last executing test programs: 11.452293908s ago: executing program 3 (id=2658): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f000041f000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x2) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0xcac) openat$cgroup_int(r6, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0xf9, 0x800ed, &(0x7f0000000500)="ae76d7c3a57367cffb8f7df3cbcedac7d924947d112f6a2e528d3e33e6f4bff8431af6237574e2cf91a3dbcfd4e0298ad19f283e19b93346d3e6646efe0a81e86eb2e3718238048cab73de41d1878eec93d66a02a0e29c4ce58c3a6f462b3e833e93fc3d5bfefe798258b066c1e2582c2732191940f7442b3e1c6c5fed10d9dc559fd90f5638b0dd21d8863cf27fc4b2fe7be16d8fa922bdd6cd53dd63b02eccad2860396a5e068d49599b95e5af59d30bf99d854ea7a0bd66606cb0bb6bb5fb33813e9f7ba6cfe625707ea58d134b7effd63b39309ca26aaa2dbf1cea35e2b666c2"}) sched_getattr(r0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) 11.189844359s ago: executing program 1 (id=2661): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) write$binfmt_format(r6, &(0x7f0000000800)='-1\x00', 0x3) 10.042961131s ago: executing program 3 (id=2664): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x100}, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f00000000c0)={0x1, 0x1, 0xfffffffa}) keyctl$revoke(0x3, r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 9.971998521s ago: executing program 1 (id=2666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 8.988176306s ago: executing program 1 (id=2668): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.299900299s ago: executing program 3 (id=2671): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)) 8.250627379s ago: executing program 0 (id=2672): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) 7.322882025s ago: executing program 3 (id=2674): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket(0x10, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000240)=0x8) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf4) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0), 0x0) 6.972268317s ago: executing program 0 (id=2675): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4040040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 5.929514002s ago: executing program 2 (id=2678): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x0, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x5, 0x8, 0x11, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0x10, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404005c}, 0x0) 5.194507512s ago: executing program 4 (id=2680): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) write$binfmt_format(r7, &(0x7f0000000800)='-1\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) 5.134090728s ago: executing program 0 (id=2681): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) 4.95623235s ago: executing program 2 (id=2682): mkdirat(0xffffffffffffff9c, 0x0, 0x19a) rmdir(0x0) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="830300", 0x3}], 0x1}}], 0x1, 0x4004c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) 4.188297371s ago: executing program 4 (id=2683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80004, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xb}, {0x2, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.999498565s ago: executing program 2 (id=2684): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sched_getparam(r1, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) getrlimit(0x4, &(0x7f0000000300)) 3.874912375s ago: executing program 3 (id=2685): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x100}, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f00000000c0)={0x1, 0x1, 0xfffffffa}) keyctl$revoke(0x3, r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 3.741322339s ago: executing program 1 (id=2686): r0 = socket$inet6(0x10, 0x5, 0xa6e) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) fcntl$lock(r4, 0x6, &(0x7f00000004c0)={0x0, 0x1, 0x3}) 3.43071824s ago: executing program 0 (id=2687): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "7d7408e707adb5a5"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x0, 0xfffffffffffffffb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 3.362263864s ago: executing program 4 (id=2688): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f000041f000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x2) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0xcac) openat$cgroup_int(r6, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0xf9, 0x800ed, &(0x7f0000000500)="ae76d7c3a57367cffb8f7df3cbcedac7d924947d112f6a2e528d3e33e6f4bff8431af6237574e2cf91a3dbcfd4e0298ad19f283e19b93346d3e6646efe0a81e86eb2e3718238048cab73de41d1878eec93d66a02a0e29c4ce58c3a6f462b3e833e93fc3d5bfefe798258b066c1e2582c2732191940f7442b3e1c6c5fed10d9dc559fd90f5638b0dd21d8863cf27fc4b2fe7be16d8fa922bdd6cd53dd63b02eccad2860396a5e068d49599b95e5af59d30bf99d854ea7a0bd66606cb0bb6bb5fb33813e9f7ba6cfe625707ea58d134b7effd63b39309ca26aaa2dbf1cea35e2b666c2"}) sched_getattr(r0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) 3.001216815s ago: executing program 0 (id=2689): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x8}, 0x8) 2.834664507s ago: executing program 2 (id=2690): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) write$binfmt_format(r7, &(0x7f0000000800)='-1\x00', 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) 2.026655532s ago: executing program 4 (id=2691): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r3, {0x1}, {0xd}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) 1.337769724s ago: executing program 2 (id=2692): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x4, 0x5, 0x6}, {0xfffffff7, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0xe0, 0x8, 0xb, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0xab, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.181815405s ago: executing program 4 (id=2693): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "7d7408e707adb5a5"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x0, 0xfffffffffffffffb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) socket$inet6(0x10, 0x3, 0x0) 839.508171ms ago: executing program 4 (id=2694): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x6c2) msgsnd(r2, &(0x7f0000000340)={0x3}, 0x2000, 0x0) 818.029074ms ago: executing program 1 (id=2695): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "7d7408e707adb5a5"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x0, 0xfffffffffffffffb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) socket$inet6(0x10, 0x3, 0x0) 643.655129ms ago: executing program 3 (id=2696): prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ptrace$peek(0x3, r3, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x55af) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xf, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 259.702988ms ago: executing program 0 (id=2697): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x4, 0x8000000000000001, 0x1000}) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x3) 17.313568ms ago: executing program 1 (id=2698): mkdirat(0xffffffffffffff9c, 0x0, 0x19a) rmdir(0x0) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="830300", 0x3}], 0x1}}], 0x1, 0x4004c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) 0s ago: executing program 2 (id=2699): syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x81000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) geteuid() kernel console output (not intermixed with test programs): 96959][T14995] cramfs: wrong magic [ 906.072606][ T5922] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 906.244098][ T5922] usb 2-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 906.270599][ T5922] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.433536][ T5922] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.443948][ T5922] usb 2-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 906.462324][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 906.471307][ T5922] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 906.481912][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.499361][T15016] block device autoloading is deprecated and will be removed. [ 906.532639][ T5922] usb 2-1: config 0 descriptor?? [ 906.546391][ T5922] hub 2-1:0.0: USB hub found [ 906.789046][ T5922] hub 2-1:0.0: 4 ports detected [ 907.092357][T15025] sd 0:0:1:0: PR command failed: 1026 [ 907.097965][T15025] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 907.105751][T15025] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 907.845416][ T5922] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 907.857006][ T5922] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 908.240238][T15033] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2013'. [ 908.317591][T15033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2013'. [ 908.610128][ T5922] usb 2-1: USB disconnect, device number 41 [ 909.732326][T15044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.918282][T15051] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2019'. [ 910.986278][T15051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2019'. [ 911.554556][T15065] netlink: 2380 bytes leftover after parsing attributes in process `syz.4.2021'. [ 911.775801][ T30] audit: type=1400 audit(1760560343.213:2324): avc: denied { connect } for pid=15067 comm="syz.3.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 912.647136][T15081] block device autoloading is deprecated and will be removed. [ 913.583341][T15086] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 914.315407][T15098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 914.695686][ T48] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 915.653003][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 915.658702][ T48] usb 1-1: no configurations [ 915.684365][ T48] usb 1-1: can't read configurations, error -22 [ 916.088105][ T48] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 916.372317][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 916.932585][ T48] usb 1-1: device descriptor read/all, error -71 [ 916.951379][ T48] usb usb1-port1: attempt power cycle [ 917.282060][T15130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.136608][ T30] audit: type=1400 audit(1760560349.193:2325): avc: denied { write } for pid=15129 comm="syz.2.2038" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 918.276533][T15139] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 918.283801][T15139] /dev/nullb0: Can't open blockdev [ 919.361261][T15148] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2041'. [ 919.401837][T15148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2041'. [ 919.782350][ T48] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 919.976202][ T48] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 919.984615][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.052785][ T48] usb 3-1: config 0 has no interface number 0 [ 920.069885][T15156] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2042'. [ 920.148947][ T48] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 920.176322][ T48] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.224693][ T48] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 920.955850][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.963968][ T48] usb 3-1: Product: syz [ 920.968133][ T48] usb 3-1: Manufacturer: syz [ 920.972769][ T48] usb 3-1: SerialNumber: syz [ 921.132297][ T48] usb 3-1: config 0 descriptor?? [ 921.166238][T15167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2046'. [ 921.272117][T15169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2046'. [ 922.905229][T15176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2048'. [ 924.265790][T15183] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 924.670945][ T10] usb 3-1: USB disconnect, device number 38 [ 925.228262][ T48] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 925.959901][T15197] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 925.967790][T15197] cramfs: wrong magic [ 926.167534][ T48] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 926.232494][ T48] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.256431][ T48] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.268120][ T48] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 926.432468][ T48] usb 1-1: config 0 interface 0 has no altsetting 0 [ 926.442590][ T48] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 926.522426][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.544818][ T48] usb 1-1: config 0 descriptor?? [ 926.562773][ T48] hub 1-1:0.0: USB hub found [ 927.086227][ T48] hub 1-1:0.0: 4 ports detected [ 927.941086][T15215] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2056'. [ 928.230406][ T48] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 928.307535][ T48] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 928.403823][ T48] usb 1-1: USB disconnect, device number 50 [ 929.567836][T15234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.984811][T15245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.126436][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.133089][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.442443][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 931.655608][ T30] audit: type=1400 audit(1760560363.093:2326): avc: denied { create } for pid=15250 comm="syz.0.