last executing test programs: 3m42.396772834s ago: executing program 2 (id=300): ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x3231564e, 0x2, [0x2], [0x80ffdc], [], [0x400000000000001]}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc044) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0xffffffffffffff09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, 0x0) 3m40.971686791s ago: executing program 2 (id=303): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x91, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) close(r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 3m39.304396979s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000035000701feffffff00000000017c00000c00018006000600808a0000938349f8d9bd1235745c0c68b345946e2320ee84b58ec9faf55d8183c4751a785d3cf3"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000218230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a4) write$cgroup_int(r8, &(0x7f0000000040)=0x400, 0x12) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_clone3(&(0x7f0000002400)={0x380814000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000340), {0x21}, &(0x7f0000001300)=""/4096, 0x1000, &(0x7f0000002300)=""/135, &(0x7f00000023c0)=[r1], 0x1}, 0x58) sched_setaffinity(r10, 0x8, &(0x7f0000002480)=0x99fc) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3m37.468219596s ago: executing program 2 (id=311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='pim6reg1\x00', 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000003a0009f7fffddbdf2502cc3a01aec99cfd788142108fa2bd8463f2e821095b88fb5cf62b952447132c0ccbadc9d73a46bfabf5a9d837bf9349b68b7aba8a51fda890f308d50631e440cefad937a224428ecfac976702b4e28d04d6ebba6e1638078544aaa13247085c874b063bc43c3e7a3cf6054f9996fa62b36ce447dd0cd145437e1dfcc9fee3f49121e8597e63082d3b5e2538f15d768c4b67cbcef28bf7e916fc44984a87dc690e5f5e7117e94f29e3c5891f46b85ea2121221", @ANYBLOB="7923b862eb9f6561d281943a9dd183ed6cc6d9baeef24168dc55a93c8acd41feeb13930f8cb466cd5f84da0b15f086bef23dffc357245e0d50a1e0fb42c7b6d98271299684aaf6d4e0015573fcd4df27a4387f08beeecee9922a6de1b2c9f0a4d3616ca7331a5241397b0ddcd11078de962b2c2a23c81668fe0641f84eb9ad05708323c5f7b9e5d8445c86fab4c2998e6173a34de96abcda7343b621679377ad4efc71026ed858b4366e76dd79d7963de7900212b1a4d89ba9c72d80f8af6d01b18c604731e92fda8cc17ef9ce57e807f26be0380b0c5ca4f46603bd", @ANYRES8=r1, @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x41, &(0x7f0000000200)={0x9, 0x2, 0x4}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f00000000c0)={0x0, 0x0, 0x3}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x20004, r9, 0x2}) r12 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000300)={r13}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000002c0)={r6, 0x6, 0x9, 0xb, 0x0, [r7, 0x0, r8, r13], [0x80000000, 0x2, 0x4, 0x9], [0x2, 0x7, 0x9b, 0x5], [0x6, 0x4, 0x8, 0x4]}) 3m34.639924038s ago: executing program 2 (id=315): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="00ad2a680795149040bc19759cddce385a87aa9ff61b8e", @ANYRES64=r0, @ANYRES64=r3, @ANYRESHEX=r1, @ANYRESOCT=r1], 0x20000600}}, 0x4008040) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r9, 0x2007ffd) sendfile(r7, r8, 0x0, 0x1000a3) 3m33.237422553s ago: executing program 2 (id=316): clock_nanosleep(0xfffffff4, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2d12, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x7000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000b40)={0x0, 0x300, &(0x7f0000000b00)={&(0x7f0000000a80)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) 3m17.866483794s ago: executing program 32 (id=316): clock_nanosleep(0xfffffff4, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2d12, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x7000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000b40)={0x0, 0x300, &(0x7f0000000b00)={&(0x7f0000000a80)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) 10.100145569s ago: executing program 3 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000000000000061194c0000040000950000000000000047b7fbc828a3574ded64ddae01a2808503666c91d321e2175fcc1ffb2cde599f3d5b08cbb144dfb2d1359acd8ce8c4bf8ef06a4fa6754d63bffe40d843c5fd4a8618457f4bf97fe6ba30876d695e05e331fdacc738061c2222192d0d7c04"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfa6719122b851c3761852017b5a5f6cc3f976f82bb622cef3f345b41c0060418131f747a52f3e63c96acab52ec19", 0x56, &(0x7f00000000c0), 0x0, &(0x7f0000000540)="dcc2938a0e1c2baf1362a0e787778391ca695d28b423c1557c9efa164efc748d5bec470bcdbea6d330324c85aaae14402bd2fc38b3e535a9ae59d34239c0b2878bfdefaca5a40b374270fe91a450d840834f7960c84e3ac28a17ec794ffd7e2205931ec946a72deb0f7c") r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]}) write(r5, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 9.103235338s ago: executing program 3 (id=1035): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) fsopen(0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 7.15242293s ago: executing program 0 (id=1039): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) 7.121741625s ago: executing program 4 (id=1040): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba000840", 0x8b) 7.063120133s ago: executing program 4 (id=1041): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) listen(0xffffffffffffffff, 0xfffffffa) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0, 0x18c0}, 0x20028cc5) 6.950483951s ago: executing program 4 (id=1042): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) 6.762244756s ago: executing program 5 (id=1044): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc0000600000008000200050000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 6.667762124s ago: executing program 5 (id=1045): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074857b9e65ac4a001f0c0000e4ceb56c"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r4, 0x3, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f0000001140)) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 5.925480538s ago: executing program 0 (id=1046): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='esdfs\x00', 0x300a4a2, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendto$l2tp(r6, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r6, 0x0, 0x0, 0x2062, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.906537133s ago: executing program 3 (id=1047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000040)={@host}) readv(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.592215842s ago: executing program 5 (id=1048): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 4.63433356s ago: executing program 3 (id=1049): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x8) 4.534851873s ago: executing program 5 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, r1, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x620b}, 0x0) 4.420686613s ago: executing program 5 (id=1052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000c40), 0x0, 0x20000054) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x3e4, 0x1d0, 0x12c, 0xffffffff, 0x12c, 0x0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x104, 0x12c, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth1_to_hsr\x00', 'veth1_vlan\x00', 0x0, 0x0, 0x4, 0x7fff, 0xb, 0xcd, {0x4}, {0x8}}}, @common=@ah={{0x2c}, {[0x1, 0x1ff], 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x1}, {0x0, 0x1, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @remote, @multicast2, @gre_key=0xf, @port=0x4e22}}}}, {{@ip={@private=0xa010100, @private=0xa010100, 0xffffffff, 0xffffff00, 'ip6gretap0\x00', 'geneve1\x00', {}, {0xff}, 0x11, 0x3, 0x2}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010102, @rand_addr=0x64010100, @gre_key=0x8, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@multicast2, @ipv6=@mcast1, @port=0x4e24, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x440) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) 4.359474632s ago: executing program 1 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x104) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x4) 3.087507394s ago: executing program 5 (id=1054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7c}}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r12, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x0, 0x80000001, 0x6, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0xfffffffc, 0x400007, 0x1, 0x71c, 0x38, 0xffffff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0x8c, 0x0, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x7ffc, 0x1, 0x5c, 0x8, 0x2, 0xd1, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x6eb, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x9], [0x5, 0x2, 0xd91, 0x8, 0x3ff, 0xfffffff8, 0x40000008, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x1, 0x8, 0x8, 0x2, 0x405, 0xffeffffe, 0x9, 0x5, 0x809, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xb2d1, 0x1, 0x200, 0x10000000, 0x2, 0xe22, 0x8, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x1012, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x101, 0xfff7ffff, 0x7f, 0x8, 0x3, 0xffffffff, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x40004, 0x8, 0xf9b, 0xffffffff, 0x7, 0x401, 0x7, 0x2, 0x2, 0x3, 0x2, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f85, 0x9, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0x6], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0xe00e, 0x8000, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x404, 0xfffffffe, 0xa, 0x8, 0x3, 0x6, 0x18000000, 0x4, 0x9, 0x4, 0x2, 0x2, 0xc, 0x27, 0x200400, 0x70, 0x0, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xec, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0x9, 0x6, 0xc3, 0x7, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x0, 0x10001, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) getsockopt$inet6_buf(r11, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$fuseblk(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x488, &(0x7f0000000140)=ANY=[@ANYBLOB="c0c03d", @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000140000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',\x00']) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2ac0b2, 0x0) 3.014758852s ago: executing program 1 (id=1055): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) 3.01420451s ago: executing program 4 (id=1056): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x9}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) epoll_create(0x24) 2.846817098s ago: executing program 1 (id=1057): syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x109102) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) gettid() r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) 2.54821843s ago: executing program 3 (id=1058): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0xff}, 0x20) syz_open_procfs(0x0, 0x0) 2.500280576s ago: executing program 0 (id=1059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.380616218s ago: executing program 4 (id=1060): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 2.373733114s ago: executing program 0 (id=1061): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x80000}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x2}, {}, {0x0, 0x54b}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0xffffffff}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {0x80}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0x5}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 903.204984ms ago: executing program 0 (id=1062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 902.117635ms ago: executing program 1 (id=1063): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba000840", 0x8b) 818.616642ms ago: executing program 4 (id=1064): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba4f0c7243cfaf3983427c7250be5aeb541b4b317897bcfe86a812677427a0b5c59185db31"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d60653c0e5e8d"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r4, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000c00)) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x20048045) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) socket(0x1d, 0x2, 0x6) 817.639177ms ago: executing program 0 (id=1065): r0 = io_uring_setup(0x4eb, &(0x7f0000000300)={0x0, 0x32b3, 0x80, 0x0, 0x20e}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc0200) ioctl$BLKGETNRZONES(r3, 0x80041285, &(0x7f0000000100)=0x2000000) syz_emit_ethernet(0x7e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000080)={0x14}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 801.120357ms ago: executing program 3 (id=1066): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@pci, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x30) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000100)={r7, 0xd}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff010}, {0xb1, 0xe, 0x0, 0x46}, {0x6, 0x0, 0x0, 0x6ce3}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 799.607454ms ago: executing program 1 (id=1067): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 0s ago: executing program 1 (id=1068): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x400000000, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x98, &(0x7f00000004c0)={0xf, 0xfffffffffffffff2, 0xb}}) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000001e000001000000000000", @ANYRES32], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): .357177][ T5793] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.457511][ T5793] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.578756][ T5793] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.684991][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.750843][ T6560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.954729][ T6576] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 161.841711][ T5793] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.260463][ T5710] usb 4-1: USB disconnect, device number 5 [ 162.994068][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 163.324932][ T29] audit: type=1400 audit(1777150176.366:294): avc: denied { read } for pid=6582 comm="syz.2.181" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.418345][ T29] audit: type=1400 audit(1777150176.366:295): avc: denied { open } for pid=6582 comm="syz.2.181" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.910631][ T29] audit: type=1400 audit(1777150176.736:296): avc: denied { ioctl } for pid=6582 comm="syz.2.181" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 165.686895][ T6609] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 166.043647][ T6618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 166.782344][ T29] audit: type=1326 audit(1777150179.976:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 166.949662][ T6629] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 166.998546][ T29] audit: type=1326 audit(1777150179.976:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 167.074856][ T6635] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 168.229732][ T29] audit: type=1326 audit(1777150179.976:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 168.536132][ T6646] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 169.871155][ T29] audit: type=1400 audit(1777150183.216:300): avc: denied { name_bind } for pid=6649 comm="syz.2.192" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 173.928585][ T6677] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 174.761130][ T29] audit: type=1326 audit(1777150188.116:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 175.774193][ T29] audit: type=1326 audit(1777150189.126:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 175.798644][ T29] audit: type=1326 audit(1777150189.126:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 176.417893][ T6686] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 176.494424][ T29] audit: type=1326 audit(1777150189.126:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 176.527717][ T29] audit: type=1326 audit(1777150189.126:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 176.586306][ T29] audit: type=1326 audit(1777150189.846:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 176.755669][ T29] audit: type=1326 audit(1777150189.846:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 177.224654][ T6703] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 177.493878][ T6698] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 177.732961][ T29] audit: type=1326 audit(1777150189.916:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 178.219234][ T29] audit: type=1326 audit(1777150190.096:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 178.242778][ T29] audit: type=1326 audit(1777150190.096:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 178.267205][ T29] audit: type=1326 audit(1777150190.356:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 178.597399][ T6714] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 181.088087][ T6721] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 181.088192][ T6718] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 185.445385][ T6752] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 185.728389][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 185.887118][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 185.887577][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 185.894491][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 185.907012][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 186.046453][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 186.046483][ T29] audit: type=1326 audit(1777150199.356:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 186.105782][ T29] audit: type=1326 audit(1777150199.356:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 186.257730][ T29] audit: type=1326 audit(1777150199.356:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 186.306412][ T29] audit: type=1326 audit(1777150199.656:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 186.417358][ T29] audit: type=1326 audit(1777150199.656:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 186.441418][ T29] audit: type=1326 audit(1777150199.656:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 187.106834][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 187.112412][ T29] audit: type=1326 audit(1777150199.656:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 187.112942][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 187.249629][ T6779] ceph: No mds server is up or the cluster is laggy [ 188.448042][ T29] audit: type=1326 audit(1777150199.656:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 188.471580][ T29] audit: type=1326 audit(1777150199.656:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 188.496171][ T29] audit: type=1326 audit(1777150199.656:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6761 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 188.691455][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.702216][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.073952][ T6794] tipc: Started in network mode [ 189.078967][ T6794] tipc: Node identity 4004, cluster identity 4711 [ 189.085399][ T6794] tipc: Node number set to 16388 [ 190.428778][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.224'. [ 191.049193][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'. [ 194.557909][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 194.597603][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 194.802065][ T6823] ceph: No mds server is up or the cluster is laggy [ 195.241807][ T5733] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 195.266635][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 195.266667][ T29] audit: type=1326 audit(1777150208.586:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 195.549986][ T29] audit: type=1326 audit(1777150208.586:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 195.575115][ T29] audit: type=1326 audit(1777150208.586:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 195.635731][ T29] audit: type=1326 audit(1777150208.976:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 195.660410][ T29] audit: type=1326 audit(1777150208.976:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6830 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 195.720127][ T5733] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.786495][ T5733] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.991285][ T5733] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.054285][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.357964][ T6829] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.862908][ T5733] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.628501][ T5723] usb 4-1: USB disconnect, device number 6 [ 199.593584][ T29] audit: type=1326 audit(1777150212.926:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 199.617323][ T29] audit: type=1326 audit(1777150212.926:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 199.973424][ T6877] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 200.093753][ T29] audit: type=1326 audit(1777150212.926:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6870 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 200.347253][ T995] Bluetooth: hci5: Frame reassembly failed (-90) [ 200.503913][ T29] audit: type=1400 audit(1777150213.336:387): avc: denied { ioctl } for pid=6872 comm="syz.1.239" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 200.546314][ T5723] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 201.420423][ T6891] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 202.319282][ T5618] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 202.326997][ T29] audit: type=1400 audit(1777150213.446:388): avc: denied { create } for pid=6872 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.276604][ T29] audit: type=1400 audit(1777150213.446:389): avc: denied { connect } for pid=6872 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.404852][ T6902] netlink: 'syz.4.246': attribute type 1 has an invalid length. [ 208.004380][ T29] audit: type=1326 audit(1777150221.096:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 208.038450][ T29] audit: type=1326 audit(1777150221.096:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 208.091264][ T29] audit: type=1326 audit(1777150221.096:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 208.921439][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 208.977336][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 209.160568][ T6926] ceph: No mds server is up or the cluster is laggy [ 209.596623][ T5342] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 209.917722][ T29] audit: type=1326 audit(1777150223.266:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6934 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 209.958268][ T5342] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.977946][ T29] audit: type=1326 audit(1777150223.266:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6934 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 210.001256][ T5733] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 210.001955][ T5342] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 210.048768][ T5342] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.059186][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.127244][ T6933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.556752][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 210.567778][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 210.573921][ T5342] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.692280][ T6950] ceph: No mds server is up or the cluster is laggy [ 210.708195][ T5733] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.060533][ T5733] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.164103][ T5780] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 211.219192][ T5733] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.278835][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.523607][ T5780] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.614076][ T5780] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.632882][ T6939] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 211.641170][ T5780] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.677504][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.784885][ T5733] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.809924][ T5342] usb 5-1: USB disconnect, device number 5 [ 211.810957][ T6955] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 211.888850][ T6967] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 215.429127][ T6987] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 215.446620][ T29] audit: type=1326 audit(1777150228.336:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 215.474626][ T5733] usb 3-1: USB disconnect, device number 6 [ 215.989088][ T29] audit: type=1326 audit(1777150228.336:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 216.036305][ T29] audit: type=1326 audit(1777150228.336:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6974 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa832d9cdd9 code=0x7ffc0000 [ 216.105709][ T5780] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.951473][ T5780] usb 1-1: USB disconnect, device number 4 [ 217.993660][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 221.793418][ T29] audit: type=1326 audit(1777150235.146:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 221.997946][ T7037] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 222.009465][ T29] audit: type=1326 audit(1777150235.146:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 222.260003][ T29] audit: type=1326 audit(1777150235.146:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7031 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 224.435184][ T7066] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 225.691995][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 226.389063][ T29] audit: type=1400 audit(1777150239.746:401): avc: denied { write } for pid=7075 comm="syz.4.279" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 226.412192][ T29] audit: type=1400 audit(1777150239.746:402): avc: denied { open } for pid=7075 comm="syz.4.279" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 226.439391][ T29] audit: type=1400 audit(1777150239.796:403): avc: denied { ioctl } for pid=7075 comm="syz.4.279" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 226.461960][ T29] audit: type=1400 audit(1777150239.816:404): avc: denied { ioctl } for pid=7075 comm="syz.4.279" path="/newroot/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x563b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 227.164646][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 228.461392][ T7103] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 228.569891][ T29] audit: type=1326 audit(1777150241.586:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 228.605877][ T29] audit: type=1326 audit(1777150241.596:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 228.629642][ T29] audit: type=1326 audit(1777150241.596:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5a8539cdd9 code=0x7ffc0000 [ 229.305713][ T7118] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 230.176382][ T7122] netlink: 60 bytes leftover after parsing attributes in process `syz.0.290'. [ 230.194597][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.289'. [ 232.242244][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.291'. [ 234.888393][ T29] audit: type=1326 audit(1777150248.196:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 234.943483][ T29] audit: type=1326 audit(1777150248.196:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 235.026680][ T29] audit: type=1326 audit(1777150248.226:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 235.159620][ T29] audit: type=1326 audit(1777150248.226:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 235.165388][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 235.238480][ T29] audit: type=1326 audit(1777150248.226:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 235.347692][ T29] audit: type=1326 audit(1777150248.226:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 235.371339][ T29] audit: type=1326 audit(1777150248.226:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 236.827760][ T29] audit: type=1326 audit(1777150248.226:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 236.913050][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.304'. [ 236.991037][ T29] audit: type=1326 audit(1777150248.226:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 237.014728][ T29] audit: type=1326 audit(1777150248.236:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 238.978690][ T7201] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 240.114902][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 240.359404][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 240.359421][ T29] audit: type=1326 audit(1777150253.716:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 240.527268][ T29] audit: type=1326 audit(1777150253.716:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 240.613772][ T7217] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 241.667313][ T29] audit: type=1326 audit(1777150253.716:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 242.762933][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 242.810682][ T29] audit: type=1326 audit(1777150253.716:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 243.592480][ T7232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.314'. [ 243.934195][ T29] audit: type=1326 audit(1777150253.906:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 244.012574][ T29] audit: type=1326 audit(1777150253.906:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 244.071546][ T29] audit: type=1326 audit(1777150253.906:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 244.207977][ T29] audit: type=1326 audit(1777150254.846:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 244.499396][ T29] audit: type=1326 audit(1777150254.856:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 244.527587][ T29] audit: type=1326 audit(1777150254.876:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 245.009062][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 245.015378][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 245.142696][ T7239] ceph: No mds server is up or