last executing test programs: 1m4.834781217s ago: executing program 3 (id=913): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'veth1_to_bridge\x00', @link_local}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='macsec0\x00', 0x0, r2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000522094e0b9500"/24], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) pread64(r3, &(0x7f0000000700)=""/160, 0xa0, 0x7) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0'}, 0xb) sendfile(r5, r6, &(0x7f0000000040), 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f00000003c0), 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000500)={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x5) keyctl$invalidate(0x15, r9) keyctl$get_security(0x11, r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c0a4}, 0x8000) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x7fffffff, 0x5, 0xfffffffd, 0x8, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180700000000000000000000000000006110001200000000bd000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m3.11994686s ago: executing program 3 (id=918): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200041, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x38}, 0x4, 0x700000002000000, 0x0, 0x4000050}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x1a, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) r7 = dup3(r5, r0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000100)={0x95d9, 0xe, 0x4, 0x11b7, 0x8, "01f818517dac62e78ac94efaac7fb7da83bf44"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x1) 1m2.772392903s ago: executing program 3 (id=919): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @remote, 0x80000000}, 0x1c) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc040aed4, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000fe8000/0x2000)=nil}) 1m1.9780847s ago: executing program 3 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$inet6_sctp(0xa, 0x801, 0x84) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000500)={0x0, 0x2, {0x8000000000000000, @usage=0x1, 0x0, 0x4, 0xafd4, 0x8, 0x0, 0x7fff, 0x1a, @struct={0x3, 0xc}, 0x398ddeaa, 0x82, [0x7, 0x9, 0xffa3, 0x8000000000000000, 0x100, 0x80000000]}, {0x1, @usage=0x3, 0x0, 0x4f5, 0x81, 0xff, 0xfffffffffffffff7, 0x1b, 0x90, @struct={0x7fffffff, 0x5}, 0x3, 0x3, [0xf44a, 0x8, 0xcf, 0x0, 0x3, 0x6]}, {0x2, @usage, 0x0, 0xbb, 0x3dc, 0x3, 0x2, 0xffffffffffffff67, 0x2c1, @usage, 0xffffffac, 0x4, [0x100000000, 0x100000001, 0xa4, 0x2, 0xffff, 0x2420]}, {0xe, 0x8, 0x800}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, 0x0, 0x6a) splice(r4, 0x0, r5, 0x0, 0x6, 0x6) 1m1.657443546s ago: executing program 3 (id=922): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) (async) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0) (async) r8 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}}) (async) r9 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r9, 0x3b66, 0x1) (async) io_submit(r10, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) 1m1.264021812s ago: executing program 3 (id=924): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) (async) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0xf52ebe5498d0c0cd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m1.191265449s ago: executing program 32 (id=924): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) (async) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0xf52ebe5498d0c0cd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.78399692s ago: executing program 4 (id=1177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}}, 0x0) 6.538085104s ago: executing program 2 (id=1178): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f638d408f01002204ddc01024f743b540af05418c47784b5426f3cbd47830870824e7f0b8b830301090d2400010b06800819045f40020a00004009050d020002"], 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.143193062s ago: executing program 4 (id=1181): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0xee, 0x67, 0x8}}]}}]}}, 0x0) 4.487620452s ago: executing program 0 (id=1188): syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x3) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x3) mmap$usbfs(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x1, 0x40010, r0, 0x401) 4.148009365s ago: executing program 4 (id=1190): r0 = socket(0x10, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 4.147365091s ago: executing program 0 (id=1191): prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setitimer(0x3, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="15d9", 0x2}], 0x1}}], 0x1, 0x2000c801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r4, 0x4b48, &(0x7f0000003d40)=""/175) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioperm(0x7, 0x81, 0x2) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x18) ioctl$TCFLSH(r7, 0x40384708, 0x20000000) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 4.087033644s ago: executing program 4 (id=1193): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000003c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000002000000021000003feb3bc4c6db0d846a4978070056dc00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000dbfa", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) finit_module(r5, 0x0, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) r6 = socket(0x18, 0x4, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x405, 0x4, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r7) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfd) 3.779890117s ago: executing program 0 (id=1194): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000001300)=""/135, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r2}, 0x10) clock_adjtime(0x0, &(0x7f0000000180)={0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="0100008004000000000000000000000000000000bdff72444473cafa8931b979357bd8bbe0cbd6aaa11f95e71d1aa7ade76d72cb2442263c7ecddf8db310d8e97abeb998b7fc07e38bf9137d497402f806f1966ebdd6f438b96c028131deed0f6aecf4072219290e28ab5b2213137662924d30323e0728c744975f56b47455175108abd193081f3b7b6f1e937fc1c8fbcd3203d401ed6febe133f6853074d8d1ed526c28331f66f21927f38f52", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02000000010000000300"/28], 0x50) 2.893433102s ago: executing program 2 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x14000045) fremovexattr(r0, &(0x7f0000000140)=@random={'system.', '-,&-\x00'}) r2 = signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x800) r3 = dup3(r0, r2, 0x80000) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000001c0)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000240)=0x8) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000280)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000d1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'sit0\x00', r6, 0x7800, 0x8, 0x7ff, 0x2, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x66, 0x0, 0x94, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0xae, 0x3, 0x4, [{@loopback, 0x2}]}, @noop, @ssrr={0x89, 0x7, 0x41, [@multicast2]}, @timestamp_addr={0x44, 0xc, 0x21, 0x1, 0x4, [{@broadcast, 0x6}]}]}}}}}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, r8, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r3}, 0x8) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0xf503, 0x0) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000840)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000940)=0xe8) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x200006c, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@aname={'aname', 0x3d, ':[/'}}, {@privport}, {@cachetag={'cachetag', 0x3d, '&[[:}^&-'}}, {}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_gt={'uid>', r11}}, {@appraise_type}, {@flag='sync'}, {@dont_hash}]}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x1411, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040011) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000bc0)='veth0_to_hsr\x00', 0x10) read$FUSE(r3, &(0x7f0000000c00)={0x2020}, 0x2020) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000002c40)=@attr_pmu_init) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000002c80)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000002cc0)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) ioctl$FIONCLEX(r13, 0x5450) 2.767399921s ago: executing program 2 (id=1196): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0xc, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x94bfba36f7db4350}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x200}, {{0x4, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x7f}, {0x3, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x95b2}}]}]}}]}, 0x68}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="31000fc422e59635339ad644e840f0e2df4655e2ed1cae5623a24545a224d91c2e59e25facf001c75b2d59d8958e21", 0x2f}, {&(0x7f00000001c0)="ecda16502cd01162ab0a16bdfab5cb4ed3e46636b96a0c08723549a44c21b390535c1b214d4005108b513e3d263c65145a389e9fe2f25bbf88fc666703ff3f7d422fe3d919c49cf5604731a6f090e3aa4309751a0b1e6f2840c55fff9939bf2d557ed216ca9b16d3032697599e735567034b298418bdfa4756279214dd10db684b72b4674160befa9accbcb18b4bdc1dcd", 0x91}, {&(0x7f00000002c0)="8561405e8a1f479e8db3b99cab9f1bf4123789", 0x13}, {&(0x7f0000000300)="8fec7582f52fbb66a120fb5a847ddf2409c62208a5fc26ab29d6479cabb4820bd93451e5fc8aa1bdb4b52fa7f3595732ccb9e9927d15065752e542e0c980cd95b1ed186464942b3408e8721322d65635e155bd25b67e480493414e3dd0b743354696cc7faacaac4b7a0483e7b86d84d175ac7ade1fd14d1bb05036a46bfdb0", 0x7f}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000000000000000000000000700000001830004ac1414bbac1e0101ac1414aae00000026401010083004fffffffffffffffff00000000ac1414aa0700fcd4a6e7b04943f48b8c8549c870900000000000000000000000000000000001000000000000000000000000000000001400000000000007000000890080ac1414aaffffffffac1414320a0101000086000000000100f407c9be850c06e81170a4a88f050087464d3320e74400ad337f00000100000003ffffffff38ffe2fffffff90000000000000003ac1414aa000000060194000100000000000000000000000000000000000000010000008000000000003cf4962f58076bdfb75489cfbe11f592c52bbae237"]}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000500)="037776ec3f31031089111aae", 0xc}], 0x1, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3b8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x50}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000007c0)="6c00688332e6969f3dc2fe365732506259f2527247f6c1327cc70f2768063ed7aab16dc5f6b59a56e035a7f5d13b54b80787c0717f7f2c72a738a73bea983aa95c5f6f31f553e8ca165ae3a1b95b07656f0f8fe79e9601a14037ab0d488659a1f6f8c43911cff8c0c25334981e8a13daa8524338a8b173f3d1f12ab3186ad2d7678b2a889d3bcd37ee5ecd674c7459b4efc5b496ad58fe2dd25b0c3b441bad6c03b14edd62c3a75a3eb0a8d6318bb8132117a5f22bb2bb7e50c461e95de2b3cbc74490e7171cdc90c5a0cbe2ba1d38c6a91ab9547693ed9f2091b25cb7e7150aaba6fb43b83abb20aa370e50ec3d894b9d85", 0xf2}, {&(0x7f0000000680)="ae6eb9d9533adc5471bf89bc94438bfa54311bc65df94fc5b4db39ad7b6d4e70dd2e27dcd4644525770fa9f0a19033a00a8b9244c9a68326b8127b56ba3c436683660ba816c444f94d4700bc9771066d3c6e9d0f21a59481f246c88db370ca59af75417d9b881d7ea7e71bc153e223b3bcba693618b34f03b8d0b1e379d87b6d2939dfc342c04ad7b2a934bdadf23f588ad76148b3e0fb9cb6a6aabea95d1b77ef767d3afc587befc1", 0xa9}, {&(0x7f00000008c0)="51ddf32c7d24c21c8bdb45f4475a50361e97dd2b5d053243db507e9e251ccefda8068a158fc9a97ff995511f50866724c5cb1e60d6ed6cde24c3398682066fcf635c320c369b297cae1b401cc232eb3481b5dc45928e1d103884c345fc9b901fa6752d0eb8a74cef660a4c526da0ddce6874c4d34130e25611a3f0a97c0146c34b7b24410488fa4b5388d964eaac4e40c8be81e1b602e8e9e43457f1353c32dce6122c66452dee93229f0750ee7f01c75ad532994b972bd9b37e4bf555e5b2c8f536a2b1", 0xc4}, {&(0x7f00000009c0)="047cd1e050ce09400d14c6291975ef3631463f1b55428f7b63513ecf3108801a146a3791862b6ab0bc7e1e71be85fc7e99efefcb93d65f02092eda526e60ba8dd81d9d12d7f626774b53387c892d1f64f9c89824cc4de95149fa57a8ad231ec78677736f08b100c52040e1ae3c88829a9baaadadbcf128eef34e4e68592d0edbcaac8b10ade037f53584fa0a8b0a636d8489ea605cc92f369c825f189fedeccccdb80eb54efe0fbca7c498a0e0c937f81050", 0xb2}, {&(0x7f0000000a80)="053967215e4f8ce0b0d1f58222f45e0ee143ab617d9ff2b82fa4a88cfdaf3fc07af458f43b0b76bb9dd6ac1ff835", 0x2e}, {&(0x7f0000000ac0)="80dab82635bbdbd4ff0642cdfef47910783b950ae5d087ca665d89d3024300d18e922d3643a77fe0172a8669c2f7575f78f9e29e476733a5073400d7ca66d468bde5359f94a55397132830d8ae31decd2c26482e858bae2d230c9f3e8370bed99eecb579f83401e4a23728603b1cb9be11e8cb2d77ec39439756", 0x7a}, {&(0x7f0000000b40)="9cdc9dffccca2276c5d2e603e10946c24b21b1e5bd721280", 0x18}, {&(0x7f0000000b80)="eaca4e7ca54964629ce6975069c658d0ab48d722", 0x14}, {&(0x7f0000000bc0)="b61bfb4613772688b0cc80f960cfdea8b61a6554345f8b76a51f30a81e36acdb6bcc0c65ae4ead2fa973b7f1a6a26fb8b56c5d2dec7db062ce1cb019465c7be01451130ebeb0ab2853592157a73ecc02f26528daaa1851084abae6e4a4bb7a1d2f0b9f802d5343748220ee6d4c1950621aed46a40aceb911b7adbd6f2dc4abc0021752dda85b85ac08da637d0f4227e104adb8c1a01f281d358df119342ebb9b109a9acc47ccfaeb8086a74ad0e0ff1f5ecff3811d611ed64658fdbf1d8a79c6a38c67e2ec1caa244f97a7b4fa408bebc3", 0xd1}], 0x9, &(0x7f0000003500)=[@ip_retopts={{0x90, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x62, [@loopback, @private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x0, [{@multicast1, 0x7}]}, @generic={0x82, 0x9, "ce6fd87f2f752a"}, @noop, @timestamp_prespec={0x44, 0x2c, 0x7e, 0x3, 0x1, [{@local, 0x66}, {@private=0xa010101, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8}, {@multicast1, 0xfff}, {@loopback, 0x4}]}, @noop, @timestamp={0x44, 0x8, 0x45, 0x0, 0x1, [0x8500]}, @lsrr={0x83, 0x13, 0xdb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @empty]}, @ssrr={0x89, 0x17, 0x40, [@broadcast, @empty, @rand_addr=0x64010100, @broadcast, @multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @noop, @ssrr={0x89, 0x27, 0xbe, [@rand_addr=0x64010101, @remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp={0x44, 0x8, 0x3d, 0x0, 0x8, [0x10001]}, @timestamp_addr={0x44, 0x24, 0xca, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc569}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @cipso={0x86, 0x6, 0x3}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1400000}}], 0x1b0}}, {{&(0x7f0000000f00)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000f40)="0da7a4bdc94a87e3a291edbe83e0f994c66bc944ebfe9274612d60392b5ed2", 0x1f}, {&(0x7f0000000f80)="aff3b27676ec6a67aff04399a3ffcd81969f207c938a06e7b8c0fdc73bb01642ada789b98109842028c0771351990f2f51ec820dba3e7a20af52b1967e370bc53a5d5e26bfa7d69f347545395262b2c6fdde80626cd7e12d6cfdc2faaffb22a4f97d8593c7763dde6ce7dd17bb387f28c366", 0x72}, {&(0x7f0000001000)="0d9ff950f507fe36", 0x8}, {&(0x7f0000001040)="1f2580dac651a5c973f342bb6b8014457729efd9f4168e992774fcdf3f6f", 0x1e}, {&(0x7f0000001080)="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", 0xff}, {&(0x7f0000001180)="2019b1cad7efc3f70b8433057c89e24ec6db769a68f8253adc7691fd0c618f55cb00257b553fa8f93b114c98b93109a27145c505925adb99c3f62099757a834c8ffe10c82b092ab04b9499b61ac9311da5b2c1b2d903c9e058c3b999d841076e72807572bc18e06d9f612084758d374f38530473daa5a81ea08f2e88bfbd237f27babd2b7cca82ebfeb69750b778240d65677480d853c52d3ec3e955f6ab320a8df0c288", 0xa4}, {&(0x7f0000001240)="01e872293cf3546ef893bdb8792350779f2d9dcd", 0x14}, {&(0x7f0000001280)="274641f13943e30641aa49", 0xb}], 0x8, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @rand_addr=0x64010102}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@remote, 0x1196}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x6}]}, @timestamp={0x44, 0x1c, 0xa1, 0x0, 0x0, [0x6, 0x1, 0x6, 0x10001, 0x7, 0xd5]}, @timestamp={0x44, 0xc, 0x9, 0x0, 0xd, [0x3, 0x10001]}, @timestamp={0x44, 0x18, 0x93, 0x0, 0x6, [0x9e, 0x800, 0xe, 0x2, 0x1]}, @ssrr={0x89, 0x7, 0x5d, [@private=0xa010101]}, @ssrr={0x89, 0x13, 0x67, [@multicast1, @multicast1, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x57, [@rand_addr=0x64010102, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x99}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}], 0x118}}, {{&(0x7f00000014c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001500)="b42deeadb506e8570fc756cdab1bedbf0ad8e46557f0ccbb60cb170f49fa4b624a1b233a6e8475d564d257a15a68217c658109608f8a423aebbb16b098119b5d1ea6eedbaf4e6a5251a099e3c8cd1cba5d236d9bd1196592b7899254b935438a75f2706499b497128e23bfde4398092508a64eb027f8a142e686b8c9c669d171a78b1b2853ec52ec0d39b9f9bea3d8c3d88cedb4820e22d9d55dd0d255a3d113ab55f2b7c1e942fcaeb8", 0xaa}], 0x1, &(0x7f0000001600)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}}], 0x5, 0x1) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000036c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000180)) ptrace$peekuser(0x3, r4, 0x31) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x40001) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r9 = socket$inet(0x2, 0xa, 0x14c0) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 