd_device+0x10/0x10 [ 316.630697][ T8687] ctrl_cdev_ioctl+0x339/0x3d0 [ 316.635443][ T8687] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 316.640714][ T8687] ? selinux_file_ioctl+0x180/0x270 [ 316.645904][ T8687] ? selinux_file_ioctl+0xb4/0x270 [ 316.651004][ T8687] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 316.656274][ T8687] __x64_sys_ioctl+0x190/0x200 [ 316.661027][ T8687] do_syscall_64+0xcd/0x250 [ 316.665527][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.671423][ T8687] RIP: 0033:0x7feb6c98cd29 [ 316.675821][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.695427][ T8687] RSP: 002b:00007feb6d7b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.703823][ T8687] RAX: ffffffffffffffda RBX: 00007feb6cba5fa0 RCX: 00007feb6c98cd29 [ 316.711778][ T8687] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000008 [ 316.719733][ T8687] RBP: 00007feb6ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.727685][ T8687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.735637][ T8687] R13: 0000000000000000 R14: 00007feb6cba5fa0 R15: 00007ffe3bb9b048 [ 316.743596][ T8687] [ 316.746808][ T8687] Kernel Offset: disabled [ 316.751123][ T8687] Rebooting in 86400 seconds..