the cluster is laggy [ 248.336219][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 248.336232][ T29] audit: type=1400 audit(1777150260.216:459): avc: denied { create } for pid=7260 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.062650][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.321'. [ 250.036897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 250.231021][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.473448][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.957133][ T7292] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 252.877188][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.327'. [ 253.950241][ T7297] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 257.660189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 261.129148][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.132992][ T29] audit: type=1400 audit(1777150274.486:460): avc: denied { ioctl } for pid=7348 comm="syz-executor" path="socket:[15844]" dev="sockfs" ino=15844 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.169748][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.182372][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.200789][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.317210][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.287940][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 262.293974][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 262.517827][ T7369] ceph: No mds server is up or the cluster is laggy [ 263.416680][ T4928] Bluetooth: hci5: command tx timeout [ 264.846602][ T4928] Bluetooth: hci4: command 0xfc11 tx timeout [ 264.846611][ T5618] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 265.486763][ T5618] Bluetooth: hci5: command tx timeout [ 265.933369][ T6194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.197850][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 266.850531][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.349'. [ 267.956885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 268.201205][ T6194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.307580][ T5607] Bluetooth: hci5: command tx timeout [ 268.547308][ T5895] Bluetooth: hci4: Frame reassembly failed (-84) [ 268.553784][ T5895] Bluetooth: hci4: Frame reassembly failed (-84) [ 269.044441][ T6194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.225184][ T6194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.433496][ T5607] Bluetooth: hci5: command tx timeout [ 270.658145][ T5618] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 270.667451][ T5607] Bluetooth: hci4: command 0xfc11 tx timeout [ 271.619202][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 273.164979][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 273.172483][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 273.177420][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 273.224434][ T7443] ceph: No mds server is up or the cluster is laggy [ 274.628237][ T29] audit: type=1400 audit(1777150287.966:461): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.840588][ T29] audit: type=1400 audit(1777150287.966:462): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.990417][ T29] audit: type=1400 audit(1777150287.966:463): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.504295][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 275.580316][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 275.647529][ T7463] ceph: No mds server is up or the cluster is laggy [ 275.675179][ T29] audit: type=1400 audit(1777150287.976:464): avc: denied { read } for pid=5271 comm="dhcpcd" name="n30" dev="tmpfs" ino=3344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.026206][ T29] audit: type=1400 audit(1777150287.976:465): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.073455][ T29] audit: type=1400 audit(1777150287.976:466): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.089160][ T6194] bridge_slave_1: left allmulticast mode [ 276.138256][ T6194] bridge_slave_1: left promiscuous mode [ 276.151400][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.346350][ T6194] bridge_slave_0: left allmulticast mode [ 276.805046][ T6194] bridge_slave_0: left promiscuous mode [ 276.847258][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.863376][ T29] audit: type=1400 audit(1777150290.216:467): avc: denied { read open } for pid=7477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.931014][ T29] audit: type=1400 audit(1777150290.216:468): avc: denied { getattr } for pid=7477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.505880][ T5723] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 277.979869][ T29] audit: type=1400 audit(1777150291.336:469): avc: denied { add_name } for pid=7470 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.008666][ T29] audit: type=1400 audit(1777150291.356:470): avc: denied { create } for pid=7470 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.035865][ T5723] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 278.073526][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.085615][ T5723] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 278.109014][ T5723] usb 1-1: config 0 has no interface number 0 [ 278.128252][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.142212][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.145108][ T5723] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 278.166576][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.184593][ T6194] bond0 (unregistering): Released all slaves [ 278.184962][ T5723] usb 1-1: Product: syz [ 278.200693][ T5723] usb 1-1: Manufacturer: syz [ 278.231033][ T5723] usb 1-1: SerialNumber: syz [ 278.288095][ T5723] usb 1-1: config 0 descriptor?? [ 278.321428][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 278.500794][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.514316][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.538855][ T7485] FAULT_INJECTION: forcing a failure. [ 278.538855][ T7485] name failslab, interval 1, probability 0, space 0, times 1 [ 278.589607][ T7485] CPU: 1 UID: 0 PID: 7485 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(full) [ 278.589632][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.589642][ T7485] Call Trace: [ 278.589648][ T7485] [ 278.589655][ T7485] dump_stack_lvl+0x100/0x190 [ 278.589683][ T7485] should_fail_ex.cold+0x5/0xa [ 278.589708][ T7485] ? tomoyo_encode2+0xfb/0x3c0 [ 278.589734][ T7485] should_failslab+0xc2/0x120 [ 278.589753][ T7485] __kmalloc_noprof+0xe0/0x850 [ 278.589777][ T7485] ? d_absolute_path+0x136/0x1b0 [ 278.589807][ T7485] tomoyo_encode2+0xfb/0x3c0 [ 278.589835][ T7485] tomoyo_encode+0x29/0x50 [ 278.589856][ T7485] tomoyo_realpath_from_path+0x18c/0x690 [ 278.589884][ T7485] tomoyo_path_number_perm+0x23c/0x580 [ 278.589902][ T7485] ? tomoyo_path_number_perm+0x22e/0x580 [ 278.589924][ T7485] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.589970][ T7485] ? find_held_lock+0x2b/0x80 [ 278.589987][ T7485] ? __fget_files+0x215/0x3d0 [ 278.590007][ T7485] ? hook_file_ioctl_common+0x149/0x410 [ 278.590031][ T7485] ? __fget_files+0x215/0x3d0 [ 278.590056][ T7485] ? __fget_files+0x21f/0x3d0 [ 278.590081][ T7485] security_file_ioctl+0xd3/0x230 [ 278.590104][ T7485] __x64_sys_ioctl+0xb7/0x210 [ 278.590124][ T7485] do_syscall_64+0x10b/0xf80 [ 278.590144][ T7485] ? clear_bhb_loop+0x40/0x90 [ 278.590165][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.590184][ T7485] RIP: 0033:0x7feb6c19cdd9 [ 278.590199][ T7485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.590215][ T7485] RSP: 002b:00007feb6d11d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.590233][ T7485] RAX: ffffffffffffffda RBX: 00007feb6c415fa0 RCX: 00007feb6c19cdd9 [ 278.590245][ T7485] RDX: 0000000000000000 RSI: 0000000000005415 RDI: 0000000000000003 [ 278.590255][ T7485] RBP: 00007feb6d11d090 R08: 0000000000000000 R09: 0000000000000000 [ 278.590265][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.590275][ T7485] R13: 00007feb6c416038 R14: 00007feb6c415fa0 R15: 00007ffcd48100e8 [ 278.590298][ T7485] [ 278.963559][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 279.348417][ T7485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.223863][ T5723] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected [ 280.243294][ T5723] cyphidcom ttyUSB0: required endpoint is missing [ 280.275714][ T5723] usb 1-1: USB disconnect, device number 5 [ 280.284322][ T5723] cypress_m8 1-1:0.74: device disconnected [ 282.839809][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 282.839856][ T29] audit: type=1326 audit(1777150296.186:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 283.070310][ T29] audit: type=1326 audit(1777150296.186:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 283.078238][ T7541] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 283.176610][ T29] audit: type=1326 audit(1777150296.186:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 284.976199][ T5780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 285.519255][ T5780] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.639295][ T5780] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.713911][ T5780] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.787113][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.809176][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.852164][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.901235][ T7348] bridge_slave_0: entered allmulticast mode [ 285.929273][ T7553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.951088][ T7348] bridge_slave_0: entered promiscuous mode [ 285.985709][ T5780] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.654671][ T29] audit: type=1326 audit(1777150299.716:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 286.841855][ T7578] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 287.021508][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.078761][ T29] audit: type=1326 audit(1777150299.716:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 287.220515][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.307234][ T7348] bridge_slave_1: entered allmulticast mode [ 287.338465][ T29] audit: type=1326 audit(1777150299.716:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 287.436570][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 287.709629][ T7348] bridge_slave_1: entered promiscuous mode [ 287.813384][ T5780] usb 2-1: USB disconnect, device number 4 [ 288.759723][ T6194] hsr_slave_0: left promiscuous mode [ 289.028469][ T6194] hsr_slave_1: left promiscuous mode [ 289.694721][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.714787][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.794575][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 290.090545][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.129576][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.704724][ T6194] veth1_macvtap: left promiscuous mode [ 290.716920][ T6194] veth0_macvtap: left promiscuous mode [ 290.723204][ T6194] veth1_vlan: left promiscuous mode [ 290.729421][ T6194] veth0_vlan: left promiscuous mode [ 292.903749][ T7630] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 296.313669][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 296.325881][ T29] audit: type=1400 audit(1777150309.676:481): avc: denied { associate } for pid=7635 comm="syz.1.396" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 296.354971][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 296.377304][ T29] audit: type=1400 audit(1777150309.726:482): avc: denied { ioctl } for pid=7635 comm="syz.1.396" path="socket:[16334]" dev="sockfs" ino=16334 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 296.450907][ T7637] FAULT_INJECTION: forcing a failure. [ 296.450907][ T7637] name failslab, interval 1, probability 0, space 0, times 0 [ 296.463631][ T7637] CPU: 1 UID: 0 PID: 7637 Comm: syz.1.396 Not tainted syzkaller #0 PREEMPT(full) [ 296.463653][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.463662][ T7637] Call Trace: [ 296.463673][ T7637] [ 296.463679][ T7637] dump_stack_lvl+0x100/0x190 [ 296.463703][ T7637] should_fail_ex.cold+0x5/0xa [ 296.463726][ T7637] ? tomoyo_realpath_from_path+0xb6/0x690 [ 296.463747][ T7637] should_failslab+0xc2/0x120 [ 296.463764][ T7637] __kmalloc_noprof+0xe0/0x850 [ 296.463786][ T7637] ? kfree+0x1dd/0x6c0 [ 296.463810][ T7637] tomoyo_realpath_from_path+0xb6/0x690 [ 296.463836][ T7637] tomoyo_path_number_perm+0x23c/0x580 [ 296.463852][ T7637] ? tomoyo_path_number_perm+0x22e/0x580 [ 296.463872][ T7637] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.463912][ T7637] ? find_held_lock+0x2b/0x80 [ 296.463928][ T7637] ? __fget_files+0x215/0x3d0 [ 296.463946][ T7637] ? hook_file_ioctl_common+0x149/0x410 [ 296.463968][ T7637] ? __fget_files+0x215/0x3d0 [ 296.463991][ T7637] ? __fget_files+0x21f/0x3d0 [ 296.464014][ T7637] security_file_ioctl+0xd3/0x230 [ 296.464034][ T7637] __x64_sys_ioctl+0xb7/0x210 [ 296.464051][ T7637] do_syscall_64+0x10b/0xf80 [ 296.464068][ T7637] ? clear_bhb_loop+0x40/0x90 [ 296.464088][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.464104][ T7637] RIP: 0033:0x7fa832d9cdd9 [ 296.464118][ T7637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.464133][ T7637] RSP: 002b:00007fa833c99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.464149][ T7637] RAX: ffffffffffffffda RBX: 00007fa833016090 RCX: 00007fa832d9cdd9 [ 296.464159][ T7637] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000004 [ 296.464168][ T7637] RBP: 00007fa833c99090 R08: 0000000000000000 R09: 0000000000000000 [ 296.464177][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.464186][ T7637] R13: 00007fa833016128 R14: 00007fa833016090 R15: 00007fffb2ae39e8 [ 296.464208][ T7637] [ 296.464215][ T7637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.920286][ T29] audit: type=1400 audit(1777150310.276:483): avc: denied { accept } for pid=7638 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 296.955269][ T7348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.977635][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 297.074783][ T7639] bond0: entered promiscuous mode [ 297.095120][ T7639] bond_slave_0: entered promiscuous mode [ 297.113616][ T7639] bond_slave_1: entered promiscuous mode [ 297.251919][ T7639] batadv_slave_0: entered promiscuous mode [ 297.331856][ T7648] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 298.522795][ T7639] batadv_slave_0: left promiscuous mode [ 298.675404][ T7653] overlayfs: failed to resolve './file0': -2 [ 299.268062][ T5723] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 299.448264][ T5723] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.463241][ T5723] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 299.473985][ T5723] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.483467][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.503192][ T7665] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 299.514918][ T5723] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.524467][ T7639] bond0: left promiscuous mode [ 299.541886][ T7639] bond_slave_0: left promiscuous mode [ 299.563558][ T7639] bond_slave_1: left promiscuous mode [ 299.826430][ T7348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.905109][ T7348] team0: Port device team_slave_0 added [ 299.914677][ T7348] team0: Port device team_slave_1 added [ 300.134743][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.178152][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.306871][ T7348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.826640][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.834676][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.863340][ T7348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.098549][ T7348] hsr_slave_0: entered promiscuous mode [ 301.200807][ T7348] hsr_slave_1: entered promiscuous mode [ 302.005729][ T802] usb 5-1: USB disconnect, device number 6 [ 302.829500][ T29] audit: type=1400 audit(1777150316.186:484): avc: denied { setopt } for pid=7710 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.829842][ T7711] FAULT_INJECTION: forcing a failure. [ 302.829842][ T7711] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 302.892588][ T7348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.948156][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz.1.408 Not tainted syzkaller #0 PREEMPT(full) [ 302.948181][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.948191][ T7711] Call Trace: [ 302.948197][ T7711] [ 302.948204][ T7711] dump_stack_lvl+0x100/0x190 [ 302.948229][ T7711] should_fail_ex.cold+0x5/0xa [ 302.948254][ T7711] _copy_from_user+0x2e/0xd0 [ 302.948280][ T7711] copy_msghdr_from_user+0x9f/0x4f0 [ 302.948302][ T7711] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 302.948327][ T7711] ? __pfx__kstrtoull+0x10/0x10 [ 302.948349][ T7711] ___sys_sendmsg+0x106/0x1e0 [ 302.948370][ T7711] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.948398][ T7711] ? find_held_lock+0x2b/0x80 [ 302.948431][ T7711] __sys_sendmmsg+0x205/0x430 [ 302.948459][ T7711] ? __pfx___sys_sendmmsg+0x10/0x10 [ 302.948491][ T7711] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.948522][ T7711] ? fput+0x79/0x100 [ 302.948545][ T7711] ? ksys_write+0x1ac/0x250 [ 302.948562][ T7711] ? __pfx_ksys_write+0x10/0x10 [ 302.948585][ T7711] __x64_sys_sendmmsg+0x9c/0x100 [ 302.948610][ T7711] ? lockdep_hardirqs_on+0x78/0x100 [ 302.948635][ T7711] do_syscall_64+0x10b/0xf80 [ 302.948653][ T7711] ? clear_bhb_loop+0x40/0x90 [ 302.948675][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.948692][ T7711] RIP: 0033:0x7fa832d9cdd9 [ 302.948707][ T7711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.948723][ T7711] RSP: 002b:00007fa833cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.948740][ T7711] RAX: ffffffffffffffda RBX: 00007fa833015fa0 RCX: 00007fa832d9cdd9 [ 302.948751][ T7711] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000c [ 302.948761][ T7711] RBP: 00007fa833cba090 R08: 0000000000000000 R09: 0000000000000000 [ 302.948772][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.948782][ T7711] R13: 00007fa833016038 R14: 00007fa833015fa0 R15: 00007fffb2ae39e8 [ 302.948805][ T7711] [ 302.957311][ T7348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.287641][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.409'. [ 303.309722][ T7348] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.353863][ T7348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.381918][ T7348] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.410038][ T7348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.228908][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 305.210553][ T7348] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.317856][ T7348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.555161][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.377310][ T7348] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.415810][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.422975][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.497650][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.504801][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.791316][ T802] libceph: connect (1)[c::]:6789 error -101 [ 308.009976][ T802] libceph: mon0 (1)[c::]:6789 connect error [ 308.318898][ T7785] ceph: No mds server is up or the cluster is laggy [ 308.348876][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 308.400936][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 309.309496][ T29] audit: type=1400 audit(1777150322.666:485): avc: denied { write } for pid=7794 comm="syz.1.421" name="vlan0" dev="proc" ino=4026533845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 309.346003][ T29] audit: type=1400 audit(1777150322.676:486): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.373714][ T29] audit: type=1400 audit(1777150322.676:487): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.399546][ T29] audit: type=1400 audit(1777150322.676:488): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.470383][ T29] audit: type=1400 audit(1777150322.826:489): avc: denied { name_connect } for pid=7802 comm="syz.4.423" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 309.720458][ T29] audit: type=1400 audit(1777150323.066:490): avc: denied { create } for pid=7811 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 310.089239][ T7824] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 310.173660][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 311.575362][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.669521][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.675865][ T29] audit: type=1400 audit(1777150324.066:491): avc: denied { read } for pid=7834 comm="syz.4.429" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 311.711653][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 311.915852][ T29] audit: type=1400 audit(1777150324.066:492): avc: denied { open } for pid=7834 comm="syz.4.429" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 312.479834][ T29] audit: type=1400 audit(1777150325.836:493): avc: denied { nlmsg_read } for pid=7828 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.824607][ T7866] netlink: 56 bytes leftover after parsing attributes in process `syz.3.430'. [ 312.867145][ T29] audit: type=1400 audit(1777150326.196:494): avc: denied { map } for pid=7837 comm="syz.3.430" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.259208][ T7348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.709685][ T7348] veth0_vlan: entered promiscuous mode [ 313.740670][ T7348] veth1_vlan: entered promiscuous mode [ 313.786300][ T7348] veth0_macvtap: entered promiscuous mode [ 313.804426][ T7348] veth1_macvtap: entered promiscuous mode [ 313.838162][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.894215][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.926323][ T5840] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.944796][ T5840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.983487][ T5840] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.013796][ T5840] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.383524][ T7889] faux_driver vgem: [drm] Unknown color mode 65545; guessing buffer size. [ 314.428959][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 314.428975][ T29] audit: type=1400 audit(1777150327.786:501): avc: denied { map } for pid=7888 comm="syz.0.436" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 314.483489][ T7889] kvm: user requested TSC rate below hardware speed [ 314.550501][ T29] audit: type=1400 audit(1777150327.816:502): avc: denied { execute } for pid=7888 comm="syz.0.436" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 314.674682][ T6194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.712724][ T6194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.844822][ T5840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.871445][ T5840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.901206][ T29] audit: type=1400 audit(1777150328.256:503): avc: denied { write } for pid=7896 comm="syz.3.439" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 314.926064][ T7897] random: crng reseeded on system resumption [ 314.994941][ T29] audit: type=1400 audit(1777150328.256:504): avc: denied { mounton } for pid=7348 comm="syz-executor" path="/root/syzkaller.YLUQCY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 315.098402][ T29] audit: type=1400 audit(1777150328.256:505): avc: denied { unmount } for pid=7348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 315.175527][ T29] audit: type=1400 audit(1777150328.276:506): avc: denied { open } for pid=7896 comm="syz.3.439" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 315.323727][ T29] audit: type=1400 audit(1777150328.316:507): avc: denied { create } for pid=7896 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.442737][ T29] audit: type=1400 audit(1777150329.756:508): avc: denied { create } for pid=7903 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 317.388476][ T29] audit: type=1400 audit(1777150330.746:509): avc: denied { ioctl } for pid=7919 comm="syz.3.444" path="socket:[18363]" dev="sockfs" ino=18363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 317.426522][ T7921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.444'. [ 317.475044][ T29] audit: type=1400 audit(1777150330.766:510): avc: denied { read } for pid=7918 comm="syz.5.443" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 317.492128][ T7927] vivid-000: disconnect [ 317.566106][ T7918] vivid-000: reconnect [ 317.643536][ T7922] syz.0.442 (7922) used greatest stack depth: 19720 bytes left [ 319.581862][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 319.581878][ T29] audit: type=1400 audit(1777150332.936:514): avc: denied { getopt } for pid=7952 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.693664][ T5342] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 319.893527][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.718550][ T29] audit: type=1400 audit(1777150333.186:515): avc: denied { map } for pid=7953 comm="syz.0.455" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 320.757381][ T29] audit: type=1400 audit(1777150333.186:516): avc: denied { read write } for pid=7953 comm="syz.0.455" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 321.018265][ T5342] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.036714][ T29] audit: type=1400 audit(1777150334.376:517): avc: denied { accept } for pid=7942 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.057184][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.111368][ T5342] usb 2-1: config 0 descriptor?? [ 322.436037][ T5342] usbhid 2-1:0.0: can't add hid device: -71 [ 322.765387][ T5342] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 322.812471][ T5342] usb 2-1: USB disconnect, device number 5 [ 322.894220][ T29] audit: type=1400 audit(1777150336.246:518): avc: denied { getopt } for pid=7983 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.262642][ T7984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.317065][ T5793] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 323.358003][ T29] audit: type=1400 audit(1777150336.716:519): avc: denied { write } for pid=7990 comm="syz.1.461" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 323.439106][ T7992] vlan0: entered allmulticast mode [ 323.454726][ T7992] bond0: entered allmulticast mode [ 323.475996][ T7992] bond_slave_0: entered allmulticast mode [ 323.505369][ T7992] bond_slave_1: entered allmulticast mode [ 323.517390][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 323.543739][ T5607] Bluetooth: hci0: Unknown advertising packet type: 0x3c [ 323.543782][ T5607] Bluetooth: hci0: adv larger than maximum supported [ 323.552820][ T5607] Bluetooth: hci0: Malformed LE Event: 0x0d [ 323.553016][ T5793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 323.607420][ T7984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.621796][ T5793] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 323.644110][ T5793] usb 4-1: can't read configurations, error -71 [ 323.661268][ T29] audit: type=1400 audit(1777150337.006:520): avc: denied { map } for pid=7990 comm="syz.1.461" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 323.803950][ T7984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.920648][ T7984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.171668][ T29] audit: type=1400 audit(1777150337.516:521): avc: denied { getopt } for pid=7999 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.119784][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.226824][ T6194] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.275426][ T6194] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.303597][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.791352][ T8017] warning: `syz.1.464' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 326.162806][ T8017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.512929][ T29] audit: type=1400 audit(1777150339.856:522): avc: denied { unlink } for pid=8033 comm="syz.5.468" name="#1" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 326.565040][ T8034] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 327.173583][ T29] audit: type=1400 audit(1777150339.886:523): avc: denied { getattr } for pid=8033 comm="syz.5.468" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 327.370609][ T29] audit: type=1400 audit(1777150340.166:524): avc: denied { mount } for pid=8033 comm="syz.5.468" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 327.615945][ T29] audit: type=1400 audit(1777150340.966:525): avc: denied { unmount } for pid=7348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 329.068705][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.472'. [ 329.334381][ T8060] netlink: 812 bytes leftover after parsing attributes in process `syz.3.472'. [ 329.657968][ T8052] syz.5.470 (8052): drop_caches: 2 [ 330.642820][ T29] audit: type=1400 audit(1777150343.996:526): avc: denied { bind } for pid=8072 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 330.719531][ T29] audit: type=1400 audit(1777150344.076:527): avc: denied { getopt } for pid=8069 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 331.045034][ T29] audit: type=1400 audit(1777150344.396:528): avc: denied { connect } for pid=8089 comm="syz.4.478" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.126098][ T8091] raw_sendmsg: syz.1.477 forgot to set AF_INET. Fix it! [ 331.364224][ T8094] vlan0: left allmulticast mode [ 331.369279][ T8094] bond0: left allmulticast mode [ 331.374148][ T8094] bond_slave_0: left allmulticast mode [ 331.379793][ T8094] bond_slave_1: left allmulticast mode [ 331.487525][ T8091] ceph: No mds server is up or the cluster is laggy [ 331.494378][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 331.566677][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 331.676395][ T29] audit: type=1400 audit(1777150344.396:529): avc: denied { setopt } for pid=8089 comm="syz.4.478" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.708145][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 331.909440][ T29] audit: type=1400 audit(1777150344.396:530): avc: denied { write } for pid=8089 comm="syz.4.478" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.042459][ T8087] could not allocate digest TFM handle md5 [ 332.135704][ T8083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 332.145359][ T8083] block device autoloading is deprecated and will be removed. [ 332.251749][ T29] audit: type=1326 audit(1777150345.606:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 332.372186][ T29] audit: type=1326 audit(1777150345.706:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 332.418328][ T29] audit: type=1326 audit(1777150345.716:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 332.505625][ T8114] pim6reg: entered allmulticast mode [ 332.518340][ T29] audit: type=1326 audit(1777150345.716:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 332.665604][ T29] audit: type=1326 audit(1777150345.796:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89d475d60e code=0x7ffc0000 [ 332.751336][ T8114] team0: entered allmulticast mode [ 332.772007][ T8114] team_slave_0: entered allmulticast mode [ 332.793092][ T29] audit: type=1326 audit(1777150345.796:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 332.827784][ T8114] team_slave_1: entered allmulticast mode [ 332.843387][ T8116] team0: left allmulticast mode [ 332.857512][ T8116] team_slave_0: left allmulticast mode [ 332.872389][ T29] audit: type=1326 audit(1777150345.796:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 332.876542][ T8116] team_slave_1: left allmulticast mode [ 332.951258][ T29] audit: type=1326 audit(1777150345.806:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8103 comm="syz.4.