last executing test programs: 8m51.972454093s ago: executing program 3 (id=1356): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r1, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r3 = memfd_create(&(0x7f0000001b40)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\x05\x00\x00\x00\x00\x00\x00\x00\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x4) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8m49.035046635s ago: executing program 3 (id=1365): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8m43.250890416s ago: executing program 3 (id=1377): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socket$nl_route(0x10, 0x3, 0x0) 8m40.962451076s ago: executing program 3 (id=1382): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) writev(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 8m37.521821627s ago: executing program 3 (id=1394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) 8m32.407966014s ago: executing program 3 (id=1403): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, 0x0, 0x2a) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, 0x0) capset(0x0, 0x0) msgget(0x1, 0x77e) 8m17.002830594s ago: executing program 32 (id=1403): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, 0x0, 0x2a) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, 0x0) capset(0x0, 0x0) msgget(0x1, 0x77e) 19.863360624s ago: executing program 0 (id=2520): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x8040010) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000080)=0x7) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 16.541792656s ago: executing program 0 (id=2527): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a77d400", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250a0000000c009900040000001f000000090007004274e10ad400000038005080110001004573423a66b52879b9aaa8aea900000005000900000000001000040063ab779f3ed393349d9877cb0800030005ac0f0048005080090001002c9c62f04800000009000100c8f0e8899f0000000500090001000000090001008d6cc839b1000000050009000000000004000500040006000800088004000100"], 0xac}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0xfffffffffffffc84, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 14.78232589s ago: executing program 1 (id=2531): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r1 = inotify_init1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x9a, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x100847c0, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8, 0x0, 0x8}, 0x18) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 12.937551987s ago: executing program 1 (id=2535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0xb}}]}}) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r1, 0x5, &(0x7f0000000840)={0x1a, 0xd1f, 0xfffffff9}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r5, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 12.889915426s ago: executing program 2 (id=2536): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x10, 0x8720, 0x4, 0xb8ca, {{0xa, 0x4, 0x3, 0x3a, 0x28, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop, @end, @ssrr={0x89, 0x3, 0x90}, @lsrr={0x83, 0xf, 0x67, [@loopback, @broadcast, @rand_addr=0x64010102]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x80003) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0xfffffffffffffe92) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x100000001, 0x3ff, 0x0, 0x3, 0x7, 0x1000000, 0xc3, 0x3ff, 0x1, 0x0, 0x0, 0x5, 0xc62b, 0x3, 0x2]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, 0x0, &(0x7f0000000600)) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000002c0)={0x42, 0x2, {0x2, 0x3, 0xfefffffb, 0x3, 0x3}, 0x7ff}) 11.87034319s ago: executing program 1 (id=2537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) gettid() r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "730cf5f00216f5b841124a4ed4870d68b5b1ad7b6c80df8d7c64e9e644139fde775b6caf988b2b8b81b4b6f621e9b5264d72fe39f3d980fd2381bd68a079aa98", 0x1c}, 0x48, 0xffffffffffffffff) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9ae7278278d4888f) accept$inet(r6, &(0x7f0000000400)={0x2, 0x0, @multicast1}, &(0x7f0000000440)=0x10) move_mount(r6, 0x0, r5, 0x0, 0x46) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4}, &(0x7f0000000280)=""/170, 0xaa, &(0x7f00000003c0)={&(0x7f0000000140)={'sha3-384-generic\x00'}, &(0x7f0000000340)}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000040000044400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000080026006c09000008002201130300000400cc00c0007000050008"], 0x120}}, 0x0) 10.98177359s ago: executing program 2 (id=2539): socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet(0x2, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) socket$kcm(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @empty, @val={@val={0x88a8, 0x1}, {0x8100, 0x2}}, {@canfd={0xd, {{0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "d2ab2930cb543e89a0e26a77689d56366c0bc0b8a609777d21de1c4181a7f0998b300951fffde4f74dfaf9ba55ab099d0079dfcb0105cd00587762cae3182ee0"}}}}, &(0x7f0000000140)={0x1, 0x1, [0x3da, 0xc36, 0x618, 0xea0]}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1, @link_local}, 0x4a, {0x2, 0x4e23, @private=0xa010102}, 'veth0_to_bond\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_batadv\x00'}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x54}}, 0x0) 10.673044741s ago: executing program 5 (id=2540): ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000001500), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYRES32=r5], 0xa0}}, 0x20044000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b15f8cc00000000ffdbdf256ba3", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) 10.349287222s ago: executing program 0 (id=2542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) 9.348198362s ago: executing program 0 (id=2543): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) 7.87298661s ago: executing program 0 (id=2545): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 7.041945879s ago: executing program 1 (id=2547): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x280, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000140), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r3, &(0x7f0000000180)="01", 0x1) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 6.665265305s ago: executing program 2 (id=2548): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@sg0, 0x0, 0x0, 0x2208004, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000100)=""/8, 0x8, &(0x7f0000000300)=""/1, 0x1, 0x4}}, 0x48) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) brk(0x9a2) 6.481146717s ago: executing program 5 (id=2549): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',ro', @ANYBLOB=',gro']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.708803053s ago: executing program 1 (id=2550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 5.64367339s ago: executing program 4 (id=2551): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.589701076s ago: executing program 2 (id=2552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0x15}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x92, &(0x7f0000000000)=@string={0x92, 0x3, "931a24fbe1c67382026c93c945e8c9381c69b395cf48954e497bf942d1487d55483ab52b7c713a5bf17600133f136eb3f3ce8db73f34a9970787d2732756997cf69a4804cf54f7a618e382c9fb7ee5f436fe1e2236f33b38bd0116663a13d03f1af12fe4da8b446189f795ec677c41158c2a15b245fa1c90e80d5843c84bf47f9f9a48cff7389a8896960e181a1ae120"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42c}}]}) 5.391614992s ago: executing program 5 (id=2553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) 4.506796285s ago: executing program 5 (id=2554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semget$private(0x0, 0x2, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x891d, 0x0) 4.395417024s ago: executing program 0 (id=2555): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb700fe7f0000000081000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x3ffffffffffffffc, 0xe9ef, 0x100, 0x200000000, 0x200010, 0xfffc, 0x4}, &(0x7f0000000580)={0xa, 0xfffffffffffffffd, 0x4, 0x5, 0xffffffffffffffff, 0xffeffffffffffffa, 0x4, 0x6}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4.233317411s ago: executing program 4 (id=2556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) fcntl$setown(r4, 0x8, r2) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 3.521277229s ago: executing program 5 (id=2557): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd(0xc33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) 3.484720378s ago: executing program 1 (id=2558): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) syz_open_dev$vcsn(0x0, 0x1, 0x12000) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xd6741, 