last executing test programs: 9.569142627s ago: executing program 2 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) 8.634574654s ago: executing program 2 (id=541): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.566991495s ago: executing program 0 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 7.529426003s ago: executing program 0 (id=543): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xeb60, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac141400"], 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000500d0000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000005340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c880) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x6, 0x5, 0x10, 0x10000}, {0x0, 0xff, 0xa, 0x6}, {0xfcd, 0x9, 0x2, 0x4}, {0x520c, 0x2, 0x1, 0xff}, {0x7, 0x4, 0xa, 0x4}]}, 0x10) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000000)) 6.854851985s ago: executing program 4 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r1, &(0x7f0000000380)=ANY=[@ANYRES8=r1], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0xc, 0x4, 0x40, 0x7, {0x77359400}, {0x5, 0x2, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0xfffffffe}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x101600, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f00000010c0)=[0x0, 0x0], 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 6.011432511s ago: executing program 4 (id=547): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x80c, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 5.661907194s ago: executing program 3 (id=549): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.614063033s ago: executing program 2 (id=550): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 5.25514815s ago: executing program 0 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) 4.647770385s ago: executing program 3 (id=552): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x8, 0x9, 0x5, 0x0, 0x70bd2a, 0x7, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0xe, @in={0x2, 0x4e21, @empty}}]}, 0x28}, 0x1, 0x400000000000000}, 0x0) 4.618014331s ago: executing program 0 (id=553): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) 4.435015402s ago: executing program 1 (id=554): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x4}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.433774512s ago: executing program 4 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000440)=""/212, 0x26, 0xd4, 0x1, 0x2, 0x10000}, 0x28) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x101, 0x16, &(0x7f0000000600)=""/22, 0x41000, 0x10, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000780)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x1, 0x7d, 0x10}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x4, 0x5, 0xc, 0x5}, {0x3, 0x1, 0xf, 0x2}], 0x10, 0x5}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x4, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0xf4b}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 4.299012908s ago: executing program 3 (id=556): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(&(0x7f0000002d80), 0x0, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) close(0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000000ac0)={0x0, 0xc6, 0xfffffffe}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_sctp(0x2, 0x1, 0x84) 2.95992747s ago: executing program 4 (id=557): socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.556844787s ago: executing program 1 (id=558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 2.414662001s ago: executing program 4 (id=559): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000400)={0x1, 0x40, 0x6, &(0x7f0000000080)={0x1f, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) 2.336452109s ago: executing program 3 (id=560): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x17, 0x0, &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 2.258440502s ago: executing program 1 (id=561): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000240001012bbd7000fcffffff60e5bc80080003004700"], 0x1c}, 0x1, 0x0, 0x0, 0x404c957}, 0x48050) 2.257613745s ago: executing program 2 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d5063300d000"], 0x6f4}}, 0x0) 2.151123762s ago: executing program 1 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) 1.818658036s ago: executing program 0 (id=564): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 1.815488263s ago: executing program 2 (id=565): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000, 0x132}, &(0x7f0000000100)=0x0, &(0x7f0000002300)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x3}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.805894302s ago: executing program 1 (id=566): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000006880)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x800}}], 0x1, 0x0) 1.599373802s ago: executing program 0 (id=567): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 1.598905606s ago: executing program 3 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xc0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500), 0x4000) openat(0xffffffffffffffff, 0x0, 0x10040, 0x103) capset(0x0, 0x0) request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='fscrypt:', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.522953983s ago: executing program 1 (id=569): pipe2(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_emit_vhci(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xc9a}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 1.522548623s ago: executing program 2 (id=570): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x80082, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 672.43623ms ago: executing program 3 (id=571): quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/538, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x4) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4401c0, 0x42) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000740)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) 0s ago: executing program 4 (id=572): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x83) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x5f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0xff, 0xa, 0x7588, 0x40, 0xfffffffc, 0x7}, &(0x7f0000000140)=0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 64.541375][ T30] audit: type=1400 audit(1757327786.286:62): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.545697][ T5834] cgroup: Unknown subsys name 'net' [ 64.564292][ T30] audit: type=1400 audit(1757327786.286:63): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.592425][ T30] audit: type=1400 audit(1757327786.316:64): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.756271][ T5834] cgroup: Unknown subsys name 'cpuset' [ 64.764203][ T5834] cgroup: Unknown subsys name 'rlimit' [ 64.911133][ T30] audit: type=1400 audit(1757327786.656:65): avc: denied { setattr } for pid=5834 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.943429][ T30] audit: type=1400 audit(1757327786.656:66): avc: denied { create } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.969832][ T30] audit: type=1400 audit(1757327786.656:67): avc: denied { write } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.992264][ T30] audit: type=1400 audit(1757327786.656:68): avc: denied { read } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.012995][ T30] audit: type=1400 audit(1757327786.666:69): avc: denied { mounton } for pid=5834 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.037921][ T30] audit: type=1400 audit(1757327786.666:70): avc: denied { mount } for pid=5834 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.061458][ T30] audit: type=1400 audit(1757327786.706:71): avc: denied { read } for pid=5516 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.070728][ T5836] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.074071][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.370789][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.378999][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.387051][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.395317][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.403316][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.411489][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.419795][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.427585][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.429761][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.435118][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.442261][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.457585][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.466227][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.466238][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.480803][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.488396][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.488437][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.496514][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.511561][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.520127][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.528524][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.533342][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.544764][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.544963][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.562997][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.793721][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 68.952487][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 69.017059][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.024908][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.032159][ T5847] bridge_slave_0: entered allmulticast mode [ 69.039616][ T5847] bridge_slave_0: entered promiscuous mode [ 69.048803][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.056011][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.063197][ T5847] bridge_slave_1: entered allmulticast mode [ 69.070132][ T5847] bridge_slave_1: entered promiscuous mode [ 69.146588][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.184861][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.192483][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.199776][ T5845] bridge_slave_0: entered allmulticast mode [ 69.206471][ T5845] bridge_slave_0: entered promiscuous mode [ 69.216562][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.228862][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 69.261377][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.269017][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.276252][ T5845] bridge_slave_1: entered allmulticast mode [ 69.282905][ T5845] bridge_slave_1: entered promiscuous mode [ 69.353039][ T5847] team0: Port device team_slave_0 added [ 69.359137][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 69.376220][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.390553][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.405046][ T5847] team0: Port device team_slave_1 added [ 69.453693][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 69.499294][ T5845] team0: Port device team_slave_0 added [ 69.512850][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.520157][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.546446][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.566865][ T5845] team0: Port device team_slave_1 added [ 69.580599][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.587732][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.613879][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.644047][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.651167][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.658505][ T5858] bridge_slave_0: entered allmulticast mode [ 69.665276][ T5858] bridge_slave_0: entered promiscuous mode [ 69.672283][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.679751][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.687281][ T5858] bridge_slave_1: entered allmulticast mode [ 69.694864][ T5858] bridge_slave_1: entered promiscuous mode [ 69.723337][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.730332][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.757640][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.798426][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.805537][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.831844][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.854634][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.863877][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.871073][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.878419][ T5849] bridge_slave_0: entered allmulticast mode [ 69.885340][ T5849] bridge_slave_0: entered promiscuous mode [ 