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f89d479cdd9 code=0x7ffc0000 [ 333.066705][ T8116] pim6reg: left allmulticast mode [ 333.827186][ T8132] could not allocate digest TFM handle md5 [ 334.786387][ T8153] Mount JFS Failure: -5 [ 334.790739][ T8153] jfs_mount failed w/return code = -5 [ 335.672465][ T8154] Illegal XDP return value 4294967294 on prog (id 32) dev N/A, expect packet loss! [ 335.781093][ T8155] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.490'. [ 336.788044][ T8166] syz.3.496 uses obsolete (PF_INET,SOCK_PACKET) [ 336.798510][ T8166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.496'. [ 336.807415][ T8166] nbd: must specify a size in bytes for the device [ 336.956571][ T5723] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 337.018421][ T802] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 337.031797][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 337.031811][ T29] audit: type=1400 audit(1777150350.386:553): avc: denied { bind } for pid=8174 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.061474][ T29] audit: type=1400 audit(1777150350.416:554): avc: denied { node_bind } for pid=8174 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 337.108373][ T5723] usb 1-1: Using ep0 maxpacket: 16 [ 337.121353][ T5723] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 337.140282][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.178097][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.286654][ T802] usb 5-1: Using ep0 maxpacket: 8 [ 339.128074][ T5723] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 339.134392][ T802] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 339.141430][ T5723] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 339.141456][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.144696][ T5723] usb 1-1: config 0 descriptor?? [ 339.318575][ T802] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.347511][ T802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.384450][ T802] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 339.395948][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.501'. [ 339.437172][ T5723] usbhid 1-1:0.0: can't add hid device: -71 [ 339.443876][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 339.457341][ T5723] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 339.473623][ T5723] usb 1-1: USB disconnect, device number 6 [ 339.518147][ T802] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.579734][ T802] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.624074][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.658211][ T29] audit: type=1400 audit(1777150353.006:555): avc: denied { append } for pid=8187 comm="syz.3.503" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.740050][ T8193] block nbd0: shutting down sockets [ 339.751337][ T802] usb 5-1: can't set config #16, error -71 [ 339.763875][ T8188] loop4: detected capacity change from 0 to 7 [ 339.780976][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.790711][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.799880][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.819184][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.828324][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.868300][ T802] usb 5-1: USB disconnect, device number 7 [ 339.897919][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.924367][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 339.960749][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 340.293029][ T8188] trusted_key: encrypted_key: insufficient parameters specified [ 340.346583][ T802] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 340.536294][ T8198] could not allocate digest TFM handle md5 [ 340.563662][ T802] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.616787][ T802] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 340.651767][ T8173] syz.5.498 (8173): drop_caches: 2 [ 340.670012][ T802] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 340.722795][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.765286][ T8195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 340.788921][ T802] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.228863][ T8209] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 343.387473][ T29] audit: type=1400 audit(1777150356.596:556): avc: denied { create } for pid=8208 comm="syz.1.510" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 343.426081][ T802] usb 5-1: USB disconnect, device number 8 [ 344.667290][ T29] audit: type=1400 audit(1777150356.596:557): avc: denied { mounton } for pid=8208 comm="syz.1.510" path="/104/file0" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 344.708205][ T29] audit: type=1400 audit(1777150356.606:558): avc: denied { write } for pid=8210 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 345.013527][ T8216] [U] J"—E:ÀÆ" [ 345.788973][ T8222] qrtr: Invalid version 255 [ 345.808285][ T29] audit: type=1400 audit(1777150359.076:559): avc: denied { setopt } for pid=8221 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 345.866682][ T29] audit: type=1400 audit(1777150359.106:560): avc: denied { read } for pid=8221 comm="syz.0.512" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 345.918743][ T8234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.513'. [ 345.934139][ T29] audit: type=1400 audit(1777150359.136:561): avc: denied { write } for pid=8221 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 345.961557][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.513'. [ 346.084382][ T29] audit: type=1400 audit(1777150359.436:562): avc: denied { unlink } for pid=5608 comm="syz-executor" name="file0" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 346.431117][ T29] audit: type=1400 audit(1777150359.786:563): avc: denied { setopt } for pid=8241 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 346.793257][ T8266] 9pnet_virtio: no channels available for device syz [ 347.505905][ T29] audit: type=1400 audit(1777150360.856:564): avc: denied { mounton } for pid=8278 comm="syz.4.532" path="/proc/446/task" dev="proc" ino=19107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 347.967272][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 348.359653][ T8288] could not allocate digest TFM handle md5 [ 348.521201][ T8298] /dev/nullb0: Can't open blockdev [ 348.566782][ T29] audit: type=1400 audit(1777150361.866:565): avc: denied { mounton } for pid=8296 comm="syz.0.537" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 348.607796][ T8298] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 349.729035][ T8306] 9p: Bad value for 'wfdno' [ 349.788020][ T5723] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 349.938863][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.961857][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.996818][ T5723] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 350.020339][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.051061][ T5723] usb 4-1: config 0 descriptor?? [ 350.470086][ T5723] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 350.519877][ T29] audit: type=1400 audit(1777150363.876:566): avc: denied { listen } for pid=8315 comm="syz.0.545" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.520147][ T8316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8316 comm=syz.0.545 [ 350.552100][ T5723] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input5 [ 350.857382][ T5723] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 350.932000][ T5723] usb 4-1: USB disconnect, device number 10 [ 351.091239][ T8325] fido_id[8325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 351.196288][ T8329] ======================================================= [ 351.196288][ T8329] WARNING: The mand mount option has been deprecated and [ 351.196288][ T8329] and is ignored by this kernel. Remove the mand [ 351.196288][ T8329] option from the mount to silence this warning. [ 351.196288][ T8329] ======================================================= [ 351.342998][ T29] audit: type=1326 audit(1777150364.546:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 351.500561][ T29] audit: type=1326 audit(1777150364.546:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 351.625246][ T29] audit: type=1326 audit(1777150364.546:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 351.713286][ T29] audit: type=1326 audit(1777150364.586:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 351.900809][ T29] audit: type=1326 audit(1777150364.586:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 351.982553][ T29] audit: type=1326 audit(1777150364.606:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb6c15d60e code=0x7ffc0000 [ 352.018997][ T8346] Mount JFS Failure: -5 [ 352.049206][ T8346] jfs_mount failed w/return code = -5 [ 352.067683][ T29] audit: type=1326 audit(1777150364.606:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 352.126520][ T29] audit: type=1326 audit(1777150364.606:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8326 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6c19cdd9 code=0x7ffc0000 [ 352.576443][ T5607] block nbd3: Receive control failed (result -32) [ 352.577454][ T8336] block nbd3: shutting down sockets [ 352.696145][ T8353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.556'. [ 352.733679][ T8353] netlink: 43 bytes leftover after parsing attributes in process `syz.1.556'. [ 352.765275][ T8353] netlink: 'syz.1.556': attribute type 6 has an invalid length. [ 352.792793][ T8353] netlink: 'syz.1.556': attribute type 5 has an invalid length. [ 352.824798][ T8353] netlink: 43 bytes leftover after parsing attributes in process `syz.1.556'. [ 353.057164][ T8357] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 353.072700][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.558'. [ 353.084322][ T8357] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 353.096309][ T8357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.277686][ T5780] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 354.600648][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 354.600664][ T29] audit: type=1400 audit(1777150367.956:591): avc: denied { read } for pid=8375 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.628718][ T5780] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.639938][ T5780] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 354.651623][ T5780] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.661957][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.714477][ T8365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 354.761850][ T5780] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.047298][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 355.187863][ T5780] usb 2-1: USB disconnect, device number 6 [ 355.297182][ T8380] block nbd5: shutting down sockets [ 355.481554][ T8384] 9p: Bad value for 'wfdno' [ 355.638822][ T29] audit: type=1400 audit(1777150368.996:592): avc: denied { setopt } for pid=8386 comm="syz.5.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.073402][ T8393] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 356.424090][ T8392] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 356.430765][ T8392] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 356.440063][ T8392] vhci_hcd vhci_hcd.0: Device attached [ 356.751172][ T8394] vhci_hcd: connection closed [ 356.752381][ T13] vhci_hcd vhci_hcd.1: stop threads [ 356.762895][ T13] vhci_hcd vhci_hcd.1: release socket [ 356.770344][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 356.799981][ T5710] usb 36-1: enqueue for inactive port 0 [ 358.107531][ T5710] usb usb36-port1: attempt power cycle [ 358.484910][ T5607] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 358.680666][ T29] audit: type=1400 audit(1777150372.036:593): avc: denied { write } for pid=8414 comm="syz.3.577" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 358.708984][ T5710] usb usb36-port1: unable to enumerate USB device [ 358.971765][ T29] audit: type=1400 audit(1777150372.326:594): avc: denied { ioctl } for pid=8421 comm="syz.4.580" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.025603][ T8423] random: crng reseeded on system resumption [ 359.044727][ T29] audit: type=1400 audit(1777150372.326:595): avc: denied { set_context_mgr } for pid=8421 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 359.065635][ T29] audit: type=1400 audit(1777150372.376:596): avc: denied { map } for pid=8421 comm="syz.4.580" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 360.043923][ T29] audit: type=1400 audit(1777150372.376:597): avc: denied { call } for pid=8421 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 360.400319][ T29] audit: type=1400 audit(1777150372.626:598): avc: denied { ioctl } for pid=8419 comm="syz.5.579" path="socket:[20508]" dev="sockfs" ino=20508 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.330219][ T29] audit: type=1400 audit(1777150373.806:599): avc: denied { ioctl } for pid=8422 comm="syz.1.581" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 361.491998][ T29] audit: type=1400 audit(1777150374.006:600): avc: denied { append } for pid=8439 comm="syz.5.585" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 361.691538][ T8461] comedi comedi1: pcl812: I/O base address or length out of range [ 361.876709][ T29] audit: type=1400 audit(1777150374.856:601): avc: denied { execute } for pid=8426 comm="syz.0.582" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 362.480433][ T29] audit: type=1400 audit(1777150374.986:602): avc: denied { read } for pid=8454 comm="syz.1.587" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 362.722179][ T29] audit: type=1400 audit(1777150374.986:603): avc: denied { open } for pid=8454 