0x2fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getresuid(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x40200) socket$inet(0x2, 0x4000000000000001, 0x3) r3 = io_uring_setup(0x669, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 3.352198565s ago: executing program 4 (id=2559): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) cachestat(r1, &(0x7f0000000040)={0x11, 0x1de800000}, &(0x7f0000000180), 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x4) 1.69594677s ago: executing program 4 (id=2560): socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) 1.357750565s ago: executing program 2 (id=2561): r0 = io_uring_setup(0xfc8, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="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", 0x1c8}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 279.593998ms ago: executing program 4 (id=2562): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x80db, 0xabf4, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 203.674325ms ago: executing program 5 (id=2563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',ro', @ANYBLOB=',gro']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 76.36077ms ago: executing program 2 (id=2564): socket$inet(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c460407000304000000000000000200030003000000"], 0x258) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x28, 0x0, &(0x7f0000000000)) 0s ago: executing program 4 (id=2565): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 657.556498][T15395] 0: reclassify loop, rule prio 0, protocol 800 [ 658.788648][ T30] audit: type=1400 audit(1760320015.121:764): avc: denied { sqpoll } for pid=15400 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 659.872864][T15414] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 660.626682][ T30] audit: type=1400 audit(1760320016.282:765): avc: denied { accept } for pid=15410 comm="syz.1.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 660.889175][T15421] Invalid ELF header magic: != ELF [ 660.900220][ T30] audit: type=1400 audit(1760320017.223:766): avc: denied { module_load } for pid=15419 comm="syz.4.1524" path="/102/bus" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 661.015583][ T30] audit: type=1326 audit(1760320017.303:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 661.401855][ T30] audit: type=1326 audit(1760320017.303:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 661.497697][ T30] audit: type=1326 audit(1760320017.313:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 661.715070][ T30] audit: type=1326 audit(1760320017.313:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 662.087817][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 662.105202][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 662.226530][ T30] audit: type=1326 audit(1760320017.313:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 662.251046][ T30] audit: type=1326 audit(1760320017.313:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 662.275259][ T30] audit: type=1326 audit(1760320017.313:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.1.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 663.099876][ T5821] Bluetooth: hci3: unexpected event for opcode 0x043d [ 664.298267][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 664.298284][ T30] audit: type=1400 audit(1760320020.624:801): avc: denied { unmount } for pid=15454 comm="syz.5.1533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 664.380260][T15466] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 664.425865][T15468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1536'. [ 664.435147][T15468] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1536'. [ 664.444227][T15468] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1536'. [ 664.455220][T15468] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 665.039081][ T30] audit: type=1400 audit(1760320021.205:802): avc: denied { mount } for pid=15469 comm="syz.4.1537" name="/" dev="rpc_pipefs" ino=34293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 668.544502][ T30] audit: type=1400 audit(1760320024.876:803): avc: denied { getopt } for pid=15503 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 668.579258][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 668.585580][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 668.650153][ T30] audit: type=1400 audit(1760320024.986:804): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 670.057656][ T30] audit: type=1400 audit(1760320026.387:805): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.397589][ T30] audit: type=1400 audit(1760320026.387:806): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.439415][ T30] audit: type=1400 audit(1760320026.387:807): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.439457][ T30] audit: type=1400 audit(1760320026.387:808): avc: denied { read } for pid=5479 comm="dhcpcd" name="n106" dev="tmpfs" ino=7019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 670.439494][ T30] audit: type=1400 audit(1760320026.387:809): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=7019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 670.439528][ T30] audit: type=1400 audit(1760320026.387:810): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=7019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 670.649359][ T30] audit: type=1400 audit(1760320026.977:811): avc: denied { write } for pid=15528 comm="syz.4.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 671.369472][ T30] audit: type=1400 audit(1760320027.648:812): avc: denied { read open } for pid=15539 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.621342][ T30] audit: type=1400 audit(1760320027.648:813): avc: denied { getattr } for pid=15539 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.735004][ T30] audit: type=1400 audit(1760320027.828:814): avc: denied { read } for pid=15542 comm="syz.5.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 674.946149][ T1103] 0: reclassify loop, rule prio 0, protocol 800 [ 674.954476][ T1103] 0: reclassify loop, rule prio 0, protocol 800 [ 676.223453][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 676.223472][ T30] audit: type=1400 audit(1760320032.250:822): avc: denied { mount } for pid=15581 comm="syz.4.1562" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 677.508163][ T30] audit: type=1400 audit(1760320033.851:823): avc: denied { create } for pid=15603 comm="syz.4.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 677.749159][ T30] audit: type=1400 audit(1760320033.891:824): avc: denied { ioctl } for pid=15603 comm="syz.4.1566" path="socket:[35851]" dev="sockfs" ino=35851 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 678.569118][ T30] audit: type=1400 audit(1760320034.881:825): avc: denied { create } for pid=15616 comm="syz.1.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 679.352545][ T30] audit: type=1400 audit(1760320034.911:826): avc: denied { bind } for pid=15616 comm="syz.1.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 679.374369][ T30] audit: type=1326 audit(1760320034.991:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15619 comm="syz.0.1568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc09598eec9 code=0x0 [ 679.514886][ T30] audit: type=1400 audit(1760320035.842:828): avc: denied { read } for pid=15627 comm="syz.0.1569" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 680.700997][ T1103] 0: reclassify loop, rule prio 0, protocol 800 [ 680.739834][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 680.900630][ T30] audit: type=1400 audit(1760320035.842:829): avc: denied { open } for pid=15627 comm="syz.0.1569" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 681.651273][T15647] loop7: detected capacity change from 0 to 16384 [ 681.664766][ T30] audit: type=1400 audit(1760320036.832:830): avc: denied { accept } for pid=15626 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 681.827463][ T30] audit: type=1400 audit(1760320036.832:831): avc: denied { write } for pid=15626 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 681.858459][ T30] audit: type=1400 audit(1760320037.893:832): avc: denied { name_bind } for pid=15646 comm="syz.0.1573" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 682.806135][T15648] loop7: detected capacity change from 16384 to 0 [ 682.850492][ C0] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 683.691442][ T30] audit: type=1400 audit(1760320040.034:833): avc: denied { ioctl } for pid=15662 comm="syz.1.1577" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 686.389679][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 686.440295][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 687.090294][ T30] audit: type=1400 audit(1760320043.436:834): avc: denied { firmware_load } for pid=15695 comm="syz.0.1585" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 687.115066][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.871115][T15741] o2cb: This node has not been configured. [ 690.877025][T15741] o2cb: Cluster check failed. Fix errors before retrying. [ 690.884248][T15741] (syz.4.1595,15741,1):user_dlm_register:674 ERROR: status = -22 [ 690.892096][T15741] (syz.4.1595,15741,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 691.095217][ T30] audit: type=1400 audit(1760320047.408:835): avc: denied { watch } for pid=15735 comm="syz.5.1594" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 691.995487][T13148] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 692.147007][ T1103] 0: reclassify loop, rule prio 0, protocol 800 [ 692.259618][ T30] audit: type=1326 audit(1760320048.598:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 692.317478][T13148] usb 6-1: descriptor type invalid, skip [ 692.323149][T13148] usb 6-1: descriptor type invalid, skip [ 692.460533][ T30] audit: type=1326 audit(1760320048.598:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 692.484496][T13148] usb 6-1: descriptor type invalid, skip [ 692.606549][T13148] usb 6-1: not running at top speed; connect to a high speed hub [ 692.625983][T13148] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.796859][ T1103] 0: reclassify loop, rule prio 0, protocol 800 [ 693.105589][T13148] usb 6-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.118704][T13148] usb 6-1: config 1 interface 0 has no altsetting 0 [ 693.121402][ T30] audit: type=1326 audit(1760320048.608:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 693.154329][T13148] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.218439][T13148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.269668][T13148] usb 6-1: Product: й [ 693.347679][T13148] usb 6-1: Manufacturer: ᐊ [ 693.367915][T13148] usb 6-1: SerialNumber: syz [ 693.386575][ T30] audit: type=1326 audit(1760320048.608:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 693.484945][ T30] audit: type=1326 audit(1760320048.608:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 693.523516][ T30] audit: type=1326 audit(1760320048.608:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 693.651432][T13148] usb 6-1: bad CDC descriptors [ 693.684259][T13148] usb 6-1: USB disconnect, device number 2 [ 693.690504][ T30] audit: type=1326 audit(1760320048.608:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 694.606497][ T30] audit: type=1326 audit(1760320048.608:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 694.794066][ T30] audit: type=1326 audit(1760320048.638:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 694.888815][ T30] audit: type=1326 audit(1760320048.638:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 696.980111][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1607'. [ 698.641688][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 699.425243][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 699.425260][ T30] audit: type=1326 audit(1760320055.782:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15792 comm="syz.4.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7fc00000 [ 702.033071][ T5930] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 702.190383][ T5930] usb 6-1: device descriptor read/64, error -71 [ 702.588884][ T60] 0: reclassify loop, rule prio 0, protocol 800 [ 703.116078][T15810] Bluetooth: hci3: command 0x0406 tx timeout [ 704.316424][ T7379] 0: reclassify loop, rule prio 0, protocol 800 [ 704.729199][T15218] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 705.262057][T15848] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 705.432737][T15218] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 705.980545][ T30] audit: type=1400 audit(1760320061.885:858): avc: denied { read } for pid=15844 comm="syz.2.1622" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 706.010643][T15218] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 706.019986][T15218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.045883][T15218] usb 2-1: Product: syz [ 706.081869][T15218] usb 2-1: Manufacturer: syz [ 706.167552][ T30] audit: type=1400 audit(1760320061.885:859): avc: denied { open } for pid=15844 comm="syz.2.1622" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 706.175677][T15218] usb 2-1: SerialNumber: syz [ 706.199108][ T30] audit: type=1400 audit(1760320061.885:860): avc: denied { ioctl } for pid=15844 comm="syz.2.1622" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 706.347990][T15218] usb 2-1: config 0 descriptor?? [ 706.595116][ T30] audit: type=1326 audit(1760320062.895:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15832 comm="syz.1.1618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e0978eec9 code=0x0 [ 707.940896][T15878] netlink: 'syz.0.1627': attribute type 11 has an invalid length. [ 709.113241][ T7379] 0: reclassify loop, rule prio 0, protocol 800 [ 709.573073][ T42] usb 2-1: USB disconnect, device number 12 [ 709.873331][ T30] audit: type=1326 audit(1760320066.227:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.1631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x0 [ 710.109305][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 713.353733][ T30] audit: type=1400 audit(1760320069.709:863): avc: denied { remount } for pid=15915 comm="syz.2.1636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 713.760753][T15935] team_slave_0: entered promiscuous mode [ 713.766760][T15935] team_slave_1: entered promiscuous mode [ 713.776865][T15935] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 714.899459][ T3538] 0: reclassify loop, rule prio 0, protocol 800 [ 715.097253][ T30] audit: type=1400 audit(1760320071.450:864): avc: denied { unmount } for pid=15057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 715.599003][ T30] audit: type=1400 audit(1760320071.550:865): avc: denied { mount } for pid=15942 comm="syz.4.1644" name="/" dev="autofs" ino=37006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 715.814848][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 718.053274][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 718.902486][T15975] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 720.938180][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 721.821384][ T7377] 0: reclassify loop, rule prio 0, protocol 800 [ 722.599373][ T30] audit: type=1400 audit(1760320078.493:866): avc: denied { append } for pid=16010 comm="syz.5.1661" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 722.969970][ T30] audit: type=1400 audit(1760320079.183:867): avc: denied { create } for pid=16014 comm="syz.0.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 723.002081][ T30] audit: type=1400 audit(1760320079.224:868): avc: denied { ioctl } for pid=16014 comm="syz.0.1663" path="socket:[36464]" dev="sockfs" ino=36464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 723.390722][T16025] __vm_enough_memory: pid: 16025, comm: syz.5.1664, bytes: 21200146792448 not enough memory for the allocation [ 723.507847][T16027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.371713][ T30] audit: type=1400 audit(1760320080.344:869): avc: denied { append } for pid=16028 comm="syz.1.1665" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 724.724643][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1668'. [ 727.287911][ T42] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 727.288317][T16060] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 727.328895][ T3538] 0: reclassify loop, rule prio 0, protocol 800 [ 727.335462][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 727.630134][ T42] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 727.651604][ T42] usb 2-1: config 0 has no interface number 0 [ 730.134057][T16089] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1681'. [ 730.520818][ T42] usb 2-1: string descriptor 0 read error: -71 [ 730.520938][ T42] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 730.520960][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.523204][ T42] usb 2-1: config 0 descriptor?? [ 730.523908][ T42] usb 2-1: can't set config #0, error -71 [ 730.526943][ T42] usb 2-1: USB disconnect, device number 13 [ 731.155384][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1684'. [ 731.532820][ T30] audit: type=1326 audit(1760320087.508:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.532858][ T30] audit: type=1326 audit(1760320087.508:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.532881][ T30] audit: type=1326 audit(1760320087.518:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.532927][ T30] audit: type=1326 audit(1760320087.518:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.532950][ T30] audit: type=1326 audit(1760320087.518:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.532973][ T30] audit: type=1326 audit(1760320087.518:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.532995][ T30] audit: type=1326 audit(1760320087.518:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.533016][ T30] audit: type=1326 audit(1760320087.518:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.533045][ T30] audit: type=1326 audit(1760320087.518:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 731.533068][ T30] audit: type=1326 audit(1760320087.528:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.0.