69.923585][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.932867][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.940509][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.947881][ T5849] bridge_slave_1: entered allmulticast mode [ 69.955272][ T5849] bridge_slave_1: entered promiscuous mode [ 69.969986][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.977296][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.985018][ T5846] bridge_slave_0: entered allmulticast mode [ 69.991684][ T5846] bridge_slave_0: entered promiscuous mode [ 70.037740][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.045117][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.052236][ T5846] bridge_slave_1: entered allmulticast mode [ 70.059800][ T5846] bridge_slave_1: entered promiscuous mode [ 70.070047][ T5847] hsr_slave_0: entered promiscuous mode [ 70.076210][ T5847] hsr_slave_1: entered promiscuous mode [ 70.084280][ T5858] team0: Port device team_slave_0 added [ 70.104209][ T5845] hsr_slave_0: entered promiscuous mode [ 70.110588][ T5845] hsr_slave_1: entered promiscuous mode [ 70.116669][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 70.122446][ T5845] Cannot create hsr debugfs directory [ 70.130310][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.159569][ T5858] team0: Port device team_slave_1 added [ 70.168967][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.189786][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.235557][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.252044][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.259541][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.285740][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.302073][ T5849] team0: Port device team_slave_0 added [ 70.321485][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.328643][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.354618][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.378771][ T5849] team0: Port device team_slave_1 added [ 70.402907][ T5846] team0: Port device team_slave_0 added [ 70.443023][ T5846] team0: Port device team_slave_1 added [ 70.462895][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.470133][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.496736][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.507453][ T5863] Bluetooth: hci2: command tx timeout [ 70.515607][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.522566][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.548665][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.573291][ T5863] Bluetooth: hci1: command tx timeout [ 70.573498][ T5852] Bluetooth: hci4: command tx timeout [ 70.611499][ T5858] hsr_slave_0: entered promiscuous mode [ 70.618808][ T5858] hsr_slave_1: entered promiscuous mode [ 70.624873][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 70.630588][ T5858] Cannot create hsr debugfs directory [ 70.654230][ T5852] Bluetooth: hci3: command tx timeout [ 70.654233][ T5863] Bluetooth: hci0: command tx timeout [ 70.668336][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.675347][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.701258][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.741779][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.748902][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.775491][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.802706][ T5849] hsr_slave_0: entered promiscuous mode [ 70.809180][ T5849] hsr_slave_1: entered promiscuous mode [ 70.815455][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 70.821180][ T5849] Cannot create hsr debugfs directory [ 70.925110][ T5846] hsr_slave_0: entered promiscuous mode [ 70.931206][ T5846] hsr_slave_1: entered promiscuous mode [ 70.937392][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 70.943271][ T5846] Cannot create hsr debugfs directory [ 71.057222][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.063751][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.109015][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.119755][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.156005][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.182967][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.242251][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.253012][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.277567][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.287186][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.339465][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.366093][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.398043][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.408257][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.500207][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.521222][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.554075][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.564803][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.590038][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.601307][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.636621][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.647559][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.654735][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.668686][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.678729][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.690026][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.697163][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.718390][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.729122][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.762167][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.787144][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.815485][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.840884][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.847971][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.873151][ T1208] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.880272][ T1208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.895268][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.902407][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.928233][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.935662][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.009520][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.009536][ T30] audit: type=1400 audit(1757327793.746:86): avc: denied { sys_module } for pid=5845 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.091547][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.102951][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.128260][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.195904][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.227463][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.234619][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.256717][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.278975][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.290746][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.298034][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.353033][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.408176][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.415335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.431418][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.438591][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.459372][ T5845] veth0_vlan: entered promiscuous mode [ 72.528374][ T5845] veth1_vlan: entered promiscuous mode [ 72.546317][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.564396][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.576434][ T5852] Bluetooth: hci2: command tx timeout [ 72.610638][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.628535][ T5845] veth0_macvtap: entered promiscuous mode [ 72.654551][ T5852] Bluetooth: hci4: command tx timeout [ 72.659970][ T5852] Bluetooth: hci1: command tx timeout [ 72.690160][ T5845] veth1_macvtap: entered promiscuous mode [ 72.733406][ T5863] Bluetooth: hci0: command tx timeout [ 72.739019][ T5852] Bluetooth: hci3: command tx timeout [ 72.780816][ T5858] veth0_vlan: entered promiscuous mode [ 72.805972][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.821089][ T5858] veth1_vlan: entered promiscuous mode [ 72.832905][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.882422][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.917616][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.942064][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.985081][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.995349][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.041879][ T5858] veth0_macvtap: entered promiscuous mode [ 73.087793][ T5858] veth1_macvtap: entered promiscuous mode [ 73.120352][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.124368][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.140799][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.161827][ T5846] veth0_vlan: entered promiscuous mode [ 73.170822][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.193071][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.209395][ T5847] veth0_vlan: entered promiscuous mode [ 73.222079][ T5846] veth1_vlan: entered promiscuous mode [ 73.247773][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.258958][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.269550][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.270160][ T5847] veth1_vlan: entered promiscuous mode [ 73.291081][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.301261][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.319028][ T5846] veth0_macvtap: entered promiscuous mode [ 73.327913][ T1075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.348548][ T30] audit: type=1400 audit(1757327795.096:87): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.TBQmR5/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.374828][ T30] audit: type=1400 audit(1757327795.096:88): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.378126][ T5846] veth1_macvtap: entered promiscuous mode [ 73.402979][ T30] audit: type=1400 audit(1757327795.096:89): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.TBQmR5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.435789][ T30] audit: type=1400 audit(1757327795.096:90): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.459298][ T30] audit: type=1400 audit(1757327795.096:91): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.TBQmR5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.492308][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.498140][ T5849] veth0_vlan: entered promiscuous mode [ 73.517157][ T30] audit: type=1400 audit(1757327795.096:92): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/root/syzkaller.TBQmR5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.547093][ T30] audit: type=1400 audit(1757327795.096:93): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.560947][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.574126][ T30] audit: type=1400 audit(1757327795.186:94): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.591582][ T5847] veth0_macvtap: entered promiscuous mode [ 73.602684][ T30] audit: type=1400 audit(1757327795.186:95): avc: denied { mount } for pid=5845 comm="syz-executor" name="/" dev="gadgetfs" ino=8291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.631655][ T5849] veth1_vlan: entered promiscuous mode [ 73.659577][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.716241][ T5847] veth1_macvtap: entered promiscuous mode [ 73.737277][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.746115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.763870][ T3540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777963][ T5849] veth0_macvtap: entered promiscuous mode [ 73.817568][ T3540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.842868][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.851363][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.857826][ T5849] veth1_macvtap: entered promiscuous mode [ 73.876289][ T3540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.891106][ T3540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.908479][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.991523][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.055510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.064320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.103509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.350098][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.358860][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.383054][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.399674][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.433716][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.458148][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.472582][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.504691][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.546194][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.623148][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.631874][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.656233][ T5852] Bluetooth: hci2: command tx timeout [ 74.689389][ T1075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.733979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.734543][ T5863] Bluetooth: hci1: command tx timeout [ 74.742498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.747629][ T49] Bluetooth: hci4: command tx timeout [ 74.771119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.828166][ T5863] Bluetooth: hci3: command tx timeout [ 74.837660][ T5863] Bluetooth: hci0: command tx timeout [ 74.926524][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.950326][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.977614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.983284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.986637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.076986][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.101892][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.182532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.469424][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.508572][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.618614][ T5977] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 75.736724][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.773286][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.896533][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.025274][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 76.073175][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.783271][ T5863] Bluetooth: hci2: command tx timeout [ 76.833200][ T5863] Bluetooth: hci1: command tx timeout [ 76.838776][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 76.904219][ T49] Bluetooth: hci0: command tx timeout [ 76.909637][ T49] Bluetooth: hci3: command tx timeout [ 76.967535][ T5996] virtio-fs: tag <> not found [ 77.201492][ T5987] sctp: failed to load transform for md5: -4 [ 77.526720][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 77.526737][ T30] audit: type=1400 audit(1757327799.276:134): avc: denied { write } for pid=6006 comm="syz.4.12" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.773064][ T6007] comedi comedi0: Minor 3 could not be opened [ 77.792828][ T30] audit: type=1400 audit(1757327799.276:135): avc: denied { open } for pid=6006 comm="syz.4.12" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.882185][ T30] audit: type=1400 audit(1757327799.276:136): avc: denied { write } for pid=6006 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.901582][ T30] audit: type=1400 audit(1757327799.276:137): avc: denied { prog_load } for pid=6006 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.948232][ T30] audit: type=1400 audit(1757327799.276:138): avc: denied { perfmon } for pid=6006 comm="syz.4.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.998984][ T30] audit: type=1400 audit(1757327799.516:139): avc: denied { read } for pid=6006 comm="syz.4.12" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 78.225329][ T30] audit: type=1400 audit(1757327799.516:140): avc: denied { open } for pid=6006 comm="syz.4.12" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 78.249099][ T30] audit: type=1400 audit(1757327799.516:141): avc: denied { ioctl } for pid=6006 comm="syz.4.12" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 78.283961][ T30] audit: type=1400 audit(1757327799.516:142): avc: denied { ioctl } for pid=6006 comm="syz.4.12" path="/dev/comedi0" dev="devtmpfs" ino=1276 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.308918][ T30] audit: type=1400 audit(1757327799.786:143): avc: denied { read } for pid=6012 comm="syz.4.13" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.367534][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 78.894263][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 80.283281][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 81.337188][ T6044] lo speed is unknown, defaulting to 1000 [ 81.343454][ T6044] lo speed is unknown, defaulting to 1000 [ 81.355888][ T6044] lo speed is unknown, defaulting to 1000 [ 81.382291][ T6044] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.430056][ T6044] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 81.651661][ T6044] lo speed is unknown, defaulting to 1000 [ 81.663333][ T6044] lo speed is unknown, defaulting to 1000 [ 81.669796][ T6044] lo speed is unknown, defaulting to 1000 [ 81.676864][ T6044] lo speed is unknown, defaulting to 1000 [ 81.683604][ T6044] lo speed is unknown, defaulting to 1000 [ 81.736735][ T980] cfg80211: failed to load regulatory.db [ 81.747067][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 81.939795][ T6048] wg2: entered promiscuous mode [ 81.954238][ T6048] wg2: entered allmulticast mode [ 82.304774][ T980] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.475876][ T980] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 82.533358][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.648674][ T980] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 82.663165][ T980] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 82.699604][ T980] usb 1-1: Manufacturer: syz [ 82.751689][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 82.751704][ T30] audit: type=1400 audit(1757327804.496:163): avc: denied { create } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.779843][ T980] usb 1-1: config 0 descriptor?? [ 82.852533][ T30] audit: type=1400 audit(1757327804.516:164): avc: denied { bind } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.984823][ T30] audit: type=1400 audit(1757327804.546:165): avc: denied { listen } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.025411][ T30] audit: type=1400 audit(1757327804.586:166): avc: denied { connect } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.454470][ T30] audit: type=1400 audit(1757327804.596:167): avc: denied { accept } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.487259][ T30] audit: type=1400 audit(1757327804.596:168): avc: denied { setopt } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.511666][ T30] audit: type=1400 audit(1757327804.596:169): avc: denied { create } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.515058][ T980] rc_core: IR keymap rc-hauppauge not found [ 83.537636][ T30] audit: type=1400 audit(1757327804.596:170): avc: denied { ioctl } for pid=6057 comm="syz.1.22" path="socket:[9040]" dev="sockfs" ino=9040 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.564117][ T30] audit: type=1400 audit(1757327804.596:171): avc: denied { bind } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.586814][ T30] audit: type=1400 audit(1757327804.766:172): avc: denied { setopt } for pid=6057 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.631891][ T980] Registered IR keymap rc-empty [ 83.654008][ T980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 83.767489][ T980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 83.943569][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 84.024072][ T6070] random: crng reseeded on system resumption [ 84.479990][ T980] usb 1-1: USB disconnect, device number 2 [ 86.647765][ T6085] lo speed is unknown, defaulting to 1000 [ 86.813825][ T6084] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 87.064148][ T6097] Mount JFS Failure: -22 [ 87.068529][ T6097] jfs_mount failed w/return code = -22 [ 88.153252][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 88.153270][ T30] audit: type=1400 audit(1757327809.826:189): avc: denied { write } for pid=6101 comm="syz.3.32" lport=52588 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.293272][ T6092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 88.316079][ T9] libceph: connect (1)[c::]:6789 error -101 [ 88.322249][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 88.357385][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 88.448518][ T30] audit: type=1400 audit(1757327809.826:190): avc: denied { setopt } for pid=6101 comm="syz.3.32" lport=52588 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.645968][ T9] libceph: connect (1)[c::]:6789 error -101 [ 88.652024][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 88.681190][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 88.690287][ T30] audit: type=1400 audit(1757327809.846:191): avc: denied { ioctl } for pid=6101 comm="syz.3.32" path="socket:[9132]" dev="sockfs" ino=9132 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 88.754690][ T6105] ceph: No mds server is up or the cluster is laggy [ 88.988649][ T6124] netlink: 'syz.1.34': attribute type 4 has an invalid length. [ 89.329984][ T92] libceph: connect (1)[c::]:6789 error -101 [ 89.366219][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 89.489635][ T6138] virtio-fs: tag <> not found [ 89.716105][ T92] libceph: connect (1)[c::]:6789 error -101 [ 89.722171][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 90.002911][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 90.437565][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 90.439983][ T30] audit: type=1400 audit(1757327811.826:192): avc: denied { firmware_load } for pid=6141 comm="syz.3.40" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 90.489894][ T6146] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.503729][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 90.654775][ T6147] syz.3.40 (6147) used greatest stack depth: 17976 bytes left [ 90.683432][ T6128] ceph: No mds server is up or the cluster is laggy [ 90.894944][ T30] audit: type=1400 audit(1757327812.556:193): avc: denied { create } for pid=6150 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.181543][ T30] audit: type=1400 audit(1757327812.656:194): avc: denied { name_bind } for pid=6150 comm="syz.3.41" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 91.264535][ T30] audit: type=1400 audit(1757327812.656:195): avc: denied { node_bind } for pid=6150 comm="syz.3.41" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 91.391836][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 91.778716][ T30] audit: type=1400 audit(1757327813.506:196): avc: denied { mounton } for pid=6155 comm="syz.2.43" path="/7/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 91.821497][ T30] audit: type=1400 audit(1757327813.516:197): avc: denied { mount } for pid=6155 comm="syz.2.43" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.428619][ T30] audit: type=1400 audit(1757327814.016:198): avc: denied { watch } for pid=6169 comm="syz.1.46" path="/10" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.348004][ T6184] siw: device registration error -23 [ 94.184526][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 94.184558][ T30] audit: type=1400 audit(1757327815.916:228): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.247278][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 95.302699][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 95.417416][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 95.427926][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 95.539027][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 95.737460][ T30] audit: type=1326 audit(1757327817.456:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b38ebe9 code=0x7ffc0000 [ 95.853662][ T30] audit: type=1326 audit(1757327817.466:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b38ebe9 code=0x7ffc0000 [ 95.878930][ T30] audit: type=1326 audit(1757327817.466:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f2a7b38ebe9 code=0x7ffc0000 [ 95.953358][ T30] audit: type=1326 audit(1757327817.466:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b38ebe9 code=0x7ffc0000 [ 96.312052][ T6217] lo speed is unknown, defaulting to 1000 [ 96.522810][ T30] audit: type=1326 audit(1757327817.466:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2a7b38ebe9 code=0x7ffc0000 [ 96.567639][ T30] audit: type=1326 audit(1757327817.466:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b38ebe9 code=0x7ffc0000 [ 96.592309][ T6216] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 97.019253][ T30] audit: type=1326 audit(1757327817.466:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b38ebe9 code=0x7ffc0000 [ 97.713346][ T30] audit: type=1326 audit(1757327817.466:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2a7b38ebe9 code=0x7ffc0000 [ 97.984436][ T30] audit: type=1326 audit(1757327817.466:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a7b38ec23 code=0x7ffc0000 [ 100.218092][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 100.218108][ T30] audit: type=1326 