comm="syz.1.587" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 362.813358][ T29] audit: type=1400 audit(1777150374.986:604): avc: denied { ioctl } for pid=8454 comm="syz.1.587" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 362.853354][ T8472] netlink: 'syz.3.594': attribute type 1 has an invalid length. [ 362.898814][ T8472] netlink: 224 bytes leftover after parsing attributes in process `syz.3.594'. [ 362.981295][ T29] audit: type=1400 audit(1777150376.336:605): avc: denied { create } for pid=8474 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 363.062940][ T8472] NCSI netlink: No device for ifindex 2164177684 [ 363.158475][ T29] audit: type=1400 audit(1777150376.376:606): avc: denied { bind } for pid=8474 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 363.489626][ T8479] netlink: 'syz.3.597': attribute type 39 has an invalid length. [ 364.427048][ T8468] Set syz1 is full, maxelem 6117 reached [ 365.997672][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.608'. [ 366.342585][ T8522] Mount JFS Failure: -5 [ 366.378569][ T8522] jfs_mount failed w/return code = -5 [ 366.833243][ T8524] ceph: No mds server is up or the cluster is laggy [ 366.840383][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 366.853500][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 367.012125][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 367.012141][ T29] audit: type=1400 audit(1777150380.366:614): avc: denied { write } for pid=8530 comm="syz.1.614" path="socket:[20883]" dev="sockfs" ino=20883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 367.045244][ T8531] Bluetooth: MGMT ver 1.23 [ 367.316546][ T5793] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 367.496631][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 367.504519][ T5793] usb 2-1: config 0 has no interfaces? [ 367.514606][ T5793] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 367.524900][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.534592][ T5793] usb 2-1: Product: syz [ 367.540875][ T5793] usb 2-1: Manufacturer: syz [ 367.546560][ T5793] usb 2-1: SerialNumber: syz [ 367.554184][ T5793] usb 2-1: config 0 descriptor?? [ 367.763720][ T29] audit: type=1400 audit(1777150381.116:615): avc: denied { write } for pid=8530 comm="syz.1.614" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 367.827016][ T29] audit: type=1400 audit(1777150381.116:616): avc: denied { open } for pid=8530 comm="syz.1.614" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 367.873894][ T29] audit: type=1400 audit(1777150381.116:617): avc: denied { sqpoll } for pid=8530 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 367.997412][ T5793] usb 2-1: USB disconnect, device number 7 [ 368.008176][ T29] audit: type=1400 audit(1777150381.366:618): avc: denied { mounton } for pid=8547 comm="syz.0.619" path="/128/file0" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 368.032944][ T9] kernel write not supported for file bpf-map (pid: 9 comm: kworker/0:0) [ 368.103245][ T8550] 9pnet_virtio: no channels available for device syz [ 368.266617][ T8542] bridge1: entered promiscuous mode [ 368.326014][ T8542] bridge1: entered allmulticast mode [ 368.396619][ T5607] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 369.319145][ T8572] netlink: 'syz.0.628': attribute type 39 has an invalid length. [ 370.188989][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.631'. [ 370.234039][ T29] audit: type=1400 audit(1777150383.586:619): avc: denied { read } for pid=8581 comm="syz.0.632" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 370.366989][ T5607] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 370.465127][ T29] audit: type=1400 audit(1777150383.776:620): avc: denied { ioctl } for pid=8588 comm="syz.0.635" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 371.954703][ T5793] kernel write not supported for file /dsp (pid: 5793 comm: kworker/0:7) [ 371.974577][ T29] audit: type=1400 audit(1777150385.326:621): avc: denied { create } for pid=8600 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 372.752252][ T8609] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 372.762366][ T8609] block device autoloading is deprecated and will be removed. [ 372.776808][ T8608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 372.786290][ T8608] block device autoloading is deprecated and will be removed. [ 373.008322][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.014683][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.310224][ T29] audit: type=1400 audit(1777150385.356:622): avc: denied { ioctl } for pid=8600 comm="syz.4.641" path="socket:[21179]" dev="sockfs" ino=21179 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.337355][ T29] audit: type=1400 audit(1777150385.366:623): avc: denied { bind } for pid=8600 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.356726][ T29] audit: type=1400 audit(1777150385.366:624): avc: denied { connect } for pid=8600 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.379348][ T29] audit: type=1400 audit(1777150385.366:625): avc: denied { write } for pid=8600 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.418122][ T29] audit: type=1400 audit(1777150385.456:626): avc: denied { read } for pid=8600 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.449879][ T29] audit: type=1400 audit(1777150386.036:627): avc: denied { read } for pid=8603 comm="syz.5.639" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 373.535968][ T29] audit: type=1400 audit(1777150386.036:628): avc: denied { open } for pid=8603 comm="syz.5.639" path="/33/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 373.758828][ T5607] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 373.978712][ T29] audit: type=1326 audit(1777150387.326:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 374.141212][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 374.235089][ T29] audit: type=1326 audit(1777150387.326:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 374.373437][ T29] audit: type=1326 audit(1777150387.376:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8627 comm="syz.3.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fcbfb19cdd9 code=0x7ffc0000 [ 374.498717][ T8633] could not allocate digest TFM handle md5 [ 374.726860][ T5696] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 375.276040][ T5696] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 375.299575][ T5696] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.205662][ T5696] usb 4-1: config 0 has no interfaces? [ 376.214011][ T5696] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 376.223109][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.234866][ T5696] usb 4-1: config 0 descriptor?? [ 377.514337][ T8698] could not allocate digest TFM handle md5 [ 377.559429][ T9] usb 4-1: USB disconnect, device number 11 [ 377.863057][ T8715] 9p: Bad value for 'rfdno' [ 378.155797][ T5733] kernel write not supported for file /comedi4 (pid: 5733 comm: kworker/1:7) [ 378.739866][ T8759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 379.308298][ T8777] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 379.456629][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 380.870406][ T8777] [U] J"—E:ÀÆ" [ 382.075242][ T8805] 9pnet_virtio: no channels available for device syz [ 383.120034][ T8813] loop4: detected capacity change from 0 to 7 [ 383.339226][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 383.537774][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 383.694795][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 383.764747][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 383.803728][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 383.884997][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 383.885354][ T29] audit: type=1400 audit(1777150397.236:658): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 385.014394][ T29] audit: type=1400 audit(1777150398.086:659): avc: denied { write } for pid=8825 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.586377][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 385.986685][ T8823] syz.1.712 (8823): drop_caches: 2 [ 386.257947][ T8837] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 386.678800][ T8856] IPv6: addrconf: prefix option has invalid lifetime [ 386.726524][ T5793] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 386.896621][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 386.911010][ T5793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.921330][ T5793] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.936169][ T5793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 386.942970][ T5793] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 386.977931][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.012586][ T5793] usb 1-1: config 0 descriptor?? [ 387.045496][ T5793] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 387.187064][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 388.477028][ T29] audit: type=1400 audit(1777150400.956:660): avc: denied { bind } for pid=8865 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 388.930774][ T8862] could not allocate digest TFM handle md5 [ 389.050939][ T8837] [U] J"—E:ÀÆ" [ 390.185292][ T5793] usb 1-1: USB disconnect, device number 7 [ 390.461367][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.739'. [ 390.498064][ T8902] openvswitch: netlink: Flow key attr not present in new flow. [ 390.525268][ T29] audit: type=1400 audit(1777150403.876:661): avc: denied { connect } for pid=8904 comm="syz.4.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 390.564360][ T8889] syz.1.732 (8889): drop_caches: 2 [ 390.678847][ T8910] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 390.936732][ T29] audit: type=1400 audit(1777150404.296:662): avc: denied { append } for pid=8917 comm="syz.1.744" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 391.012295][ T8919] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 391.495581][ T8910] [U] J"—E:ÀÆ" [ 391.689234][ T8930] loop4: detected capacity change from 0 to 7 [ 391.840462][ T8930] trusted_key: encrypted_key: insufficient parameters specified [ 391.956649][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 392.056792][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 392.141029][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 392.221172][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 392.306514][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 394.801557][ T8964] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 401.085577][ T9016] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 401.252540][ T9029] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 402.593137][ T29] audit: type=1400 audit(1777150415.936:663): avc: denied { mount } for pid=9036 comm="syz.4.789" name="/" dev="pstore" ino=3990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 402.688930][ T9052] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.792'. [ 403.409309][ T5793] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 403.503668][ T29] audit: type=1400 audit(1777150416.856:664): avc: denied { read } for pid=9061 comm="syz.0.795" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 403.578127][ T5793] usb 5-1: Using ep0 maxpacket: 16 [ 403.594360][ T5793] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 403.619152][ T5793] usb 5-1: config 0 has no interface number 0 [ 403.641830][ T5793] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 403.677509][ T5793] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 403.709181][ T5793] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 403.740403][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 403.765351][ T5793] usb 5-1: Product: syz [ 403.781647][ T5793] usb 5-1: SerialNumber: syz [ 403.801528][ T5793] usb 5-1: config 0 descriptor?? [ 403.831619][ T5793] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 404.008928][ T5793] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 404.025334][ T9074] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.796'. [ 404.420257][ T9062] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.547073][ T9062] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 404.745916][ T29] audit: type=1400 audit(1777150418.076:665): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=3094 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.872069][ T9062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.882718][ T29] audit: type=1400 audit(1777150418.076:666): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3094 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 404.886680][ T9062] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 405.074958][ T29] audit: type=1400 audit(1777150418.076:667): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3094 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 405.676639][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 406.259206][ T9062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.293897][ T9062] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 406.323908][ T9062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.339359][ T9062] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 406.362557][ T9062] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 406.376893][ T9062] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 406.657651][ T5793] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 407.659520][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 407.687417][ T5793] usb 2-1: Using ep0 maxpacket: 16 [ 407.981340][ T4928] Bluetooth: hci0: command 0x0406 tx timeout [ 408.251054][ T4928] Bluetooth: hci2: command 0x0406 tx timeout [ 408.366725][ T4928] Bluetooth: hci5: command 0x0406 tx timeout [ 408.372856][ T4928] Bluetooth: hci3: command 0x0406 tx timeout [ 408.692516][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 408.712365][ T5793] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 408.725515][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.734122][ T5793] usb 2-1: Product: syz [ 408.739441][ T5793] usb 2-1: Manufacturer: syz [ 408.849596][ T5793] usb 2-1: SerialNumber: syz [ 408.863044][ T5793] usb 2-1: config 0 descriptor?? [ 408.878844][ T5793] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 408.889324][ T5793] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 409.175150][ T29] audit: type=1400 audit(1777150422.526:668): avc: denied { module_request } for pid=9104 comm="syz.3.809" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 409.486503][ T5793] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 409.759683][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 409.935660][ T9119] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 410.296292][ T9118] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 410.302823][ T9118] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 410.310954][ T9118] vhci_hcd vhci_hcd.0: Device attached [ 410.318320][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 410.392003][ T5793] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 410.436381][ T5793] em28xx 2-1:0.0: board has no eeprom [ 410.446615][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 410.449244][ T4928] Bluetooth: hci5: command 