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 732.038649][T16095] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 732.557538][ T5881] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 733.352162][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 733.352520][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 733.499821][ T5881] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 733.499865][ T5881] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 733.499903][ T5881] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 733.499924][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.534428][ T5881] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 733.578627][T16121] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1689'. [ 733.888036][ T5881] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 733.939308][T15213] udevd[15213]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.497478][ T5930] usb 1-1: USB disconnect, device number 14 [ 736.042665][T16136] openvswitch: netlink: Flow actions attr not present in new flow. [ 736.509888][ T5930] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 736.688499][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 737.054480][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 737.073052][ T5930] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 737.619689][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.752629][ T5930] usb 6-1: Product: syz [ 737.786543][ T5930] usb 6-1: Manufacturer: syz [ 737.809180][ T5930] usb 6-1: SerialNumber: syz [ 737.876401][ T5930] usb 6-1: config 0 descriptor?? [ 738.272962][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 738.272996][ T30] audit: type=1400 audit(1760320094.531:896): avc: denied { mount } for pid=16157 comm="syz.2.1701" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 738.953420][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 739.183232][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 740.029321][ T5930] usb 6-1: USB disconnect, device number 5 [ 740.708925][ T24] IPVS: starting estimator thread 0... [ 740.730366][ T30] audit: type=1400 audit(1760320097.102:897): avc: denied { ioctl } for pid=16172 comm="syz.5.1705" path="socket:[37423]" dev="sockfs" ino=37423 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 740.831166][T16180] IPVS: using max 47 ests per chain, 112800 per kthread [ 743.938123][T15825] Bluetooth: hci5: command 0x0406 tx timeout [ 744.050155][ T3538] 0: reclassify loop, rule prio 0, protocol 800 [ 744.279362][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 744.558434][ T30] audit: type=1400 audit(1760320100.934:898): avc: denied { accept } for pid=16218 comm="syz.4.1716" lport=35044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 744.615604][ T3538] 0: reclassify loop, rule prio 0, protocol 800 [ 745.996690][ T30] audit: type=1400 audit(1760320102.375:899): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 746.388482][ T30] audit: type=1400 audit(1760320102.775:900): avc: denied { getopt } for pid=16234 comm="syz.0.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 747.243422][T16250] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1732'. [ 748.976973][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 749.136995][T16247] netlink: 'syz.4.1722': attribute type 10 has an invalid length. [ 749.329086][T16247] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 749.341639][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 749.727394][ T7379] 0: reclassify loop, rule prio 0, protocol 800 [ 750.356479][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 752.102944][ T30] audit: type=1400 audit(1760320108.468:901): avc: denied { read } for pid=16294 comm="syz.5.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 754.232816][T16325] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1738'. [ 755.072565][T16343] netlink: 'syz.2.1740': attribute type 10 has an invalid length. [ 755.107208][T16343] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 755.121515][T16343] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 755.504332][ T60] 0: reclassify loop, rule prio 0, protocol 800 [ 756.236539][ T30] audit: type=1400 audit(1760320112.060:902): avc: denied { name_bind } for pid=16349 comm="syz.2.1742" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 756.480287][ T30] audit: type=1400 audit(1760320112.060:903): avc: denied { create } for pid=16349 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 756.500534][ T30] audit: type=1400 audit(1760320112.070:904): avc: denied { sys_admin } for pid=16349 comm="syz.2.1742" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 756.534192][ T30] audit: type=1400 audit(1760320112.650:905): avc: denied { getopt } for pid=16344 comm="syz.1.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 756.588073][ T30] audit: type=1400 audit(1760320112.890:906): avc: denied { accept } for pid=16357 comm="syz.5.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 759.181848][ T30] audit: type=1400 audit(1760320115.482:907): avc: denied { getopt } for pid=16399 comm="syz.2.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 761.880582][ T30] audit: type=1400 audit(1760320118.133:908): avc: denied { setopt } for pid=16422 comm="syz.2.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 761.904441][ T60] 0: reclassify loop, rule prio 0, protocol 800 [ 762.045149][ T30] audit: type=1400 audit(1760320118.143:909): avc: denied { write } for pid=16422 comm="syz.2.1759" path="socket:[38222]" dev="sockfs" ino=38222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 762.510289][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 763.642076][T16447] Invalid ELF header type: 3 != 1 [ 764.008317][ T30] audit: type=1400 audit(1760320120.034:910): avc: denied { module_load } for pid=16438 comm="syz.2.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 764.066097][ T60] 0: reclassify loop, rule prio 0, protocol 800 [ 764.089566][ T24] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 764.371543][T16452] netlink: 'syz.2.1766': attribute type 3 has an invalid length. [ 764.386630][T16452] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1766'. [ 764.861754][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 764.877408][ T30] audit: type=1400 audit(1760320120.784:911): avc: denied { watch } for pid=16451 comm="syz.2.1766" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 764.916038][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.952349][ T24] usb 1-1: Product: syz [ 764.956863][ T24] usb 1-1: Manufacturer: syz [ 764.961872][ T24] usb 1-1: SerialNumber: syz [ 764.966882][ T30] audit: type=1400 audit(1760320120.784:912): avc: denied { listen } for pid=16451 comm="syz.2.