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 931.690197][ T30] audit: type=1400 audit(1760560363.093:2327): avc: denied { ioctl } for pid=15250 comm="syz.0.2066" path="socket:[58894]" dev="sockfs" ino=58894 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 931.715017][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.727508][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 931.765468][T15252] kvm: vcpu 0: requested 26624 ns lapic timer period limited to 200000 ns [ 931.779252][ T10] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.807935][T15252] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1611167959 (25778687344 ns) > initial count (200000 ns). Using initial count to start timer. [ 931.832481][ T10] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.864363][ T10] usb 2-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 931.891836][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 931.935485][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 931.948425][T15255] kvm: pic: non byte write [ 931.962367][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.024170][T15258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1611167959 (25778687344 ns) > initial count (200000 ns). Using initial count to start timer. [ 932.195395][ T10] usb 2-1: config 0 descriptor?? [ 932.219910][ T10] hub 2-1:0.0: USB hub found [ 932.444520][ T10] hub 2-1:0.0: 4 ports detected [ 932.756193][T15268] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2069'. [ 933.523679][ T10] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 933.533458][ T10] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 934.012392][ T48] usb 2-1: USB disconnect, device number 42 [ 934.809139][ T5926] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 935.172483][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 935.179132][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.192307][ T5926] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 935.218431][ T5926] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 935.638241][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.658737][ T5926] usb 1-1: Product: syz [ 935.663089][ T5926] usb 1-1: Manufacturer: syz [ 935.668667][ T5926] usb 1-1: SerialNumber: syz [ 935.787847][ T5926] usb 1-1: config 0 descriptor?? [ 935.815543][ T5926] usb 1-1: can't set config #0, error -71 [ 935.913199][T15291] ======================================================= [ 935.913199][T15291] WARNING: The mand mount option has been deprecated and [ 935.913199][T15291] and is ignored by this kernel. Remove the mand [ 935.913199][T15291] option from the mount to silence this warning. [ 935.913199][T15291] ======================================================= [ 936.006285][ T5926] usb 1-1: USB disconnect, device number 51 [ 936.022576][T15291] overlayfs: missing 'lowerdir' [ 936.261054][T15302] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2078'. [ 936.361631][T15302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2078'. [ 937.034495][T15292] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.2076'. [ 937.475325][ T30] audit: type=1400 audit(1760560368.903:2328): avc: denied { create } for pid=15314 comm="syz.4.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 938.695509][T15331] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 938.702363][T15328] trusted_key: encrypted_key: key user:syz not found [ 938.722467][T15331] cramfs: wrong magic [ 939.608770][T15344] overlayfs: missing 'lowerdir' [ 939.697410][T15342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1611167959 (25778687344 ns) > initial count (200000 ns). Using initial count to start timer. [ 939.846371][T15345] kvm: pic: non byte write [ 940.426671][T15352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.407660][T15365] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2089'. [ 941.576690][T15365] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2089'. [ 941.642313][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 942.045860][ T10] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 942.082580][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.102370][ T10] usb 3-1: config 0 has no interface number 0 [ 942.120192][ T10] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 942.139543][ T10] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.159209][ T10] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 942.169293][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.177421][ T10] usb 3-1: Product: syz [ 942.200321][ T10] usb 3-1: Manufacturer: syz [ 942.206015][ T10] usb 3-1: SerialNumber: syz [ 942.248045][ T10] usb 3-1: config 0 descriptor?? [ 942.575163][T15384] netlink: 1364 bytes leftover after parsing attributes in process `syz.0.2094'. [ 943.322971][T15388] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 943.330716][T15388] cramfs: wrong magic [ 944.564801][T15397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2098'. [ 946.091164][T15413] No control pipe specified [ 947.213581][ T5926] usb 3-1: USB disconnect, device number 39 [ 947.704730][T15426] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 947.711896][T15426] /dev/nullb0: Can't open blockdev [ 948.090547][T15431] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 948.259311][T15431] /dev/nullb0: Can't open blockdev [ 949.584442][T15444] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2107'. [ 950.668001][T15453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2112'. [ 950.968013][T15465] hub 9-0:1.0: USB hub found [ 950.973636][T15465] hub 9-0:1.0: 1 port detected [ 951.369225][T15466] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 951.377305][T15466] cramfs: wrong magic [ 951.406026][T15452] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1611167959 (25778687344 ns) > initial count (200000 ns). Using initial count to start timer. [ 951.480275][T15452] kvm: pic: non byte write [ 952.172507][T15474] block device autoloading is deprecated and will be removed. [ 953.376684][T15489] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2116'. [ 953.393611][T15489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2116'. [ 955.626471][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 955.638354][T15506] block device autoloading is deprecated and will be removed. [ 955.843890][ T10] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 955.866240][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.896568][ T10] usb 4-1: config 0 has no interface number 0 [ 955.903104][ T10] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 955.972781][ T10] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.872969][ T10] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 956.888826][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.899221][ T10] usb 4-1: Product: syz [ 956.906391][ T10] usb 4-1: Manufacturer: syz [ 956.912479][ T10] usb 4-1: SerialNumber: syz [ 957.089606][ T10] usb 4-1: config 0 descriptor?? [ 957.532523][ T5895] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 957.676475][T15535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2127'. [ 957.796700][ T5922] usb 4-1: USB disconnect, device number 46 [ 957.802376][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 957.828764][ T5895] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 957.845404][ T5895] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 957.868608][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.897884][ T5895] usb 5-1: Product: syz [ 957.912157][ T5895] usb 5-1: Manufacturer: syz [ 957.921770][ T5895] usb 5-1: SerialNumber: syz [ 958.019508][ T5895] usb 5-1: config 0 descriptor?? [ 958.570419][T15547] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 958.579838][T15547] cramfs: wrong magic [ 959.703174][T15557] overlayfs: missing 'lowerdir' [ 960.639352][ T5895] usb 5-1: USB disconnect, device number 61 [ 962.832428][T15588] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2138'. [ 962.900045][T15588] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2138'. [ 963.652514][ T5895] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 963.881457][T15598] No control pipe specified [ 964.935757][ T5895] usb 2-1: device descriptor read/64, error -71 [ 965.276385][T15600] overlayfs: missing 'lowerdir' [ 965.535966][ T5895] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 965.642119][T15604] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2143'. [ 965.720079][T15604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2143'. [ 965.729506][ T5895] usb 2-1: device descriptor read/64, error -71 [ 965.901997][ T5895] usb usb2-port1: attempt power cycle [ 966.974643][T15616] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 967.082329][T15620] netlink: 'syz.3.2146': attribute type 4 has an invalid length. [ 967.090114][T15620] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2146'. [ 968.625617][T15633] overlayfs: missing 'lowerdir' [ 971.212320][T12839] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 971.499322][T12839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.510291][T12839] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 971.551741][T12839] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 971.650428][T12839] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 971.660390][T12839] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 971.701971][T15669] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 971.710331][T15669] cramfs: wrong magic [ 971.731560][T12839] usb 5-1: Manufacturer: syz [ 971.765697][T12839] usb 5-1: config 0 descriptor?? [ 971.877191][T12839] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 972.914118][T15687] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.2162'. [ 973.563787][T15696] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 973.571298][T15696] cramfs: wrong magic [ 973.995458][ T5922] usb 5-1: USB disconnect, device number 62 [ 974.789729][T15706] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2167'. [ 974.806852][T15706] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2167'. [ 976.107393][T15724] netlink: 'syz.2.2172': attribute type 4 has an invalid length. [ 976.115449][T15724] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2172'. [ 977.380174][T15743] overlayfs: failed to resolve './file0': -2 [ 977.936612][ T30] audit: type=1400 audit(1760560409.373:2329): avc: denied { create } for pid=15746 comm="syz.1.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 978.069062][T15748] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2178'. [ 978.452919][ T30] audit: type=1400 audit(1760560409.403:2330): avc: denied { read } for pid=15746 comm="syz.1.2178" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 978.510250][ T30] audit: type=1400 audit(1760560409.403:2331): avc: denied { open } for pid=15746 comm="syz.1.2178" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 978.542350][ T30] audit: type=1400 audit(1760560409.503:2332): avc: denied { write } for pid=15746 comm="syz.1.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 978.572349][ T30] audit: type=1400 audit(1760560409.503:2333): avc: denied { nlmsg_write } for pid=15746 comm="syz.1.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 978.593682][ T30] audit: type=1400 audit(1760560409.553:2334): avc: denied { execmem } for pid=15746 comm="syz.1.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 978.613595][ T30] audit: type=1400 audit(1760560409.743:2335): avc: denied { read write } for pid=15746 comm="syz.1.2178" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 978.640246][ T30] audit: type=1400 audit(1760560409.743:2336): avc: denied { open } for pid=15746 comm="syz.1.2178" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 978.671824][T15752] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 978.679307][T15752] cramfs: wrong magic [ 978.732382][ T30] audit: type=1400 audit(1760560409.743:2337): avc: denied { ioctl } for pid=15746 comm="syz.1.2178" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 978.875505][ T30] audit: type=1400 audit(1760560409.743:2338): avc: denied { create } for pid=15746 comm="syz.1.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 980.083272][T15762] netlink: 'syz.0.2183': attribute type 4 has an invalid length. [ 980.091021][T15762] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2183'. [ 980.494881][T15774] netlink: 'syz.4.2184': attribute type 4 has an invalid length. [ 980.502755][T15774] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2184'. [ 981.483209][T15780] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 982.834849][T15797] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 982.986735][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 982.986752][ T30] audit: type=1400 audit(1760560414.393:2370): avc: denied { read } for pid=15802 comm="syz.3.2192" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 983.125762][ T30] audit: type=1400 audit(1760560414.393:2371): avc: denied { open } for pid=15802 comm="syz.3.2192" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 983.310638][ T30] audit: type=1400 audit(1760560414.643:2372): avc: denied { ioctl } for pid=15802 comm="syz.3.2192" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 983.469422][T15808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2193'. [ 983.870022][ T30] audit: type=1400 audit(1760560414.743:2373): avc: denied { name_bind } for pid=15806 comm="syz.4.2193" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 984.048639][T15813] netlink: 'syz.1.2194': attribute type 4 has an invalid length. [ 984.056510][T15813] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2194'. [ 984.212337][ T30] audit: type=1400 audit(1760560414.743:2374): avc: denied { node_bind } for pid=15806 comm="syz.4.2193" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 984.461207][T15822] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2196'. [ 984.669429][T15827] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2198'. [ 984.748201][T15827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2198'. [ 984.913005][T15822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2196'. [ 984.977566][ T30] audit: type=1400 audit(1760560416.403:2375): avc: denied { ioctl } for pid=15828 comm="syz.1.2199" path="socket:[61150]" dev="sockfs" ino=61150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 985.401999][ T30] audit: type=1400 audit(1760560416.513:2376): avc: denied { read } for pid=15828 comm="syz.1.2199" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 985.689841][ T30] audit: type=1400 audit(1760560416.513:2377): avc: denied { open } for pid=15828 comm="syz.1.2199" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 985.845885][ T30] audit: type=1400 audit(1760560416.743:2378): avc: denied { ioctl } for pid=15828 comm="syz.1.2199" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 986.038871][ T30] audit: type=1400 audit(1760560416.763:2379): avc: denied { create } for pid=15828 comm="syz.1.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 986.981028][T15850] binder: 15840:15850 ioctl 4018620d 0 returned -22 [ 987.986112][T15861] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2205'. [ 988.192732][T15861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2205'. [ 988.366590][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 988.366600][ T30] audit: type=1400 audit(1760560419.803:2386): avc: denied { write } for pid=15862 comm="syz.2.2207" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 988.663226][T12839] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 988.883308][T12839] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 988.891508][T12839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.942399][T12839] usb 3-1: config 0 has no interface number 0 [ 989.002307][ T30] audit: type=1400 audit(1760560420.423:2387): avc: denied { create } for pid=15867 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 989.102307][T12839] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 989.141480][T12839] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.162346][ T30] audit: type=1400 audit(1760560420.423:2388): avc: denied { bind } for pid=15867 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 989.312514][ T30] audit: type=1400 audit(1760560420.433:2389): avc: denied { setopt } for pid=15867 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 989.409519][ T30] audit: type=1400 audit(1760560420.433:2390): avc: denied { accept } for pid=15867 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 989.497136][T12839] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 989.503447][T15875] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2210'. [ 989.506303][T12839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.529598][ T30] audit: type=1400 audit(1760560420.433:2391): avc: denied { write } for pid=15867 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 989.556361][T12839] usb 3-1: Product: syz [ 989.560862][T12839] usb 3-1: Manufacturer: syz [ 989.563736][T15877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2210'. [ 989.575233][T12839] usb 3-1: SerialNumber: syz [ 989.579983][ T30] audit: type=1400 audit(1760560420.433:2392): avc: denied { read } for pid=15867 comm="syz.1.