2.667955647s ago: executing program 4 (id=1197): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000140)=""/48, 0x30) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xb587, 0x200000}, 0x10) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x2000000) syz_emit_ethernet(0xfce, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, 0x0, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000002000008000400", 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0x980915, 0x1}) socket(0x10, 0x803, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001b80)='net/if_inet6\x00') read$FUSE(r5, &(0x7f0000004280)={0x2020}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000002c0)={0x1d, r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0xfff1}, {}, {0x5, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.666808394s ago: executing program 1 (id=1198): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) (async) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket(0x2b, 0x1, 0x7a1b) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5b21b7ee10288028}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x32}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}]}, {0x0, [0x0, 0x2e, 0x2e, 0x2e, 0x61, 0x61]}}, &(0x7f0000000400)=""/53, 0x54, 0x35, 0x0, 0x3, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', r11, r12, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r4, 0x301, 0x70bd25, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xff8d}}}}, 0x30}}, 0x0) 2.412037693s ago: executing program 1 (id=1199): r0 = socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)=r2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5f40a000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r4, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x1af, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @multicast1, @broadcast, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000180)='pvfs2\x00', 0x1032401, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') (async, rerun: 32) mkdirat(r7, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (rerun: 32) 2.080757005s ago: executing program 0 (id=1200): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40404}, 0x100) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40404}, 0x100) ioperm(0x0, 0x9, 0xd648) (async) ioperm(0x0, 0x9, 0xd648) r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) syz_usb_connect(0x1, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c8"], 0x0) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0xc194, 0x0, 0x0, 0x146}) (async) r3 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0xc194, 0x0, 0x0, 0x146}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000050019000100000008000800faffffff0800070000000000050018"], 0x4c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 1.995921513s ago: executing program 1 (id=1201): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r1 = syz_io_uring_setup(0x38eb, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x0, 0x369, 0x0, r0}, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x40, 0x8001, 0x0, &(0x7f0000000340)=""/31}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ea92e808c5d831452cd01de5ac714f350137cb3da54eab115b02064e223ed8c525d3b0cc1f1af01ea756cbae0d09672bdb0646ae639e9c865dd19443fb10ae3384dfc73d211b06b0", @ANYRES16=0x0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x8090}, 0x40081) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000280)=0xe, 0x4) sendmmsg$unix(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="16e3f1b793d4cf51", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1.989826085s ago: executing program 2 (id=1202): prlimit64(0x0, 0xb, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x52de994789af003) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='+/\xff,.}\x00', &(0x7f00000000c0)='/dev/admmidi#\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r3, 0x301, 0x70bd25, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xff8d}}}}, 0x30}}, 0x0) 1.935481901s ago: executing program 1 (id=1203): syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24c8d20dc0501000100010203010902240001000010000904"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24c8d20dc0501000100010203010902240001000010000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007a619fa92ccf67beaf409b953cb020012f8ffffffb703000008000000ff0700000000050085000000030089b2896778ad3113c87737cf0cb0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000000)='net/igmp\x00') io_setup(0xfe, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000240)={r5, 0x1, 0xfff}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000240)={r5, 0x1, 0xfff}) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="f00000003e3f6918a5688e45c6fb3ad31c2f803f3e81256a5019dc4eb004d30e8349bc61350137c1c070d0a7cbae144cb9e99d4a00fdad9aaf443a16c60c24c130e3a4facd169b932d3ddecf3aec52343ccf3bb9030973a2d5fca795e557a3396a0cff473c9f325c234c11936916eff751dbba19d9b3fedcdd4030f98da2be029a92231ee042ee6e2ae9ed89835e861fe155eda076da12b73599e6af3509dbe4b7230365bc714f0b38901d2581564970634ef79925545ce5ae6e17a56260536bd10fe92be1fe84fb5d1da9e70864fc9baabd9b7276671f2ef33de910533d206897ba8463", @ANYBLOB="200029bd7000fedbdf25020000000400050006000a004e210000060001004e24000004000500080006006401010014000900fc00"/63], 0x50}, 0x1, 0x0, 0x0, 0x10040000}, 0x20001004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fstatfs(0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = dup3(r7, r6, 0x0) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x28}}, 0x0) (async) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10, [@sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x28}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.623573339s ago: executing program 2 (id=1205): setsockopt(0xffffffffffffffff, 0x200084, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000020601030000000000000000000000000500040000000000000000000c000780050015000000000011000300686173683a6e65742c6e6574000000000500010006000000110003006861736898ef1719706f727400"/100], 0x64}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clock_nanosleep(0x3, 0x1, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x101, 0x200, 0x7, 0xe, 0x4, 0xfffffffc, 0x3b72}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000440)={0x0, 0x8a}, 0x8) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40002160, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f00000000c0)={0x88000005, 0x102, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x0, 0x80, 0x1, 0x0, 0x2d0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xfffffffe, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x59, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) 1.622684234s ago: executing program 5 (id=1206): syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x27, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x7800, 0x20, 0xe1f3, 0x1, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0xf, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x25, 0x1, 0x7, [{@loopback, 0xc0b2}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x18, 0x21, 0x0, 0x5, [0x8, 0x7, 0xffffffff, 0x81, 0x7]}, @timestamp={0x44, 0x10, 0x7b, 0x0, 0x6, [0x1, 0x6, 0x800]}, @generic={0x89, 0x10, "21ce361e6b1a761349ddb9057834"}, @rr={0x7, 0xb, 0x3b, [@multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xc0, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x28}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xda}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x804) 1.61904462s ago: executing program 4 (id=1207): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {}, {}, {0x0, 0x0, 0x10}, {}, {}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x100130, 0x0, 0x8500}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926", @ANYRESHEX], 0x0) 1.493561833s ago: executing program 5 (id=1208): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141000, 0x101) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x3) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0xfc937e2fe0fdebf6) 1.363995981s ago: executing program 0 (id=1209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = gettid() add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) linkat(r3, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) (async) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) (async) accept(r0, 0x0, 0x0) 1.361583917s ago: executing program 5 (id=1210): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffff000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 1.315348346s ago: executing program 5 (id=1211): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000b01d5597cfab9c4600000000000000380005"], 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf2501000000050005000000000014000100fe80000000000000000000000000002e"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000013c0)={'syztnl2\x00', &(0x7f00000014c0)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x8, 0x7, {{0x42, 0x4, 0x3, 0x9, 0x108, 0x66, 0x8, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x6e, 0x3, 0x8, [{@loopback, 0x4}]}, @cipso={0x86, 0x12, 0x0, [{0x0, 0xc, "a4c376d21c6c8145b189"}]}, @timestamp={0x44, 0x24, 0x47, 0x0, 0xb, [0x8, 0x3, 0x6, 0x100, 0x36c7538, 0x9, 0x3, 0x8000]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xc0, 0x3, 0x9, [{@multicast2, 0x400}, {@loopback, 0x3}]}, @timestamp_addr={0x44, 0x4c, 0x8f, 0x1, 0x7, [{@private=0xa010101, 0xfff}, {@loopback, 0x3ff}, {@broadcast, 0x7314}, {@private=0xa010101, 0x6}, {@multicast2, 0x7}, {@remote, 0xa}, {@empty, 0x6b657b6f}, {@broadcast, 0x1ff}, {@multicast2, 0xa1}]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x0, [{@multicast2, 0x40}, {@broadcast, 0x8}, {@broadcast, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@loopback, 0x5}]}, @ssrr={0x89, 0x13, 0x6b, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0xf, 0x1e, [@loopback, @empty, @multicast2]}]}}}}}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001400)={0x9, 0x8000, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xfffffffffffffff8, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1400000016000f63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0xc, 0x2, 0xa0, 0x20, 0xff, r4, r5}, {0x2, 0x748, 0x100000000000006, 0xffffffffffffff49, 0x4, 0xffffffffffffffff, 0x40, 0x838}, {0x8, 0x80000001, 0xfffffffffffffffd, 0x9}, 0x9, 0x6e6bbb, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0xc3}, 0x2, @in=@multicast2, 0x3502, 0x4, 0x3, 0xc, 0xaf03, 0x1, 0x81}}, 0xe8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) 305.377414ms ago: executing program 2 (id=1212): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x3, 0x3a) (async) r2 = socket$kcm(0xa, 0x3, 0x3a) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0xa1, 0x99, 0xa2, 0x10, 0x7d0, 0x4101, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0xa3, 0x0, 0x0, 0x76, 0x97, 0x71}}]}}]}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x300}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fanotify_init(0x200, 0x0) (async) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x101, 0x4000105b, r6, 0x0) (async) fanotify_mark(r5, 0x101, 0x4000105b, r6, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000e04300000321b24fa83537bf6ee2aa6a6e86531d48d6a85d2e97542c5076b2e53abd185ec799a02f20bbfe200767f4c0147f04f3e507397c8905b65f945f51ff5b63c12abbdade88f43be71bd05ff77bea03f2f5851d7d85a4bc73acfbb2c5669fef8d40c852cb5143c644f4774af3d7eab5cb0d1608c9a33eb1c2a37189d2f27eb3c6f98da855c9acdba0bee989f3ae82256d182cd5805748590a35f5c556cb54493fa0d58129a2c691aa3b69775400d329946e4abaea14cd3dcf6b4308dd7091625b0376e4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800003b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000700b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='cq_reschedule\x00', r6}, 0xffffffffffffff38) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='cq_reschedule\x00', r6}, 0xffffffffffffff38) r8 = io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x10c}) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 219.841233ms ago: executing program 5 (id=1213): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x8b) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e002100140000000280c09b5700", 0x2e}], 0x1}, 0x4040080) fsmount(r1, 0x1, 0x8) (async) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1}, 0x18) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xd8, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2a0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf8}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) 217.121711ms ago: executing program 1 (id=1214): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000001840)=""/4082, 0xff2) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kyber_throttled\x00', r1}, 0x18) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x1, 0xc0100) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r4, 0x3523, 0x3}, &(0x7f00000001c0)=0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) listen(r5, 0x0) (rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f00000c2000/0x1000)=nil, 0x1000}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x138}}, 0x4000000) 191.585725ms ago: executing program 0 (id=1215): syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x8240) (async) syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x8240) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x22482, 0x0) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000100)=0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006e383a10d00701415ca70102130109022400010000000009042300020070400009050a03080404030e0905c2e7"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006e383a10d00701415ca70102130109022400010000000009042300020070400009050a03080404030e0905c2e7"], 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x3b6e, 0x2, 0x3, 0x1}, &(0x7f0000000040), &(0x7f0000001540)) (async) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x3b6e, 0x2, 0x3, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000001540)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r9}, 0xc) syz_io_uring_submit(r6, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 48.042785ms ago: executing program 1 (id=1216): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x9, 0x5, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x0, &(0x7f0000000740)={&(0x7f0000000700), 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x9, 0x5, 0x5, 0x0, 0x4, "50eea346785d8eaa39ad244f19c93b3c792fda"}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000710000000000000007000000", @ANYRES32=r5], 0x18}}, 0x40) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x776, 0x8, 0xa, 0xb7, 0x4, 0x9f, 0xa4, 0x8f, 0xf, 0x9, 0x9, 0x2, 0x5}, {0x0, 0xedc6, 0x5, 0x1, 0x10, 0x1, 0x1, 0x7, 0x2, 0xa9, 0x8, 0x4, 0x5}, {0x5, 0x0, 0xb, 0x0, 0x6, 0x5, 0x76, 0x0, 0x7a, 0x10, 0x6, 0x0, 0x9}], 0xe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket(0x2, 0x3, 0x6) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019bc0)=""/102400, 0x19000) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r8, 0x5423, 0x0) r9 = eventfd(0xed64) open(&(0x7f00000002c0)='./file0\x00', 0x101000, 0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000840)={'ip_vti0\x00', r5, 0x7, 0x1, 0x4, 0xb8f1, {{0x27, 0x4, 0x3, 0x32, 0x9c, 0x68, 0x0, 0xae, 0x2f, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0xf, 0x7, [@remote, @rand_addr=0x64010101, @loopback]}, @noop, @timestamp_addr={0x44, 0xc, 0xbd, 0x1, 0x1, [{@rand_addr=0x64010102, 0x7}]}, @generic={0x82, 0x7, "d51680b314"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1b, 0x1, [{0x7, 0xa, "3a886c70983f3455"}, {0x2, 0x4, ':H'}, {0xc, 0x7, "e10b88fa6c"}]}, @timestamp_addr={0x44, 0x44, 0x19, 0x1, 0x4, [{@private=0xa010102, 0x5}, {@remote, 0x6}, {@multicast1, 0xf4b}, {@broadcast, 0x6}, {@local}, {@private=0xa010101, 0x800}, {@broadcast, 0x9}, {@remote}]}]}}}}}) eventfd(0x9) eventfd2(0x6817, 0x401) 0s ago: executing program 5 (id=1217): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7fc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0x10000}, 0x1b) kernel console output (not intermixed with test programs): 0 00 69 3d 96 8b e4 00 e8 03 00 00 48 8d 1d 97 94 31 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 282.321223][ T8861] RSP: 002b:00007fff58ebcb50 EFLAGS: 00010283 [ 282.327297][ T8861] RAX: 0000000000000000 RBX: 00007facb5f76080 RCX: 0000000000000000 [ 282.335260][ T8861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555588b15808 [ 282.343224][ T8861] RBP: 00007facb5f77ba0 R08: 0000000000000000 R09: 00007facb6b75000 [ 282.351185][ T8861] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000452d4 [ 282.359167][ T8861] R13: 00007facb5f76080 R14: 000000000000015e R15: ffffffffffffffff [ 282.367161][ T8861] [ 282.382854][ T8861] memory: usage 307200kB, limit 307200kB, failcnt 7526 [ 282.389776][ T8861] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 282.408230][ T5890] gspca_ov534_9: reg_w failed -71 [ 282.433406][ T5829] usb 5-1: USB disconnect, device number 31 [ 282.452736][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 282.452753][ T30] audit: type=1400 audit(1735210208.319:7143): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 282.478322][ T8861] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 282.500133][ T8861] Memory cgroup stats for /syz0: [ 282.500385][ T8861] cache 0 [ 282.530817][ T30] audit: type=1400 audit(1735210208.349:7144): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.531479][ T8861] rss 0 [ 282.570445][ T5862] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.587050][ T5862] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.599663][ T5862] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.613128][ T8861] rss_huge 0 [ 282.616353][ T8861] shmem 0 [ 282.619300][ T8861] mapped_file 0 [ 282.623158][ T8861] dirty 0 [ 282.626122][ T8861] writeback 0 [ 282.629414][ T8861] workingset_refault_anon 75 [ 282.634686][ T30] audit: type=1400 audit(1735210208.349:7145): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.663929][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 282.670790][ T8861] workingset_refault_file 1358 [ 282.681553][ T5862] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 282.690984][ T5890] gspca_ov534_9: Unknown sensor 0000 [ 282.691054][ T5890] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 282.711413][ T30] audit: type=1400 audit(1735210208.349:7146): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.746317][ T5890] usb 2-1: USB disconnect, device number 31 [ 282.756319][ T8861] swap 528384 [ 282.759653][ T8861] swapcached 0 [ 282.764332][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.766934][ T30] audit: type=1400 audit(1735210208.349:7147): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.785077][ T8861] pgpgin 214238 [ 282.805976][ T5862] usb 4-1: config 0 descriptor?? [ 282.835862][ T8861] pgpgout 214238 [ 282.847575][ T30] audit: type=1400 audit(1735210208.429:7148): avc: denied { ioctl } for pid=8869 comm="syz.3.772" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.883115][ T8861] pgfault 180505 [ 282.902656][ T8861] pgmajfault 455 [ 282.922927][ T8861] inactive_anon 0 [ 282.931111][ T8861] active_anon 0 [ 282.932700][ T30] audit: type=1400 audit(1735210208.439:7149): avc: denied { ioctl } for pid=8869 comm="syz.3.772" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.940705][ T8861] inactive_file 0 [ 282.962676][ T30] audit: type=1400 audit(1735210208.449:7150): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.987800][ T30] audit: type=1400 audit(1735210208.449:7151): avc: denied { open } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.012148][ T30] audit: type=1400 audit(1735210208.449:7152): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.115302][ T8861] active_file 0 [ 283.162988][ T8861] unevictable 0 [ 283.199437][ T8861] hierarchical_memory_limit 314572800 [ 283.220718][ T8882] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.225887][ T8884] netlink: 84 bytes leftover after parsing attributes in process `syz.2.777'. [ 283.253073][ T8861] hierarchical_memsw_limit 9223372036854771712 [ 283.326054][ T8861] total_cache 0 [ 283.337255][ T8861] total_rss 0 [ 283.340580][ T8861] total_rss_huge 0 [ 283.428180][ T8861] total_shmem 0 [ 283.473190][ T8861] total_mapped_file 0 [ 283.640365][ T8861] total_dirty 0 [ 283.891553][ T8861] total_writeback 0 [ 284.001850][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 284.013473][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 284.062926][ T5862] usb 4-1: USB disconnect, device number 38 [ 284.158182][ T8861] total_workingset_refault_anon 75 [ 284.195995][ T8861] total_workingset_refault_file 1358 [ 284.479509][ T8861] total_swap 528384 [ 284.556139][ T8861] total_swapcached 0 [ 284.560186][ T8861] total_pgpgin 214238 [ 284.567233][ T8861] total_pgpgout 214238 [ 284.571436][ T8861] total_pgfault 180505 [ 284.575666][ T8861] total_pgmajfault 455 [ 284.579935][ T8861] total_inactive_anon 0 [ 284.584344][ T8861] total_active_anon 0 [ 284.588447][ T8861] total_inactive_file 0 [ 284.592767][ T8861] total_active_file 0 [ 284.596893][ T8861] total_unevictable 0 [ 284.600960][ T8861] anon_cost 0 [ 284.604396][ T8861] file_cost 0 [ 284.607779][ T8861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.770,pid=8861,uid=0 [ 284.626656][ T8861] Memory cgroup out of memory: Killed process 8861 (syz.0.770) total-vm:101844kB, anon-rss:796kB, file-rss:22984kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 284.686692][ T8897] netlink: 112 bytes leftover after parsing attributes in process `syz.1.780'. [ 284.982168][ T8900] FAT-fs (nullb0): bogus number of reserved sectors [ 284.989390][ T8900] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 285.246499][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 285.520542][ T8908] netlink: 'syz.2.783': attribute type 25 has an invalid length. [ 285.832731][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 285.903906][ T8908] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.913041][ T8908] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.921755][ T8908] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.930607][ T8908] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.399903][ T8919] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 286.440657][ T8919] netlink: 220 bytes leftover after parsing attributes in process `syz.1.784'. [ 286.782739][ T5890] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 286.858548][ T8935] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 286.942609][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 286.954574][ T5890] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 286.972853][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.990942][ T5890] usb 5-1: Product: syz [ 286.996038][ T5890] usb 5-1: Manufacturer: syz [ 287.004143][ T5890] usb 5-1: SerialNumber: syz [ 287.011604][ T5890] usb 5-1: config 0 descriptor?? [ 287.021618][ T5890] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 287.342553][ T8945] overlayfs: failed to clone upperpath [ 287.470928][ T30] kauditd_printk_skb: 302 callbacks suppressed [ 287.470944][ T30] audit: type=1400 audit(1735210213.339:7455): avc: denied { ioctl } for pid=8922 comm="syz.4.787" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.558346][ T30] audit: type=1400 audit(1735210213.409:7456): avc: denied { read } for pid=8948 comm="syz.3.796" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 287.669839][ T30] audit: type=1400 audit(1735210213.409:7457): avc: denied { open } for pid=8948 comm="syz.3.796" path="net:[4026532949]" dev="nsfs" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 287.693011][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.711436][ T30] audit: type=1400 audit(1735210213.419:7458): avc: denied { create } for pid=8948 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 287.731309][ T30] audit: type=1400 audit(1735210213.419:7459): avc: denied { read } for pid=8948 comm="syz.3.796" path="socket:[19396]" dev="sockfs" ino=19396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 287.769494][ T30] audit: type=1400 audit(1735210213.419:7460): avc: denied { read write } for pid=8948 comm="syz.3.796" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.792933][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.807248][ T30] audit: type=1400 audit(1735210213.419:7461): avc: denied { read write open } for pid=8948 comm="syz.3.796" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.831483][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.838067][ T5862] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 287.844656][ T30] audit: type=1400 audit(1735210213.419:7462): avc: denied { ioctl } for pid=8948 comm="syz.3.796" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.875182][ T30] audit: type=1400 audit(1735210213.459:7463): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.904486][ T30] audit: type=1400 audit(1735210213.459:7464): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.052747][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 288.061042][ T5862] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 288.070707][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.079059][ T5862] usb 4-1: Product: syz [ 288.083547][ T5862] usb 4-1: Manufacturer: syz [ 288.088500][ T5862] usb 4-1: SerialNumber: syz [ 288.097466][ T5862] usb 4-1: config 0 descriptor?? [ 288.122024][ T5862] appledisplay 4-1:0.0: Could not find int-in endpoint [ 288.135384][ T5862] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 288.328894][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.346532][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.376840][ T970] usb 4-1: USB disconnect, device number 39 [ 288.902540][ C1] hrtimer: interrupt took 39934 ns [ 289.290463][ T5890] gspca_ov534_9: reg_w failed -110 [ 289.344209][ T8971] overlayfs: failed to clone upperpath [ 289.484882][ T8976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8976 comm=syz.1.802 [ 289.503733][ T8981] netlink: 44 bytes leftover after parsing attributes in process `syz.3.805'. [ 289.582847][ T5890] gspca_ov534_9: Unknown sensor 0000 [ 289.582914][ T5890] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 289.612827][ T5890] usb 5-1: USB disconnect, device number 32 [ 289.817553][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 289.982830][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 289.999183][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 290.009087][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.018155][ T8] usb 3-1: Product: syz [ 290.031477][ T8] usb 3-1: Manufacturer: syz [ 290.258547][ T8] usb 3-1: SerialNumber: syz [ 290.400282][ T8] usb 3-1: config 0 descriptor?? [ 290.430572][ T8] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 290.637591][ T8] gspca_vc032x: reg_r err -32 [ 290.642373][ T8] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 290.662092][ T8974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.725879][ T8974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.551512][ T5862] usb 3-1: USB disconnect, device number 40 [ 291.718344][ T9010] overlayfs: failed to clone upperpath [ 291.944335][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 291.953284][ T9015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 292.476114][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 292.476132][ T30] audit: type=1400 audit(1735210218.349:7706): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.579946][ T9021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.655986][ T30] audit: type=1400 audit(1735210218.379:7707): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.778773][ T30] audit: type=1400 audit(1735210218.379:7708): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.855098][ T30] audit: type=1400 audit(1735210218.379:7709): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.882355][ T30] audit: type=1400 audit(1735210218.379:7710): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 292.887472][ T9014] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 292.904750][ T30] audit: type=1400 audit(1735210218.389:7711): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.904787][ T30] audit: type=1400 audit(1735210218.389:7712): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.904814][ T30] audit: type=1400 audit(1735210218.389:7713): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.982847][ T30] audit: type=1400 audit(1735210218.389:7714): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 293.005833][ T30] audit: type=1400 audit(1735210218.399:7715): avc: denied { execmem } for pid=9017 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 293.662732][ T970] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 293.827731][ T970] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 293.841083][ T970] usb 4-1: config 0 has no interface number 0 [ 293.856840][ T970] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.870117][ T970] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 293.887126][ T970] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 293.898967][ T970] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 293.939036][ T970] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 293.975879][ T970] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 293.996583][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.011071][ T970] usb 4-1: config 0 descriptor?? [ 294.029132][ T9040] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.050743][ T970] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 295.416767][ T9065] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 295.444339][ T9073] input: syz0 as /devices/virtual/input/input21 [ 295.457444][ T25] usb 4-1: USB disconnect, device number 40 [ 295.470611][ T25] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 296.595282][ T9092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.488531][ T30] kauditd_printk_skb: 287 callbacks suppressed [ 297.488549][ T30] audit: type=1400 audit(1735210223.359:8003): avc: denied { create } for pid=9109 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.187236][ T30] audit: type=1400 audit(1735210223.369:8004): avc: denied { map_create } for pid=9109 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 298.206993][ T30] audit: type=1400 audit(1735210223.369:8005): avc: denied { map_read map_write } for pid=9109 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 298.228360][ T30] audit: type=1400 audit(1735210223.369:8006): avc: denied { prog_load } for pid=9109 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 298.247709][ T30] audit: type=1400 audit(1735210223.369:8007): avc: denied { bpf } for pid=9109 comm="syz.0.841" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 298.268484][ T30] audit: type=1400 audit(1735210223.369:8008): avc: denied { perfmon } for pid=9109 comm="syz.0.841" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 298.289780][ T30] audit: type=1400 audit(1735210223.379:8009): avc: denied { create } for pid=9109 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.310243][ T30] audit: type=1400 audit(1735210223.379:8010): avc: denied { write } for pid=9109 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.330814][ T30] audit: type=1400 audit(1735210223.379:8011): avc: denied { read } for pid=9109 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.351323][ T30] audit: type=1400 audit(1735210223.389:8012): avc: denied { ioctl } for pid=9109 comm="syz.0.841" path="socket:[20129]" dev="sockfs" ino=20129 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.710053][ T9132] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 298.715061][ T9116] IPVS: stopping backup sync thread 9132 ... [ 299.054842][ T8] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 300.549290][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 300.619367][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.636465][ T8] usb 4-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 300.662393][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.694765][ T8] usb 4-1: config 0 descriptor?? [ 302.536161][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 302.542685][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 302.542696][ T30] audit: type=1400 audit(1735210228.389:8151): avc: denied { execute } for pid=9120 comm="syz.3.843" path="/143/cpuset.memory_pressure_enabled" dev="tmpfs" ino=790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 303.523766][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 303.547933][ T8] usb 4-1: USB disconnect, device number 41 [ 305.054973][ T30] audit: type=1400 audit(1735210228.399:8152): avc: denied { ioctl } for pid=9120 comm="syz.3.843" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20144 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 305.172644][ T30] audit: type=1400 audit(1735210230.849:8153): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.226256][ T30] audit: type=1400 audit(1735210230.849:8154): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.250369][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.289277][ T30] audit: type=1400 audit(1735210230.849:8155): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.345964][ T30] audit: type=1400 audit(1735210230.959:8156): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 305.367962][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.382722][ T30] audit: type=1400 audit(1735210231.139:8158): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.406890][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.413067][ T30] audit: type=1400 audit(1735210231.139:8159): avc: denied { open } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.437121][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.443736][ T30] audit: type=1400 audit(1735210231.139:8160): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.469267][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.475734][ T30] audit: type=1400 audit(1735210230.959:8157): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.932926][ T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 306.223404][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.240125][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 306.252200][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.267658][ T25] usb 5-1: config 0 descriptor?? [ 306.322738][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 306.482659][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 306.490703][ T8] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 306.499226][ T8] usb 2-1: config 0 has no interface number 0 [ 306.673075][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 306.680064][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 306.734111][ T25] usb 5-1: USB disconnect, device number 33 [ 306.965109][ T8] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 306.975968][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.013038][ T8] usb 2-1: Product: syz [ 307.038518][ T8] usb 2-1: Manufacturer: syz [ 307.043544][ T9189] @: renamed from vlan0 (while UP) [ 307.052399][ T8] usb 2-1: SerialNumber: syz [ 307.077217][ T8] usb 2-1: config 0 descriptor?? [ 307.097544][ T8] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 307.325428][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 307.341881][ T8] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 307.352686][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 307.516778][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 307.527959][ T25] usb 5-1: too many configurations: 114, using maximum allowed: 8 [ 307.557834][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 307.557851][ T30] audit: type=1400 audit(1735210233.429:8377): avc: denied { read open } for pid=9202 comm="syz.2.865" path="net:[4026533037]" dev="nsfs" ino=4026533037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 307.594040][ T9201] team_slave_1: entered promiscuous mode [ 307.624713][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 307.632339][ T25] usb 5-1: can't read configurations, error -61 [ 307.647699][ T30] audit: type=1400 audit(1735210233.469:8378): avc: denied { setopt } for pid=9200 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 307.667647][ T30] audit: type=1400 audit(1735210233.419:8376): avc: denied { connect } for pid=9202 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 307.687513][ T30] audit: type=1400 audit(1735210233.479:8379): avc: denied { create } for pid=9202 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.707658][ T30] audit: type=1400 audit(1735210233.479:8380): avc: denied { ioctl } for pid=9165 comm="syz.4.854" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.732395][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.738772][ T30] audit: type=1400 audit(1735210233.499:8381): avc: denied { ioctl } for pid=9165 comm="syz.4.854" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.763555][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.772409][ T9200] team_slave_1: left promiscuous mode [ 307.773085][ T30] audit: type=1400 audit(1735210233.509:8382): avc: denied { create } for pid=9202 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 307.799396][ T30] audit: type=1400 audit(1735210233.509:8383): avc: denied { write } for pid=9202 comm="syz.2.865" path="socket:[20936]" dev="sockfs" ino=20936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.823668][ T30] audit: type=1400 audit(1735210233.649:8384): avc: denied { ioctl } for pid=9165 comm="syz.4.854" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 307.848426][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.855398][ T30] audit: type=1400 audit(1735210233.679:8385): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 307.879541][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.904770][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 308.206102][ T9212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.855'. [ 308.220875][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 308.228032][ T25] usb 5-1: too many configurations: 114, using maximum allowed: 8 [ 308.242903][ T25] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 308.251610][ T25] usb 5-1: can't read configurations, error -61 [ 308.267100][ T25] usb usb5-port1: attempt power cycle [ 308.286655][ T9212] netlink: 72 bytes leftover after parsing attributes in process `syz.1.855'. [ 308.906532][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 308.964668][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.054974][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.138852][ T9228] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 309.192642][ T25] usb 5-1: device not accepting address 36, error -71 [ 309.404730][ T9231] overlayfs: missing 'workdir' [ 309.566234][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.620382][ T9170] geneve2: entered promiscuous mode [ 309.622989][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.639207][ T9170] geneve2: entered allmulticast mode [ 309.954526][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 309.954943][ T5890] usb 2-1: USB disconnect, device number 32 [ 309.995832][ T5890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 310.190151][ T8] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 310.482843][ T8] usb 4-1: device descriptor read/64, error -71 [ 310.614025][ T5890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 310.625686][ T5890] quatech2 2-1:0.51: device disconnected [ 311.552674][ T8] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 311.864986][ T9270] input: syz0 as /devices/virtual/input/input22 [ 312.042663][ T5814] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 312.267340][ T8] usb 4-1: device descriptor read/64, error -71 [ 312.341719][ T5814] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 312.352093][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.488528][ T8] usb usb4-port1: attempt power cycle [ 312.523077][ T5814] usb 2-1: config 0 descriptor?? [ 312.642692][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 312.642710][ T30] audit: type=1400 audit(1735210238.499:8657): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.758745][ T30] audit: type=1400 audit(1735210238.499:8658): avc: denied { open } for pid=5820 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.782878][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.807706][ T30] audit: type=1400 audit(1735210238.499:8659): avc: denied { ioctl } for pid=5820 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.833275][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.839525][ T30] audit: type=1400 audit(1735210238.669:8660): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 312.860151][ T30] audit: type=1400 audit(1735210238.669:8661): avc: denied { ioctl } for pid=9271 comm="syz.1.883" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.884993][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.891775][ T30] audit: type=1400 audit(1735210238.679:8662): avc: denied { read } for pid=9291 comm="syz.3.888" name="v4l-subdev3" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.914766][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.921225][ T30] audit: type=1400 audit(1735210238.679:8663): avc: denied { open } for pid=9291 comm="syz.3.888" path="/dev/v4l-subdev3" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 312.944713][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.951399][ T30] audit: type=1400 audit(1735210238.739:8664): avc: denied { prog_load } for pid=9290 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 312.970678][ T30] audit: type=1400 audit(1735210238.739:8665): avc: denied { bpf } for pid=9290 comm="syz.0.889" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.052634][ T30] audit: type=1400 audit(1735210238.739:8666): avc: denied { perfmon } for pid=9290 comm="syz.0.889" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.361775][ T9300] virtio-fs: tag <(null)> not found [ 314.177069][ T8] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 314.490523][ T8] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 314.513270][ T5814] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 314.531886][ T8] usb 4-1: config 0 has too many interfaces: 75, using maximum allowed: 32 [ 314.542561][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 75 [ 314.553666][ T8] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 314.592198][ T8] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 314.682817][ T5814] usb 2-1: USB disconnect, device number 33 [ 314.696574][ T8] usb 4-1: Manufacturer: syz [ 314.745535][ T8] usb 4-1: config 0 descriptor?? [ 314.824039][ T8] usb 4-1: selecting invalid altsetting 3 [ 314.842700][ T8] comedi comedi0: could not set alternate setting 3 in high speed [ 314.850627][ T8] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 314.894544][ T8] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 316.076557][ T25] usb 4-1: USB disconnect, device number 45 [ 317.048616][ T5818] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 317.481234][ T9350] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.872775][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 317.872794][ T30] audit: type=1400 audit(1735210243.149:8849): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.927246][ T30] audit: type=1400 audit(1735210243.149:8850): avc: denied { read write open } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.952671][ T9353] netlink: 'syz.4.902': attribute type 21 has an invalid length. [ 317.960457][ T9353] netlink: 128 bytes leftover after parsing attributes in process `syz.4.902'. [ 317.969600][ T9353] netlink: 'syz.4.902': attribute type 4 has an invalid length. [ 317.977373][ T30] audit: type=1400 audit(1735210243.149:8851): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.004194][ T30] audit: type=1400 audit(1735210243.219:8852): avc: denied { prog_load } for pid=9333 comm="syz.0.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 318.023837][ T30] audit: type=1400 audit(1735210243.219:8853): avc: denied { bpf } for pid=9333 comm="syz.0.897" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 318.044877][ T30] audit: type=1400 audit(1735210243.339:8854): avc: denied { mounton } for pid=9333 comm="syz.0.897" path="/247/file0" dev="tmpfs" ino=1365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 318.067761][ T30] audit: type=1400 audit(1735210243.339:8855): avc: denied { mount } for pid=9333 comm="syz.0.897" name="/" dev="ramfs" ino=21211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 318.090016][ T30] audit: type=1400 audit(1735210243.739:8856): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.114492][ T30] audit: type=1400 audit(1735210243.739:8857): avc: denied { read write open } for pid=5821 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.141794][ T30] audit: type=1400 audit(1735210243.739:8858): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.180041][ T9353] netlink: 'syz.4.902': attribute type 5 has an invalid length. [ 318.187807][ T9353] netlink: 3 bytes leftover after parsing attributes in process `syz.4.902'. [ 318.278591][ T9361] overlayfs: failed to clone upperpath [ 318.627037][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.636212][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.700748][ T9379] input: syz0 as /devices/virtual/input/input23 [ 319.623072][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.629653][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.758701][ T9401] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 320.630116][ T9410] erspan0: left allmulticast mode [ 320.637357][ T9410] erspan0: left promiscuous mode [ 320.654778][ T9410] bridge0: port 3(erspan0) entered disabled state [ 320.697710][ T9410] bridge_slave_0: left allmulticast mode [ 320.703509][ T9410] bridge_slave_0: left promiscuous mode [ 320.709317][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.730827][ T9410] bridge_slave_1: left allmulticast mode [ 320.736785][ T9410] bridge_slave_1: left promiscuous mode [ 320.754283][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.821393][ T9410] bond0: (slave bond_slave_0): Releasing backup interface [ 320.840967][ T9410] bond0: (slave bond_slave_1): Releasing backup interface [ 320.932056][ T9410] team0: Port device team_slave_0 removed [ 320.978901][ T9410] team0: Port device team_slave_1 removed [ 321.005062][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.013106][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 321.057129][ T5818] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 321.069135][ T5818] Bluetooth: hci4: Injecting HCI hardware error event [ 321.152099][ T9418] SELinux: syz.4.917 (9418) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 321.180139][ T5818] Bluetooth: hci4: hardware error 0x00 [ 321.552388][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.610924][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.670788][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.695163][ T8] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 321.719840][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 321.729301][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.738075][ T9410] bond0: (slave wlan1): Releasing backup interface [ 321.742842][ T8] usb 2-1: Product: syz [ 321.748911][ T8] usb 2-1: Manufacturer: syz [ 321.753748][ T8] usb 2-1: SerialNumber: syz [ 321.802987][ T8] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 321.976844][ T5829] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.217585][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 322.512276][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.560212][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.650300][ T25] usb 2-1: USB disconnect, device number 34 [ 322.898433][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.905754][ T30] kauditd_printk_skb: 276 callbacks suppressed [ 322.905771][ T30] audit: type=1400 audit(1735210248.769:9135): avc: denied { read } for pid=9432 comm="syz.4.926" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.005966][ T30] audit: type=1400 audit(1735210248.809:9136): avc: denied { prog_load } for pid=9434 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 323.040946][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.094193][ T5829] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 323.100223][ T30] audit: type=1400 audit(1735210248.809:9137): avc: denied { bpf } for pid=9434 comm="syz.0.927" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 323.101891][ T5829] ath9k_htc: Failed to initialize the device [ 323.122232][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.140333][ T25] usb 2-1: ath9k_htc: USB layer deinitialized [ 323.142974][ T30] audit: type=1400 audit(1735210248.809:9138): avc: denied { perfmon } for pid=9434 comm="syz.0.927" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 323.146751][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.738456][ T5818] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 323.751700][ T30] audit: type=1400 audit(1735210248.839:9139): avc: denied { execmem } for pid=9434 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 323.929302][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.937334][ T5818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 323.947263][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.047513][ T30] audit: type=1400 audit(1735210249.009:9140): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 324.112795][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.156273][ T9448] overlayfs: failed to clone upperpath [ 324.189171][ T30] audit: type=1400 audit(1735210249.009:9141): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.277817][ T30] audit: type=1400 audit(1735210249.009:9142): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.424371][ T30] audit: type=1400 audit(1735210249.009:9143): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.450793][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.468543][ T30] audit: type=1400 audit(1735210249.009:9144): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.834693][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.012853][ T5819] Bluetooth: hci2: command tx timeout [ 326.119812][ T52] bridge_slave_1: left allmulticast mode [ 326.126555][ T52] bridge_slave_1: left promiscuous mode [ 326.135504][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.284057][ T52] bridge_slave_0: left allmulticast mode [ 326.289891][ T52] bridge_slave_0: left promiscuous mode [ 326.312760][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.643898][ T52] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 327.412487][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.428704][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.442303][ T52] bond0 (unregistering): Released all slaves [ 327.460535][ T52] bond1 (unregistering): Released all slaves [ 327.615996][ T9430] chnl_net:caif_netlink_parms(): no params data found [ 327.766674][ T52] IPVS: stopping master sync thread 8309 ... [ 327.902740][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 327.902761][ T30] audit: type=1400 audit(1735210253.769:9311): avc: denied { create } for pid=9498 comm="syz.2.