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 764.994576][ T24] usb 1-1: config 0 descriptor?? [ 765.496312][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 766.398275][ T30] audit: type=1400 audit(1760320122.745:913): avc: denied { getopt } for pid=16466 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 767.775385][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 768.287341][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 768.310636][ T24] usb 1-1: USB disconnect, device number 15 [ 770.128422][ T7371] 0: reclassify loop, rule prio 0, protocol 800 [ 771.029986][ T30] audit: type=1400 audit(1760320127.418:914): avc: denied { module_load } for pid=16512 comm="syz.5.1780" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 772.416689][ T30] audit: type=1400 audit(1760320128.718:915): avc: denied { create } for pid=16529 comm="syz.4.1782" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 772.583652][ T30] audit: type=1400 audit(1760320128.718:916): avc: denied { setattr } for pid=16529 comm="syz.4.1782" name="file0" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 773.282590][T16535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.385804][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 773.652228][T16535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.690100][T16545] 0: reclassify loop, rule prio 0, protocol 800 [ 773.836823][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 773.979556][T16535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.939801][ T30] audit: type=1400 audit(1760320131.330:917): avc: denied { mount } for pid=16554 comm="syz.4.1788" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 775.002190][T16535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.224245][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 775.726887][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.053783][ T30] audit: type=1400 audit(1760320132.310:918): avc: denied { ioctl } for pid=16566 comm="syz.4.1793" path="socket:[38427]" dev="sockfs" ino=38427 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 776.178656][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.223575][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.231801][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.047724][T16564] netlink: zone id is out of range [ 777.427731][T16564] netlink: zone id is out of range [ 777.535902][T16564] netlink: zone id is out of range [ 777.572473][T16564] netlink: zone id is out of range [ 777.598144][T16564] netlink: zone id is out of range [ 778.243841][T16593] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.347588][T16593] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.474191][T16593] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.623333][T16593] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.339309][ T5881] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 779.350589][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 779.411145][T15235] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.487324][T15235] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.508244][T15235] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.526311][T15235] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.648736][ T5881] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 780.514523][ T36] 0: reclassify loop, rule prio 0, protocol 800 [ 780.531297][ T5881] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 780.542677][ T5881] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.835862][ T30] audit: type=1400 audit(1760320137.012:919): avc: denied { mount } for pid=16617 comm="syz.5.1806" name="/" dev="hugetlbfs" ino=38557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 780.922705][ T5881] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 780.991024][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.039791][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.174317][ T5881] usb 2-1: invalid MIDI out EP 0 [ 782.729268][T16638] ptrace attach of "./syz-executor exec"[16639] was attempted by "./syz-executor exec"[16638] [ 783.125141][ T5881] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 783.302681][ T5881] usb 2-1: USB disconnect, device number 14 [ 784.420370][ T3538] 0: reclassify loop, rule prio 0, protocol 800 [ 785.689761][T16675] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1819'. [ 786.201681][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 786.701284][T16683] random: crng reseeded on system resumption [ 786.818078][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 787.106493][ T30] audit: type=1400 audit(1760320143.115:920): avc: denied { ioctl } for pid=16679 comm="syz.2.1822" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 788.782169][T16694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1825'. [ 790.017941][ T60] 0: reclassify loop, rule prio 0, protocol 800 [ 790.523491][T16713] No such timeout policy "syz0" [ 790.789327][T16712] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 791.946425][ T7377] 0: reclassify loop, rule prio 0, protocol 800 [ 793.009568][T16718] netlink: 'syz.4.1831': attribute type 2 has an invalid length. [ 793.102398][T16735] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1829'. [ 793.170523][T16740] lo speed is unknown, defaulting to 1000 [ 793.270219][ T30] audit: type=1400 audit(1760320149.629:921): avc: denied { open } for pid=16699 comm="syz.5.1829" path="/dev/ttyqf" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 793.439961][ T30] audit: type=1400 audit(1760320149.829:922): avc: denied { append } for pid=16736 comm="syz.2.1835" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.590519][ T30] audit: type=1400 audit(1760320149.829:923): avc: denied { mounton } for pid=16736 comm="syz.2.1835" path="/396/file1" dev="tmpfs" ino=2110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 793.793944][T16753] tmpfs: Unknown parameter 'usrquota [ 793.793944][T16753] lo' [ 795.563791][ T30] audit: type=1800 audit(1760320151.099:924): pid=16757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1839" name="bus" dev="overlay" ino=1786 res=0 errno=0 [ 795.788431][ T7371] 0: reclassify loop, rule prio 0, protocol 800 [ 796.989633][T16772] No such timeout policy "syz0" [ 797.520282][T16768] netlink: 'syz.4.1843': attribute type 12 has an invalid length. [ 797.694707][ T3538] 0: reclassify loop, rule prio 0, protocol 800 [ 799.307243][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 799.343700][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 799.371922][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 799.400792][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 799.669277][T16794] input: syz0 as /devices/virtual/input/input7 [ 799.691042][ T30] audit: type=1400 audit(1760320156.092:925): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3250 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 799.963767][ T30] audit: type=1400 audit(1760320156.092:926): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3250 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 800.149352][ T30] audit: type=1400 audit(1760320156.092:927): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3250 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 800.950967][T12972] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 801.082078][T12972] usb 6-1: device descriptor read/64, error -71 [ 801.400786][T12972] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 801.479826][T16825] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 801.506201][T16825] CIFS mount error: No usable UNC path provided in device string! [ 801.506201][T16825] [ 801.516631][T16825] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 801.559319][ T7377] 0: reclassify loop, rule prio 0, protocol 800 [ 801.994558][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 802.014303][T13148] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 802.384268][T16836] overlayfs: failed to resolve './file0': -2 [ 803.007967][T13148] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 803.153008][T16842] Invalid ELF header type: 3 != 1 [ 803.641064][ T60] 0: reclassify loop, rule prio 0, protocol 800 [ 803.822532][T12972] usb 6-1: device descriptor read/64, error -71 [ 804.030456][T12972] usb usb6-port1: attempt power cycle [ 804.616167][ T30] audit: type=1400 audit(1760320161.024:928): avc: denied { bind } for pid=16848 comm="syz.5.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 805.848744][T13148] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 805.854933][T13148] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 805.865337][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 807.266510][ T30] audit: type=1400 audit(1760320163.676:929): avc: denied { create } for pid=16884 comm="syz.5.