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 989.625539][T12839] usb 3-1: config 0 descriptor?? [ 989.708928][ T30] audit: type=1400 audit(1760560420.513:2393): avc: denied { write } for pid=15867 comm="syz.1.2208" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 989.772324][ T30] audit: type=1400 audit(1760560420.603:2394): avc: denied { read append } for pid=15869 comm="syz.0.2209" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 989.872757][ T30] audit: type=1400 audit(1760560420.603:2395): avc: denied { open } for pid=15869 comm="syz.0.2209" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 990.837108][T15881] netlink: 'syz.4.2211': attribute type 4 has an invalid length. [ 990.844958][T15881] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2211'. [ 992.073745][ T5954] usb 3-1: USB disconnect, device number 40 [ 992.704143][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.710932][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.055658][T15898] netlink: 'syz.4.2216': attribute type 4 has an invalid length. [ 993.063573][T15898] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2216'. [ 994.826503][ T5954] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 994.951205][T15920] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2221'. [ 995.093587][T15920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2221'. [ 995.186070][ T5954] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 995.199564][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.256911][ T5954] usb 3-1: Product: syz [ 995.318325][ T5954] usb 3-1: Manufacturer: syz [ 995.358472][ T5954] usb 3-1: SerialNumber: syz [ 995.874635][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 995.874651][ T30] audit: type=1400 audit(1760560427.313:2404): avc: denied { sys_module } for pid=15929 comm="syz.3.2225" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 996.043859][T15930] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.2225'. [ 996.112474][ T30] audit: type=1400 audit(1760560427.473:2405): avc: denied { bind } for pid=15929 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 996.182105][ T30] audit: type=1400 audit(1760560427.473:2406): avc: denied { write } for pid=15929 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.304960][ T5954] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 997.353552][ T5954] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 997.420389][ T5954] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 997.492325][ T5954] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 997.649511][T15952] netlink: 'syz.1.2230': attribute type 4 has an invalid length. [ 997.657367][T15952] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2230'. [ 997.800884][ T5954] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 997.881212][ T5954] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 998.138397][ T5954] usb 3-1: USB disconnect, device number 41 [ 998.943805][ T30] audit: type=1400 audit(1760560429.943:2407): avc: denied { write } for pid=15960 comm="syz.2.2232" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 999.452277][ T5954] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 999.828301][ T5954] usb 3-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 1000.379987][ T5954] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.443502][ T5954] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.517915][ T5954] usb 3-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1000.560035][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1000.574464][ T5954] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1000.584433][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.686686][ T5954] usb 3-1: config 0 descriptor?? [ 1000.783163][ T5954] hub 3-1:0.0: USB hub found [ 1002.284683][ T5954] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1002.313757][ T5954] usb 3-1: USB disconnect, device number 42 [ 1003.055699][T16004] kvm: pic: non byte write [ 1003.517378][T16011] block device autoloading is deprecated and will be removed. [ 1003.595284][ T30] audit: type=1400 audit(1760560434.893:2408): avc: denied { create } for pid=16008 comm="syz.0.2243" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1003.844627][ T30] audit: type=1400 audit(1760560434.903:2409): avc: denied { append } for pid=16008 comm="syz.0.2243" name="file0" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1003.869657][ T30] audit: type=1400 audit(1760560434.903:2410): avc: denied { open } for pid=16008 comm="syz.0.2243" path="/438/file0" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1004.158054][ T30] audit: type=1400 audit(1760560435.563:2411): avc: denied { unlink } for pid=5816 comm="syz-executor" name="file0" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1004.282309][ T30] audit: type=1400 audit(1760560435.563:2412): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1004.383867][T16022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2245'. [ 1004.418614][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2245'. [ 1004.463513][T16022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2245'. [ 1004.484422][ T30] audit: type=1400 audit(1760560435.563:2413): avc: denied { open } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1004.533670][T16022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2245'. [ 1004.549432][ T30] audit: type=1400 audit(1760560435.563:2414): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3550 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1005.896413][T16041] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2251'. [ 1005.940860][T16041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2251'. [ 1008.000174][ T30] audit: type=1400 audit(1760560439.433:2415): avc: denied { read write } for pid=16061 comm="syz.4.2256" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1008.050597][T16060] netlink: 'syz.0.2257': attribute type 4 has an invalid length. [ 1008.250492][T16060] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2257'. [ 1008.730053][T16074] block device autoloading is deprecated and will be removed. [ 1008.756607][T16073] netlink: 'syz.2.2260': attribute type 4 has an invalid length. [ 1008.764463][T16073] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2260'. [ 1008.777653][ T30] audit: type=1400 audit(1760560439.433:2416): avc: denied { open } for pid=16061 comm="syz.4.2256" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1008.958385][ T30] audit: type=1400 audit(1760560440.393:2417): avc: denied { execute } for pid=16061 comm="syz.4.2256" dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1009.100056][ T30] audit: type=1400 audit(1760560440.493:2418): avc: denied { execute_no_trans } for pid=16061 comm="syz.4.2256" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1009.731717][ T30] audit: type=1400 audit(1760560440.533:2419): avc: denied { setopt } for pid=16076 comm="syz.1.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1009.977813][ T30] audit: type=1400 audit(1760560440.783:2420): avc: denied { write } for pid=16076 comm="syz.1.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1010.183802][T16082] trusted_key: encrypted_key: key user:syz not found [ 1010.352845][ T30] audit: type=1400 audit(1760560440.813:2421): avc: denied { append } for pid=16076 comm="syz.1.2261" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1010.693494][T16091] binder: 16084:16091 ioctl 4018620d 0 returned -22 [ 1011.410609][T16092] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1012.714357][ T30] audit: type=1400 audit(1760560444.143:2422): avc: denied { firmware_load } for pid=16099 comm="syz.3.2268" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1013.384815][T16104] syz.3.2268 (16104) used greatest stack depth: 19240 bytes left [ 1014.582621][T16126] trusted_key: encrypted_key: key user:syz not found [ 1015.288338][ T30] audit: type=1400 audit(1760560446.523:2423): avc: denied { read write } for pid=16127 comm="syz.3.2276" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1015.924181][T16138] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1015.958985][ T30] audit: type=1400 audit(1760560446.523:2424): avc: denied { open } for pid=16127 comm="syz.3.2276" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1016.655151][ T5922] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1017.029187][ T30] audit: type=1400 audit(1760560448.463:2425): avc: denied { write } for pid=16150 comm="syz.3.2280" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1017.673694][ T5922] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1017.706424][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.758068][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.987449][T16156] 9pnet_fd: Insufficient options for proto=fd [ 1018.102244][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1018.825565][ T5922] usb 2-1: string descriptor 0 read error: -71 [ 1018.842410][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1018.876492][ T5922] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1018.948273][T16160] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1019.950769][ T5922] usb 2-1: config 0 descriptor?? [ 1019.959226][ T5922] usb 2-1: can't set config #0, error -71 [ 1019.982476][ T5922] usb 2-1: USB disconnect, device number 46 [ 1020.719944][T16178] trusted_key: encrypted_key: key user:syz not found [ 1021.794054][T16185] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1024.382275][ T5895] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1024.683822][ T5895] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1024.698269][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.175301][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.185390][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1025.199465][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1025.231866][ T5895] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1025.249643][ T5895] usb 2-1: Manufacturer: syz [ 1025.269901][ T5895] usb 2-1: config 0 descriptor?? [ 1025.700429][ T5895] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 1027.133744][ T5895] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1027.290873][T16231] binder: 16227:16231 ioctl 4018620d 0 returned -22 [ 1027.464508][T16232] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2301'. [ 1027.486692][T16232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2301'. [ 1027.878074][ T5895] usb 2-1: USB disconnect, device number 47 [ 1028.060573][T16241] netlink: 'syz.2.2302': attribute type 4 has an invalid length. [ 1028.549312][T16233] fido_id[16233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1028.582492][T16241] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2302'. [ 1029.090321][T16248] binder: 16246:16248 ioctl 4018620d 0 returned -22 [ 1030.928434][T16267] overlayfs: missing 'lowerdir' [ 1031.032338][ T5895] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1031.303865][ T5895] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1031.344488][T16272] netlink: 'syz.3.2312': attribute type 4 has an invalid length. [ 1031.352368][T16272] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2312'. [ 1031.412660][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.492537][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.516481][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1031.587610][ T5895] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1031.599665][ T5895] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1031.817845][ T5895] usb 1-1: Manufacturer: syz [ 1031.827799][ T5895] usb 1-1: config 0 descriptor?? [ 1032.257799][ T5895] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 1032.283722][ T5895] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1032.361475][T16281] netlink: 'syz.4.2314': attribute type 4 has an invalid length. [ 1032.369416][T16281] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2314'. [ 1033.215543][ T30] audit: type=1400 audit(1760560464.653:2426): avc: denied { write } for pid=16294 comm="syz.3.