0x0406 tx timeout [ 410.480025][ T9120] vhci_hcd: connection closed [ 410.482013][ T3390] vhci_hcd vhci_hcd.5: stop threads [ 410.492640][ T3390] vhci_hcd vhci_hcd.5: release socket [ 410.498610][ T3390] vhci_hcd vhci_hcd.5: disconnect device [ 410.816562][ T5793] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 410.852243][ T5793] em28xx 2-1:0.0: dvb set to bulk mode. [ 410.865018][ T5780] em28xx 2-1:0.0: Binding DVB extension [ 411.374083][ T9143] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.822'. [ 411.393965][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.403087][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.410922][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.419596][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.429029][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.436535][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.444539][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.452830][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.460415][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.468635][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.679328][ T5723] usb 5-1: USB disconnect, device number 9 [ 411.679396][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 412.036979][ T9090] em28xx 2-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 412.734873][ T5780] em28xx 2-1:0.0: Registering input extension [ 412.757111][ T5780] usb 2-1: USB disconnect, device number 8 [ 412.768098][ T5723] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 412.783568][ T5780] em28xx 2-1:0.0: Disconnecting em28xx [ 412.794114][ T29] audit: type=1400 audit(1777150426.146:669): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 412.829419][ T5780] em28xx 2-1:0.0: Closing input extension [ 412.957335][ T9154] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 412.994299][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 413.131545][ T9145] 9pnet_virtio: no channels available for device syz [ 413.804229][ T9162] netlink: 'syz.5.829': attribute type 1 has an invalid length. [ 413.877020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 414.043484][ T5780] em28xx 2-1:0.0: Freeing device [ 414.127603][ T9159] [U] J"—E:ÀÆ" [ 414.192625][ T9162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.250750][ T9165] vlan0: entered allmulticast mode [ 414.263007][ T9165] veth0_to_bond: entered allmulticast mode [ 414.323578][ T9171] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9171 comm=syz.4.831 [ 414.497996][ T9178] openvswitch: netlink: Flow actions attr not present in new flow. [ 414.999108][ T29] audit: type=1800 audit(1777150428.166:670): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.839" name="file1" dev="overlay" ino=426 res=0 errno=0 [ 415.915008][ T29] audit: type=1400 audit(1777150429.226:671): avc: denied { setattr } for pid=9187 comm="syz.4.838" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 417.408606][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'. [ 417.469526][ T29] audit: type=1400 audit(1777150430.806:672): avc: denied { getopt } for pid=9239 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 418.054089][ T4928] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 418.061600][ T9248] tipc: Started in network mode [ 418.077606][ T9248] tipc: Node identity 4, cluster identity 4711 [ 418.095870][ T9248] tipc: Node number set to 4 [ 418.154476][ T29] audit: type=1800 audit(1777150431.506:673): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.864" name="file1" dev="overlay" ino=910 res=0 errno=0 [ 418.438019][ T9263] netlink: 36 bytes leftover after parsing attributes in process `syz.4.868'. [ 418.684525][ T9271] syzkaller0: entered promiscuous mode [ 418.684548][ T9271] syzkaller0: entered allmulticast mode [ 418.764576][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 419.184833][ T9305] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.255073][ T9305] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.265470][ T5710] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 419.342322][ T9305] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.419808][ T9305] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.428406][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 419.444746][ T5710] usb 2-1: config 247 has an invalid interface number: 111 but max is 0 [ 419.453676][ T802] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 419.463389][ T5710] usb 2-1: config 247 has no interface number 0 [ 419.470057][ T5710] usb 2-1: config 247 interface 111 has no altsetting 0 [ 419.479624][ T5710] usb 2-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=ec.77 [ 419.491012][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.499719][ T5710] usb 2-1: Product: syz [ 419.504060][ T5710] usb 2-1: Manufacturer: syz [ 419.512074][ T5710] usb 2-1: SerialNumber: syz [ 419.550301][ T9314] openvswitch: netlink: Message has -2 unknown bytes. [ 419.561283][ T5840] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.594916][ T7384] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.651873][ T802] usb 6-1: Using ep0 maxpacket: 16 [ 419.706899][ T4928] Bluetooth: hci5: Unknown advertising packet type: 0x3c [ 419.706977][ T4928] Bluetooth: hci5: adv larger than maximum supported [ 419.719498][ T4928] Bluetooth: hci5: Malformed LE Event: 0x0d [ 419.819410][ T5840] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.836051][ T29] audit: type=1400 audit(1777150433.156:674): avc: denied { setopt } for pid=9297 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 420.027315][ T29] audit: type=1400 audit(1777150433.166:675): avc: denied { listen } for pid=9297 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 420.298477][ T29] audit: type=1400 audit(1777150433.526:676): avc: denied { read } for pid=9297 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 420.552039][ T3390] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.570624][ T29] audit: type=1400 audit(1777150433.916:677): avc: denied { setopt } for pid=9297 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.643990][ T802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 420.683656][ T802] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 420.711292][ T802] usb 6-1: can't read configurations, error -71 [ 420.774381][ T29] audit: type=1400 audit(1777150434.126:678): avc: denied { read } for pid=9331 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 420.830492][ T29] audit: type=1400 audit(1777150434.176:679): avc: denied { write } for pid=9331 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 420.880509][ T5710] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.985071][ T5710] snd-usb-audio 2-1:247.111: probe with driver snd-usb-audio failed with error -2 [ 421.008840][ T5710] usb 2-1: USB disconnect, device number 9 [ 421.908888][ T7667] udevd[7667]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:247.111/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.210544][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.900'. [ 422.593379][ T9365] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 423.206620][ T29] audit: type=1400 audit(1777150436.276:680): avc: denied { watch watch_reads } for pid=9369 comm="syz.4.905" path="pipe:[4548]" dev="pipefs" ino=4548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 426.877413][ T29] audit: type=1400 audit(1777150440.226:681): avc: denied { append } for pid=9419 comm="syz.3.920" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 426.903055][ T9411] syz.0.917 (9411): drop_caches: 2 [ 426.948215][ T29] audit: type=1400 audit(1777150440.226:682): avc: denied { ioctl } for pid=9419 comm="syz.3.920" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 427.095993][ T29] audit: type=1400 audit(1777150440.446:683): avc: denied { relabelfrom } for pid=9426 comm="syz.5.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 427.116898][ T9431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.926'. [ 428.026937][ T29] audit: type=1400 audit(1777150440.486:684): avc: denied { relabelto } for pid=9426 comm="syz.5.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 428.161417][ T29] audit: type=1400 audit(1777150441.516:685): avc: denied { write } for pid=9446 comm="syz.4.933" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 428.335600][ T9450] syz.3.932 (9450): drop_caches: 2 [ 431.439706][ T9490] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 431.446256][ T9490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 431.519451][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 431.522002][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 431.586252][ T9490] vhci_hcd vhci_hcd.0: Device attached [ 431.866602][ T5696] usb 34-1: SetAddress Request (2) to port 0 [ 431.901544][ T5696] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 432.372178][ T9491] vhci_hcd: connection reset by peer [ 432.380324][ T7384] vhci_hcd vhci_hcd.0: stop threads [ 432.386164][ T7384] vhci_hcd vhci_hcd.0: release socket [ 432.392461][ T7384] vhci_hcd vhci_hcd.0: disconnect device [ 434.467107][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.492156][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.821735][ T29] audit: type=1400 audit(1777150450.176:686): avc: denied { mount } for pid=9563 comm="syz.0.969" name="/" dev="ramfs" ino=25414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 436.881177][ T9571] binder: 9570:9571 ioctl c0306201 0 returned -14 [ 437.007281][ T5696] usb 34-1: device descriptor read/8, error -110 [ 437.376514][ T9589] vlan0: entered allmulticast mode [ 437.436620][ T9589] bond0: entered allmulticast mode [ 437.973581][ T5696] usb usb34-port1: attempt power cycle [ 438.050904][ T9589] bond_slave_0: entered allmulticast mode [ 438.093744][ T9589] bond_slave_1: entered allmulticast mode [ 438.440188][ T29] audit: type=1800 audit(1777150451.796:687): pid=9596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.981" name="file1" dev="overlay" ino=1150 res=0 errno=0 [ 438.707371][ T5696] usb usb34-port1: unable to enumerate USB device [ 440.062367][ T9614] 9p: Bad value for 'wfdno' [ 440.374527][ T9627] input: syz0 as /devices/virtual/input/input10 [ 441.299960][ T29] audit: type=1800 audit(1777150454.486:688): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.992" name="file1" dev="overlay" ino=1072 res=0 errno=0 [ 441.917747][ T9654] syzkaller0: entered promiscuous mode [ 441.917766][ T9654] syzkaller0: entered allmulticast mode [ 442.121316][ T9661] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1003'. [ 442.586540][ T29] audit: type=1800 audit(1777150455.886:689): pid=9668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1006" name="file1" dev="overlay" ino=1117 res=0 errno=0 [ 443.798439][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1008'. [ 443.818480][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1008'. [ 447.153180][ T9718] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 447.170064][ T9718] vlan2: entered allmulticast mode [ 447.175287][ T9718] veth0_to_bond: entered allmulticast mode [ 447.933038][ T29] audit: type=1400 audit(1777150460.846:690): avc: denied { write } for pid=9726 comm="syz.3.1032" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 447.962259][ T9733] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 448.237465][ T9742] 9p: Bad value for 'wfdno' [ 449.316849][ T5723] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 449.415134][ T9752] loop4: detected capacity change from 0 to 7 [ 449.489475][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.526018][ T5723] usb 4-1: config 0 has no interfaces? [ 449.591298][ T5723] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 449.612747][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.675214][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.709259][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.760529][ T5723] usb 4-1: Product: syz [ 449.801694][ T5723] usb 4-1: Manufacturer: syz [ 449.817856][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 449.866922][ T5723] usb 4-1: SerialNumber: syz [ 449.919269][ T7667] Buffer I/O error on dev loop4, logical block 0, async page read [ 450.118308][ T5723] usb 4-1: config 0 descriptor?? [ 450.636194][ T5723] usb 4-1: USB disconnect, device number 12 [ 450.697577][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1044'. [ 450.707985][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1044'. [ 450.737553][ T5696] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 450.998072][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.009605][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.019899][ T5696] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.034598][ T5696] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.044017][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.165551][ T29] audit: type=1326 audit(1777150464.436:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7999cdd9 code=0x7ffc0000 [ 451.311364][ T5696] usb 5-1: config 0 descriptor?? [ 451.353104][ T29] audit: type=1326 audit(1777150464.436:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7999cdd9 code=0x7ffc0000 [ 451.397444][ T29] audit: type=1326 audit(1777150464.446:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9c7999cdd9 code=0x7ffc0000 [ 451.451310][ T29] audit: type=1326 audit(1777150464.446:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7999cdd9 code=0x7ffc0000 [ 451.540225][ T29] audit: type=1326 audit(1777150464.446:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7999cdd9 code=0x7ffc0000 [ 451.564620][ T29] audit: type=1326 audit(1777150464.456:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c7995d60e code=0x7ffc0000 [ 451.649801][ T29] audit: type=1326 audit(1777150464.456:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7999cdd9 code=0x7ffc0000 [ 451.680777][ T29] audit: type=1326 audit(1777150464.456:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7999cdd9 code=0x7ffc0000 [ 451.732864][ T29] audit: type=1326 audit(1777150464.456:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c7999cdd9 code=0x7ffc0000 [ 451.838843][ T5696] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 452.795617][ T802] usb 5-1: USB disconnect, device number 10 [ 453.439590][ T9795] 9pnet_virtio: no channels available for device syz [ 455.008578][ T9812] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 456.812693][ T9835] binder: 9827:9835 ioctl 81e8943c 200000000c00 returned -22 [ 457.126119][ T5696] IPVS: starting estimator thread 0... [ 457.411735][ T9839] IPVS: using max 45 ests per chain, 108000 per kthread [ 457.429107][ T9832] nbd1: detected capacity change from 0 to 128 [ 457.666031][ T7667] [ 457.668396][ T7667] ====================================================== [ 457.675404][ T7667] WARNING: possible circular locking dependency detected [ 457.682409][ T7667] syzkaller #0 Tainted: G L [ 457.688372][ T7667] ------------------------------------------------------ [ 457.695373][ T7667] udevd/7667 is trying to acquire lock: [ 457.700900][ T7667] ffff88807bc04c68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 457.709946][ T7667] [ 457.709946][ T7667] but task is already holding lock: [ 457.717298][ T7667] ffff88803be00178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 457.725819][ T7667] [ 457.725819][ T7667] which lock already depends on the new lock. [ 457.725819][ T7667] [ 457.736209][ T7667] [ 457.736209][ T7667] the existing dependency chain (in reverse order) is: [ 457.745262][ T7667] [ 457.745262][ T7667] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 457.752465][ T7667] __mutex_lock+0x1a4/0x1b10 [ 457.757573][ T7667] nbd_queue_rq+0xba/0x1080 [ 457.762590][ T7667] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 457.768651][ T7667] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 457.775500][ T7667] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 457.781997][ T7667] blk_mq_run_hw_queue+0x23c/0x670 [ 457.787626][ T7667] blk_mq_dispatch_list+0x51d/0x1360 [ 457.793420][ T7667] blk_mq_flush_plug_list+0x130/0x600 [ 457.799301][ T7667] __blk_flush_plug+0x2c4/0x4b0 [ 457.804683][ T7667] __submit_bio+0x584/0x6c0 [ 457.809706][ T7667] submit_bio_noacct_nocheck+0x543/0xbf0 [ 457.815868][ T7667] submit_bio_noacct+0xd18/0x2000 [ 457.821433][ T7667] submit_bh_wbc+0x681/0x890 [ 457.826547][ T7667] block_read_full_folio+0x4c8/0x8e0 [ 457.832343][ T7667] filemap_read_folio+0xfc/0x3b0 [ 457.837798][ T7667] do_read_cache_folio+0x2d7/0x6b0 [ 457.843432][ T7667] read_part_sector+0xd1/0x370 [ 457.848712][ T7667] adfspart_check_ICS+0x91/0x7d0 [ 457.854171][ T7667] bdev_disk_changed+0x7a3/0x1250 [ 457.859718][ T7667] blkdev_get_whole+0x187/0x290 [ 457.865115][ T7667] bdev_open+0x2c7/0xe40 [ 457.869875][ T7667] blkdev_open+0x34e/0x4f0 [ 457.874802][ T7667] do_dentry_open+0x6d8/0x1660 [ 457.880078][ T7667] vfs_open+0x82/0x3f0 [ 457.884663][ T7667] path_openat+0x208c/0x31a0 [ 457.889772][ T7667] do_file_open+0x20e/0x430 [ 457.894790][ T7667] do_sys_openat2+0x10d/0x1e0 [ 457.899989][ T7667] __x64_sys_openat+0x12d/0x210 [ 457.905365][ T7667] do_syscall_64+0x10b/0xf80 [ 457.910472][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.916882][ T7667] [ 457.916882][ T7667] -> #5 (set->srcu){.