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 807.293895][ T7371] 0: reclassify loop, rule prio 0, protocol 800 [ 807.314650][ T30] audit: type=1400 audit(1760320163.696:930): avc: denied { ioctl } for pid=16884 comm="syz.5.1866" path="socket:[41121]" dev="sockfs" ino=41121 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 807.597670][ T5880] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 808.645845][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 808.678556][T13148] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 808.697125][T13148] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 808.717055][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 808.730851][T13148] batman_adv: batadv0: Interface deactivated: wlan0 [ 808.805074][ T5880] usb 1-1: config 0 has no interfaces? [ 808.822516][ T5880] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 808.990887][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.005671][ T5880] usb 1-1: Product: syz [ 809.024456][ T5880] usb 1-1: Manufacturer: syz [ 809.211087][ T7367] 0: reclassify loop, rule prio 0, protocol 800 [ 809.537394][ T5880] usb 1-1: SerialNumber: syz [ 809.574115][T13148] batman_adv: batadv0: Interface deactivated: wlan0 [ 809.585688][ T5880] usb 1-1: config 0 descriptor?? [ 809.864741][T16908] Invalid ELF header type: 3 != 1 [ 810.337966][ T5880] usb 1-1: USB disconnect, device number 16 [ 810.405945][ T30] audit: type=1400 audit(1760320166.807:931): avc: denied { append } for pid=16912 comm="syz.0.1873" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 811.317961][T13148] batman_adv: batadv0: Interface deactivated: wlan0 [ 812.089566][ T30] audit: type=1400 audit(1760320168.488:932): avc: denied { write } for pid=16937 comm="syz.5.1878" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 813.375717][ T7379] 0: reclassify loop, rule prio 0, protocol 800 [ 813.534070][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 813.685840][T13148] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 813.724577][T13148] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 813.866520][ T30] audit: type=1400 audit(1760320170.279:933): avc: denied { watch } for pid=16973 comm="syz.4.1882" path="/197/control" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 814.576432][ T30] audit: type=1400 audit(1760320170.509:934): avc: denied { watch_sb watch_reads } for pid=16972 comm="syz.5.1881" path="/68/file0" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 814.965569][T15235] 0: reclassify loop, rule prio 0, protocol 800 [ 815.746687][ T30] audit: type=1400 audit(1760320172.150:935): avc: denied { read } for pid=16993 comm="syz.0.1884" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 815.895705][ T30] audit: type=1400 audit(1760320172.150:936): avc: denied { open } for pid=16993 comm="syz.0.1884" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 815.920211][ T30] audit: type=1400 audit(1760320172.150:937): avc: denied { ioctl } for pid=16993 comm="syz.0.1884" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 816.585544][T17006] tipc: Enabled bearer , priority 0 [ 816.603642][T17006] syzkaller0: entered promiscuous mode [ 816.609282][T17006] syzkaller0: entered allmulticast mode [ 816.644022][ T5821] Bluetooth: hci5: command 0x0406 tx timeout [ 816.660263][T13148] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 816.678765][T13148] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 817.357176][T17011] tipc: Resetting bearer [ 817.562267][T17005] tipc: Resetting bearer [ 817.606176][T17005] tipc: Disabling bearer [ 817.664568][T17013] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 817.681742][T17013] bridge2: entered allmulticast mode [ 821.176111][T17080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1897'. [ 821.880138][T17075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1897'. [ 822.205645][T17103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1904'. [ 823.784206][T17118] block nbd5: not configured, cannot reconfigure [ 823.805620][ T30] audit: type=1400 audit(1760320180.217:938): avc: denied { append } for pid=17117 comm="syz.5.1907" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 824.295985][T17130] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1910'. [ 824.437173][T17131] lo speed is unknown, defaulting to 1000 [ 830.295186][ T30] audit: type=1400 audit(1760320186.697:939): avc: denied { associate } for pid=17169 comm="syz.4.1916" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 830.899765][T17179] new mount options do not match the existing superblock, will be ignored [ 830.927537][T17179] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 831.264679][ T30] audit: type=1400 audit(1760320187.327:940): avc: denied { remount } for pid=17172 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 833.972161][T17192] overlayfs: failed to clone lowerpath [ 834.018667][T17192] overlayfs: failed to clone upperpath [ 835.643675][ T30] audit: type=1400 audit(1760320192.047:941): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 836.304644][T17208] tmpfs: Unknown parameter 'usrquota [ 836.304644][T17208] lo' [ 836.327819][ T30] audit: type=1326 audit(1760320192.737:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 836.351787][ T30] audit: type=1326 audit(1760320192.757:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 836.377410][ T30] audit: type=1326 audit(1760320192.787:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 836.404272][ T30] audit: type=1326 audit(1760320192.787:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 836.427919][ T30] audit: type=1326 audit(1760320192.787:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 836.453256][ T30] audit: type=1326 audit(1760320192.867:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 837.436865][ T30] audit: type=1326 audit(1760320192.867:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 837.562856][ T30] audit: type=1326 audit(1760320192.867:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 838.345773][ T30] audit: type=1326 audit(1760320192.877:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 838.447190][T17234] uprobe: syz.0.1934:17234 failed to unregister, leaking uprobe [ 840.835832][T17252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'. [ 841.314457][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'. [ 841.323549][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1939'. [ 842.854475][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 842.854507][ T30] audit: type=1400 audit(1760320198.867:974): avc: denied { mount } for pid=17261 comm="syz.5.1940" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 844.416766][T17287] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 844.423650][T17287] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 845.620340][ T30] audit: type=1400 audit(1760320201.537:975): avc: denied { create } for pid=17290 comm="syz.5.1949" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 845.841418][ T30] audit: type=1400 audit(1760320201.537:976): avc: denied { write } for pid=17290 comm="syz.5.1949" name="file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 846.137228][T17307] bridge0: port 3(dummy0) entered disabled state [ 846.144192][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.151348][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.118363][ T30] audit: type=1400 audit(1760320201.547:977): avc: denied { open } for pid=17290 comm="syz.5.1949" path="/83/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.224571][ T30] audit: type=1400 audit(1760320201.547:978): avc: denied { ioctl } for pid=17290 comm="syz.5.1949" path="/83/file0" dev="tmpfs" ino=447 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.995934][ T30] audit: type=1400 audit(1760320202.197:979): avc: denied { unlink } for pid=15057 comm="syz-executor" name="file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 848.228525][ T30] audit: type=1400 audit(1760320203.607:980): avc: denied { bind } for pid=17310 comm="syz.4.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 849.011154][ T30] audit: type=1400 audit(1760320205.417:981): avc: denied { read write } for pid=17325 comm="syz.2.1957" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 849.325346][ T30] audit: type=1400 audit(1760320205.417:982): avc: denied { open } for pid=17325 comm="syz.2.1957" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 852.667090][ T30] audit: type=1326 audit(1760320209.067:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 852.735479][ T30] audit: type=1326 audit(1760320209.067:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 852.809812][ T30] audit: type=1326 audit(1760320209.067:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 852.981781][ T30] audit: type=1326 audit(1760320209.067:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 853.131859][ T5880] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 853.525592][T17380] ipip0: entered promiscuous mode [ 853.535485][ T30] audit: type=1326 audit(1760320209.067:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 853.615363][ T30] audit: type=1326 audit(1760320209.067:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 853.723253][ T30] audit: type=1326 audit(1760320209.067:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 853.752112][ T30] audit: type=1326 audit(1760320209.067:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 853.779005][ T5880] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 853.791660][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.806492][ T5880] usb 2-1: Product: syz [ 853.836615][ T5880] usb 2-1: Manufacturer: syz [ 853.856897][ T30] audit: type=1326 audit(1760320209.067:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 853.880974][ T5880] usb 2-1: SerialNumber: syz [ 853.934645][ T5880] usb 2-1: config 0 descriptor?? [ 853.943122][ T5880] ch341 2-1:0.0: ch341-uart converter detected [ 854.139836][ T30] audit: type=1326 