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1035.243889][T16305] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1035.529489][T16313] binder: 16311:16313 ioctl 4018620d 0 returned -22 [ 1035.733217][T13273] usb 1-1: USB disconnect, device number 52 [ 1036.904127][ T30] audit: type=1400 audit(1760560468.323:2427): avc: denied { ioctl } for pid=16326 comm="syz.4.2326" path="socket:[63292]" dev="sockfs" ino=63292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1039.314655][T16341] binder: 16338:16341 ioctl 4018620d 0 returned -22 [ 1039.465324][T13273] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1040.205536][T13273] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1040.892317][T13273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.900427][T13273] usb 5-1: Product: syz [ 1040.951142][T13273] usb 5-1: Manufacturer: syz [ 1040.991982][T13273] usb 5-1: SerialNumber: syz [ 1041.869188][T16359] binder: 16352:16359 ioctl 4018620d 0 returned -22 [ 1041.958337][T16355] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1043.007419][T13273] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1043.542338][ T30] audit: type=1400 audit(1760560474.813:2428): avc: denied { relabelfrom } for pid=16365 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1043.605816][ T30] audit: type=1400 audit(1760560474.813:2429): avc: denied { relabelto } for pid=16365 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1043.710744][T13273] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1044.035255][T13273] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1044.111264][T13273] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1044.118118][ T30] audit: type=1400 audit(1760560475.493:2430): avc: denied { write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1044.169181][T13273] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1044.999708][T13273] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1045.057797][T13273] usb 5-1: USB disconnect, device number 63 [ 1045.297638][T12839] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1045.351751][T16389] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2341'. [ 1045.372612][T16389] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2341'. [ 1045.976063][T12839] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1046.147559][T12839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.192308][T12839] usb 1-1: Product: syz [ 1046.196485][T12839] usb 1-1: Manufacturer: syz [ 1046.413396][T12839] usb 1-1: SerialNumber: syz [ 1047.550229][T16405] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2346'. [ 1047.577615][T16405] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2346'. [ 1047.985420][T16410] netlink: 'syz.1.2347': attribute type 4 has an invalid length. [ 1047.994622][T16410] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2347'. [ 1049.693982][T16420] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1049.891818][T12839] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1049.910990][T12839] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1049.988739][T12839] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1050.112272][T12839] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1050.414355][T12839] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1050.924917][ T30] audit: type=1400 audit(1760560482.153:2431): avc: denied { create } for pid=16428 comm="syz.0.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1050.947882][ T30] audit: type=1400 audit(1760560482.173:2432): avc: denied { connect } for pid=16428 comm="syz.0.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1051.060824][T12839] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1051.083081][ T30] audit: type=1400 audit(1760560482.183:2433): avc: denied { write } for pid=16428 comm="syz.0.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1051.156402][T12839] usb 1-1: USB disconnect, device number 53 [ 1051.208429][ T30] audit: type=1400 audit(1760560482.623:2434): avc: denied { map } for pid=16433 comm="syz.2.2354" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1051.377902][T16439] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2353'. [ 1051.454057][T16438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2353'. [ 1051.564626][ T30] audit: type=1400 audit(1760560482.623:2435): avc: denied { read write } for pid=16433 comm="syz.2.2354" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1051.733873][T16441] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2355'. [ 1051.763779][T16441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2355'. [ 1052.104480][ T30] audit: type=1400 audit(1760560483.543:2436): avc: denied { create } for pid=16433 comm="syz.2.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1052.652398][ T30] audit: type=1400 audit(1760560483.563:2437): avc: denied { bind } for pid=16433 comm="syz.2.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1052.702766][ T30] audit: type=1400 audit(1760560483.563:2438): avc: denied { write } for pid=16433 comm="syz.2.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1053.592860][T16454] binder: 16448:16454 ioctl 4018620d 0 returned -22 [ 1053.682136][T16455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1054.010884][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.017303][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.339676][T16467] binder: 16463:16467 ioctl 4018620d 0 returned -22 [ 1054.374374][T16468] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1055.481573][T16475] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2364'. [ 1055.540867][T16475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2364'. [ 1056.352027][T16483] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1057.281452][T16485] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1057.635398][T12839] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1057.741179][T16496] netlink: 'syz.0.2370': attribute type 4 has an invalid length. [ 1057.749134][T16496] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2370'. [ 1058.031138][T16495] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2369'. [ 1058.045055][T16495] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2369'. [ 1058.085880][T12839] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1058.094121][T12839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.150313][T12839] usb 3-1: config 0 has no interface number 0 [ 1058.156596][T12839] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1058.169938][T12839] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.199214][T12839] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1058.215821][T12839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.235863][T12839] usb 3-1: Product: syz [ 1058.241820][T12839] usb 3-1: Manufacturer: syz [ 1058.249456][T12839] usb 3-1: SerialNumber: syz [ 1058.294733][T12839] usb 3-1: config 0 descriptor?? [ 1058.565817][T16502] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2371'. [ 1058.586771][T16502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2371'. [ 1058.992275][ T5895] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1059.534063][ T5895] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1059.542407][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.583428][ T5954] usb 3-1: USB disconnect, device number 43 [ 1059.623875][ T5895] usb 4-1: config 0 has no interface number 0 [ 1059.706209][ T5895] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1059.794932][ T5895] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.927698][ T5895] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1059.962248][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.978111][ T5895] usb 4-1: Product: syz [ 1059.992296][ T5895] usb 4-1: Manufacturer: syz [ 1060.002263][ T5895] usb 4-1: SerialNumber: syz [ 1060.028403][ T5895] usb 4-1: config 0 descriptor?? [ 1061.915068][T16528] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1062.762021][ T5895] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1063.005886][T12839] usb 4-1: USB disconnect, device number 47 [ 1063.102475][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 1063.126192][ T5895] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.287594][ T5895] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.459667][ T30] audit: type=1400 audit(1760560494.813:2439): avc: denied { mount } for pid=16536 comm="syz.4.2381" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1064.252377][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1064.259039][ T5895] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1064.268104][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.287662][ T5895] usb 2-1: config 0 descriptor?? [ 1064.474934][ T30] audit: type=1400 audit(1760560495.903:2440): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1064.511005][ T5895] usb 2-1: can't set config #0, error -71 [ 1064.567618][ T5895] usb 2-1: USB disconnect, device number 48 [ 1066.137476][T16573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2387'. [ 1066.174436][T16573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2387'. [ 1066.210670][T16573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2387'. [ 1066.327287][T16573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2387'. [ 1066.443495][T16580] hub 9-0:1.0: USB hub found [ 1066.452295][T16580] hub 9-0:1.0: 1 port detected [ 1067.876963][T16586] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1068.704269][T16593] binder: 16589:16593 ioctl 4018620d 0 returned -22 [ 1068.801311][T16595] netlink: 'syz.0.2393': attribute type 4 has an invalid length. [ 1068.809324][T16595] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2393'. [ 1071.122072][T16619] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2398'. [ 1071.243375][T16619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2398'. [ 1072.266607][ T30] audit: type=1400 audit(1760560503.653:2441): avc: denied { read } for pid=16622 comm="syz.1.2400" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1072.515061][ T30] audit: type=1400 audit(1760560503.653:2442): avc: denied { open } for pid=16622 comm="syz.1.2400" path="/495/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1072.538168][ T30] audit: type=1400 audit(1760560503.653:2443): avc: denied { ioctl } for pid=16622 comm="syz.1.2400" path="/495/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1072.836922][T16635] hub 9-0:1.0: USB hub found [ 1072.842473][T16635] hub 9-0:1.0: 1 port detected [ 1079.273288][T16694] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2415'. [ 1079.303844][T16694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2415'. [ 1079.519453][T16701] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2419'. [ 1079.565597][T16701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2419'. [ 1081.518353][T16724] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2424'. [ 1081.571054][T16722] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2423'. [ 1081.706243][T16724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2424'. [ 1081.724297][T16722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2423'. [ 1083.393327][ T30] audit: type=1400 audit(1760560514.833:2444): avc: denied { create } for pid=16740 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1083.502695][T10964] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1084.133383][ T30] audit: type=1400 audit(1760560514.983:2445): avc: denied { setopt } for pid=16740 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1084.192387][ T30] audit: type=1400 audit(1760560515.593:2446): avc: denied { bind } for pid=16740 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1084.246777][T10964] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1084.255573][T10964] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1084.352270][ T30] audit: type=1400 audit(1760560515.593:2447): avc: denied { name_bind } for pid=16740 comm="syz.4.2429" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1084.382253][T10964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1084.422657][T10964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1084.436472][ T30] audit: type=1400 audit(1760560515.593:2448): avc: denied { node_bind } for pid=16740 comm="syz.4.2429" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1084.459215][T10964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1084.470499][ T30] audit: type=1400 audit(1760560515.593:2449): avc: denied { write } for pid=16740 comm="syz.4.2429" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1084.566882][T10964] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1084.695417][T16754] block device autoloading is deprecated and will be removed. [ 1085.054788][T16755] netlink: 'syz.1.2431': attribute type 4 has an invalid length. [ 1085.062892][T16755] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2431'. [ 1085.092558][T10964] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1085.100726][ T30] audit: type=1400 audit(1760560515.593:2450): avc: denied { connect } for pid=16740 comm="syz.4.2429" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1085.132682][T10964] usb 1-1: Product: syz [ 1085.138061][T10964] usb 1-1: Manufacturer: syz [ 1085.150052][T10964] cdc_wdm 1-1:1.0: skipping garbage [ 1085.155310][T10964] cdc_wdm 1-1:1.0: skipping garbage [ 1085.167318][T10964] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1085.173669][ T30] audit: type=1400 audit(1760560515.593:2451): avc: denied { name_connect } for pid=16740 comm="syz.4.2429" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1085.195941][T10964] cdc_wdm 1-1:1.0: Unknown control protocol [ 1085.471598][T10964] usb 1-1: USB disconnect, device number 54 [ 1089.142297][ T30] audit: type=1326 audit(1760560520.533:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1089.195440][ T30] audit: type=1326 audit(1760560520.533:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1089.223095][ T30] audit: type=1326 audit(1760560520.533:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1089.255111][ T30] audit: type=1326 audit(1760560520.533:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1089.298324][ T30] audit: type=1326 audit(1760560520.543:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1089.482339][ T30] audit: type=1400 audit(1760560520.543:2457): avc: denied { write } for pid=16789 comm="syz.3.2442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1089.662276][ T30] audit: type=1326 audit(1760560520.543:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1089.818920][ T30] audit: type=1326 audit(1760560520.543:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1089.933391][ T30] audit: type=1326 audit(1760560520.543:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1090.022089][ T30] audit: type=1326 audit(1760560520.543:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.3.