audit(1757327821.806:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 100.285869][ T30] audit: type=1326 audit(1757327821.806:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 100.483768][ T6272] netlink: 92 bytes leftover after parsing attributes in process `syz.3.73'. [ 100.595039][ T30] audit: type=1326 audit(1757327821.806:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 100.820763][ T30] audit: type=1326 audit(1757327821.806:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 101.181418][ T30] audit: type=1326 audit(1757327821.806:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 101.649293][ T30] audit: type=1326 audit(1757327821.806:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 101.727777][ T30] audit: type=1326 audit(1757327821.816:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 101.883761][ T30] audit: type=1326 audit(1757327821.816:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 101.922907][ T30] audit: type=1326 audit(1757327821.816:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbb0cd8ebe9 code=0x7ffc0000 [ 102.003515][ T30] audit: type=1326 audit(1757327821.816:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6254 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb0cd8ec23 code=0x7ffc0000 [ 102.373244][ T6291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.385762][ T6291] block device autoloading is deprecated and will be removed. [ 102.924614][ T6304] lo speed is unknown, defaulting to 1000 [ 104.413744][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 106.110489][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 106.801911][ T6344] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 107.783183][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 109.056037][ T6358] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 109.230057][ T6351] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 109.239578][ T6351] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 109.242754][ T6359] lo speed is unknown, defaulting to 1000 [ 109.249494][ T6351] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 109.311971][ T6345] lo speed is unknown, defaulting to 1000 [ 109.339594][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 109.339610][ T30] audit: type=1400 audit(1757327831.006:330): avc: denied { firmware_load } for pid=6348 comm="syz.1.89" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.791362][ T6372] mkiss: ax0: crc mode is auto. [ 112.495021][ T978] libceph: connect (1)[c::]:6789 error -101 [ 112.502692][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 113.065525][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 113.082615][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 113.144506][ T5960] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.200498][ T6375] ceph: No mds server is up or the cluster is laggy [ 113.227739][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 113.323392][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 113.364776][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.423848][ T5960] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 113.436113][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.447479][ T5960] usb 3-1: Product: syz [ 113.451658][ T5960] usb 3-1: Manufacturer: syz [ 113.478907][ T5960] usb 3-1: SerialNumber: syz [ 113.488103][ T5960] usb 3-1: config 0 descriptor?? [ 113.855094][ T5960] hub 3-1:0.0: bad descriptor, ignoring hub [ 113.985855][ T5960] hub 3-1:0.0: probe with driver hub failed with error -5 [ 114.060357][ T30] audit: type=1400 audit(1757327835.696:331): avc: denied { read write } for pid=6382 comm="syz.2.97" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 114.107478][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 114.155296][ T30] audit: type=1400 audit(1757327835.696:332): avc: denied { open } for pid=6382 comm="syz.2.97" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 114.863432][ T978] usb 3-1: USB disconnect, device number 2 [ 115.371043][ T6415] lo speed is unknown, defaulting to 1000 [ 115.742159][ T6414] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 116.806794][ T6435] wg2: entered promiscuous mode [ 116.854652][ T6435] wg2: entered allmulticast mode [ 117.826947][ T6449] lo speed is unknown, defaulting to 1000 [ 118.523300][ T6459] Mount JFS Failure: -22 [ 118.527568][ T6459] jfs_mount failed w/return code = -22 [ 118.708371][ T30] audit: type=1400 audit(1757327840.456:333): avc: denied { read write } for pid=6431 comm="syz.1.107" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 118.948973][ T6466] siw: device registration error -23 [ 119.344142][ T30] audit: type=1400 audit(1757327840.456:334): avc: denied { open } for pid=6431 comm="syz.1.107" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.473204][ T30] audit: type=1400 audit(1757327840.606:335): avc: denied { ioctl } for pid=6431 comm="syz.1.107" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.500270][ T30] audit: type=1400 audit(1757327841.086:336): avc: denied { setopt } for pid=6431 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.045859][ T30] audit: type=1400 audit(1757327841.686:337): avc: denied { mount } for pid=6469 comm="syz.1.117" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 120.050810][ T6474] virtio-fs: tag <> not found [ 120.210123][ T9] libceph: connect (1)[c::]:6789 error -101 [ 120.216374][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 120.484431][ T9] libceph: connect (1)[c::]:6789 error -101 [ 120.509299][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 120.557909][ T30] audit: type=1400 audit(1757327842.306:338): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 120.637807][ T6468] ceph: No mds server is up or the cluster is laggy [ 121.393785][ T6494] Mount JFS Failure: -22 [ 121.398125][ T6494] jfs_mount failed w/return code = -22 [ 121.762160][ T30] audit: type=1400 audit(1757327843.136:339): avc: denied { mounton } for pid=6490 comm="syz.4.121" path="/21/bus" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.237488][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 123.053256][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 123.535284][ T30] audit: type=1400 audit(1757327845.276:340): avc: denied { create } for pid=6511 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.953213][ T30] audit: type=1400 audit(1757327845.276:341): avc: denied { connect } for pid=6511 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.552219][ T30] audit: type=1400 audit(1757327845.276:342): avc: denied { bind } for pid=6511 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.571526][ T30] audit: type=1400 audit(1757327845.276:343): avc: denied { write } for pid=6511 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.590903][ T30] audit: type=1400 audit(1757327845.286:344): avc: denied { read } for pid=6511 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.483490][ T30] audit: type=1400 audit(1757327847.216:345): avc: denied { block_suspend } for pid=6537 comm="syz.3.135" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.714501][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 126.252216][ T30] audit: type=1400 audit(1757327847.926:346): avc: denied { sys_module } for pid=6539 comm="syz.1.134" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 127.343021][ T980] libceph: connect (1)[c::]:6789 error -101 [ 127.350075][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 127.534808][ T6577] virtio-fs: tag <> not found [ 127.643378][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 127.837011][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 127.940647][ T6578] mmap: syz.3.142 (6578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.092267][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.142'. [ 128.124769][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.142'. [ 128.294760][ T6568] ceph: No mds server is up or the cluster is laggy [ 128.372237][ T92] libceph: connect (1)[c::]:6789 error -101 [ 128.442113][ T980] libceph: connect (1)[c::]:6789 error -101 [ 128.442218][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 128.459230][ T6585] virtio-fs: tag <> not found [ 128.655051][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 128.877126][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'. [ 128.908714][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'. [ 128.969323][ T92] libceph: connect (1)[c::]:6789 error -101 [ 128.987920][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 129.184683][ T6580] ceph: No mds server is up or the cluster is laggy [ 129.283191][ T5960] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.287239][ T6595] Zero length message leads to an empty skb [ 129.433272][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 129.445057][ T5960] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.498689][ T5960] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.533518][ T5960] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.543741][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.558525][ T5960] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.570216][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.584957][ T5960] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.696585][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.082566][ T5960] usb 5-1: config 0 descriptor?? [ 130.687728][ T6619] lo speed is unknown, defaulting to 1000 [ 131.011029][ T5960] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.201440][ T5960] usb 5-1: USB disconnect, device number 2 [ 131.250399][ T5960] usblp0: removed [ 132.634201][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.640669][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.833449][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 135.503209][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.164'. [ 135.548145][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.164'. [ 136.620611][ T6685] wg2: left promiscuous mode [ 136.630920][ T6685] wg2: left allmulticast mode [ 136.660484][ T6685] wg2: entered promiscuous mode [ 136.674042][ T6685] wg2: entered allmulticast mode [ 136.791447][ T6690] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 136.798091][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 136.874467][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 136.977995][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 137.048747][ T92] libceph: connect (1)[c::]:6789 error -101 [ 137.143904][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 137.293627][ T30] audit: type=1400 audit(1757327859.036:347): avc: denied { create } for pid=6688 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 137.346684][ T980] vhci_hcd: vhci_device speed not set [ 137.413292][ T980] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 137.425719][ T92] libceph: connect (1)[c::]:6789 error -101 [ 137.605468][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 138.025910][ T6714] siw: device registration error -23 [ 138.399614][ T92] libceph: connect (1)[c::]:6789 error -101 [ 138.405799][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 138.453132][ T6692] vhci_hcd: connection reset by peer [ 138.460168][ T1208] vhci_hcd: stop threads [ 138.465867][ T6694] ceph: No mds server is up or the cluster is laggy [ 138.475386][ T1208] vhci_hcd: release socket [ 138.510503][ T1208] vhci_hcd: disconnect device [ 138.750101][ T92] libceph: connect (1)[c::]:6789 error -101 [ 138.763399][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 139.069743][ T92] libceph: connect (1)[c::]:6789 error -101 [ 139.095658][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 139.187646][ T6729] virtio-fs: tag <> not found [ 139.613687][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 139.628193][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 139.845709][ T6717] ceph: No mds server is up or the cluster is laggy [ 141.615227][ T92] libceph: connect (1)[c::]:6789 error -101 [ 141.621339][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 141.736732][ T6742] wg2: entered promiscuous mode [ 141.778403][ T6742] wg2: entered allmulticast mode [ 142.292658][ T54] libceph: connect (1)[c::]:6789 error -101 [ 142.313861][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 142.645668][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 142.853953][ T980] vhci_hcd: vhci_device speed not set [ 142.893609][ T54] libceph: connect (1)[c::]:6789 error -101 [ 143.629638][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 143.680138][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 143.690643][ T6753] ceph: No mds server is up or the cluster is laggy [ 143.703751][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 143.719850][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 143.889862][ T30] audit: type=1400 audit(1757327865.636:348): avc: denied { mount } for pid=6773 comm="syz.0.189" name="/" dev="autofs" ino=12092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 