audit(1760320209.067:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 854.194166][ T30] audit: type=1326 audit(1760320209.067:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 854.245510][T17388] Invalid ELF header type: 3 != 1 [ 854.270278][ T30] audit: type=1326 audit(1760320209.067:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 854.296518][ T30] audit: type=1326 audit(1760320209.067:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 854.416083][ T30] audit: type=1326 audit(1760320209.067:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa063f8eec9 code=0x7ffc0000 [ 855.441071][ T5880] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 856.905884][T13148] usb 2-1: USB disconnect, device number 15 [ 856.928235][T13148] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 857.053813][T13148] ch341 2-1:0.0: device disconnected [ 860.908252][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 860.958719][T17449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.978085][T17450] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1980'. [ 861.005527][T17449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.028098][T17450] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1980'. [ 861.094654][T17450] netlink: 'syz.4.1980': attribute type 6 has an invalid length. [ 861.111692][T17450] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1980'. [ 861.344355][T17435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.599483][T17435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.773410][T13148] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 862.221781][T13148] usb 6-1: Using ep0 maxpacket: 16 [ 862.231793][T13148] usb 6-1: config index 0 descriptor too short (expected 31762, got 18) [ 862.240188][T13148] usb 6-1: config 128 has too many interfaces: 114, using maximum allowed: 32 [ 862.306209][T13148] usb 6-1: config 128 has an invalid descriptor of length 89, skipping remainder of the config [ 862.402666][T13148] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 114 [ 862.659084][T13148] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 862.703783][T17435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.407793][T13148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.420535][T13148] usb 6-1: Product: syz [ 863.428316][T13148] usb 6-1: Manufacturer: syz [ 863.433483][T13148] usb 6-1: SerialNumber: syz [ 863.766534][T17435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.499047][T15235] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.680727][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 866.368059][T17485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1993'. [ 866.567391][T15235] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.603043][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.610165][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 866.610182][ T30] audit: type=1326 audit(1760320222.087:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 866.611296][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.659503][ T30] audit: type=1326 audit(1760320222.087:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 866.797377][ T30] audit: type=1326 audit(1760320222.087:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 866.851172][T13148] usb 6-1: USB disconnect, device number 10 [ 867.002328][ T30] audit: type=1326 audit(1760320222.087:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 867.240110][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1995'. [ 867.249435][ T30] audit: type=1326 audit(1760320222.087:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 867.413101][ T30] audit: type=1326 audit(1760320222.087:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 867.565529][ T30] audit: type=1326 audit(1760320222.087:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 867.598210][ T30] audit: type=1326 audit(1760320222.087:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 867.714460][ T30] audit: type=1326 audit(1760320222.087:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 867.891841][ T30] audit: type=1326 audit(1760320222.087:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09598eec9 code=0x7ffc0000 [ 867.941000][T17508] netlink: 'syz.2.2000': attribute type 4 has an invalid length. [ 868.054731][ T5881] lo speed is unknown, defaulting to 1000 [ 868.082161][ T5881] syz2: Port: 1 Link DOWN [ 868.107283][T17510] netlink: 'syz.2.2000': attribute type 4 has an invalid length. [ 868.259130][ T5881] lo speed is unknown, defaulting to 1000 [ 868.268475][ T5881] syz2: Port: 1 Link ACTIVE [ 868.447301][T17502] : renamed from wg2 (while UP) [ 868.758892][T17519] trusted_key: encrypted_key: master key parameter ' [ 868.758892][T17519] ' is invalid [ 869.358362][T17532] lo: Caught tx_queue_len zero misconfig [ 869.402203][T17532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2006'. [ 869.795085][T17537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2006'. [ 871.266516][T17548] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 871.279795][T17548] qnx6: wrong signature (magic) in superblock #1. [ 871.286437][T17548] qnx6: unable to read the first superblock [ 872.277661][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 872.277675][ T30] audit: type=1326 audit(1760320228.687:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17549 comm="syz.2.2010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa063f8eec9 code=0x0 [ 873.463696][T17563] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 873.470219][T17563] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 873.567289][T17563] vhci_hcd vhci_hcd.0: Device attached [ 873.578935][T17564] vhci_hcd: connection closed [ 873.581464][ T7379] vhci_hcd: stop threads [ 873.591241][ T7379] vhci_hcd: release socket [ 873.630127][ T7379] vhci_hcd: disconnect device [ 874.415546][ T30] audit: type=1400 audit(1760320230.817:1019): avc: denied { create } for pid=17559 comm="syz.5.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 877.533491][T17603] overlayfs: failed to resolve './file1': -2 [ 878.660650][ T30] audit: type=1400 audit(1760320235.017:1020): avc: denied { relabelfrom } for pid=17610 comm="syz.1.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 879.019648][ T30] audit: type=1400 audit(1760320235.017:1021): avc: denied { relabelto } for pid=17610 comm="syz.1.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 879.059458][ T30] audit: type=1400 audit(1760320235.427:1022): avc: denied { read } for pid=17619 comm="syz.5.2026" path="socket:[42406]" dev="sockfs" ino=42406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 879.097590][ T30] audit: type=1400 audit(1760320235.507:1023): avc: denied { getopt } for pid=17619 comm="syz.5.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 882.115906][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.134958][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.351713][ T30] audit: type=1400 audit(1760320242.687:1024): avc: denied { listen } for pid=17690 comm="syz.2.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 886.715405][T17693] overlayfs: failed to clone upperpath [ 888.555858][T17715] lo speed is unknown, defaulting to 1000 [ 888.956256][T17730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.035176][T17730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.475393][ T30] audit: type=1326 audit(1760320247.887:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17747 comm="syz.5.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 891.542133][ T7381] Bluetooth: hci0: Frame reassembly failed (-84) [ 891.570760][ T30] audit: type=1326 audit(1760320247.917:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17747 comm="syz.5.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 891.738871][T17761] tipc: Enabled bearer , priority 0 [ 891.777184][T17759] tipc: Resetting bearer [ 891.961397][T17758] tipc: Disabling bearer [ 892.821850][T17772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 893.541770][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 894.114329][T17793] IPVS: sh: FWM 3 0x00000003 - no destination available [ 894.122109][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 895.411696][ T30] audit: type=1400 audit(1760320251.807:1027): avc: denied { block_suspend } for pid=17800 comm="syz.4.2066" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 896.240866][T17814] lo speed is unknown, defaulting to 1000 [ 896.417240][T17815] loop4: detected capacity change from 0 to 2560 [ 896.463351][T17197] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 896.482646][T17197] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 896.504754][T17815] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 896.513316][T17197] Buffer I/O error on dev loop4, logical block 258, lost async page write [ 896.601938][T17815] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 896.610421][T17197] Buffer I/O error on dev loop4, logical block 259, lost async page write [ 896.641108][T17815] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 896.651979][T17197] Buffer I/O error on dev loop4, logical block 260, lost async page write [ 896.678152][T17815] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 896.687358][T17197] Buffer I/O error on dev loop4, logical block 261, lost async page write [ 897.406174][T17825] fuse: Bad value for 'fd' [ 897.407347][T17813] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 897.422735][T17813] block device autoloading is deprecated and will be removed. [ 898.191897][ T30] audit: type=1400 audit(1760320254.087:1028): avc: denied { setopt } for pid=17826 comm="syz.0.