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7ed8eec9 code=0x7ffc0000 [ 1091.172738][T16812] tipc: Started in network mode [ 1091.177608][T16812] tipc: Node identity fe8ed987fab6, cluster identity 4711 [ 1091.191321][T16812] tipc: Enabled bearer , priority 0 [ 1091.228922][T16812] syzkaller0: entered promiscuous mode [ 1091.243881][T16812] syzkaller0: entered allmulticast mode [ 1091.344247][T16821] netlink: 'syz.4.2447': attribute type 4 has an invalid length. [ 1091.352251][T16821] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2447'. [ 1091.468900][T16812] tipc: Resetting bearer [ 1091.492443][ T5954] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1091.528036][T16811] tipc: Resetting bearer [ 1091.579545][T16811] tipc: Disabling bearer [ 1091.642294][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 1091.684755][ T5954] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1092.299082][ T5954] usb 2-1: config 0 has no interface number 0 [ 1092.327677][ T5954] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1092.425550][ T5954] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1092.488054][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.547844][ T5954] usb 2-1: Product: syz [ 1092.559483][ T5954] usb 2-1: Manufacturer: syz [ 1092.593742][ T5954] usb 2-1: SerialNumber: syz [ 1092.663932][ T5954] usb 2-1: config 0 descriptor?? [ 1093.524433][ T5954] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1093.536651][ T5954] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1093.999313][T16835] syz.4.2452 (16835): drop_caches: 2 [ 1094.373678][ T5954] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1095.220473][T16848] block device autoloading is deprecated and will be removed. [ 1095.435228][ T5954] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1095.451849][ T5954] em28xx 2-1:0.89: board has no eeprom [ 1095.522276][ T5954] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1095.529547][ T5954] em28xx 2-1:0.89: analog set to bulk mode. [ 1095.545834][ T48] em28xx 2-1:0.89: Registering V4L2 extension [ 1095.557746][ T5954] usb 2-1: USB disconnect, device number 49 [ 1095.603334][ T5954] em28xx 2-1:0.89: Disconnecting em28xx [ 1095.803104][ T48] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1095.830624][ T48] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1095.847586][ T48] em28xx 2-1:0.89: No AC97 audio processor [ 1095.897655][ T48] usb 2-1: Decoder not found [ 1095.910450][ T48] em28xx 2-1:0.89: failed to create media graph [ 1095.923373][T16842] syz.0.2455 (16842): drop_caches: 2 [ 1095.943654][T10964] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1095.967629][ T48] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1096.044885][ T48] em28xx 2-1:0.89: Registering snapshot button... [ 1096.094018][ T48] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input40 [ 1096.128500][T10964] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1096.144616][T10964] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1096.171636][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1096.171651][ T30] audit: type=1400 audit(1760560527.603:2537): avc: denied { read } for pid=5167 comm="acpid" name="event4" dev="devtmpfs" ino=3636 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1096.211737][ T48] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1096.602202][T10964] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1096.628746][T10964] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1096.642343][ T30] audit: type=1400 audit(1760560527.603:2538): avc: denied { open } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3636 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1096.662526][ T5954] em28xx 2-1:0.89: Closing input extension [ 1096.670812][T10964] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1096.696114][T10964] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1096.705531][T10964] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1096.741308][ T30] audit: type=1400 audit(1760560527.603:2539): avc: denied { ioctl } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3636 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1096.766416][T10964] usb 4-1: Product: syz [ 1096.777850][T10964] usb 4-1: Manufacturer: syz [ 1096.798398][ T5954] em28xx 2-1:0.89: Deregistering snapshot button [ 1096.810390][T10964] cdc_wdm 4-1:1.0: skipping garbage [ 1096.816913][T10964] cdc_wdm 4-1:1.0: skipping garbage [ 1096.842426][T10964] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1096.865302][T10964] cdc_wdm 4-1:1.0: Unknown control protocol [ 1096.883756][ T5954] em28xx 2-1:0.89: Freeing device [ 1097.368880][T10964] usb 4-1: USB disconnect, device number 48 [ 1099.601735][ T30] audit: type=1400 audit(1760560531.033:2540): avc: denied { read } for pid=16879 comm="syz.1.2462" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1099.783667][T16889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1099.791649][T16889] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1099.831504][T16889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1099.839941][T16889] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1100.081488][ T30] audit: type=1400 audit(1760560531.033:2541): avc: denied { open } for pid=16879 comm="syz.1.2462" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1100.124426][ T30] audit: type=1400 audit(1760560531.103:2542): avc: denied { create } for pid=16887 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1100.145023][ T30] audit: type=1400 audit(1760560531.113:2543): avc: denied { bind } for pid=16887 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1100.172521][ T30] audit: type=1400 audit(1760560531.203:2544): avc: denied { listen } for pid=16887 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1100.200150][ T30] audit: type=1400 audit(1760560531.213:2545): avc: denied { connect } for pid=16887 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1100.221353][ T30] audit: type=1400 audit(1760560531.213:2546): avc: denied { accept } for pid=16887 comm="syz.3.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1100.243262][T16889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1100.249178][T16889] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1100.376225][T16889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1100.506469][T16902] syzkaller0: entered promiscuous mode [ 1100.512074][T16902] syzkaller0: entered allmulticast mode [ 1100.722257][ T5954] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1100.988244][ T5954] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1100.997521][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.126789][ T5954] usb 2-1: Product: syz [ 1101.132549][ T5954] usb 2-1: Manufacturer: syz [ 1101.138606][ T5954] usb 2-1: SerialNumber: syz [ 1101.160167][ T5954] usb 2-1: config 0 descriptor?? [ 1101.161110][T16917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2471'. [ 1101.402033][ T5954] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1101.756369][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1101.756385][ T30] audit: type=1326 audit(1760560533.183:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1101.802450][T10505] Bluetooth: hci1: command 0x0406 tx timeout [ 1101.868807][T10505] Bluetooth: hci2: command 0x0406 tx timeout [ 1101.875322][ T30] audit: type=1326 audit(1760560533.183:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1101.902334][ T30] audit: type=1326 audit(1760560533.193:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1101.925909][ T30] audit: type=1326 audit(1760560533.193:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1101.950508][ T30] audit: type=1326 audit(1760560533.193:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1102.268309][ T30] audit: type=1326 audit(1760560533.193:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1102.332477][T10505] Bluetooth: hci3: command 0x0406 tx timeout [ 1102.356601][ T30] audit: type=1326 audit(1760560533.193:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1102.381081][ T30] audit: type=1326 audit(1760560533.193:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1102.411116][ T30] audit: type=1326 audit(1760560533.193:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1102.434951][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.442333][ T30] audit: type=1326 audit(1760560533.193:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16918 comm="syz.0.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1102.882571][ T5954] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1102.896982][ T5954] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1102.907430][ T5954] usb 2-1: media controller created [ 1102.925813][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.123221][ T5954] i2c i2c-1: Added multiplexed i2c bus 2 [ 1103.142359][ T5954] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1103.170186][ T5954] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1103.202260][T16930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1103.209886][T16930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1103.216131][T16930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1103.233253][ T5954] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1103.241160][T16930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1103.411406][ T5954] DVB: Unable to find symbol r820t_attach() [ 1103.766647][ T5954] usb 2-1: USB disconnect, device number 50 [ 1104.653087][T10505] Bluetooth: hci1: command 0x0406 tx timeout [ 1105.282336][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1105.282488][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 1105.288398][T10505] Bluetooth: hci2: command 0x0406 tx timeout [ 1106.336111][T16982] overlayfs: failed to resolve './file0': -2 [ 1106.957086][T16981] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1107.308152][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1107.308168][ T30] audit: type=1400 audit(1760560538.703:2635): avc: denied { create } for pid=16990 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1107.729394][ T30] audit: type=1400 audit(1760560538.733:2636): avc: denied { map_create } for pid=16990 comm="syz.2.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1107.767510][ T30] audit: type=1400 audit(1760560539.183:2637): avc: denied { allowed } for pid=16987 comm="syz.3.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1107.892646][ T30] audit: type=1400 audit(1760560539.183:2638): avc: denied { create } for pid=16987 comm="syz.3.2487" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1108.100535][ T30] audit: type=1400 audit(1760560539.183:2639): avc: denied { map } for pid=16987 comm="syz.3.2487" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1108.125110][ T30] audit: type=1400 audit(1760560539.183:2640): avc: denied { read write } for pid=16987 comm="syz.3.2487" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1108.162588][ T30] audit: type=1400 audit(1760560539.513:2641): avc: denied { read write } for pid=16972 comm="syz.4.2484" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1108.412273][ T30] audit: type=1400 audit(1760560539.513:2642): avc: denied { open } for pid=16972 comm="syz.4.2484" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1108.542312][ T30] audit: type=1400 audit(1760560539.523:2643): avc: denied { create } for pid=16972 comm="syz.4.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1108.572303][ T30] audit: type=1400 audit(1760560539.523:2644): avc: denied { bind } for pid=16972 comm="syz.4.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1111.186292][T17037] overlayfs: overlapping lowerdir path [ 1112.321045][T17024] syz.1.2494 (17024): drop_caches: 2 [ 1112.401988][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1112.401999][ T30] audit: type=1400 audit(1760560543.833:2678): avc: denied { create } for pid=17038 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1112.462658][T17047] syz.2.2498 (17047): drop_caches: 2 [ 1112.571686][T17044] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1112.602464][T17044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1112.962513][T17044] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1113.024790][ T30] audit: type=1400 audit(1760560544.453:2679): avc: denied { create } for pid=17048 comm="syz.3.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1113.050284][T17044] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1113.097231][ T30] audit: type=1400 audit(1760560544.453:2680): avc: denied { setopt } for pid=17048 comm="syz.3.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1113.153314][ T30] audit: type=1400 audit(1760560544.453:2681): avc: denied { bind } for pid=17048 comm="syz.3.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1113.172853][ T30] audit: type=1400 audit(1760560544.593:2682): avc: denied { connect } for pid=17056 comm="syz.2.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1113.192715][ T30] audit: type=1400 audit(1760560544.593:2683): avc: denied { read } for pid=17056 comm="syz.2.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1113.398376][ T30] audit: type=1400 audit(1760560544.833:2684): avc: denied { lock } for pid=17067 comm="syz.0.2504" path="socket:[68100]" dev="sockfs" ino=68100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1113.540432][ T30] audit: type=1400 audit(1760560544.833:2685): avc: denied { read write } for pid=17067 comm="syz.0.2504" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1113.540480][ T30] audit: type=1400 audit(1760560544.833:2686): avc: denied { open } for pid=17067 comm="syz.0.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1113.540520][ T30] audit: type=1400 audit(1760560544.833:2687): avc: denied { ioctl } for pid=17067 comm="syz.0.2504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1113.593068][T17070] syz.1.2503 (17070): drop_caches: 2 [ 1113.662378][ T5922] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1113.845333][ T5922] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1113.845352][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.845363][ T5922] usb 1-1: Product: syz [ 1113.845372][ T5922] usb 1-1: Manufacturer: syz [ 1113.845381][ T5922] usb 1-1: SerialNumber: syz [ 1113.846778][ T5922] usb 1-1: config 0 descriptor?? [ 1114.061782][ T5922] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1114.562527][T10505] Bluetooth: hci1: command 0x0406 tx timeout [ 1114.642288][T10505] Bluetooth: hci2: command 0x0406 tx timeout [ 1115.054304][T10505] Bluetooth: hci3: command 0x0406 tx timeout [ 1115.122427][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1115.445513][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.451973][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.672052][ T5922] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1115.682298][ T5922] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1115.690121][ T5922] usb 1-1: media controller created [ 1115.716031][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.083651][ T5922] i2c i2c-1: Added multiplexed i2c bus 2 [ 1116.328865][ T5922] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1116.460239][ T5922] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1116.483990][ T5922] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1116.627585][ T5922] DVB: Unable to find symbol r820t_attach() [ 1116.996203][ T5922] usb 1-1: USB disconnect, device number 55 [ 1118.743225][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1118.743242][ T30] audit: type=1400 audit(1760560549.293:2730): avc: denied { wake_alarm } for pid=17116 comm="syz.1.2515" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1118.992279][ T30] audit: type=1400 audit(1760560550.413:2731): avc: denied { read } for pid=17127 comm="syz.2.2517" dev="nsfs" ino=4026532830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1119.047789][ T30] audit: type=1400 audit(1760560550.423:2732): avc: denied { open } for pid=17127 comm="syz.2.2517" path="net:[4026532830]" dev="nsfs" ino=4026532830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1119.078738][ T30] audit: type=1400 audit(1760560550.423:2733): avc: denied { create } for pid=17127 comm="syz.2.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1119.106214][ T30] audit: type=1400 audit(1760560550.483:2734): avc: denied { bind } for pid=17127 comm="syz.2.