+.+}-{0:0}: [ 457.923999][ T7667] __synchronize_srcu+0xa2/0x300 [ 457.929453][ T7667] blk_mq_quiesce_queue+0x149/0x1c0 [ 457.935168][ T7667] elevator_switch+0x17b/0x7e0 [ 457.940446][ T7667] elevator_change+0x352/0x530 [ 457.945725][ T7667] elevator_set_default+0x29e/0x360 [ 457.951444][ T7667] blk_register_queue+0x48e/0x630 [ 457.956986][ T7667] __add_disk+0x73f/0xe40 [ 457.961829][ T7667] add_disk_fwnode+0x118/0x5c0 [ 457.967110][ T7667] nbd_dev_add+0x77a/0xb10 [ 457.972048][ T7667] nbd_init+0x291/0x2b0 [ 457.976725][ T7667] do_one_initcall+0x121/0x750 [ 457.982009][ T7667] kernel_init_freeable+0x6ea/0x7b0 [ 457.987727][ T7667] kernel_init+0x1f/0x1e0 [ 457.992573][ T7667] ret_from_fork+0x72b/0xd50 [ 457.997680][ T7667] ret_from_fork_asm+0x1a/0x30 [ 458.002965][ T7667] [ 458.002965][ T7667] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 458.010775][ T7667] __mutex_lock+0x1a4/0x1b10 [ 458.015882][ T7667] elevator_change+0x1bc/0x530 [ 458.021163][ T7667] elevator_set_none+0x92/0xf0 [ 458.026443][ T7667] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 458.032763][ T7667] nbd_start_device+0x1a6/0xbd0 [ 458.038126][ T7667] nbd_genl_connect+0xff2/0x1a40 [ 458.043576][ T7667] genl_family_rcv_msg_doit+0x214/0x300 [ 458.049636][ T7667] genl_rcv_msg+0x560/0x800 [ 458.054655][ T7667] netlink_rcv_skb+0x159/0x420 [ 458.059932][ T7667] genl_rcv+0x28/0x40 [ 458.064432][ T7667] netlink_unicast+0x585/0x850 [ 458.069710][ T7667] netlink_sendmsg+0x8b0/0xda0 [ 458.074987][ T7667] ____sys_sendmsg+0x9e1/0xb70 [ 458.080268][ T7667] ___sys_sendmsg+0x190/0x1e0 [ 458.085462][ T7667] __sys_sendmsg+0x170/0x220 [ 458.090570][ T7667] do_syscall_64+0x10b/0xf80 [ 458.095672][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.102077][ T7667] [ 458.102077][ T7667] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 458.110678][ T7667] blk_alloc_queue+0x610/0x790 [ 458.115962][ T7667] blk_mq_alloc_queue+0x174/0x290 [ 458.121525][ T7667] __blk_mq_alloc_disk+0x29/0x120 [ 458.127063][ T7667] nbd_dev_add+0x492/0xb10 [ 458.131998][ T7667] nbd_init+0x291/0x2b0 [ 458.136675][ T7667] do_one_initcall+0x121/0x750 [ 458.141956][ T7667] kernel_init_freeable+0x6ea/0x7b0 [ 458.147679][ T7667] kernel_init+0x1f/0x1e0 [ 458.152524][ T7667] ret_from_fork+0x72b/0xd50 [ 458.157721][ T7667] ret_from_fork_asm+0x1a/0x30 [ 458.163003][ T7667] [ 458.163003][ T7667] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 458.170205][ T7667] fs_reclaim_acquire+0xc4/0x100 [ 458.175655][ T7667] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 458.181983][ T7667] __alloc_skb+0x140/0x710 [ 458.186920][ T7667] tcp_stream_alloc_skb+0x34/0x660 [ 458.192550][ T7667] tcp_sendmsg_locked+0x13cd/0x4500 [ 458.198353][ T7667] tcp_sendmsg+0x2e/0x50 [ 458.203110][ T7667] inet_sendmsg+0xb9/0x140 [ 458.208062][ T7667] sock_write_iter+0x4ea/0x5a0 [ 458.213358][ T7667] vfs_write+0x6ac/0x1070 [ 458.218220][ T7667] ksys_write+0x1f8/0x250 [ 458.223075][ T7667] do_syscall_64+0x10b/0xf80 [ 458.228186][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.234592][ T7667] [ 458.234592][ T7667] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 458.242231][ T7667] lock_sock_nested+0x41/0xf0 [ 458.247427][ T7667] inet_shutdown+0x67/0x410 [ 458.252449][ T7667] nbd_mark_nsock_dead+0xae/0x5c0 [ 458.257988][ T7667] sock_shutdown+0x16b/0x200 [ 458.263072][ T7667] nbd_ioctl+0x25e/0xd30 [ 458.267806][ T7667] blkdev_ioctl+0x5ad/0x6f0 [ 458.272806][ T7667] __x64_sys_ioctl+0x18e/0x210 [ 458.278063][ T7667] do_syscall_64+0x10b/0xf80 [ 458.283145][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.289530][ T7667] [ 458.289530][ T7667] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 458.297151][ T7667] __lock_acquire+0x14b8/0x2630 [ 458.302496][ T7667] lock_acquire+0x1b1/0x370 [ 458.307489][ T7667] __mutex_lock+0x1a4/0x1b10 [ 458.312571][ T7667] nbd_queue_rq+0x428/0x1080 [ 458.317673][ T7667] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 458.323738][ T7667] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 458.330595][ T7667] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 458.337086][ T7667] blk_mq_run_hw_queue+0x23c/0x670 [ 458.342703][ T7667] blk_mq_dispatch_list+0x51d/0x1360 [ 458.348483][ T7667] blk_mq_flush_plug_list+0x130/0x600 [ 458.354353][ T7667] __blk_flush_plug+0x2c4/0x4b0 [ 458.359706][ T7667] __submit_bio+0x584/0x6c0 [ 458.364711][ T7667] submit_bio_noacct_nocheck+0x543/0xbf0 [ 458.370849][ T7667] submit_bio_noacct+0xd18/0x2000 [ 458.376379][ T7667] submit_bh_wbc+0x681/0x890 [ 458.381477][ T7667] block_read_full_folio+0x4c8/0x8e0 [ 458.387261][ T7667] filemap_read_folio+0xfc/0x3b0 [ 458.392702][ T7667] do_read_cache_folio+0x2d7/0x6b0 [ 458.398317][ T7667] read_part_sector+0xd1/0x370 [ 458.403584][ T7667] adfspart_check_ICS+0x91/0x7d0 [ 458.409031][ T7667] bdev_disk_changed+0x7a3/0x1250 [ 458.414575][ T7667] blkdev_get_whole+0x187/0x290 [ 458.419939][ T7667] bdev_open+0x2c7/0xe40 [ 458.424698][ T7667] blkdev_open+0x34e/0x4f0 [ 458.429618][ T7667] do_dentry_open+0x6d8/0x1660 [ 458.434881][ T7667] vfs_open+0x82/0x3f0 [ 458.439457][ T7667] path_openat+0x208c/0x31a0 [ 458.444556][ T7667] do_file_open+0x20e/0x430 [ 458.449561][ T7667] do_sys_openat2+0x10d/0x1e0 [ 458.454746][ T7667] __x64_sys_openat+0x12d/0x210 [ 458.460102][ T7667] do_syscall_64+0x10b/0xf80 [ 458.465203][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.471594][ T7667] [ 458.471594][ T7667] other info that might help us debug this: [ 458.471594][ T7667] [ 458.481798][ T7667] Chain exists of: [ 458.481798][ T7667] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 458.481798][ T7667] [ 458.493851][ T7667] Possible unsafe locking scenario: [ 458.493851][ T7667] [ 458.501274][ T7667] CPU0 CPU1 [ 458.506615][ T7667] ---- ---- [ 458.511954][ T7667] lock(&cmd->lock); [ 458.515914][ T7667] lock(set->srcu); [ 458.522317][ T7667] lock(&cmd->lock); [ 458.528813][ T7667] lock(&nsock->tx_lock); [ 458.533222][ T7667] [ 458.533222][ T7667] *** DEADLOCK *** [ 458.533222][ T7667] [ 458.541339][ T7667] 3 locks held by udevd/7667: [ 458.545992][ T7667] #0: ffff888028457350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 458.555285][ T7667] #1: ffff888026506018 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670 [ 458.564748][ T7667] #2: ffff88803be00178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 458.573686][ T7667] [ 458.573686][ T7667] stack backtrace: [ 458.579555][ T7667] CPU: 1 UID: 0 PID: 7667 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 458.579575][ T7667] Tainted: [L]=SOFTLOCKUP [ 458.579579][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 458.579587][ T7667] Call Trace: [ 458.579593][ T7667] [ 458.579598][ T7667] dump_stack_lvl+0x100/0x190 [ 458.579615][ T7667] print_circular_bug.cold+0x178/0x1c7 [ 458.579637][ T7667] check_noncircular+0x146/0x160 [ 458.579656][ T7667] __lock_acquire+0x14b8/0x2630 [ 458.579675][ T7667] lock_acquire+0x1b1/0x370 [ 458.579691][ T7667] ? nbd_queue_rq+0x428/0x1080 [ 458.579703][ T7667] ? __pfx___might_resched+0x10/0x10 [ 458.579722][ T7667] ? preempt_schedule_thunk+0x16/0x30 [ 458.579736][ T7667] __mutex_lock+0x1a4/0x1b10 [ 458.579752][ T7667] ? nbd_queue_rq+0x428/0x1080 [ 458.579764][ T7667] ? nbd_queue_rq+0x428/0x1080 [ 458.579775][ T7667] ? do_raw_spin_lock+0x128/0x260 [ 458.579795][ T7667] ? __pfx___mutex_lock+0x10/0x10 [ 458.579810][ T7667] ? rcu_is_watching+0x12/0xc0 [ 458.579831][ T7667] ? find_held_lock+0x2b/0x80 [ 458.579845][ T7667] ? nbd_queue_rq+0x428/0x1080 [ 458.579856][ T7667] nbd_queue_rq+0x428/0x1080 [ 458.579871][ T7667] ? __pfx_nbd_queue_rq+0x10/0x10 [ 458.579891][ T7667] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 458.579907][ T7667] ? sbitmap_get+0x1d7/0x360 [ 458.579923][ T7667] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 458.579936][ T7667] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 458.579958][ T7667] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 458.579980][ T7667] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 458.580005][ T7667] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 458.580025][ T7667] blk_mq_run_hw_queue+0x23c/0x670 [ 458.580043][ T7667] ? blk_mq_run_hw_queue+0x22e/0x670 [ 458.580061][ T7667] blk_mq_dispatch_list+0x51d/0x1360 [ 458.580075][ T7667] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 458.580096][ T7667] ? update_io_ticks+0x137/0x2a0 [ 458.580114][ T7667] ? __pfx_update_io_ticks+0x10/0x10 [ 458.580134][ T7667] blk_mq_flush_plug_list+0x130/0x600 [ 458.580146][ T7667] ? trace_block_plug+0x70/0x220 [ 458.580161][ T7667] ? blk_add_rq_to_plug+0x30a/0x540 [ 458.580172][ T7667] ? __pfx_wbt_track+0x10/0x10 [ 458.580190][ T7667] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 458.580203][ T7667] ? blk_mq_submit_bio+0x9aa/0x2dd0 [ 458.580217][ T7667] __blk_flush_plug+0x2c4/0x4b0 [ 458.580236][ T7667] ? rcu_is_watching+0x12/0xc0 [ 458.580256][ T7667] ? __pfx___blk_flush_plug+0x10/0x10 [ 458.580275][ T7667] ? __schedule+0x10fb/0x6820 [ 458.580288][ T7667] __submit_bio+0x584/0x6c0 [ 458.580308][ T7667] ? __pfx___submit_bio+0x10/0x10 [ 458.580326][ T7667] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 458.580340][ T7667] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 458.580362][ T7667] ? submit_bio_noacct_nocheck+0x543/0xbf0 [ 458.580382][ T7667] submit_bio_noacct_nocheck+0x543/0xbf0 [ 458.580403][ T7667] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 458.580424][ T7667] ? submit_bio_noacct+0xbc/0x2000 [ 458.580445][ T7667] ? submit_bio_noacct+0x272/0x2000 [ 458.580465][ T7667] submit_bio_noacct+0xd18/0x2000 [ 458.580486][ T7667] submit_bh_wbc+0x681/0x890 [ 458.580508][ T7667] block_read_full_folio+0x4c8/0x8e0 [ 458.580522][ T7667] ? __pfx_blkdev_get_block+0x10/0x10 [ 458.580543][ T7667] ? __pfx_blkdev_read_folio+0x10/0x10 [ 458.580563][ T7667] filemap_read_folio+0xfc/0x3b0 [ 458.580582][ T7667] ? __pfx_filemap_read_folio+0x10/0x10 [ 458.580602][ T7667] do_read_cache_folio+0x2d7/0x6b0 [ 458.580626][ T7667] ? __pfx_blkdev_read_folio+0x10/0x10 [ 458.580647][ T7667] read_part_sector+0xd1/0x370 [ 458.580664][ T7667] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 458.580683][ T7667] adfspart_check_ICS+0x91/0x7d0 [ 458.580701][ T7667] ? irqentry_exit+0x246/0x790 [ 458.580716][ T7667] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 458.580734][ T7667] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 458.580754][ T7667] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 458.580772][ T7667] bdev_disk_changed+0x7a3/0x1250 [ 458.580792][ T7667] ? nbd_open+0x320/0x700 [ 458.580804][ T7667] ? __pfx_bdev_disk_changed+0x10/0x10 [ 458.580822][ T7667] ? irqentry_exit+0x246/0x790 [ 458.580836][ T7667] blkdev_get_whole+0x187/0x290 [ 458.580854][ T7667] bdev_open+0x2c7/0xe40 [ 458.580873][ T7667] ? blkdev_open+0x152/0x4f0 [ 458.580889][ T7667] blkdev_open+0x34e/0x4f0 [ 458.580901][ T7667] do_dentry_open+0x6d8/0x1660 [ 458.580916][ T7667] ? __pfx_blkdev_open+0x10/0x10 [ 458.580929][ T7667] vfs_open+0x82/0x3f0 [ 458.580947][ T7667] path_openat+0x208c/0x31a0 [ 458.580966][ T7667] ? __pfx_path_openat+0x10/0x10 [ 458.580984][ T7667] do_file_open+0x20e/0x430 [ 458.581000][ T7667] ? __pfx_do_file_open+0x10/0x10 [ 458.581022][ T7667] ? alloc_fd+0x476/0x790 [ 458.581039][ T7667] ? do_getname+0x191/0x390 [ 458.581058][ T7667] do_sys_openat2+0x10d/0x1e0 [ 458.581076][ T7667] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.581097][ T7667] __x64_sys_openat+0x12d/0x210 [ 458.581116][ T7667] ? __pfx___x64_sys_openat+0x10/0x10 [ 458.581136][ T7667] ? rcu_is_watching+0x12/0xc0 [ 458.581156][ T7667] do_syscall_64+0x10b/0xf80 [ 458.581169][ T7667] ? clear_bhb_loop+0x40/0x90 [ 458.581184][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.581198][ T7667] RIP: 0033:0x7fca0faa7407 [ 458.581209][ T7667] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 458.581222][ T7667] RSP: 002b:00007ffd22d79ab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 458.581235][ T7667] RAX: ffffffffffffffda RBX: 00007fca101c6880 RCX: 00007fca0faa7407 [ 458.581244][ T7667] RDX: 00000000000a0800 RSI: 000055fa5a07d900 RDI: ffffffffffffff9c [ 458.581252][ T7667] RBP: 000055fa59e332c0 R08: 0000000000000000 R09: 0000000000000000 [ 458.581260][ T7667] R10: 0000000000000000 R11: 0000000000000202 R12: 000055fa5a070750 [ 458.581268][ T7667] R13: 000055fa5a06e8d0 R14: 0000000000000000 R15: 000055fa5a070750 [ 458.581280][ T7667] [ 458.617261][ T9843] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 459.288556][ T9843] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1068'. [ 459.414471][ T4928] block nbd1: Receive control failed (result -104) [ 459.420341][ T5607] block nbd1: Receive control failed (result -32) [ 459.665807][ T9846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.672290][ T9846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.678440][ T9846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.684444][ T9846] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 461.646500][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 461.726588][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 461.726674][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 461.739273][ T4928] Bluetooth: hci3: command 0x0406 tx timeout