143.912119][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.729566][ T30] audit: type=1400 audit(1757327866.466:349): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 144.929515][ T5925] IPVS: starting estimator thread 0... [ 145.114116][ T6794] IPVS: using max 42 ests per chain, 100800 per kthread [ 147.595587][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 148.644582][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 148.931950][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 148.947484][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 148.959993][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 149.502252][ T6846] wg2: left promiscuous mode [ 149.537896][ T6846] wg2: left allmulticast mode [ 149.601021][ T6846] wg2: entered promiscuous mode [ 149.623574][ T6846] wg2: entered allmulticast mode [ 150.172072][ T92] libceph: connect (1)[c::]:6789 error -101 [ 150.411555][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 150.422725][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 150.905052][ T6879] lo speed is unknown, defaulting to 1000 [ 151.223150][ T92] libceph: connect (1)[c::]:6789 error -101 [ 151.230385][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 151.308683][ T6878] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 151.467835][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 151.903404][ T9] libceph: connect (1)[c::]:6789 error -101 [ 151.909433][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 152.084824][ T6859] ceph: No mds server is up or the cluster is laggy [ 153.016683][ T6904] lo speed is unknown, defaulting to 1000 [ 153.427862][ T6903] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 153.556156][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 153.906624][ T6911] fuse: Bad value for 'fd' [ 153.948284][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 154.004379][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 154.014842][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 154.292586][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 154.325835][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 155.331804][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 155.384398][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'. [ 155.399906][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'. [ 155.449224][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 155.462335][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 156.180884][ T980] libceph: connect (1)[c::]:6789 error -101 [ 156.208783][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 156.588859][ T6969] random: crng reseeded on system resumption [ 157.246396][ T980] libceph: connect (1)[c::]:6789 error -101 [ 157.261890][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 158.079582][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 158.085829][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 158.106046][ T6954] ceph: No mds server is up or the cluster is laggy [ 158.119636][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 158.129298][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 158.429163][ T6979] ceph: No mds server is up or the cluster is laggy [ 158.625493][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 158.941394][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 159.323862][ T6996] ceph: No mds server is up or the cluster is laggy [ 159.767737][ T7017] __nla_validate_parse: 2 callbacks suppressed [ 159.767747][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 160.905677][ T7031] random: crng reseeded on system resumption [ 161.434734][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 161.500395][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 161.603186][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 161.620634][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 163.209543][ T7035] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.222643][ T7035] overlayfs: missing 'lowerdir' [ 163.230224][ T30] audit: type=1400 audit(1757327884.956:350): avc: denied { mounton } for pid=7032 comm="syz.4.244" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 163.480780][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 164.113701][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 164.139588][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 164.239570][ T7064] wg2: entered promiscuous mode [ 164.251240][ T7064] wg2: entered allmulticast mode [ 164.309185][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 165.862379][ T30] audit: type=1400 audit(1757327887.586:351): avc: denied { accept } for pid=7074 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.641318][ T5960] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.686565][ T7105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 167.863387][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 167.897398][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.910594][ T5960] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 167.920361][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.928828][ T5960] usb 2-1: Product: syz [ 167.933324][ T5960] usb 2-1: Manufacturer: syz [ 167.938246][ T5960] usb 2-1: SerialNumber: syz [ 167.951046][ T5960] usb 2-1: config 0 descriptor?? [ 167.962433][ T5960] hub 2-1:0.0: bad descriptor, ignoring hub [ 167.971831][ T5960] hub 2-1:0.0: probe with driver hub failed with error -5 [ 167.992769][ T5960] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 169.337920][ T7118] lo speed is unknown, defaulting to 1000 [ 169.380134][ T30] audit: type=1400 audit(1757327891.096:352): avc: denied { setopt } for pid=7115 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.466156][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 169.495256][ T7116] syzkaller1: entered promiscuous mode [ 169.565885][ T7116] syzkaller1: entered allmulticast mode [ 169.670139][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 169.718625][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 169.745004][ T980] usb 2-1: USB disconnect, device number 2 [ 169.871024][ T980] libceph: connect (1)[c::]:6789 error -101 [ 169.882775][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 169.907768][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 169.985059][ T7139] virtio-fs: tag <> not found [ 171.144276][ T7135] ceph: No mds server is up or the cluster is laggy [ 171.153467][ T980] libceph: connect (1)[c::]:6789 error -101 [ 171.159521][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 171.359051][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 171.764135][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 173.862850][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 173.872943][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 173.982505][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 174.107114][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 175.753253][ T30] audit: type=1400 audit(1757327897.416:353): avc: denied { write } for pid=7186 comm="syz.3.278" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.774066][ T30] audit: type=1400 audit(1757327897.416:354): avc: denied { open } for pid=7186 comm="syz.3.278" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.805232][ T30] audit: type=1400 audit(1757327897.496:355): avc: denied { read append } for pid=7186 comm="syz.3.278" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.331817][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 176.343700][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 177.459372][ T30] audit: type=1400 audit(1757327899.206:356): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 177.622739][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 177.690919][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'. [ 177.745294][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 177.778565][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 178.667650][ T980] libceph: connect (1)[c::]:6789 error -101 [ 178.694120][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 179.116364][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 179.122937][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 179.228352][ T7232] ceph: No mds server is up or the cluster is laggy [ 179.535443][ T7248] __nla_validate_parse: 1 callbacks suppressed [ 179.535459][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 179.563507][ T30] audit: type=1400 audit(1757327901.306:357): avc: denied { create } for pid=7245 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.582888][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.509413][ T30] audit: type=1400 audit(1757327901.396:358): avc: denied { create } for pid=7245 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.330401][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 181.499851][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 182.050049][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 182.091676][ T7263] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 182.109029][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 182.122575][ T7263] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 182.146514][ T7263] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 182.157861][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 182.180314][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 182.249413][ T980] libceph: connect (1)[c::]:6789 error -101 [ 182.285918][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 182.546761][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 182.557068][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 183.559646][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 183.594551][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 183.640219][ T7275] ceph: No mds server is up or the cluster is laggy [ 184.370927][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 184.377068][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 184.875281][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 184.881277][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 185.119745][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 185.254911][ T7297] ceph: No mds server is up or the cluster is laggy [ 185.443412][ T980] libceph: connect (1)[c::]:6789 error -101 [ 185.449495][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 185.812542][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 186.083325][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 186.363459][ T980] libceph: connect (1)[c::]:6789 error -101 [ 186.391618][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 186.397968][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 186.405550][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 186.413462][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 186.435221][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 186.466307][ T7331] virtio-fs: tag <> not found [ 186.517384][ T7314] ceph: No mds server is up or the cluster is laggy [ 186.562400][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 186.572217][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 186.748598][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 186.832518][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 187.025946][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 187.094422][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 187.169891][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 187.230999][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 187.324536][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 187.415502][ T980] libceph: connect (1)[c::]:6789 error -101 [ 187.449695][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 188.195786][ T7324] ceph: No mds server is up or the cluster is laggy [ 188.535027][ T980] libceph: connect (1)[c::]:6789 error -101 [ 188.792009][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 189.543814][ T92] libceph: connect (1)[c::]:6789 error -101 [ 189.575915][ T7377] virtio-fs: tag <> not found [ 189.654171][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 190.023479][ T9] libceph: connect (1)[c::]:6789 error -101 [ 190.031873][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 190.303736][ T7371] ceph: No mds server is up or the cluster is laggy [ 190.338049][ T7388] __nla_validate_parse: 8 callbacks suppressed [ 190.338067][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 190.790562][ T9] libceph: connect (1)[c::]:6789 error -101 [ 190.813299][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 190.901821][ T7390] lo speed is unknown, defaulting to 1000 [ 190.935781][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 190.947770][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 191.054817][ T7389] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 191.571841][ T54] libceph: connect (1)[c::]:6789 