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1119.341812][ T30] audit: type=1400 audit(1760560550.773:2735): avc: denied { create } for pid=17129 comm="syz.4.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1119.854742][ T50] Bluetooth: hci6: Frame reassembly failed (-84) [ 1120.244609][ T30] audit: type=1326 audit(1760560551.613:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17144 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1120.806138][ T30] audit: type=1326 audit(1760560551.613:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17144 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1121.291326][ T30] audit: type=1326 audit(1760560551.613:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17144 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1121.315777][ T30] audit: type=1326 audit(1760560551.613:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17144 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1121.923768][ T5811] Bluetooth: hci6: command 0x1003 tx timeout [ 1121.932583][T14341] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1122.244578][T10505] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1122.859387][T17177] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2527'. [ 1124.498556][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 1124.498589][ T30] audit: type=1400 audit(1760560555.933:2859): avc: denied { ioctl } for pid=17183 comm="syz.3.2531" path="socket:[68670]" dev="sockfs" ino=68670 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1124.498725][T17184] syzkaller0: entered promiscuous mode [ 1124.563738][T17184] syzkaller0: entered allmulticast mode [ 1124.658221][ T30] audit: type=1400 audit(1760560556.093:2860): avc: denied { setopt } for pid=17187 comm="syz.0.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1124.697128][ T30] audit: type=1400 audit(1760560556.133:2861): avc: denied { write } for pid=17183 comm="syz.3.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1124.749090][T17189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1124.756628][T17189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1124.800891][T17189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1124.831478][T17189] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1125.687972][ T30] audit: type=1400 audit(1760560557.123:2862): avc: denied { write } for pid=17197 comm="syz.4.2536" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1126.502274][T13273] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1126.729739][T10505] Bluetooth: hci1: command 0x0406 tx timeout [ 1126.803710][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1126.809854][T10505] Bluetooth: hci3: command 0x0406 tx timeout [ 1126.882407][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1127.052670][T13273] usb 3-1: Using ep0 maxpacket: 8 [ 1127.059962][T13273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.070229][T13273] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1127.083232][T13273] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1127.122300][T13273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.140085][T13273] usb 3-1: config 0 descriptor?? [ 1127.164491][T13273] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 1127.446907][ T9648] Bluetooth: hci5: Frame reassembly failed (-84) [ 1128.728477][ T30] audit: type=1400 audit(1760560559.183:2863): avc: denied { write } for pid=17237 comm="syz.1.2546" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1129.695003][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 1129.701183][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 1129.710733][T14341] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1130.352672][T17243] hub 9-0:1.0: USB hub found [ 1130.357848][T17243] hub 9-0:1.0: 1 port detected [ 1130.710233][ T30] audit: type=1400 audit(1760560561.913:2864): avc: denied { read } for pid=17235 comm="syz.4.2545" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1130.736527][T14341] Bluetooth: hci6: command 0x1003 tx timeout [ 1130.747810][ T30] audit: type=1400 audit(1760560561.913:2865): avc: denied { open } for pid=17235 comm="syz.4.2545" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1130.783112][T17244] random: crng reseeded on system resumption [ 1130.846304][T10505] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1130.907450][ T30] audit: type=1400 audit(1760560562.223:2866): avc: denied { append } for pid=17235 comm="syz.4.2545" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1131.009379][T13273] usb 3-1: USB disconnect, device number 44 [ 1131.013164][ T30] audit: type=1400 audit(1760560562.283:2867): avc: denied { read } for pid=17235 comm="syz.4.2545" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1131.120354][ T30] audit: type=1400 audit(1760560562.283:2868): avc: denied { open } for pid=17235 comm="syz.4.2545" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1131.872373][T17263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1131.878791][T17263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1131.885518][T17263] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1131.891494][ T10] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1131.903896][T17263] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1132.014782][ T30] audit: type=1400 audit(1760560563.443:2869): avc: denied { create } for pid=17258 comm="syz.4.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1132.116232][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1132.127021][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.136667][ T10] usb 1-1: Product: syz [ 1132.140831][ T10] usb 1-1: Manufacturer: syz [ 1132.175900][ T30] audit: type=1400 audit(1760560563.603:2870): avc: denied { write } for pid=17258 comm="syz.4.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1132.177579][ T10] usb 1-1: SerialNumber: syz [ 1132.204995][ T10] usb 1-1: config 0 descriptor?? [ 1132.971835][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1133.176245][ T30] audit: type=1400 audit(1760560564.583:2871): avc: denied { write } for pid=17274 comm="syz.2.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1133.372649][ T30] audit: type=1400 audit(1760560564.583:2872): avc: denied { nlmsg_write } for pid=17274 comm="syz.2.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1133.480386][T17290] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2555'. [ 1133.932375][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1133.938438][T10505] Bluetooth: hci3: command 0x0406 tx timeout [ 1133.951794][T14341] Bluetooth: hci2: command 0x0406 tx timeout [ 1133.956177][T17139] Bluetooth: hci1: command 0x0406 tx timeout [ 1134.264788][T17292] syz.1.2556 (17292): drop_caches: 2 [ 1134.401254][T17295] syz.3.2557 (17295): drop_caches: 2 [ 1134.749939][T17299] hub 9-0:1.0: USB hub found [ 1134.755457][T17299] hub 9-0:1.0: 1 port detected [ 1135.701573][T17311] ip6erspan0: entered allmulticast mode [ 1136.167498][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1136.180076][ T10] usb 1-1: USB disconnect, device number 56 [ 1136.192719][T13273] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1136.213186][ T30] audit: type=1326 audit(1760560567.653:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.317583][ T30] audit: type=1326 audit(1760560567.653:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.351568][ T30] audit: type=1326 audit(1760560567.663:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.437644][ T30] audit: type=1326 audit(1760560567.663:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.593820][ T30] audit: type=1326 audit(1760560567.663:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.606620][T13273] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1136.617478][ T30] audit: type=1326 audit(1760560567.663:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.651718][ T30] audit: type=1326 audit(1760560567.663:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.676138][ T30] audit: type=1326 audit(1760560567.663:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.730202][ T30] audit: type=1326 audit(1760560567.663:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087bf8eec9 code=0x7ffc0000 [ 1136.975477][T13273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.984537][T13273] usb 4-1: Product: syz [ 1136.988733][T13273] usb 4-1: Manufacturer: syz [ 1136.994341][T13273] usb 4-1: SerialNumber: syz [ 1137.002271][ T30] audit: type=1326 audit(1760560567.663:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f087bf8d710 code=0x7ffc0000 [ 1137.021127][T13273] usb 4-1: config 0 descriptor?? [ 1137.302933][T13273] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1138.796211][T17339] random: crng reseeded on system resumption [ 1139.325250][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1139.515139][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1139.524061][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1139.535405][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1139.549516][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1139.567700][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1139.578019][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1139.586326][ T10] usb 2-1: Product: syz [ 1139.590617][ T10] usb 2-1: Manufacturer: syz [ 1139.600273][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1139.605661][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1139.611060][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1139.712257][T10964] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1139.881703][T17347] ip6erspan0: entered allmulticast mode [ 1140.238285][ T48] usb 2-1: USB disconnect, device number 51 [ 1140.274854][T13273] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1140.287589][T13273] usb 4-1: USB disconnect, device number 49 [ 1140.378372][T10964] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1140.388803][T10964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.401714][T10964] usb 1-1: Product: syz [ 1140.407868][T10964] usb 1-1: Manufacturer: syz [ 1140.413094][T10964] usb 1-1: SerialNumber: syz [ 1140.421331][T10964] usb 1-1: config 0 descriptor?? [ 1141.893467][T17354] syz.3.2573 (17354): drop_caches: 2 [ 1142.029854][T10964] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1142.533537][T17368] overlayfs: failed to resolve './file0': -2 [ 1143.001362][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1143.001380][ T30] audit: type=1400 audit(1760560574.403:2912): avc: denied { ioctl } for pid=17342 comm="syz.0.2570" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.206801][ T30] audit: type=1400 audit(1760560574.633:2913): avc: denied { read write } for pid=17367 comm="syz.1.2577" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1143.268532][ T30] audit: type=1400 audit(1760560574.653:2914): avc: denied { create } for pid=17374 comm="syz.4.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1143.361888][ T30] audit: type=1400 audit(1760560574.673:2915): avc: denied { open } for pid=17367 comm="syz.1.2577" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1143.392092][T10964] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1143.403273][ T30] audit: type=1400 audit(1760560574.683:2916): avc: denied { execmem } for pid=17374 comm="syz.4.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1143.433672][T10964] usb 1-1: USB disconnect, device number 57 [ 1143.932340][ T30] audit: type=1400 audit(1760560574.823:2917): avc: denied { mounton } for pid=17373 comm="syz.3.2579" path="/512/file0" dev="tmpfs" ino=2707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1143.962392][ T30] audit: type=1400 audit(1760560574.823:2918): avc: denied { mount } for pid=17373 comm="syz.3.2579" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1143.986520][ T30] audit: type=1400 audit(1760560574.843:2919): avc: denied { module_request } for pid=17373 comm="syz.3.2579" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1144.045034][ T30] audit: type=1400 audit(1760560574.863:2920): avc: denied { create } for pid=17367 comm="syz.1.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1144.152940][ T30] audit: type=1400 audit(1760560574.933:2921): avc: denied { map_create } for pid=17374 comm="syz.4.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1144.244076][T17377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1144.250837][T17377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1144.302929][T17377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1144.354210][T17377] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1144.956047][ T5954] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1145.204504][ T5954] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1145.214259][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.246492][ T5954] usb 3-1: Product: syz [ 1145.250862][ T5954] usb 3-1: Manufacturer: syz [ 1145.631618][ T5954] usb 3-1: SerialNumber: syz [ 1145.644338][ T5954] usb 3-1: config 0 descriptor?? [ 1145.934317][ T5954] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1146.324245][T10505] Bluetooth: hci2: command 0x0406 tx timeout [ 1146.324382][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 1146.336934][T10505] Bluetooth: hci3: command 0x0406 tx timeout [ 1146.402334][T17139] Bluetooth: hci4: command 0x0406 tx timeout [ 1146.703978][T17424] overlayfs: failed to resolve './file0': -2 [ 1148.033319][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 1148.033337][ T30] audit: type=1400 audit(1760560579.453:3083): avc: denied { read write } for pid=17430 comm="syz.1.2592" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1148.081561][ T30] audit: type=1400 audit(1760560579.453:3084): avc: denied { open } for pid=17430 comm="syz.1.2592" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1148.188772][ T30] audit: type=1400 audit(1760560579.453:3085): avc: denied { create } for pid=17430 comm="syz.1.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1148.209786][ T30] audit: type=1400 audit(1760560579.463:3086): avc: denied { bind } for pid=17430 comm="syz.1.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1148.234465][ T5954] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1148.238804][ T30] audit: type=1400 audit(1760560579.463:3087): avc: denied { create } for pid=17430 comm="syz.1.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1148.268652][ T30] audit: type=1400 audit(1760560579.463:3088): avc: denied { write } for pid=17430 comm="syz.1.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1148.290159][ T30] audit: type=1400 audit(1760560579.553:3089): avc: denied { listen } for pid=17430 comm="syz.1.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1148.311058][ T30] audit: type=1400 audit(1760560579.553:3090): avc: denied { connect } for pid=17430 comm="syz.1.