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.972461][ T30] audit: type=1400 audit(1735210253.769:9312): avc: denied { prog_load } for pid=9498 comm="syz.2.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.036754][ T30] audit: type=1400 audit(1735210253.769:9313): avc: denied { bpf } for pid=9498 comm="syz.2.944" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.083037][ T30] audit: type=1400 audit(1735210253.769:9314): avc: denied { perfmon } for pid=9498 comm="syz.2.944" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.110089][ T30] audit: type=1400 audit(1735210253.779:9315): avc: denied { mounton } for pid=9498 comm="syz.2.944" path="/186/bus" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 328.133499][ T5819] Bluetooth: hci2: command tx timeout [ 328.133919][ T9500] veth1_macvtap: left promiscuous mode [ 328.139127][ T30] audit: type=1400 audit(1735210253.809:9316): avc: denied { unlink } for pid=9498 comm="syz.2.944" name="#20" dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 328.179851][ T9500] macsec0: entered allmulticast mode [ 328.185895][ T30] audit: type=1400 audit(1735210253.819:9317): avc: denied { mount } for pid=9498 comm="syz.2.944" name="/" dev="overlay" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 328.240433][ T9430] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.260469][ T9430] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.281620][ T9430] bridge_slave_0: entered allmulticast mode [ 328.286657][ T30] audit: type=1400 audit(1735210253.879:9318): avc: denied { prog_load } for pid=9497 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.294690][ T9430] bridge_slave_0: entered promiscuous mode [ 328.323517][ T30] audit: type=1400 audit(1735210253.879:9319): avc: denied { bpf } for pid=9497 comm="syz.1.942" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.436786][ T30] audit: type=1400 audit(1735210253.879:9320): avc: denied { perfmon } for pid=9497 comm="syz.1.942" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.489163][ T9430] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.528064][ T9430] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.590960][ T9430] bridge_slave_1: entered allmulticast mode [ 328.611813][ T9430] bridge_slave_1: entered promiscuous mode [ 328.733815][ T9430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.799934][ T52] hsr_slave_0: left promiscuous mode [ 328.827070][ T52] hsr_slave_1: left promiscuous mode [ 328.850584][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.863041][ T25] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 328.872022][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.893967][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.921969][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.001284][ T52] veth1_macvtap: left promiscuous mode [ 329.015551][ T52] veth0_macvtap: left promiscuous mode [ 329.031524][ T52] veth1_vlan: left promiscuous mode [ 329.041948][ T52] veth0_vlan: left promiscuous mode [ 329.077657][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 329.101205][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 329.132649][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 329.162731][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.194497][ T25] usb 2-1: config 0 descriptor?? [ 329.238530][ T25] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 329.518736][ T5174] bcm5974 2-1:0.0: could not read from device [ 329.571401][ T25] usb 2-1: USB disconnect, device number 35 [ 329.580290][ T5174] bcm5974 2-1:0.0: could not read from device [ 330.148965][ T5819] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 330.172961][ T5819] Bluetooth: hci2: command tx timeout [ 330.943451][ T52] team0 (unregistering): Port device team_slave_1 removed [ 331.016866][ T52] team0 (unregistering): Port device team_slave_0 removed [ 331.834334][ T9430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.918211][ T9533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.930672][ T9430] team0: Port device team_slave_0 added [ 331.952745][ T9533] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 331.961212][ T9430] team0: Port device team_slave_1 added [ 332.111493][ T9430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.175705][ T9533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.182154][ T9533] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 332.202811][ T9430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.245316][ T9430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.256807][ T5819] Bluetooth: hci2: command tx timeout [ 332.350284][ T9430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.357515][ T9430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.458241][ T9430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.556576][ T9533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.565740][ T9533] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 333.005980][ T9533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.070161][ T9533] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 333.079471][ T30] kauditd_printk_skb: 169 callbacks suppressed [ 333.079489][ T30] audit: type=1400 audit(1735210258.949:9490): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.082433][ T9430] hsr_slave_0: entered promiscuous mode [ 333.092079][ T30] audit: type=1400 audit(1735210258.949:9491): avc: denied { open } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.170121][ T9430] hsr_slave_1: entered promiscuous mode [ 333.171229][ T30] audit: type=1400 audit(1735210258.949:9492): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.204541][ T9533] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 333.213772][ T9430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.220156][ T30] audit: type=1400 audit(1735210258.989:9493): avc: denied { create } for pid=9561 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 333.299081][ T30] audit: type=1400 audit(1735210259.019:9494): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 333.330139][ T9430] Cannot create hsr debugfs directory [ 333.361365][ T30] audit: type=1400 audit(1735210259.019:9495): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.405356][ T9570] ebt_among: dst integrity fail: 101 [ 333.414209][ T30] audit: type=1400 audit(1735210259.019:9496): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.449065][ T30] audit: type=1400 audit(1735210259.019:9497): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.480072][ T30] audit: type=1400 audit(1735210259.019:9498): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 333.525417][ T30] audit: type=1400 audit(1735210259.019:9499): avc: denied { create } for pid=9561 comm="syz.0.959" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 333.672228][ T52] IPVS: stop unused estimator thread 0... [ 333.855305][ T9430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.875434][ T9430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.894528][ T9430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.908199][ T9430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.932810][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 334.010559][ T9430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.089397][ T9430] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.143542][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.150989][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.192398][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.199615][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.207587][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 334.252726][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 334.363025][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 334.384367][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.407548][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 334.427027][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 334.439888][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 334.455956][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 334.479475][ T25] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 334.496249][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 334.509278][ T25] usb 2-1: Product: syz [ 334.518923][ T25] usb 2-1: Manufacturer: syz [ 334.527640][ T25] usb 2-1: SerialNumber: syz [ 334.569472][ T25] usb 2-1: config 0 descriptor?? [ 334.573390][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 334.755394][ T9583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.966'. [ 334.799408][ T25] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 334.819950][ T25] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 334.904623][ T9430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.000277][ T25] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 335.029046][ T25] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 335.053068][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.081260][ T25] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 335.588539][ T9602] delete_channel: no stack [ 336.013886][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 336.024408][ T9593] delete_channel: no stack [ 336.305342][ T25] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 336.314302][ T25] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 336.328510][ T25] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 336.332813][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 336.343934][ T25] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 336.488168][ T9608] bond0: Error: Cannot enslave bond to itself. [ 336.653846][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 336.815264][ T5901] usb 2-1: USB disconnect, device number 36 [ 336.821191][ T9430] veth0_vlan: entered promiscuous mode [ 336.912398][ T9430] veth1_vlan: entered promiscuous mode [ 337.042376][ T9430] veth0_macvtap: entered promiscuous mode [ 337.054710][ T9430] veth1_macvtap: entered promiscuous mode [ 337.069981][ T9430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.080744][ T9430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.091984][ T9430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.102259][ T9430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.113193][ T9430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.123093][ T9430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.133837][ T9430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.144753][ T9430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.154570][ T9430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.163702][ T9430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.172419][ T9430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.181349][ T9430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.239803][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.364513][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.424218][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.083296][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 338.083313][ T30] audit: type=1400 audit(1735210263.959:9703): avc: denied { write } for pid=9430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 338.091552][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.137584][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.174062][ T30] audit: type=1400 audit(1735210263.959:9704): avc: denied { read } for pid=9430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 338.233125][ T30] audit: type=1400 audit(1735210264.009:9705): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 338.284286][ T30] audit: type=1400 audit(1735210264.009:9706): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.314313][ T30] audit: type=1400 audit(1735210264.009:9707): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 338.412038][ T30] audit: type=1400 audit(1735210264.009:9708): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 338.459715][ T30] audit: type=1400 audit(1735210264.009:9709): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 338.743435][ T30] audit: type=1400 audit(1735210264.039:9710): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.132827][ T30] audit: type=1400 audit(1735210264.039:9711): avc: denied { read write open } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.304314][ T30] audit: type=1400 audit(1735210264.039:9712): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.482700][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.818706][ T9637] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 339.938320][ T9637] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 339.971488][ T9629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.382736][ T5863] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 341.325896][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.988'. [ 341.336325][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.988'. [ 341.349784][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.363794][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.393443][ T5863] usb 3-1: device descriptor read/64, error -71 [ 341.790449][ T9669] IPVS: Error joining to the multicast group [ 341.867437][ T9672] netlink: 'syz.1.999': attribute type 9 has an invalid length. [ 341.967904][ T9655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.985'. [ 342.012813][ T5863] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 342.012913][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 342.152725][ T5863] usb 3-1: device descriptor read/64, error -71 [ 342.212933][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 342.297978][ T25] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 342.299180][ T5863] usb usb3-port1: attempt power cycle [ 342.310782][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.422830][ T25] usb 6-1: Product: syz [ 342.441530][ T25] usb 6-1: Manufacturer: syz [ 342.461972][ T25] usb 6-1: SerialNumber: syz [ 342.681394][ T25] usb 6-1: config 0 descriptor?? [ 342.794766][ T9685] netlink: 88 bytes leftover after parsing attributes in process `syz.4.994'. [ 342.912695][ T5863] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 342.943888][ T5863] usb 3-1: device descriptor read/8, error -71 [ 342.972232][ T9689] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 343.025596][ T9689] bond1: entered promiscuous mode [ 343.034171][ T25] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 343.034838][ T9689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.051900][ T9692] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709550923) [ 343.072651][ T25] 00 00 00 00 00 00 00 00 [ 343.077389][ T25] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 343.080604][ T9692] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 343.148578][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 343.148597][ T30] audit: type=1400 audit(1735210268.999:9984): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.256984][ T30] audit: type=1400 audit(1735210268.999:9985): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.355377][ T30] audit: type=1400 audit(1735210268.999:9986): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.411537][ T30] audit: type=1400 audit(1735210269.049:9987): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 343.482287][ T30] audit: type=1400 audit(1735210269.059:9988): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.542249][ T30] audit: type=1400 audit(1735210269.059:9989): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 343.604351][ T30] audit: type=1400 audit(1735210269.059:9990): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 343.634178][ T30] audit: type=1400 audit(1735210269.059:9991): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 343.680239][ T30] audit: type=1400 audit(1735210269.059:9992): avc: denied { read append } for pid=9693 comm="syz.2.997" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 343.714265][ T30] audit: type=1400 