error -101 [ 191.693404][ T92] libceph: connect (1)[c::]:6789 error -101 [ 191.699493][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 191.706205][ T92] libceph: connect (1)[c::]:6789 error -101 [ 191.712300][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 191.793411][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 191.896428][ T7406] wg2: left promiscuous mode [ 191.952212][ T7406] wg2: left allmulticast mode [ 191.983324][ T92] libceph: connect (1)[c::]:6789 error -101 [ 191.983768][ T7384] ceph: No mds server is up or the cluster is laggy [ 192.002212][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 192.014803][ T7408] wg2: entered promiscuous mode [ 192.019766][ T7408] wg2: entered allmulticast mode [ 192.034217][ T7393] ceph: No mds server is up or the cluster is laggy [ 192.094182][ T980] libceph: connect (1)[c::]:6789 error -101 [ 192.102104][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 192.458942][ T9] libceph: connect (1)[c::]:6789 error -101 [ 192.470602][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 192.541602][ T7416] virtio-fs: tag <> not found [ 192.853472][ T92] libceph: connect (1)[c::]:6789 error -101 [ 192.870580][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 193.393494][ T92] libceph: connect (1)[c::]:6789 error -101 [ 193.399759][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 193.429212][ T980] libceph: connect (1)[c::]:6789 error -101 [ 193.436216][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 193.736372][ T7414] ceph: No mds server is up or the cluster is laggy [ 193.746533][ T980] libceph: connect (1)[c::]:6789 error -101 [ 193.875761][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 193.938834][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.960528][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.095565][ T7427] ceph: No mds server is up or the cluster is laggy [ 194.218368][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 194.742090][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'. [ 194.844389][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'. [ 195.284595][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 195.405071][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 195.897854][ T7463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 197.103559][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 197.159799][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 197.173553][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 197.440506][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 198.276432][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 198.900728][ T30] audit: type=1800 audit(1757327920.646:359): pid=7495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.343" name="/" dev="9p" ino=2 res=0 errno=0 [ 199.872603][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 200.153835][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 201.087115][ T7527] lo speed is unknown, defaulting to 1000 [ 201.138226][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 201.239765][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 201.964772][ T7522] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 201.973479][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 201.984385][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 202.067756][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 203.093232][ T7547] lo speed is unknown, defaulting to 1000 [ 204.317329][ T7546] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 204.318692][ T30] audit: type=1400 audit(1757327925.286:360): avc: denied { write } for pid=7552 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 204.840184][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 205.212005][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 205.224089][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 205.743400][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.357'. [ 205.755399][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.357'. [ 206.372101][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 206.876869][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 207.713689][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 207.726507][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 207.737037][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 208.164994][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 208.202021][ T7597] syzkaller1: entered promiscuous mode [ 208.229910][ T7597] syzkaller1: entered allmulticast mode [ 208.383998][ T30] audit: type=1800 audit(1757327930.136:361): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.367" name="/" dev="9p" ino=2 res=0 errno=0 [ 208.408096][ T7598] lo speed is unknown, defaulting to 1000 [ 209.067316][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 209.227880][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.368'. [ 209.979255][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 209.998715][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 210.882408][ T54] libceph: connect (1)[c::]:6789 error -101 [ 211.448479][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 211.708523][ T7644] ceph: No mds server is up or the cluster is laggy [ 211.723468][ T54] libceph: connect (1)[c::]:6789 error -101 [ 211.763269][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 212.482733][ T7664] lo speed is unknown, defaulting to 1000 [ 212.909099][ T7663] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.400073][ T7674] lo speed is unknown, defaulting to 1000 [ 213.833938][ T7673] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 214.744098][ T7683] lo speed is unknown, defaulting to 1000 [ 214.830192][ T7682] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 215.227714][ T7695] __nla_validate_parse: 2 callbacks suppressed [ 215.227726][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 216.971155][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.385'. [ 218.524641][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 218.597293][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.397'. [ 218.637115][ T7747] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 218.688200][ T7747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.701986][ T9] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 218.714000][ T9] usb 4-1: config 0 has no interface number 0 [ 218.724199][ T9] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 218.785702][ T30] audit: type=1400 audit(1757327940.516:362): avc: denied { map } for pid=7748 comm="syz.2.398" path="/dev/full" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 218.915392][ T30] audit: type=1400 audit(1757327940.576:363): avc: denied { read write } for pid=7751 comm="syz.0.399" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.081745][ T7753] gretap1: entered promiscuous mode [ 219.103328][ T9] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 219.263330][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.265152][ T7753] bond1: (slave gretap1): making interface the new active one [ 219.378589][ T9] usb 4-1: Product: syz [ 219.389611][ T9] usb 4-1: Manufacturer: syz [ 219.400589][ T9] usb 4-1: SerialNumber: syz [ 219.404284][ T7753] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 219.418396][ T9] usb 4-1: config 0 descriptor?? [ 219.422116][ T30] audit: type=1400 audit(1757327940.586:364): avc: denied { open } for pid=7751 comm="syz.0.399" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.529241][ T7737] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.584939][ T9] ums-karma 4-1:0.46: USB Mass Storage device detected [ 220.092079][ T9] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 220.156239][ T9] usb 4-1: USB disconnect, device number 2 [ 220.158928][ T30] audit: type=1400 audit(1757327941.896:365): avc: denied { execute } for pid=7765 comm="syz.1.402" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.341974][ T30] audit: type=1400 audit(1757327942.086:366): avc: denied { read write } for pid=7771 comm="syz.1.405" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.396695][ T5960] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 220.698032][ T30] audit: type=1400 audit(1757327942.256:367): avc: denied { open } for pid=7771 comm="syz.1.405" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.743177][ T30] audit: type=1400 audit(1757327942.476:368): avc: denied { ioctl } for pid=7771 comm="syz.1.405" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.815505][ T5960] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 220.831309][ T5960] usb 1-1: config 0 has no interface number 0 [ 220.852278][ T5960] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 220.884078][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.889017][ T7779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.911349][ T5960] usb 1-1: Product: syz [ 220.918557][ T5960] usb 1-1: Manufacturer: syz [ 221.023400][ T30] audit: type=1400 audit(1757327942.746:369): avc: denied { name_connect } for pid=7782 comm="syz.4.408" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 221.791040][ T5960] usb 1-1: SerialNumber: syz [ 221.798881][ T5960] usb 1-1: config 0 descriptor?? [ 222.843714][ T7801] ptrace attach of "./syz-executor exec"[5846] was attempted by ""[7801] [ 222.943250][ T5960] usb 1-1: Firmware version (0.0) predates our first public release. [ 223.013204][ T5960] usb 1-1: Please update to version 0.2 or newer [ 223.028448][ T980] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 223.120879][ T5960] usb 1-1: Firmware: build á [ 223.203167][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 223.225833][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.238678][ T30] audit: type=1400 audit(1757327944.976:370): avc: denied { write } for pid=7806 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.383551][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.532612][ T980] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.581466][ T30] audit: type=1400 audit(1757327945.326:371): avc: denied { search } for pid=5516 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.774342][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.788098][ T980] usb 5-1: config 0 descriptor?? [ 224.597093][ T980] usbhid 5-1:0.0: can't add hid device: -71 [ 224.657007][ T980] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 224.736645][ T980] usb 5-1: USB disconnect, device number 3 [ 225.006814][ T980] usb 1-1: USB disconnect, device number 3 [ 226.208988][ T7843] block nbd1: Attempted send on invalid socket [ 226.215667][ T7843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 226.232598][ T7843] SQUASHFS error: Failed to read block 0x0: -5 [ 226.240117][ T7843] unable to read squashfs_super_block [ 226.737677][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 226.737694][ T30] audit: type=1400 audit(1757327948.476:377): avc: denied { read open } for pid=7852 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.831423][ T30] audit: type=1400 audit(1757327948.476:378): avc: denied { getattr } for pid=7852 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.898657][ T7857] process 'syz.3.432' launched '/dev/fd/6' with NULL argv: empty string added [ 226.903100][ T30] audit: type=1400 audit(1757327948.636:379): avc: denied { execute } for pid=7856 comm="syz.3.432" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 226.933143][ T980] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 226.995749][ T30] audit: type=1400 audit(1757327948.696:380): avc: denied { execute_no_trans } for pid=7856 comm="syz.3.432" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 227.243209][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 227.250586][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.264411][ T980] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 227.274944][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.718546][ T980] usb 1-1: config 0 descriptor?? [ 227.879079][ T30] audit: type=1400 audit(1757327949.626:381): avc: denied { add_name } for pid=7850 comm="dhcpcd-run-hook" name="resolv.conf.veth0_virt_wifi.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.935654][ T980] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 228.424817][ T30] audit: type=1400 audit(1757327949.666:382): avc: denied { create } for pid=7850 comm="dhcpcd-run-hook" name="resolv.conf.veth0_virt_wifi.