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1148.366123][ T5954] usb 3-1: USB disconnect, device number 45 [ 1148.513875][ T30] audit: type=1400 audit(1760560579.553:3091): avc: denied { accept } for pid=17430 comm="syz.1.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1148.613129][T17442] random: crng reseeded on system resumption [ 1148.710280][ T30] audit: type=1400 audit(1760560579.553:3092): avc: denied { read } for pid=17430 comm="syz.1.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1148.836448][T17443] syz.3.2594 (17443): drop_caches: 2 [ 1150.783033][T17461] random: crng reseeded on system resumption [ 1150.803665][T17466] overlayfs: failed to resolve './file0': -2 [ 1153.422860][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1153.422875][ T30] audit: type=1400 audit(1760560584.863:3144): avc: denied { sys_module } for pid=17468 comm="syz.2.2603" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1153.553296][ T30] audit: type=1400 audit(1760560584.923:3145): avc: denied { wake_alarm } for pid=17493 comm="syz.3.2609" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1153.597908][ T30] audit: type=1400 audit(1760560584.923:3146): avc: denied { create } for pid=17493 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1153.628481][ T30] audit: type=1400 audit(1760560584.923:3147): avc: denied { setopt } for pid=17493 comm="syz.3.2609" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1153.649888][ T30] audit: type=1400 audit(1760560584.923:3148): avc: denied { connect } for pid=17493 comm="syz.3.2609" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1153.671442][ T30] audit: type=1400 audit(1760560584.943:3149): avc: denied { write } for pid=17493 comm="syz.3.2609" laddr=fe80::bc14:e7ff:fe90:821a lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1153.707801][ T30] audit: type=1400 audit(1760560584.953:3150): avc: denied { read } for pid=17493 comm="syz.3.2609" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1153.744675][ T30] audit: type=1400 audit(1760560584.953:3151): avc: denied { open } for pid=17493 comm="syz.3.2609" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1154.897086][ T30] audit: type=1400 audit(1760560586.323:3152): avc: denied { read } for pid=17489 comm="syz.1.2608" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1154.977561][ T30] audit: type=1400 audit(1760560586.323:3153): avc: denied { open } for pid=17489 comm="syz.1.2608" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1155.292233][T10964] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1155.761290][T17514] random: crng reseeded on system resumption [ 1155.819399][T17519] overlayfs: failed to resolve './file0': -2 [ 1156.344319][T10964] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1156.353214][T10964] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1156.362244][T10964] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1156.440097][T10964] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1156.449710][T10964] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1156.461299][T10964] usb 4-1: Product: syz [ 1156.475714][T10964] usb 4-1: Manufacturer: syz [ 1156.606316][T10964] cdc_wdm 4-1:1.0: skipping garbage [ 1156.611824][T10964] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1157.390133][T17524] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1157.422990][T17524] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1157.432314][T17524] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1157.438822][T17524] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1158.005229][T16631] usb 4-1: USB disconnect, device number 50 [ 1159.004750][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1159.004769][ T30] audit: type=1400 audit(1760560589.903:3194): avc: denied { wake_alarm } for pid=17539 comm="syz.4.2619" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1159.375302][T10505] Bluetooth: hci1: command 0x0406 tx timeout [ 1159.442330][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1159.448483][T17139] Bluetooth: hci3: command 0x0406 tx timeout [ 1159.522131][ T30] audit: type=1400 audit(1760560590.943:3195): avc: denied { write } for pid=17542 comm="syz.0.2620" name="fib_trie" dev="proc" ino=4026532909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1159.660922][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1160.300414][ T30] audit: type=1400 audit(1760560591.733:3196): avc: denied { write } for pid=17550 comm="syz.0.2621" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1161.328897][ T30] audit: type=1400 audit(1760560592.763:3197): avc: denied { read } for pid=17561 comm="syz.2.2623" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1162.106914][ T30] audit: type=1400 audit(1760560592.763:3198): avc: denied { open } for pid=17561 comm="syz.2.2623" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1163.441299][ T30] audit: type=1400 audit(1760560594.703:3199): avc: denied { read } for pid=17567 comm="syz.4.2625" dev="nsfs" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1163.589987][ T30] audit: type=1400 audit(1760560594.703:3200): avc: denied { open } for pid=17567 comm="syz.4.2625" path="net:[4026532930]" dev="nsfs" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1163.725482][ T30] audit: type=1400 audit(1760560594.703:3201): avc: denied { create } for pid=17567 comm="syz.4.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1163.899368][ T30] audit: type=1400 audit(1760560594.703:3202): avc: denied { ioctl } for pid=17567 comm="syz.4.2625" path="socket:[70023]" dev="sockfs" ino=70023 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1165.939562][ T30] audit: type=1400 audit(1760560597.373:3203): avc: denied { create } for pid=17600 comm="syz.4.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1165.998612][T17608] ip6erspan0: entered allmulticast mode [ 1166.009845][ T30] audit: type=1400 audit(1760560597.373:3204): avc: denied { write } for pid=17600 comm="syz.4.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1166.304317][T17610] block device autoloading is deprecated and will be removed. [ 1166.339759][ T30] audit: type=1400 audit(1760560597.373:3205): avc: denied { nlmsg_write } for pid=17600 comm="syz.4.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1166.382949][ T30] audit: type=1400 audit(1760560597.533:3206): avc: denied { create } for pid=17603 comm="syz.3.2634" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1166.462954][ T30] audit: type=1400 audit(1760560597.533:3207): avc: denied { append } for pid=17603 comm="syz.3.2634" name="file0" dev="tmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1166.499488][ T30] audit: type=1400 audit(1760560597.533:3208): avc: denied { open } for pid=17603 comm="syz.3.2634" path="/525/file0" dev="tmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1166.994649][ T30] audit: type=1400 audit(1760560598.433:3209): avc: denied { unlink } for pid=5807 comm="syz-executor" name="file0" dev="tmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1167.112819][ T30] audit: type=1400 audit(1760560598.543:3210): avc: denied { create } for pid=17616 comm="syz.1.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1167.211622][ T30] audit: type=1400 audit(1760560598.573:3211): avc: denied { setopt } for pid=17616 comm="syz.1.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1167.310128][ T30] audit: type=1400 audit(1760560598.743:3212): avc: denied { create } for pid=17622 comm="syz.0.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1171.222485][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1171.222503][ T30] audit: type=1400 audit(1760560602.653:3264): avc: denied { ioctl } for pid=17650 comm="syz.2.2644" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=69378 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1171.320385][T17658] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1171.422757][ T30] audit: type=1400 audit(1760560602.703:3265): avc: denied { sys_module } for pid=17640 comm="syz.1.2643" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1171.466129][ T30] audit: type=1400 audit(1760560602.753:3266): avc: denied { name_bind } for pid=17650 comm="syz.2.2644" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1171.491112][ T30] audit: type=1400 audit(1760560602.753:3267): avc: denied { node_bind } for pid=17650 comm="syz.2.2644" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1172.320731][T17661] hub 9-0:1.0: USB hub found [ 1172.325908][T17661] hub 9-0:1.0: 1 port detected [ 1172.430423][T17656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1172.436714][T17656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1172.528370][T17668] block device autoloading is deprecated and will be removed. [ 1172.819186][T17656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1172.880629][T17656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1173.111466][ T30] audit: type=1400 audit(1760560604.543:3268): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop4" dev="devtmpfs" ino=3685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1173.567378][ T30] audit: type=1400 audit(1760560604.543:3269): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=3685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1173.598337][T17671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1173.622314][ T30] audit: type=1400 audit(1760560604.543:3270): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=3685 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1173.657235][T17671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1173.692463][T17671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1173.708112][T17671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1173.939952][ T30] audit: type=1400 audit(1760560605.373:3271): avc: denied { write } for pid=17683 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1173.962508][T17694] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1175.309117][ T30] audit: type=1400 audit(1760560606.733:3272): avc: denied { getopt } for pid=17705 comm="syz.1.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1175.612269][T10505] Bluetooth: hci1: command 0x0406 tx timeout [ 1175.690347][ T30] audit: type=1400 audit(1760560607.123:3273): avc: denied { bind } for pid=17716 comm="syz.2.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1175.812872][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1175.819022][T10505] Bluetooth: hci3: command 0x0406 tx timeout [ 1175.826107][T10505] Bluetooth: hci2: command 0x0406 tx timeout [ 1176.193060][T17718] random: crng reseeded on system resumption [ 1176.381410][T17724] overlayfs: failed to resolve './file0': -2 [ 1176.857110][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1176.857127][ T30] audit: type=1326 audit(1760560608.273:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1176.891731][ T30] audit: type=1326 audit(1760560608.273:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1176.902578][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.921970][ T30] audit: type=1326 audit(1760560608.273:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1177.028329][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.042420][ T30] audit: type=1326 audit(1760560608.273:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1177.066066][ T30] audit: type=1326 audit(1760560608.273:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1177.089937][ T30] audit: type=1326 audit(1760560608.273:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1177.581261][ T30] audit: type=1400 audit(1760560608.273:3295): avc: denied { write } for pid=17712 comm="syz.0.2660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1177.624910][ T30] audit: type=1326 audit(1760560608.273:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1177.648811][ T30] audit: type=1326 audit(1760560608.273:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1177.673468][ T30] audit: type=1326 audit(1760560608.273:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd53a38eec9 code=0x7ffc0000 [ 1178.093297][T17750] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1178.268880][T17742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1178.286176][T17742] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1178.342859][T17742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1178.349644][T17742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1178.640337][ T48] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1179.682361][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 1179.688971][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1179.707316][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1179.721069][ T48] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1179.730421][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.832330][ T48] usb 2-1: Product: syz [ 1179.842314][ T48] usb 2-1: Manufacturer: syz [ 1179.851630][ T48] usb 2-1: SerialNumber: syz [ 1180.015713][ T48] usb 2-1: config 0 descriptor?? [ 1180.023656][ T48] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1180.034000][ T48] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1180.323737][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1180.330254][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 1180.521632][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1180.527780][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 1181.385756][ T48] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1181.401448][ T48] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1181.422512][T17771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1181.428699][T17771] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1181.436964][T17771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1181.446810][T17771] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1181.877782][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 1181.877799][ T30] audit: type=1400 audit(1760560613.313:3402): avc: denied { setopt } for pid=17799 comm="syz.2.2682" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1182.009907][T17801] overlayfs: failed to resolve './file0': -2 [ 1182.027061][ T48] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1182.351140][ T30] audit: type=1400 audit(1760560613.373:3403): avc: denied { write } for pid=17799 comm="syz.2.2682" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1182.371577][ T30] audit: type=1400 audit(1760560613.383:3404): avc: denied { read } for pid=17799 comm="syz.2.2682" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1182.397797][ T30] audit: type=1400 audit(1760560613.383:3405): avc: denied { open } for pid=17799 comm="syz.2.2682" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1182.405549][ T48] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1182.460279][ T30] audit: type=1400 audit(1760560613.443:3406): avc: denied { mounton } for pid=17794 comm="syz.4.2680" path="/540/bus" dev="tmpfs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1182.467654][ T48] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1182.617029][ T48] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1182.628078][ T48] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1182.667149][ T48] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1182.682508][ T30] audit: type=1400 audit(1760560614.033:3407): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop4" dev="devtmpfs" ino=3685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.699456][ T48] usb 2-1: USB disconnect, device number 52 [ 1182.823183][ T30] audit: type=1400 audit(1760560614.033:3408): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=3685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.895618][T17806] syzkaller0: entered promiscuous mode [ 1182.901125][T17806] syzkaller0: entered allmulticast mode [ 1182.948046][ T30] audit: type=1400 audit(1760560614.033:3409): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=3685 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.985364][ T30] audit: type=1400 audit(1760560614.043:3410): avc: denied { read } for pid=17799 comm="syz.2.2682" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1183.010402][ T30] audit: type=1400 audit(1760560614.243:3411): avc: denied { create } for pid=17805 comm="syz.4.2683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1183.446204][T10505] Bluetooth: hci3: command 0x0406 tx timeout [ 1183.452491][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 1183.458575][T17139] Bluetooth: hci1: command 0x0406 tx timeout [ 1183.522376][T10505] Bluetooth: hci4: command 0x0406 tx timeout [ 1183.753473][T17821] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1184.127466][T17827] random: crng reseeded on system resumption [ 1184.897562][T17834] overlayfs: failed to resolve './file0': -2 [ 1185.506059][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 1185.904837][T17848] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1186.197769][T17856] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1186.794024][T10964] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1187.072606][T10964] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1187.083594][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 1187.083624][ T30] audit: type=1400 audit(1760560618.523:3512): avc: denied { read } for pid=17857 comm="syz.3.2696" dev="nsfs" ino=4026532852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1187.122159][ C0] ------------[ cut here ]------------ [ 1187.127857][ C0] ODEBUG: free active (active state 0) object: ffff88802a3ce490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1187.141122][ C0] WARNING: CPU: 0 PID: 17859 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1187.150699][ C0] Modules linked in: [ 1187.154791][ C0] CPU: 0 UID: 0 PID: 17859 Comm: syz.3.2696 Not tainted syzkaller #0 PREEMPT(full) [ 1187.164173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1187.174235][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1187.180102][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f4 f1 8b 4c 89 e6 48 c7 c7 20 e9 f1 8b e8 0f df c7 fc 90 <0f> 0b 90 90 58 83 05 16 d0 cf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1187.199783][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 1187.205889][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b6ee8 [ 1187.213893][ C0] RDX: ffff88807a89c900 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 1187.221874][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1187.229877][ C0] R10: 0000000000000000 R11: fffffffffffc62c0 R12: ffffffff8bf1efc0 [ 1187.237879][ C0] R13: ffffffff8b901fe0 R14: ffffffff8a533e10 R15: ffffc90000007b18 [ 1187.245880][ C0] FS: 00007faa7fbd56c0(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 1187.254842][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1187.261438][ C0] CR2: 0000001b2fd04ff8 CR3: 0000000057f52000 CR4: 00000000003526f0 [ 1187.269458][ C0] Call Trace: [ 1187.272765][ C0] [ 1187.275609][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1187.281259][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1187.287107][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 1187.292686][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1187.298771][ C0] kfree+0x291/0x6d0 [ 1187.302684][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1187.307800][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1187.312930][ C0] rose_timer_expiry+0x53f/0x630 [ 1187.317873][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1187.323347][ C0] call_timer_fn+0x19a/0x620 [ 1187.327942][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1187.333087][ C0] ? mark_held_locks+0x49/0x80 [ 1187.337857][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1187.343338][ C0] __run_timers+0x6ef/0x960 [ 1187.347855][ C0] ? __pfx___run_timers+0x10/0x10 [ 1187.352921][ C0] run_timer_base+0x114/0x190 [ 1187.357605][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1187.362828][ C0] run_timer_softirq+0x1a/0x40 [ 1187.367592][ C0] handle_softirqs+0x219/0x8e0 [ 1187.372386][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1187.377683][ C0] __irq_exit_rcu+0x109/0x170 [ 1187.382386][ C0] irq_exit_rcu+0x9/0x30 [ 1187.386625][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1187.392291][ C0] [ 1187.395221][ C0] [ 1187.398147][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1187.404157][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1187.410583][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 47 30 f6 48 89 df e8 8e 9b 30 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 a6 20 f6 65 8b 05 7e a5 3b 08 85 c0 74 16 5b [ 1187.430219][ C0] RSP: 0018:ffffc9001bc97778 EFLAGS: 00000246 [ 1187.436295][ C0] RAX: 0000000000000006 RBX: ffff888030917e00 RCX: 0000000000000006 [ 1187.444260][ C0] RDX: 0000000000000000 RSI: ffffffff8db0330f RDI: ffffffff8bf1e3c0 [ 1187.452222][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000001 [ 1187.460174][ C0] R10: ffffffff90832dd7 R11: 0000000000000001 R12: ffff888030917e00 [ 1187.468128][ C0] R13: 0000000000000202 R14: ffff888030917e01 R15: ffffffff819553db [ 1187.476090][ C0] ? prepare_to_wait_exclusive+0xab/0x2b0 [ 1187.481794][ C0] prepare_to_wait_exclusive+0xe4/0x2b0 [ 1187.487336][ C0] unix_wait_for_peer+0xc4/0x280 [ 1187.492266][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1187.497801][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1187.503849][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1187.509210][ C0] unix_dgram_sendmsg+0x1419/0x17f0 [ 1187.514392][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1187.519917][ C0] ____sys_sendmsg+0xa98/0xc70 [ 1187.524667][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 1187.530098][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.535384][ C0] ? kfree+0x252/0x6d0 [ 1187.539430][ C0] ___sys_sendmsg+0x134/0x1d0 [ 1187.544104][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.549291][ C0] ? __pfx___might_resched+0x10/0x10 [ 1187.554570][ C0] __sys_sendmmsg+0x200/0x420 [ 1187.559237][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1187.564430][ C0] ? unix_dgram_connect+0x4e5/0xc80 [ 1187.569607][ C0] ? __pfx_do_futex+0x10/0x10 [ 1187.574290][ C0] ? ptrace_check_attach+0x9c/0x3f0 [ 1187.579474][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 1187.584741][ C0] ? do_raw_read_unlock+0x44/0xe0 [ 1187.589743][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1187.594665][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1187.599838][ C0] do_syscall_64+0xcd/0xfa0 [ 1187.604326][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.610191][ C0] RIP: 0033:0x7faa7ed8eec9 [ 1187.614590][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.634190][ C0] RSP: 002b:00007faa7fbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1187.642587][ C0] RAX: ffffffffffffffda RBX: 00007faa7efe6090 RCX: 00007faa7ed8eec9 [ 1187.650536][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000007 [ 1187.658486][ C0] RBP: 00007faa7ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1187.666440][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.674393][ C0] R13: 00007faa7efe6128 R14: 00007faa7efe6090 R15: 00007ffd1d302288 [ 1187.682361][ C0] [ 1187.685360][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1187.692616][ C0] CPU: 0 UID: 0 PID: 17859 Comm: syz.3.2696 Not tainted syzkaller #0 PREEMPT(full) [ 1187.701959][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1187.711984][ C0] Call Trace: [ 1187.715251][ C0] [ 1187.718067][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1187.722638][ C0] vpanic+0x640/0x6f0 [ 1187.726600][ C0] ? debug_print_object+0x1a2/0x2b0 [ 1187.731774][ C0] panic+0xca/0xd0 [ 1187.735469][ C0] ? __pfx_panic+0x10/0x10 [ 1187.739862][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1187.744947][ C0] check_panic_on_warn+0xab/0xb0 [ 1187.749857][ C0] __warn+0xf6/0x3c0 [ 1187.753725][ C0] ? debug_print_object+0x1a2/0x2b0 [ 1187.758897][ C0] report_bug+0x3c3/0x580 [ 1187.763200][ C0] ? debug_print_object+0x1a2/0x2b0 [ 1187.768375][ C0] handle_bug+0x184/0x210 [ 1187.772686][ C0] exc_invalid_op+0x17/0x50 [ 1187.777172][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1187.781991][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1187.787771][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 f4 f1 8b 4c 89 e6 48 c7 c7 20 e9 f1 8b e8 0f df c7 fc 90 <0f> 0b 90 90 58 83 05 16 d0 cf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1187.807351][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 1187.813387][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b6ee8 [ 1187.821329][ C0] RDX: ffff88807a89c900 RSI: ffffffff817b6ef5 RDI: 0000000000000001 [ 1187.829273][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1187.837233][ C0] R10: 0000000000000000 R11: fffffffffffc62c0 R12: ffffffff8bf1efc0 [ 1187.845176][ C0] R13: ffffffff8b901fe0 R14: ffffffff8a533e10 R15: ffffc90000007b18 [ 1187.853119][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1187.858730][ C0] ? __warn_printk+0x198/0x350 [ 1187.863466][ C0] ? __warn_printk+0x1a5/0x350 [ 1187.868214][ C0] ? debug_print_object+0x1a1/0x2b0 [ 1187.873388][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1187.878998][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1187.884776][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 1187.890296][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1187.896339][ C0] kfree+0x291/0x6d0 [ 1187.900206][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1187.905292][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1187.910385][ C0] rose_timer_expiry+0x53f/0x630 [ 1187.915293][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1187.920733][ C0] call_timer_fn+0x19a/0x620 [ 1187.925296][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1187.930388][ C0] ? mark_held_locks+0x49/0x80 [ 1187.935126][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1187.940555][ C0] __run_timers+0x6ef/0x960 [ 1187.945033][ C0] ? __pfx___run_timers+0x10/0x10 [ 1187.950050][ C0] run_timer_base+0x114/0x190 [ 1187.954702][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1187.959873][ C0] run_timer_softirq+0x1a/0x40 [ 1187.964608][ C0] handle_softirqs+0x219/0x8e0 [ 1187.969361][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1187.974626][ C0] __irq_exit_rcu+0x109/0x170 [ 1187.979282][ C0] irq_exit_rcu+0x9/0x30 [ 1187.983505][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1187.989110][ C0] [ 1187.992013][ C0] [ 1187.994919][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1188.000872][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1188.007259][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 47 30 f6 48 89 df e8 8e 9b 30 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 a6 20 f6 65 8b 05 7e a5 3b 08 85 c0 74 16 5b [ 1188.026856][ C0] RSP: 0018:ffffc9001bc97778 EFLAGS: 00000246 [ 1188.032894][ C0] RAX: 0000000000000006 RBX: ffff888030917e00 RCX: 0000000000000006 [ 1188.040849][ C0] RDX: 0000000000000000 RSI: ffffffff8db0330f RDI: ffffffff8bf1e3c0 [ 1188.048803][ C0] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000001 [ 1188.056744][ C0] R10: ffffffff90832dd7 R11: 0000000000000001 R12: ffff888030917e00 [ 1188.064686][ C0] R13: 0000000000000202 R14: ffff888030917e01 R15: ffffffff819553db [ 1188.072631][ C0] ? prepare_to_wait_exclusive+0xab/0x2b0 [ 1188.078339][ C0] prepare_to_wait_exclusive+0xe4/0x2b0 [ 1188.083863][ C0] unix_wait_for_peer+0xc4/0x280 [ 1188.088778][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1188.094312][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1188.100349][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1188.105700][ C0] unix_dgram_sendmsg+0x1419/0x17f0 [ 1188.110884][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1188.116408][ C0] ____sys_sendmsg+0xa98/0xc70 [ 1188.121149][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 1188.126580][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1188.131840][ C0] ? kfree+0x252/0x6d0 [ 1188.135884][ C0] ___sys_sendmsg+0x134/0x1d0 [ 1188.140533][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1188.145717][ C0] ? __pfx___might_resched+0x10/0x10 [ 1188.150976][ C0] __sys_sendmmsg+0x200/0x420 [ 1188.155626][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1188.160797][ C0] ? unix_dgram_connect+0x4e5/0xc80 [ 1188.165970][ C0] ? __pfx_do_futex+0x10/0x10 [ 1188.170628][ C0] ? ptrace_check_attach+0x9c/0x3f0 [ 1188.175798][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 1188.181066][ C0] ? do_raw_read_unlock+0x44/0xe0 [ 1188.186070][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1188.190981][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1188.196153][ C0] do_syscall_64+0xcd/0xfa0 [ 1188.200631][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.206494][ C0] RIP: 0033:0x7faa7ed8eec9 [ 1188.210892][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.230470][ C0] RSP: 002b:00007faa7fbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1188.238854][ C0] RAX: ffffffffffffffda RBX: 00007faa7efe6090 RCX: 00007faa7ed8eec9 [ 1188.246796][ C0] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000007 [ 1188.254738][ C0] RBP: 00007faa7ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1188.262685][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.270634][ C0] R13: 00007faa7efe6128 R14: 00007faa7efe6090 R15: 00007ffd1d302288 [ 1188.278591][ C0] [ 1188.281817][ C0] Kernel Offset: disabled [ 1188.286118][ C0] Rebooting in 86400 seconds..