audit(1735210269.059:9993): avc: denied { open } for pid=9693 comm="syz.2.997" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.512780][ T46] usb 6-1: USB disconnect, device number 2 [ 344.552691][ T5863] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 344.642669][ T5829] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 344.706922][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 344.721602][ T5863] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 344.743380][ T5863] usb 5-1: config 0 has no interface number 1 [ 344.752232][ T5863] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 344.778262][ T5863] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 344.810101][ T5863] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 344.823169][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 344.847763][ T5829] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 344.861526][ T5829] usb 3-1: config 0 has no interface number 0 [ 344.869031][ T5863] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 345.484276][ T5863] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.497553][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 345.509506][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 30768, setting to 1024 [ 345.521396][ T5863] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 345.551710][ T5829] usb 3-1: New USB device found, idVendor=0eba, idProduct=1080, bcdDevice=df.02 [ 345.562697][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.570767][ T5829] usb 3-1: Product: syz [ 345.575039][ T5829] usb 3-1: Manufacturer: syz [ 345.579752][ T5829] usb 3-1: SerialNumber: syz [ 345.617530][ T5829] usb 3-1: config 0 descriptor?? [ 345.622956][ T9731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1007'. [ 345.631273][ T5829] pl2303 3-1:0.7: required endpoints missing [ 345.751404][ T5863] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 345.845516][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.859951][ T5863] usb 5-1: Product: syz [ 345.864706][ T5863] usb 5-1: Manufacturer: syz [ 345.869358][ T5863] usb 5-1: SerialNumber: syz [ 345.874414][ T46] usb 3-1: USB disconnect, device number 45 [ 345.903143][ T5863] usb 5-1: config 0 descriptor?? [ 345.910893][ T9715] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 345.921822][ T5863] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.932274][ T5863] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 346.407704][ T5901] usb 5-1: USB disconnect, device number 38 [ 346.607279][ T9745] mkiss: ax0: crc mode is auto. [ 347.673228][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.693005][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.880349][ T9777] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.1023'. [ 347.952015][ T9777] openvswitch: netlink: Flow key attr not present in new flow. [ 348.367184][ T30] kauditd_printk_skb: 336 callbacks suppressed [ 348.367202][ T30] audit: type=1400 audit(1735210274.239:10330): avc: denied { name_connect } for pid=9771 comm="syz.5.1022" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 348.419277][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 348.491049][ T30] audit: type=1400 audit(1735210274.289:10331): avc: denied { create } for pid=9776 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.535834][ T30] audit: type=1400 audit(1735210274.289:10332): avc: denied { ioctl } for pid=9776 comm="syz.1.1023" path="socket:[23269]" dev="sockfs" ino=23269 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.614830][ T30] audit: type=1400 audit(1735210274.289:10333): avc: denied { bind } for pid=9776 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.686859][ T30] audit: type=1400 audit(1735210274.289:10334): avc: denied { setopt } for pid=9776 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.772588][ T30] audit: type=1400 audit(1735210274.299:10335): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 348.811915][ T30] audit: type=1400 audit(1735210274.309:10336): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.822764][ T9795] mmap: syz.5.1028 (9795) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 348.985505][ T5819] Bluetooth: hci0: unexpected event for opcode 0x200c [ 349.001997][ T30] audit: type=1400 audit(1735210274.319:10337): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.825097][ T30] audit: type=1400 audit(1735210274.319:10338): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.850256][ T5171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.082102][ T9813] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 350.412694][ T5863] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 350.421214][ T5901] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 350.587612][ T5863] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 350.600897][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 350.616327][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.630533][ T5901] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 350.648732][ T5901] usb 2-1: config 0 has no interface number 0 [ 350.661064][ T5863] usb 3-1: Product: syz [ 350.722674][ T5901] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 350.742824][ T5863] usb 3-1: Manufacturer: syz [ 350.768725][ T5863] usb 3-1: SerialNumber: syz [ 350.778362][ T5901] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 350.802270][ T5863] usb 3-1: config 0 descriptor?? [ 350.810726][ T5901] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 350.825817][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.840229][ T5901] usb 2-1: Product: syz [ 350.850637][ T5901] usb 2-1: Manufacturer: syz [ 350.857858][ T5901] usb 2-1: SerialNumber: syz [ 350.879474][ T5901] usb 2-1: config 0 descriptor?? [ 350.899954][ T9809] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 350.918728][ T9809] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 350.954959][ T5901] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f6:bf:33:a3:f4:54 [ 351.252006][ T5863] usb 3-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 351.485514][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 351.734288][ T5814] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 351.778417][ T5819] Bluetooth: hci2: unexpected event for opcode 0x200c [ 352.052278][ T5863] usb 3-1: failed to fetch extended address, random address set [ 352.126377][ T5863] usb 3-1: USB disconnect, device number 46 [ 352.170686][ T5814] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 352.180278][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.188754][ T5814] usb 5-1: Product: syz [ 352.193221][ T5814] usb 5-1: Manufacturer: syz [ 352.201866][ T5814] usb 5-1: SerialNumber: syz [ 352.277915][ T5814] usb 5-1: config 0 descriptor?? [ 352.652676][ T5814] usb 5-1: USB disconnect, device number 39 [ 352.996306][ T5863] usb 2-1: USB disconnect, device number 37 [ 353.064297][ T5863] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 353.373808][ T30] kauditd_printk_skb: 323 callbacks suppressed [ 353.373840][ T30] audit: type=1400 audit(1735210279.249:10633): avc: denied { ioctl } for pid=9873 comm="syz.4.1049" path="/dev/nbd4" dev="devtmpfs" ino=683 ioctlcmd=0xab00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.454376][ T30] audit: type=1400 audit(1735210279.249:10634): avc: denied { module_request } for pid=9876 comm="syz.0.1052" kmod="fs-cpuset" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 353.539823][ T9873] block nbd4: shutting down sockets [ 353.562690][ T30] audit: type=1400 audit(1735210279.249:10635): avc: denied { setopt } for pid=9875 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 353.737063][ T5818] Bluetooth: hci1: unexpected event for opcode 0x200c [ 353.982860][ T30] audit: type=1400 audit(1735210279.249:10636): avc: denied { setopt } for pid=9875 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 354.002632][ T30] audit: type=1400 audit(1735210279.249:10637): avc: denied { connect } for pid=9875 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 354.022680][ T30] audit: type=1400 audit(1735210279.249:10638): avc: denied { setopt } for pid=9875 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 354.042420][ T30] audit: type=1400 audit(1735210279.249:10639): avc: denied { prog_load } for pid=9875 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 354.062375][ T30] audit: type=1400 audit(1735210279.249:10640): avc: denied { bpf } for pid=9875 comm="syz.1.1050" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 354.083347][ T30] audit: type=1400 audit(1735210279.249:10641): avc: denied { perfmon } for pid=9875 comm="syz.1.1050" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 354.104587][ T30] audit: type=1400 audit(1735210279.249:10642): avc: denied { prog_run } for pid=9875 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 354.164231][ T9898] 9pnet_fd: Insufficient options for proto=fd [ 354.374015][ T9908] ax25_connect(): syz.5.1055 uses autobind, please contact jreuter@yaina.de [ 355.614182][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.610982][ T9938] overlayfs: failed to get inode (-116) [ 356.665003][ T9939] 9pnet_fd: Insufficient options for proto=fd [ 356.681769][ T5819] Bluetooth: hci0: unexpected event for opcode 0x200c [ 356.942075][ T9938] overlayfs: failed to get inode (-116) [ 357.079972][ T9941] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 358.252619][ T25] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 358.472620][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 358.472641][ T30] audit: type=1400 audit(1735210284.309:10942): avc: denied { ioctl } for pid=9942 comm="syz.1.1070" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 358.503751][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.551452][ T25] usb 2-1: Invalid ep0 maxpacket: 32 [ 359.273415][ T30] audit: type=1400 audit(1735210284.449:10943): avc: denied { create } for pid=9965 comm="syz.2.1077" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 359.337092][ T30] audit: type=1400 audit(1735210284.449:10944): avc: denied { ioctl } for pid=9965 comm="syz.2.1077" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24127 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 359.364320][ T25] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 359.392057][ T30] audit: type=1400 audit(1735210285.009:10945): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 359.492265][ T9983] 9pnet_fd: Insufficient options for proto=fd [ 359.503635][ T9977] overlayfs: conflicting lowerdir path [ 359.503656][ T5819] Bluetooth: hci3: unexpected event for opcode 0x200c [ 359.537813][ T25] usb 2-1: Invalid ep0 maxpacket: 32 [ 359.564444][ T25] usb usb2-port1: attempt power cycle [ 359.796140][ T30] audit: type=1400 audit(1735210285.009:10946): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.947527][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 359.969270][ T25] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 359.972164][ T30] audit: type=1400 audit(1735210285.009:10947): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.068094][ T25] usb 2-1: Invalid ep0 maxpacket: 32 [ 360.085809][ T9990] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.092344][ T9990] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 360.100456][ T9990] audit: backlog limit exceeded [ 360.114277][ T9945] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.166320][ T9994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1083'. [ 360.223654][ T25] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 360.280172][ T25] usb 2-1: device descriptor read/8, error -71 [ 360.417256][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1086'. [ 360.426356][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1086'. [ 360.469211][T10009] trusted_key: encrypted_key: insufficient parameters specified [ 360.479368][ T25] usb usb2-port1: unable to enumerate USB device [ 361.405502][T10014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 361.616452][T10024] 9pnet_fd: Insufficient options for proto=fd [ 361.647005][ T5819] Bluetooth: hci3: unexpected event for opcode 0x200c [ 362.200873][T10040] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1097'. [ 362.205256][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 362.216125][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 362.305348][T10034] ceph: No mds server is up or the cluster is laggy [ 362.537524][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 362.548777][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 363.092799][ T5829] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 363.164822][T10052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 363.324293][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1105'. [ 363.374105][ T5829] usb 6-1: device descriptor read/64, error -71 [ 363.960019][ T30] kauditd_printk_skb: 389 callbacks suppressed [ 363.960038][ T30] audit: type=1400 audit(1735210289.829:11251): avc: denied { ioctl } for pid=10046 comm="syz.5.1099" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.010138][ T30] audit: type=1400 audit(1735210289.879:11252): avc: denied { create } for pid=10078 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.032772][ T30] audit: type=1400 audit(1735210289.879:11253): avc: denied { ioctl } for pid=10078 comm="syz.0.1108" path="socket:[24972]" dev="sockfs" ino=24972 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.060075][ T30] audit: type=1400 audit(1735210289.899:11254): avc: denied { ioctl } for pid=10075 comm="syz.2.1107" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.085592][ T5829] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 364.096499][ T5901] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 364.109839][ T30] audit: type=1400 audit(1735210289.899:11255): avc: denied { ioctl } for pid=10046 comm="syz.5.1099" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.169864][ T30] audit: type=1400 audit(1735210290.009:11256): avc: denied { ioctl } for pid=10075 comm="syz.2.1107" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.212014][ T30] audit: type=1400 audit(1735210290.009:11257): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.246295][ T30] audit: type=1400 audit(1735210290.009:11258): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.271243][ T5901] usb 3-1: device descriptor read/64, error -71 [ 364.311198][ T5189] udevd[5189]: worker [5826] terminated by signal 33 (Unknown signal 33) [ 364.363033][ T5829] usb 6-1: device descriptor read/64, error -71 [ 364.386461][ T30] audit: type=1400 audit(1735210290.019:11259): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.431024][ T30] audit: type=1400 audit(1735210290.039:11260): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 364.440125][T10081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10081 comm=syz.0.1108 [ 364.687082][ T5819] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 364.695098][ T5819] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 364.703471][ T5829] usb usb6-port1: attempt power cycle [ 364.723391][T10091] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 365.050952][ T5829] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 365.283172][T10097] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 365.298291][T10097] netlink: 'syz.0.1111': attribute type 9 has an invalid length. [ 365.306133][T10097] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1111'. [ 365.649774][ T5829] usb 6-1: device not accepting address 5, error -71 [ 365.802997][ T5814] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 366.162907][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 366.186280][ T5814] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 366.262960][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.271974][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.279706][ T5814] usb 2-1: config 0 has no interface number 0 [ 366.303838][ T5814] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 366.337542][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.361595][ T5814] usb 2-1: Product: syz [ 366.372188][ T5814] usb 2-1: Manufacturer: syz [ 366.381679][ T5814] usb 2-1: SerialNumber: syz [ 366.394386][ T5814] usb 2-1: config 0 descriptor?? [ 366.402307][ T5814] smsc95xx v2.0.0 [ 366.603517][ T5901] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 366.676487][T10119] syz.5.1118[10119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.676594][T10119] syz.5.1118[10119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.690238][T10119] syz.5.1118[10119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.754492][ T5901] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.148352][T10098] kernel read not supported for file /,): (pid: 10098 comm: syz.1.1113) [ 367.155637][ T5901] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 