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 228.481145][ T30] audit: type=1400 audit(1757327949.666:383): avc: denied { write } for pid=7850 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.veth0_virt_wifi.link" dev="tmpfs" ino=3902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 228.535176][ T30] audit: type=1400 audit(1757327949.666:384): avc: denied { append } for pid=7850 comm="dhcpcd-run-hook" name="resolv.conf.veth0_virt_wifi.link" dev="tmpfs" ino=3902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 228.560443][ T30] audit: type=1400 audit(1757327949.766:385): avc: denied { read } for pid=7868 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.591632][ T30] audit: type=1400 audit(1757327950.226:386): avc: denied { write } for pid=7847 comm="syz.0.430" name="iowarrior0" dev="devtmpfs" ino=2828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 229.026121][ T980] usb 1-1: USB disconnect, device number 4 [ 231.747780][ T7926] tipc: Can't bind to reserved service type 2 [ 231.911599][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 231.911613][ T30] audit: type=1400 audit(1757327953.496:397): avc: denied { bind } for pid=7921 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.964941][ T30] audit: type=1400 audit(1757327953.626:398): avc: denied { write } for pid=7909 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.646344][ T30] audit: type=1400 audit(1757327953.986:399): avc: denied { getopt } for pid=7928 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.993669][ T30] audit: type=1400 audit(1757327954.736:400): avc: denied { bind } for pid=7936 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.117818][ T30] audit: type=1400 audit(1757327954.736:401): avc: denied { name_bind } for pid=7936 comm="syz.0.452" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 233.139821][ T30] audit: type=1400 audit(1757327954.736:402): avc: denied { node_bind } for pid=7936 comm="syz.0.452" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 233.194219][ T30] audit: type=1400 audit(1757327954.946:403): avc: denied { read write } for pid=7939 comm="syz.4.453" name="vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 233.704951][ T30] audit: type=1400 audit(1757327954.976:404): avc: denied { open } for pid=7939 comm="syz.4.453" path="/dev/vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 233.796184][ T30] audit: type=1400 audit(1757327955.446:405): avc: denied { ioctl } for pid=7939 comm="syz.4.453" path="/dev/vbi8" dev="devtmpfs" ino=1006 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 234.353389][ T30] audit: type=1400 audit(1757327956.046:406): avc: denied { create } for pid=7951 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.012560][ T7984] sctp: [Deprecated]: syz.2.467 (pid 7984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.012560][ T7984] Use struct sctp_sack_info instead [ 237.205230][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 237.205297][ T30] audit: type=1400 audit(1757327958.746:411): avc: denied { read } for pid=7982 comm="syz.2.467" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 237.282641][ T30] audit: type=1400 audit(1757327958.756:412): avc: denied { open } for pid=7982 comm="syz.2.467" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 237.413351][ T30] audit: type=1400 audit(1757327958.756:413): avc: denied { ioctl } for pid=7982 comm="syz.2.467" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 237.583108][ T30] audit: type=1400 audit(1757327959.096:414): avc: denied { setopt } for pid=7986 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.904974][ T30] audit: type=1400 audit(1757327959.266:415): avc: denied { ioctl } for pid=7986 comm="syz.4.468" path="socket:[18700]" dev="sockfs" ino=18700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.526299][ T30] audit: type=1400 audit(1757327960.786:416): avc: denied { bind } for pid=8002 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.556441][ T30] audit: type=1400 audit(1757327960.786:417): avc: denied { node_bind } for pid=8002 comm="syz.1.472" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 239.606127][ T8005] netlink: 48 bytes leftover after parsing attributes in process `syz.0.474'. [ 240.321942][ T8020] can0: slcan on ttyS3. [ 240.969101][ T8022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.869819][ T8011] can0 (unregistered): slcan off ttyS3. [ 243.091668][ T30] audit: type=1400 audit(1757327964.216:418): avc: denied { read } for pid=8035 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.195653][ T30] audit: type=1400 audit(1757327964.626:419): avc: denied { create } for pid=8028 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 243.230333][ T30] audit: type=1400 audit(1757327964.656:420): avc: denied { ioctl } for pid=8028 comm="syz.3.481" path="socket:[18766]" dev="sockfs" ino=18766 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 243.302282][ T30] audit: type=1400 audit(1757327965.046:421): avc: denied { write } for pid=8018 comm="syz.4.478" name="cec4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.327679][ T30] audit: type=1400 audit(1757327965.046:422): avc: denied { open } for pid=8018 comm="syz.4.478" path="/dev/cec4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.501973][ T8030] bond1: entered promiscuous mode [ 243.821263][ T30] audit: type=1400 audit(1757327965.566:423): avc: denied { create } for pid=8053 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 244.314697][ T30] audit: type=1400 audit(1757327966.056:424): avc: denied { connect } for pid=8064 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 244.665148][ T30] audit: type=1400 audit(1757327966.166:425): avc: denied { read } for pid=8064 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 244.841717][ T30] audit: type=1400 audit(1757327966.586:426): avc: denied { bind } for pid=8076 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.872677][ T8077] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 244.926368][ T8077] team0: Port device dummy0 added [ 244.944757][ T30] audit: type=1400 audit(1757327966.616:427): avc: denied { setopt } for pid=8076 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.975258][ T8077] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 245.000311][ T8077] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 245.088115][ T8077] team0: Failed to send options change via netlink (err -105) [ 245.122432][ T8077] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 245.358960][ T8077] team0: Port device dummy0 removed [ 245.458608][ T8077] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 246.270155][ T8096] binder: 8090:8096 unknown command 0 [ 246.285386][ T8096] binder: 8090:8096 ioctl c0306201 200000000080 returned -22 [ 247.077172][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 247.374588][ T5852] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 247.383886][ T5852] Bluetooth: hci1: Injecting HCI hardware error event [ 247.391996][ T5852] Bluetooth: hci1: hardware error 0x00 [ 249.463465][ T5852] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 249.828134][ T5852] Bluetooth: hci3: unexpected event for opcode 0x204e [ 250.211157][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 250.211171][ T30] audit: type=1400 audit(1757327971.956:437): avc: denied { ioctl } for pid=8153 comm="syz.1.519" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.791281][ T30] audit: type=1400 audit(1757327973.436:438): avc: denied { read write } for pid=8172 comm="syz.0.524" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 251.855614][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 251.872699][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 251.889503][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.057350][ T30] audit: type=1400 audit(1757327973.436:439): avc: denied { open } for pid=8172 comm="syz.0.524" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 252.105441][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.120147][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.604308][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.611731][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.619563][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.628775][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.628980][ T30] audit: type=1400 audit(1757327974.026:440): avc: denied { name_bind } for pid=8186 comm="syz.4.528" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 252.636487][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.689366][ T8191] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.714042][ T54] hid-generic 0086:063B:0002.0001: unknown main item tag 0x0 [ 252.739445][ T54] hid-generic 0086:063B:0002.0001: hidraw0: HID v0.67 Device [syz1] on syz0 [ 252.757868][ T30] audit: type=1400 audit(1757327974.416:441): avc: denied { create } for pid=8184 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.778041][ T30] audit: type=1400 audit(1757327974.436:442): avc: denied { write } for pid=8184 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.935833][ T30] audit: type=1400 audit(1757327974.686:443): avc: denied { write } for pid=8193 comm="syz.0.529" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 252.935912][ T8197] random: crng reseeded on system resumption [ 253.107801][ T8199] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 253.424647][ T30] audit: type=1400 audit(1757327974.786:444): avc: denied { create } for pid=8195 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 253.449008][ T8192] fido_id[8192]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.517506][ T30] audit: type=1400 audit(1757327975.136:445): avc: denied { ioctl } for pid=8193 comm="syz.0.529" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 253.878581][ T30] audit: type=1400 audit(1757327975.256:446): avc: denied { nlmsg_write } for pid=8205 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.413593][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.419895][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.547483][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 256.551272][ T30] audit: type=1400 audit(1757327978.296:449): avc: denied { execute } for pid=8230 comm="syz.2.541" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 256.819471][ T30] audit: type=1400 audit(1757327978.566:450): avc: denied { append } for pid=8250 comm="syz.4.545" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.612164][ T30] audit: type=1400 audit(1757327979.356:451): avc: denied { listen } for pid=8258 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 257.775228][ T30] audit: type=1400 audit(1757327979.416:452): avc: denied { accept } for pid=8258 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.170521][ T978] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 259.528678][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 260.187157][ T978] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.205908][ T978] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.215245][ T978] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.304917][ T978] usb 1-1: Product: syz [ 260.318868][ T978] usb 1-1: Manufacturer: syz [ 260.326448][ T978] usb 1-1: SerialNumber: syz [ 260.510490][ T978] usb 1-1: config 0 descriptor?? [ 260.542225][ T8273] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.972074][ T978] usb 1-1: USB disconnect, device number 5 [ 261.703257][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 261.762136][ T30] audit: type=1400 audit(1757328212.511:453): avc: denied { watch } for pid=8305 comm="syz.0.564" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 261.834692][ T30] audit: type=1400 audit(1757328212.511:454): avc: denied { watch_sb watch_reads } for pid=8305 comm="syz.0.564" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.911790][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 261.940874][ T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 261.969878][ T30] audit: type=1400 audit(1757328212.651:455): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 261.990638][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 262.001218][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.018038][ T9] usb 5-1: Product: syz [ 262.022223][ T9] usb 5-1: Manufacturer: syz [ 262.028722][ T9] usb 5-1: SerialNumber: syz [ 262.358036][ T9] usb 5-1: config 0 descriptor?? [ 262.377378][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 262.400189][ T9] usb 5-1: setting power ON [ 262.405264][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 262.457140][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.521227][ T92] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.558470][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 262.677551][ T8292] dvb-usb: bulk message failed: -22 (3/0) [ 262.685297][ T8292] dvb-usb: bulk message failed: -22 (5/0) [ 262.700058][ T9] usb 5-1: media controller created [ 262.723313][ T92] usb 1-1: Using ep0 maxpacket: 16 [ 262.736724][ T92] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.748494][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.763522][ T92] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 262.788822][ T9] usb 5-1: selecting invalid altsetting 6 [ 262.799068][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.807176][ T9] usb 5-1: digital interface selection failed (-22) [ 262.814965][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 262.825291][ T9] usb 5-1: setting power OFF [ 262.831177][ T92] usb 1-1: config 0 descriptor?? [ 262.853136][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 263.075379][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 263.076350][ T9] (NULL device *): no alternate interface [ 263.338379][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 263.365671][ T9] usb 5-1: USB disconnect, device number 4 [ 263.578450][ T92] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 263.796347][ C0] ================================================================== [ 263.796364][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0 [ 263.796402][ C0] Read of size 1 at addr ffff888054687fff by task swapper/0/0 [ 263.796418][ C0] [ 263.796429][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 263.796452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.796466][ C0] Call Trace: [ 263.796472][ C0] [ 263.796480][ C0] dump_stack_lvl+0x116/0x1f0 [ 263.796509][ C0] print_report+0xcd/0x630 [ 263.796532][ C0] ? __virt_addr_valid+0x81/0x610 [ 263.796557][ C0] ? __phys_addr+0xe8/0x180 [ 263.796584][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 263.796614][ C0] kasan_report+0xe0/0x110 [ 263.796638][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 263.796670][ C0] mcp2221_raw_event+0x1070/0x10a0 [ 263.796701][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 263.796728][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 263.796753][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 263.796784][ C0] hid_irq_in+0x35e/0x870 [ 263.796814][ C0] __usb_hcd_giveback_urb+0x388/0x610 [ 263.796836][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 263.796856][ C0] dummy_timer+0x1814/0x3a30 [ 263.796890][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 263.796914][ C0] ? rcu_is_watching+0x12/0xc0 [ 263.796938][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.796963][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 263.796985][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 263.797018][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 263.797041][ C0] ? read_tsc+0x9/0x20 [ 263.797069][ C0] hrtimer_run_softirq+0x17d/0x350 [ 263.797094][ C0] handle_softirqs+0x219/0x8e0 [ 263.797121][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 263.797148][ C0] __irq_exit_rcu+0x109/0x170 [ 263.797173][ C0] irq_exit_rcu+0x9/0x30 [ 263.797199][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 263.797226][ C0] [ 263.797232][ C0] [ 263.797240][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.797262][ C0] RIP: 0010:__schedule+0x1198/0x5de0 [ 263.797291][ C0] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 83 43 00 00 49 89 5e 10 48 8b bd 10 ff ff ff 48 89 de e8 a0 ed 96 f5 48 89 c7 e8 18 e6 f3 f5 <8b> bd 08 ff ff ff e8 cd a5 f3 f5 48 8b b5 90 fe ff ff 48 b8 00 00 [ 263.797312][ C0] RSP: 0018:ffffffff8e207c40 EFLAGS: 00000206 [ 263.797329][ C0] RAX: 0000000000d5e659 RBX: 0000000000000000 RCX: ffffffff81c374ef [ 263.797341][ C0] RDX: 0000000000000000 RSI: ffffffff8de522d8 RDI: ffffffff8c162d80 [ 263.797353][ C0] RBP: ffffffff8e207df8 R08: 0000000000000001 R09: 0000000000000001 [ 263.797365][ C0] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: dffffc0000000000 [ 263.797379][ C0] R13: ffff8880b8423f10 R14: ffff8880b843a300 R15: ffffffff818a8e40 [ 263.797392][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 263.797418][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 263.797445][ C0] ? get_jiffies_update+0xaa/0x2a0 [ 263.797478][ C0] ? __pfx___schedule+0x10/0x10 [ 263.797498][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 263.797519][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.797545][ C0] ? rcu_is_watching+0x12/0xc0 [ 263.797570][ C0] schedule_idle+0x5c/0x90 [ 263.797592][ C0] do_idle+0x2b6/0x510 [ 263.797616][ C0] ? __pfx_do_idle+0x10/0x10 [ 263.797640][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 263.797663][ C0] cpu_startup_entry+0x4f/0x60 [ 263.797689][ C0] rest_init+0x16b/0x2b0 [ 263.797717][ C0] ? acpi_subsystem_init+0x133/0x180 [ 263.797740][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 263.797766][ C0] start_kernel+0x3ee/0x4d0 [ 263.797790][ C0] x86_64_start_reservations+0x18/0x30 [ 263.797814][ C0] x86_64_start_kernel+0x130/0x190 [ 263.797837][ C0] common_startup_64+0x13e/0x148 [ 263.797862][ C0] [ 263.797869][ C0] [ 263.797873][ C0] Allocated by task 5848: [ 263.797882][ C0] kasan_save_stack+0x33/0x60 [ 263.797898][ C0] kasan_save_track+0x14/0x30 [ 263.797913][ C0] __kasan_slab_alloc+0x89/0x90 [ 263.797930][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 263.797948][ C0] getname_flags.part.0+0x4c/0x550 [ 263.797977][ C0] getname_flags+0x93/0xf0 [ 263.797994][ C0] vfs_fstatat+0xe1/0xf0 [ 263.798019][ C0] __do_sys_newfstatat+0x97/0x120 [ 263.798045][ C0] do_syscall_64+0xcd/0x4c0 [ 263.798068][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.798087][ C0] [ 263.798091][ C0] Freed by task 5848: [ 263.798100][ C0] kasan_save_stack+0x33/0x60 [ 263.798118][ C0] kasan_save_track+0x14/0x30 [ 263.798135][ C0] kasan_save_free_info+0x3b/0x60 [ 263.798161][ C0] __kasan_slab_free+0x60/0x70 [ 263.798180][ C0] kmem_cache_free+0x2d1/0x4d0 [ 263.798197][ C0] putname+0x154/0x1a0 [ 263.798220][ C0] vfs_fstatat+0x85/0xf0 [ 263.798242][ C0] __do_sys_newfstatat+0x97/0x120 [ 263.798267][ C0] do_syscall_64+0xcd/0x4c0 [ 263.798296][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.798317][ C0] [ 263.798322][ C0] The buggy address belongs to the object at ffff888054686600 [ 263.798322][ C0] which belongs to the cache names_cache of size 4096 [ 263.798338][ C0] The buggy address is located 2559 bytes to the right of [ 263.798338][ C0] allocated 4096-byte region [ffff888054686600, ffff888054687600) [ 263.798359][ C0] [ 263.798364][ C0] The buggy address belongs to the physical page: [ 263.798373][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54680 [ 263.798391][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 263.798408][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 263.798425][ C0] page_type: f5(slab) [ 263.798443][ C0] raw: 00fff00000000040 ffff888140408140 dead000000000100 dead000000000122 [ 263.798460][ C0] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 263.798479][ C0] head: 00fff00000000040 ffff888140408140 dead000000000100 dead000000000122 [ 263.798497][ C0] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 263.798515][ C0] head: 00fff00000000003 ffffea000151a001 00000000ffffffff 00000000ffffffff [ 263.798532][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 263.798544][ C0] page dumped because: kasan: bad access detected [ 263.798553][ C0] page_owner tracks the page as allocated [ 263.798559][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5848, tgid 5848 (udevd), ts 207012775628, free_ts 206755311296 [ 263.798594][ C0] post_alloc_hook+0x1c0/0x230 [ 263.798623][ C0] get_page_from_freelist+0x132b/0x38e0 [ 263.798641][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 263.798660][ C0] alloc_pages_mpol+0x1fb/0x550 [ 263.798680][ C0] new_slab+0x247/0x330 [ 263.798705][ C0] ___slab_alloc+0xcf2/0x1750 [ 263.798731][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 263.798758][ C0] kmem_cache_alloc_noprof+0xef/0x3b0 [ 263.798776][ C0] getname_flags.part.0+0x4c/0x550 [ 263.798803][ C0] getname_flags+0x93/0xf0 [ 263.798821][ C0] __x64_sys_symlink+0x65/0x90 [ 263.798843][ C0] do_syscall_64+0xcd/0x4c0 [ 263.798866][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.798885][ C0] page last free pid 7585 tgid 7584 stack trace: [ 263.798896][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 263.798921][ C0] __put_partials+0x165/0x1c0 [ 263.798950][ C0] qlist_free_all+0x4d/0x120 [ 263.798967][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 263.798985][ C0] __kasan_slab_alloc+0x69/0x90 [ 263.799003][ C0] __kmalloc_noprof+0x1d4/0x510 [ 263.799021][ C0] tomoyo_encode2+0x100/0x3e0 [ 263.799048][ C0] tomoyo_encode+0x29/0x50 [ 263.799075][ C0] tomoyo_realpath_from_path+0x18f/0x6e0 [ 263.799104][ C0] tomoyo_path_number_perm+0x245/0x580 [ 263.799127][ C0] security_file_ioctl+0x9b/0x240 [ 263.799154][ C0] __x64_sys_ioctl+0xb7/0x210 [ 263.799180][ C0] do_syscall_64+0xcd/0x4c0 [ 263.799203][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.799222][ C0] [ 263.799227][ C0] Memory state around the buggy address: [ 263.799238][ C0] ffff888054687e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.799252][ C0] ffff888054687f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.799267][ C0] >ffff888054687f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.799287][ C0] ^ [ 263.799300][ C0] ffff888054688000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 263.799315][ C0] ffff888054688080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 263.799327][ C0] ================================================================== [ 263.799338][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 263.799352][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 263.799375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.799388][ C0] Call Trace: [ 263.799395][ C0] [ 263.799403][ C0] dump_stack_lvl+0x3d/0x1f0 [ 263.799432][ C0] vpanic+0x6e8/0x7a0 [ 263.799463][ C0] ? __pfx_vpanic+0x10/0x10 [ 263.799496][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 263.799525][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 263.799554][ C0] panic+0xca/0xd0 [ 263.799582][ C0] ? __pfx_panic+0x10/0x10 [ 263.799614][ C0] ? end_report+0x4c/0x170 [ 263.799634][ C0] ? rcu_is_watching+0x12/0xc0 [ 263.799659][ C0] ? lock_release+0x201/0x2f0 [ 263.799691][ C0] check_panic_on_warn+0xab/0xb0 [ 263.799709][ C0] end_report+0x107/0x170 [ 263.799731][ C0] kasan_report+0xee/0x110 [ 263.799753][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 263.799785][ C0] mcp2221_raw_event+0x1070/0x10a0 [ 263.799814][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 263.799838][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 263.799863][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 263.799894][ C0] hid_irq_in+0x35e/0x870 [ 263.799925][ C0] __usb_hcd_giveback_urb+0x388/0x610 [ 263.799948][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 263.799969][ C0] dummy_timer+0x1814/0x3a30 [ 263.800004][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 263.800027][ C0] ? rcu_is_watching+0x12/0xc0 [ 263.800052][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.800076][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 263.800098][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 263.800126][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 263.800149][ C0] ? read_tsc+0x9/0x20 [ 263.800178][ C0] hrtimer_run_softirq+0x17d/0x350 [ 263.800204][ C0] handle_softirqs+0x219/0x8e0 [ 263.800231][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 263.800258][ C0] __irq_exit_rcu+0x109/0x170 [ 263.800287][ C0] irq_exit_rcu+0x9/0x30 [ 263.800310][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 263.800334][ C0] [ 263.800341][ C0] [ 263.800348][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.800371][ C0] RIP: 0010:__schedule+0x1198/0x5de0 [ 263.800396][ C0] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 83 43 00 00 49 89 5e 10 48 8b bd 10 ff ff ff 48 89 de e8 a0 ed 96 f5 48 89 c7 e8 18 e6 f3 f5 <8b> bd 08 ff ff ff e8 cd a5 f3 f5 48 8b b5 90 fe ff ff 48 b8 00 00 [ 263.800416][ C0] RSP: 0018:ffffffff8e207c40 EFLAGS: 00000206 [ 263.800434][ C0] RAX: 0000000000d5e659 RBX: 0000000000000000 RCX: ffffffff81c374ef [ 263.800448][ C0] RDX: 0000000000000000 RSI: ffffffff8de522d8 RDI: ffffffff8c162d80 [ 263.800461][ C0] RBP: ffffffff8e207df8 R08: 0000000000000001 R09: 0000000000000001 [ 263.800474][ C0] R10: ffffffff90ab6b97 R11: 0000000000000000 R12: dffffc0000000000 [ 263.800493][ C0] R13: ffff8880b8423f10 R14: ffff8880b843a300 R15: ffffffff818a8e40 [ 263.800505][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 263.800531][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 263.800559][ C0] ? get_jiffies_update+0xaa/0x2a0 [ 263.800594][ C0] ? __pfx___schedule+0x10/0x10 [ 263.800615][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 263.800636][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.800663][ C0] ? rcu_is_watching+0x12/0xc0 [ 263.800688][ C0] schedule_idle+0x5c/0x90 [ 263.800710][ C0] do_idle+0x2b6/0x510 [ 263.800734][ C0] ? __pfx_do_idle+0x10/0x10 [ 263.800759][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 263.800783][ C0] cpu_startup_entry+0x4f/0x60 [ 263.800809][ C0] rest_init+0x16b/0x2b0 [ 263.800838][ C0] ? acpi_subsystem_init+0x133/0x180 [ 263.800861][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 263.800887][ C0] start_kernel+0x3ee/0x4d0 [ 263.800911][ C0] x86_64_start_reservations+0x18/0x30 [ 263.800935][ C0] x86_64_start_kernel+0x130/0x190 [ 263.800960][ C0] common_startup_64+0x13e/0x148 [ 263.800987][ C0] [ 263.801239][ C0] Kernel Offset: disabled