367.166868][ T5901] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 367.176605][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.193274][T10107] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 367.204451][ T5901] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 367.254082][T10098] 9pnet_fd: Insufficient options for proto=fd [ 367.264955][ T5814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 367.298697][ T5814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 367.326472][ T5814] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 367.353843][ T5814] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 367.391580][ T5814] usb 2-1: USB disconnect, device number 42 [ 367.429803][T10106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 367.437125][T10106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.446596][T10106] vhci_hcd vhci_hcd.0: Device attached [ 367.693008][ T5829] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 367.726650][T10147] netlink: 'syz.4.1123': attribute type 10 has an invalid length. [ 367.770099][T10147] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 368.052012][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1122'. [ 368.082480][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1122'. [ 368.262350][T10154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1126'. [ 368.302203][T10154] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1126'. [ 368.329316][T10154] netlink: 'syz.0.1126': attribute type 6 has an invalid length. [ 368.352311][T10156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1126'. [ 368.373196][T10154] netlink: 'syz.0.1126': attribute type 5 has an invalid length. [ 368.401457][T10154] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1126'. [ 368.494447][T10137] vhci_hcd: connection reset by peer [ 368.516197][ T5814] usb 3-1: USB disconnect, device number 49 [ 368.535657][ T3921] vhci_hcd: stop threads [ 368.541680][ T3921] vhci_hcd: release socket [ 368.608327][ T3921] vhci_hcd: disconnect device [ 369.058722][ T30] kauditd_printk_skb: 308 callbacks suppressed [ 369.058762][ T30] audit: type=1400 audit(1735210294.889:11569): avc: denied { create } for pid=10168 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.391405][ T30] audit: type=1400 audit(1735210294.899:11570): avc: denied { prog_load } for pid=10168 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.482388][ T30] audit: type=1400 audit(1735210294.899:11571): avc: denied { bpf } for pid=10168 comm="syz.4.1130" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.534878][ T30] audit: type=1400 audit(1735210294.899:11572): avc: denied { perfmon } for pid=10168 comm="syz.4.1130" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.654849][ T30] audit: type=1400 audit(1735210294.909:11573): avc: denied { create } for pid=10168 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.675977][ T30] audit: type=1400 audit(1735210294.909:11574): avc: denied { write } for pid=10168 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.696639][ T30] audit: type=1400 audit(1735210294.909:11575): avc: denied { read } for pid=10168 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.758669][ T30] audit: type=1400 audit(1735210294.919:11576): avc: denied { create } for pid=10168 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.832838][ T30] audit: type=1400 audit(1735210295.429:11577): avc: denied { read write } for pid=9430 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.892744][ T30] audit: type=1400 audit(1735210295.429:11578): avc: denied { read write open } for pid=9430 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.007383][ T970] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 370.198399][ T970] usb 6-1: too many configurations: 44, using maximum allowed: 8 [ 370.209685][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 370.232993][ T970] usb 6-1: can't read configurations, error -61 [ 370.257339][T10206] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 370.270659][T10206] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 370.405796][ T970] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 370.854071][ T970] usb 6-1: too many configurations: 44, using maximum allowed: 8 [ 370.889600][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 370.907623][ T970] usb 6-1: can't read configurations, error -61 [ 370.921608][ T970] usb usb6-port1: attempt power cycle [ 371.176874][T10225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1147'. [ 371.217866][T10225] Invalid logical block size (1792) [ 371.257136][T10225] 9pnet_fd: Insufficient options for proto=fd [ 371.402642][ T970] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 371.457436][ T970] usb 6-1: too many configurations: 44, using maximum allowed: 8 [ 371.470599][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 371.482642][ T970] usb 6-1: can't read configurations, error -61 [ 371.636525][ T970] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 371.672708][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 371.681068][ T970] usb 6-1: too many configurations: 44, using maximum allowed: 8 [ 371.705043][ T970] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 371.722689][ T970] usb 6-1: can't read configurations, error -61 [ 371.730494][ T970] usb usb6-port1: unable to enumerate USB device [ 371.812650][ T25] usb 3-1: device descriptor read/64, error -71 [ 371.906579][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 372.054357][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 372.222624][ T25] usb 3-1: device descriptor read/64, error -71 [ 372.232755][ T970] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 372.334578][ T25] usb usb3-port1: attempt power cycle [ 372.346308][T10237] IPVS: You probably need to specify IP address on multicast interface. [ 372.378029][T10237] IPVS: Error connecting to the multicast addr [ 372.661606][T10256] tmpfs: Bad value for 'mpol' [ 372.693721][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 372.766326][ T25] usb 3-1: device descriptor read/8, error -71 [ 372.812909][ T5829] vhci_hcd: vhci_device speed not set [ 373.022727][ T25] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 373.064994][ T25] usb 3-1: device descriptor read/8, error -71 [ 373.189417][T10246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.193175][ T25] usb usb3-port1: unable to enumerate USB device [ 373.206015][T10246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.681476][T10279] autofs: Unknown parameter 'ÑT' [ 374.020732][T10287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.127824][ T30] kauditd_printk_skb: 375 callbacks suppressed [ 374.127842][ T30] audit: type=1400 audit(1735210299.999:11954): avc: denied { write } for pid=10240 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 374.172791][ T30] audit: type=1400 audit(1735210300.039:11955): avc: denied { create } for pid=10286 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.198405][ T5819] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 374.208393][ T30] audit: type=1400 audit(1735210300.069:11956): avc: denied { write } for pid=10286 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.229653][ T30] audit: type=1400 audit(1735210300.069:11957): avc: denied { read } for pid=10286 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.250543][ T30] audit: type=1400 audit(1735210300.069:11958): avc: denied { write } for pid=10286 comm="syz.1.1165" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 374.275709][ T30] audit: type=1400 audit(1735210300.069:11959): avc: denied { create } for pid=10286 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.296456][ T30] audit: type=1400 audit(1735210300.069:11960): avc: denied { ioctl } for pid=10286 comm="syz.1.1165" path="socket:[25981]" dev="sockfs" ino=25981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.330027][ T30] audit: type=1400 audit(1735210300.069:11961): avc: denied { ioctl } for pid=10286 comm="syz.1.1165" path="socket:[25979]" dev="sockfs" ino=25979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.359510][ T30] audit: type=1400 audit(1735210300.079:11962): avc: denied { read write } for pid=10286 comm="syz.1.1165" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.385655][ T30] audit: type=1400 audit(1735210300.079:11963): avc: denied { open } for pid=10286 comm="syz.1.1165" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.453532][ T5829] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 374.606608][T10295] netlink: 'syz.0.1167': attribute type 29 has an invalid length. [ 374.616143][T10294] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 374.652980][ T5829] usb 2-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 374.664299][T10294] bond1: entered promiscuous mode [ 374.669679][T10294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.676525][ T5829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.687814][T10295] netlink: 'syz.0.1167': attribute type 29 has an invalid length. [ 374.713112][ T5829] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.722571][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.730718][ T5829] usb 2-1: SerialNumber: syz [ 374.778097][T10298] netlink: 'syz.0.1167': attribute type 29 has an invalid length. [ 374.803411][T10298] netlink: 'syz.0.1167': attribute type 29 has an invalid length. [ 374.812057][T10298] netlink: 'syz.0.1167': attribute type 29 has an invalid length. [ 374.823657][T10298] netlink: 'syz.0.1167': attribute type 29 has an invalid length. [ 374.834202][T10298] netlink: 'syz.0.1167': attribute type 29 has an invalid length. [ 374.842833][T10298] netlink: 'syz.0.1167': attribute type 29 has an invalid length. [ 374.912974][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1168'. [ 374.936100][T10294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'. [ 375.052718][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.096560][ T5829] usb 2-1: 0:2 : does not exist [ 375.161799][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1168'. [ 375.181601][ T5829] usb 2-1: USB disconnect, device number 43 [ 375.221945][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.266571][ T970] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 375.275324][T10294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1168'. [ 375.284707][ T970] usb 5-1: can't read configurations, error -71 [ 375.309577][T10297] bond2: entered promiscuous mode [ 375.316487][T10297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.328099][T10297] bond1: (slave bond2): making interface the new active one [ 375.337918][T10297] bond1: (slave bond2): Enslaving as an active interface with an up link [ 375.535083][ T5814] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 375.733752][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.851431][ T25] libceph: connect (1)[c::]:6789 error -101 [ 375.851533][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 375.855281][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.855332][ T5814] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 375.855357][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.865363][ T5814] usb 6-1: config 0 descriptor?? [ 376.214937][ T25] libceph: connect (1)[c::]:6789 error -101 [ 376.221854][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 376.235288][T10310] ceph: No mds server is up or the cluster is laggy [ 376.498312][T10325] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 376.835852][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 376.842122][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 376.880340][ T5814] usb 6-1: string descriptor 0 read error: -22 [ 377.208546][ T5814] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0012/input/input25 [ 377.308710][ T5814] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 377.756703][T10348] 9pnet_fd: Insufficient options for proto=fd [ 377.816671][T10351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1182'. [ 377.826086][ T5829] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 377.982710][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 377.988926][ T5829] usb 3-1: too many configurations: 116, using maximum allowed: 8 [ 377.998537][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 378.006301][ T5829] usb 3-1: can't read configurations, error -61 [ 378.029849][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 378.039378][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 378.052860][ T970] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 378.111474][T10359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1184'. [ 378.162723][ T5829] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 378.162745][ T5890] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 378.214304][ T970] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 378.223016][ T970] usb 5-1: config 0 has no interface number 0 [ 378.231149][ T970] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 378.240380][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.248663][ T970] usb 5-1: Product: syz [ 378.253112][ T970] usb 5-1: Manufacturer: syz [ 378.257721][ T970] usb 5-1: SerialNumber: syz [ 378.265703][ T970] usb 5-1: config 0 descriptor?? [ 378.280691][ T970] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 378.322702][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 378.331910][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.343186][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.352835][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 378.353144][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 378.359981][ T5829] usb 3-1: too many configurations: 116, using maximum allowed: 8 [ 378.371004][ T5890] usb 2-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.00 [ 378.371035][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.373072][ T5890] usb 2-1: config 0 descriptor?? [ 378.385520][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 378.409440][ T5829] usb 3-1: can't read configurations, error -61 [ 378.416367][ T5829] usb usb3-port1: attempt power cycle [ 378.481194][ T970] usb 5-1: USB disconnect, device number 42 [ 378.595998][ T5890] usb 2-1: string descriptor 0 read error: -71 [ 378.607526][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 378.613738][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 378.623916][ T5890] usb 2-1: USB disconnect, device number 44 [ 378.659578][ T25] usb 6-1: USB disconnect, device number 11 [ 378.846249][ T5829] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 378.875444][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 378.882281][ T5829] usb 3-1: too many configurations: 116, using maximum allowed: 8 [ 378.891362][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 378.899139][ T5829] usb 3-1: can't read configurations, error -61 [ 378.999710][T10365] batadv1: entered promiscuous mode [ 379.008989][T10365] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 379.082650][ T5829] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 379.113507][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 379.274247][ T5829] usb 3-1: too many configurations: 116, using maximum allowed: 8 [ 379.285932][ T30] kauditd_printk_skb: 260 callbacks suppressed [ 379.285949][ T30] audit: type=1400 audit(1735210305.159:12224): avc: denied { ioctl } for pid=10332 comm="syz.2.1178" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.327146][ T30] audit: type=1400 audit(1735210305.199:12225): avc: denied { ioctl } for pid=10332 comm="syz.2.1178" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.352973][ T30] audit: type=1400 audit(1735210305.209:12226): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.377995][ T30] audit: type=1400 audit(1735210305.209:12227): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.402305][ T30] audit: type=1400 audit(1735210305.209:12228): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.428208][ T30] audit: type=1400 audit(1735210305.229:12229): avc: denied { ioctl } for pid=10360 comm="syz.5.1186" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.453347][ T30] audit: type=1400 audit(1735210305.229:12230): avc: denied { ioctl } for pid=10332 comm="syz.2.1178" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.479011][ T30] audit: type=1400 audit(1735210305.249:12231): avc: denied { ioctl } for pid=10332 comm="syz.2.1178" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.497011][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 379.504586][ T30] audit: type=1400 audit(1735210305.279:12232): avc: denied { create } for pid=10370 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 379.532423][ T30] audit: type=1400 audit(1735210305.309:12233): avc: denied { ioctl } for pid=10360 comm="syz.5.1186" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.559354][ T5829] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 379.567402][ T5829] usb 3-1: can't read configurations, error -61 [ 379.574374][ T5829] usb usb3-port1: unable to enumerate USB device [ 379.663808][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 379.674606][ T25] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 379.688711][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 379.708004][ T25] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 379.920973][ T25] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 379.935116][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 379.949057][ T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 380.539202][T10386] Invalid ELF header magic: != ELF [ 380.549394][T10386] ntfs3(nullb0): Primary boot signature is not NTFS. [ 380.556459][T10386] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 380.806692][ T25] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 380.815381][ T25] usb 6-1: Product: syz [ 380.819552][ T25] usb 6-1: Manufacturer: syz [ 380.824740][ T25] usb 6-1: SerialNumber: syz [ 380.903629][ T25] usb 6-1: config 0 descriptor?? [ 380.967964][ T25] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 380.994260][ T25] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 381.054565][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.061057][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.304224][ T5890] usb 6-1: USB disconnect, device number 12 [ 381.327854][ T5890] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 381.894135][T10420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.902046][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 381.912759][T10420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.967234][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 382.122644][ T5890] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 382.158286][T10430] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1205'. [ 382.401582][T10440] lo: entered allmulticast mode [ 382.407315][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 382.432767][ T5901] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 382.457494][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.471714][ T5890] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 382.481224][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.489378][ T5890] usb 2-1: Product: syz [ 382.496279][ T5890] usb 2-1: Manufacturer: syz [ 382.500947][ T5890] usb 2-1: SerialNumber: syz [ 382.602795][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 382.614038][ T5901] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 382.628772][ T5901] usb 5-1: config 0 has no interface number 1 [ 382.635271][ T5901] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.655425][ T5901] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 382.656812][ T5890] usb 2-1: config 0 descriptor?? [ 382.667696][ T5901] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 382.681612][ T5890] ums-jumpshot 2-1:0.0: USB Mass Storage device detected [ 382.684220][ T5901] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 382.702328][ T5901] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.703867][ T5890] ums-jumpshot 2-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 382.721943][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 382.737720][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 30768, setting to 1024 [ 382.751290][ T5901] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 382.947712][ T5901] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 382.957119][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.965414][ T5901] usb 5-1: Product: syz [ 382.969693][ T5901] usb 5-1: Manufacturer: syz [ 382.975224][ T5901] usb 5-1: SerialNumber: syz [ 383.482964][ T46] usb 2-1: USB disconnect, device number 45 [ 383.490732][ T5901] usb 5-1: config 0 descriptor?? [ 383.497018][T10433] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 383.507723][ T5901] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.517553][ T5901] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.619643][T10459] netlink: 'syz.5.1213': attribute type 33 has an invalid length. [ 383.758925][ T5829] usb 5-1: USB disconnect, device number 43 [ 383.847160][ T5901] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 384.012834][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 384.041932][ T5901] usb 3-1: config 0 has an invalid interface number: 163 but max is 0 [ 384.053678][ T5901] usb 3-1: config 0 has no interface number 0 [ 384.095432][ T5901] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice= 2.00 [ 384.105083][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.116987][ T5901] usb 3-1: Product: syz [ 384.129449][ T5901] usb 3-1: Manufacturer: syz [ 384.138159][ T5901] usb 3-1: SerialNumber: syz [ 384.163836][ T5901] usb 3-1: config 0 descriptor?? [ 384.260829][T10483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28792 sclass=netlink_route_socket pid=10483 comm=syz.5.1218 [ 384.360770][ T30] kauditd_printk_skb: 342 callbacks suppressed [ 384.360788][ T30] audit: type=1400 audit(1735211526.233:12576): avc: denied { mounton } for pid=10484 comm="syz.0.1219" path="/336/file0" dev="tmpfs" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 384.452652][ T30] audit: type=1400 audit(1735211526.233:12577): avc: denied { prog_load } for pid=10484 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 384.521936][ T30] audit: type=1400 audit(1735211526.243:12578): avc: denied { bpf } for pid=10484 comm="syz.0.1219" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 384.550709][ T5901] cypress_m8 3-1:0.163: Nokia CA-42 V2 Adapter converter detected [ 384.603059][ T5901] nokiaca42v2 ttyUSB0: required endpoint is missing [ 384.608941][ T30] audit: type=1400 audit(1735211526.243:12579): avc: denied { perfmon } for pid=10484 comm="syz.0.1219" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 384.700186][ T30] audit: type=1400 audit(1735211526.243:12580): avc: denied { prog_load } for pid=10484 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 384.762949][ T5901] usb 3-1: USB disconnect, device number 58 [ 384.947815][ T5901] cypress_m8 3-1:0.163: device disconnected [ 385.012699][ T30] audit: type=1400 audit(1735211526.243:12581): avc: denied { bpf } for pid=10484 comm="syz.0.1219" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.095534][ T30] audit: type=1400 audit(1735211526.243:12582): avc: denied { prog_run } for pid=10484 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.152609][ T30] audit: type=1400 audit(1735211526.263:12583): avc: denied { write } for pid=10453 comm="syz.2.1212" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.199910][ T30] audit: type=1400 audit(1735211526.273:12584): avc: denied { map_create } for pid=10453 comm="syz.2.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.224943][ T30] audit: type=1400 audit(1735211526.273:12585): avc: denied { map_read map_write } for pid=10453 comm="syz.2.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.763622][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 400.763651][ T30] audit: type=1400 audit(1735211542.643:12732): avc: denied { read } for pid=10513 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 400.793047][ T30] audit: type=1400 audit(1735211542.643:12733): avc: denied { read } for pid=10513 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 401.080450][ T30] audit: type=1400 audit(1735211542.953:12734): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 401.125718][ T30] audit: type=1400 audit(1735211542.953:12735): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.168861][ T30] audit: type=1400 audit(1735211542.953:12736): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.192761][ T30] audit: type=1400 audit(1735211542.953:12737): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.216426][ T30] audit: type=1400 audit(1735211542.953:12738): avc: denied { getattr } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 401.260039][ T30] audit: type=1400 audit(1735211543.023:12739): avc: denied { read } for pid=10515 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Connection to 10.128.1.14 closed by remote host. Stopping sshd: [ 401.623142][ T30] audit: type=1400 audit(1735211543.493:12740): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 401.651348][ T30] audit: type=1400 audit(1735211543.493:12741): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5482) Stopping network: OK Stopping iptables: OK Stopping system message bus: done killall: udevd: no process killed Stopping klogd: start-stop-daemon: warning: killing process 5178: No such process FAIL Stopping acpid: OK Stopping syslogd: OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 405.481613][ T3921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.494343][ T3921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.650034][ T3921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.662435][ T3921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.727928][ T3921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.738548][ T3921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 405.837992][ T3921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.848407][ T3921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.938691][ T3921] ÿÿÿÿ: left allmulticast mode [ 405.943699][ T3921] ÿÿÿÿ: left promiscuous mode [ 405.948627][ T3921] bridge0: port 2(ÿÿÿÿ) entered disabled state [ 405.957848][ T3921] bridge_slave_0: left allmulticast mode [ 405.963720][ T3921] bridge_slave_0: left promiscuous mode [ 405.969410][ T3921] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.461803][ T3921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.472080][ T3921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.483471][ T3921] bond0 (unregistering): Released all slaves [ 406.691056][ T3921] bond1 (unregistering): (slave bond2): Releasing backup interface [ 406.700298][ T3921] bond1 (unregistering): Released all slaves [ 406.819504][T10549] ------------[ cut here ]------------ [ 406.835306][T10549] Invalid notifier called! [ 406.835933][T10549] WARNING: CPU: 1 PID: 10549 at kernel/notifier.c:79 notifier_call_chain+0x395/0x410 [ 406.850315][T10549] Modules linked in: [ 406.854294][T10549] CPU: 1 UID: 0 PID: 10549 Comm: init Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 406.864956][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 406.875080][T10549] RIP: 0010:notifier_call_chain+0x395/0x410 [ 406.881101][T10549] Code: 00 44 89 f8 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 39 39 34 00 90 48 c7 c7 a0 14 6c 8b e8 bc 72 f4 ff 90 <0f> 0b 90 90 e9 70 fd ff ff e8 1d 39 34 00 90 0f 0b 90 e9 2e fe ff [ 406.901144][T10549] RSP: 0018:ffffc90005617cc8 EFLAGS: 00010286 [ 406.907432][T10549] RAX: 0000000000000000 RBX: ffff8880357258c8 RCX: ffffffff815a50d9 [ 406.915484][T10549] RDX: ffff88806c474880 RSI: ffffffff815a50e6 RDI: 0000000000000001 [ 406.924056][T10549] RBP: 00000000fffffffd R08: 0000000000000001 R09: 0000000000000000 [ 406.932088][T10549] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 406.940194][T10549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.948220][T10549] FS: 00007f5abf6e4500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 406.957452][T10549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.964099][T10549] CR2: 0000563ab64d5600 CR3: 0000000035cc4000 CR4: 00000000003526f0 [ 406.972073][T10549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.980150][T10549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 406.988715][T10549] Call Trace: [ 406.992042][T10549] [ 406.995242][T10549] ? __warn+0xea/0x3c0 [ 406.999345][T10549] ? preempt_schedule_notrace+0x62/0xe0 [ 407.005080][T10549] ? notifier_call_chain+0x395/0x410 [ 407.010388][T10549] ? report_bug+0x3c0/0x580 [ 407.015256][T10549] ? handle_bug+0x54/0xa0 [ 407.019583][T10549] ? exc_invalid_op+0x17/0x50 [ 407.024299][T10549] ? asm_exc_invalid_op+0x1a/0x20 [ 407.029341][T10549] ? __warn_printk+0x199/0x350 [ 407.034270][T10549] ? __warn_printk+0x1a6/0x350 [ 407.039077][T10549] ? notifier_call_chain+0x395/0x410 [ 407.044662][T10549] ? notifier_call_chain+0x394/0x410 [ 407.049940][T10549] ? __pfx_bcache_reboot+0x10/0x10 [ 407.055158][T10549] blocking_notifier_call_chain+0x69/0xa0 [ 407.060892][T10549] kernel_power_off+0x1c/0xb0 [ 407.065615][T10549] __do_sys_reboot+0x376/0x3e0 [ 407.070368][T10549] ? __pfx___do_sys_reboot+0x10/0x10 [ 407.075982][T10549] ? xfd_validate_state+0x5d/0x180 [ 407.081088][T10549] do_syscall_64+0xcd/0x250 [ 407.085622][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.091509][T10549] RIP: 0033:0x7f5abf83d8b4 [ 407.096022][T10549] Code: f0 ff ff 73 01 c3 48 8b 0d 71 55 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 89 fa be 69 19 12 28 bf ad de e1 fe b8 a9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 45 55 0d 00 f7 d8 64 89 02 48 83 [ 407.116376][T10549] RSP: 002b:00007ffd0938e508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a9 [ 407.125023][T10549] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f5abf83d8b4 [ 407.133177][T10549] RDX: 000000004321fedc RSI: 0000000028121969 RDI: 00000000fee1dead [ 407.141180][T10549] RBP: 000000004321fedc R08: 0000000000000000 R09: 0000000000000000 [ 407.149731][T10549] R10: 00007ffd0938e4e0 R11: 0000000000000246 R12: 0000000000000000 [ 407.158016][T10549] R13: 00007ffd0938e568 R14: 0000560d629e7169 R15: 00007f5abfa1ba80 [ 407.166059][T10549] [ 407.169069][T10549] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 407.176343][T10549] CPU: 1 UID: 0 PID: 10549 Comm: init Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 407.186586][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.196631][T10549] Call Trace: [ 407.199900][T10549] [ 407.202815][T10549] dump_stack_lvl+0x3d/0x1f0 [ 407.207425][T10549] panic+0x71d/0x800 [ 407.211344][T10549] ? __pfx_panic+0x10/0x10 [ 407.215789][T10549] ? show_trace_log_lvl+0x29d/0x3d0 [ 407.220990][T10549] ? check_panic_on_warn+0x1f/0xb0 [ 407.226113][T10549] ? notifier_call_chain+0x395/0x410 [ 407.231415][T10549] check_panic_on_warn+0xab/0xb0 [ 407.236352][T10549] __warn+0xf6/0x3c0 [ 407.240234][T10549] ? preempt_schedule_notrace+0x62/0xe0 [ 407.245771][T10549] ? notifier_call_chain+0x395/0x410 [ 407.251050][T10549] report_bug+0x3c0/0x580 [ 407.255368][T10549] handle_bug+0x54/0xa0 [ 407.259510][T10549] exc_invalid_op+0x17/0x50 [ 407.264003][T10549] asm_exc_invalid_op+0x1a/0x20 [ 407.268846][T10549] RIP: 0010:notifier_call_chain+0x395/0x410 [ 407.274740][T10549] Code: 00 44 89 f8 48 83 c4 30 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 39 39 34 00 90 48 c7 c7 a0 14 6c 8b e8 bc 72 f4 ff 90 <0f> 0b 90 90 e9 70 fd ff ff e8 1d 39 34 00 90 0f 0b 90 e9 2e fe ff [ 407.294349][T10549] RSP: 0018:ffffc90005617cc8 EFLAGS: 00010286 [ 407.300414][T10549] RAX: 0000000000000000 RBX: ffff8880357258c8 RCX: ffffffff815a50d9 [ 407.308448][T10549] RDX: ffff88806c474880 RSI: ffffffff815a50e6 RDI: 0000000000000001 [ 407.316416][T10549] RBP: 00000000fffffffd R08: 0000000000000001 R09: 0000000000000000 [ 407.324385][T10549] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 407.332348][T10549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 407.340317][T10549] ? __warn_printk+0x199/0x350 [ 407.345084][T10549] ? __warn_printk+0x1a6/0x350 [ 407.349942][T10549] ? notifier_call_chain+0x394/0x410 [ 407.355225][T10549] ? __pfx_bcache_reboot+0x10/0x10 [ 407.360420][T10549] blocking_notifier_call_chain+0x69/0xa0 [ 407.366136][T10549] kernel_power_off+0x1c/0xb0 [ 407.370811][T10549] __do_sys_reboot+0x376/0x3e0 [ 407.375575][T10549] ? __pfx___do_sys_reboot+0x10/0x10 [ 407.380872][T10549] ? xfd_validate_state+0x5d/0x180 [ 407.386073][T10549] do_syscall_64+0xcd/0x250 [ 407.390666][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.396558][T10549] RIP: 0033:0x7f5abf83d8b4 [ 407.400986][T10549] Code: f0 ff ff 73 01 c3 48 8b 0d 71 55 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 89 fa be 69 19 12 28 bf ad de e1 fe b8 a9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 45 55 0d 00 f7 d8 64 89 02 48 83 [ 407.420602][T10549] RSP: 002b:00007ffd0938e508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a9 [ 407.429017][T10549] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007f5abf83d8b4 [ 407.437242][T10549] RDX: 000000004321fedc RSI: 0000000028121969 RDI: 00000000fee1dead [ 407.445203][T10549] RBP: 000000004321fedc R08: 0000000000000000 R09: 0000000000000000 [ 407.453163][T10549] R10: 00007ffd0938e4e0 R11: 0000000000000246 R12: 0000000000000000 [ 407.461128][T10549] R13: 00007ffd0938e568 R14: 0000560d629e7169 R15: 00007f5abfa1ba80 [ 407.469113][T10549] [ 407.472381][T10549] Kernel Offset: disabled [ 407.476777][T10549] Rebooting in 86400 seconds..