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 899.087238][T17840] No such timeout policy "syz0" [ 904.045365][T17873] syzkaller0: entered promiscuous mode [ 904.051058][T17873] syzkaller0: entered allmulticast mode [ 904.449723][T17884] No such timeout policy "syz0" [ 904.540101][T17881] tipc: Enabled bearer , priority 0 [ 905.620594][T13148] tipc: Node number set to 3217673651 [ 905.779009][T17873] tipc: Resetting bearer [ 906.445886][T17872] tipc: Resetting bearer [ 906.466907][T17904] overlayfs: failed to clone upperpath [ 906.533575][T17872] tipc: Disabling bearer [ 906.794802][T17908] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 907.166204][T17908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 907.231621][ T30] audit: type=1400 audit(1760320263.617:1029): avc: denied { mounton } for pid=17913 comm="syz.4.2093" path="/243/file0" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 910.262738][T17945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.431679][ T30] audit: type=1400 audit(1760320267.817:1030): avc: denied { ioctl } for pid=17943 comm="syz.5.2101" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 912.307112][ T30] audit: type=1326 audit(1760320268.717:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 912.658016][ T30] audit: type=1326 audit(1760320268.747:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 912.681890][ T30] audit: type=1326 audit(1760320268.757:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 912.710872][ T30] audit: type=1326 audit(1760320268.777:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 912.751496][ T30] audit: type=1326 audit(1760320268.777:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 912.761757][T16461] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 912.783897][T17960] lo speed is unknown, defaulting to 1000 [ 912.824521][ T30] audit: type=1326 audit(1760320268.887:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 912.949502][ T30] audit: type=1326 audit(1760320268.887:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 913.018574][ T30] audit: type=1326 audit(1760320268.897:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 913.053864][ T30] audit: type=1326 audit(1760320268.907:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 913.078905][ T30] audit: type=1326 audit(1760320268.907:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17956 comm="syz.5.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 913.231654][T16461] usb 2-1: Using ep0 maxpacket: 32 [ 913.242803][T16461] usb 2-1: config 0 has an invalid interface number: 209 but max is 0 [ 913.261773][T16461] usb 2-1: config 0 has no interface number 0 [ 913.862453][T16461] usb 2-1: config 0 interface 209 has no altsetting 0 [ 913.882146][T16461] usb 2-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 913.891349][T16461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.900684][T16461] usb 2-1: Product: syz [ 914.073427][T16461] usb 2-1: Manufacturer: syz [ 914.078089][T16461] usb 2-1: SerialNumber: syz [ 914.085009][T16461] usb 2-1: config 0 descriptor?? [ 915.326963][T16461] usb 2-1: USB disconnect, device number 16 [ 919.164105][T18037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2120'. [ 920.199953][T18046] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 923.303786][T18071] trusted_key: encrypted_key: insufficient parameters specified [ 923.382566][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 923.382578][ T30] audit: type=1400 audit(1760320279.797:1052): avc: denied { getopt } for pid=18066 comm="syz.4.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 923.698749][T18073] lo speed is unknown, defaulting to 1000 [ 924.394902][T18088] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.2131'. [ 926.115068][ T30] audit: type=1400 audit(1760320282.527:1053): avc: denied { accept } for pid=18097 comm="syz.5.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 927.493612][T18110] batman_adv: batadv0: Removing interface: wlan0 [ 927.516235][T18112] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2138'. [ 928.398133][T16810] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 928.628111][T18121] lo speed is unknown, defaulting to 1000 [ 928.752310][T16810] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 928.767660][T16810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.790475][T16810] usb 6-1: config 0 has no interfaces? [ 928.816619][T16810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.839776][T16810] usb 6-1: config 0 has no interfaces? [ 928.864118][T16810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.878130][T16810] usb 6-1: config 0 has no interfaces? [ 928.889719][T16810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.022990][T16810] usb 6-1: config 0 has no interfaces? [ 930.043067][T16810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.095336][T16810] usb 6-1: config 0 has no interfaces? [ 931.116990][T16810] usb 6-1: unable to read config index 5 descriptor/start: -61 [ 931.133555][T16810] usb 6-1: can't read configurations, error -61 [ 931.361442][ T30] audit: type=1400 audit(1760320287.637:1054): avc: denied { connect } for pid=18111 comm="syz.5.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 931.692497][T16810] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 932.112477][T16810] usb 6-1: device descriptor read/64, error -71 [ 932.268607][T16810] usb usb6-port1: attempt power cycle [ 932.881669][T16810] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 933.181677][T16810] usb 6-1: device not accepting address 13, error -71 [ 934.122470][ T30] audit: type=1400 audit(1760320290.517:1055): avc: denied { getopt } for pid=18169 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 935.402582][ T30] audit: type=1400 audit(1760320291.727:1056): avc: denied { mounton } for pid=18183 comm="syz.1.2153" path="/proc/1533/task" dev="proc" ino=44734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 937.876024][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.889500][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.902809][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.916093][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.929396][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.942835][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.956226][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.969557][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.982927][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 937.996257][T18214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18214 comm=syz.5.2159 [ 938.317606][T18217] netlink: 'syz.4.2160': attribute type 13 has an invalid length. [ 938.649768][T18229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 939.012620][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2163'. [ 939.615889][T18241] /dev/nullb0: Can't lookup blockdev [ 940.831632][ T5880] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 941.113233][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 941.151706][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 941.639569][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 941.665614][ T5880] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 941.682272][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.690514][ T5880] usb 1-1: Product: syz [ 941.705858][ T5880] usb 1-1: Manufacturer: syz [ 941.733024][ T5880] usb 1-1: SerialNumber: syz [ 941.768885][ T5880] usb 1-1: config 0 descriptor?? [ 941.781417][T18268] bond0: (slave rose0): Releasing backup interface [ 942.002211][ T5880] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 942.105271][T18268] xt_l2tp: unknown flags: 51 [ 942.266340][ T30] audit: type=1400 audit(1760320298.647:1057): avc: denied { shutdown } for pid=18265 comm="syz.1.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 942.877292][T16810] usb 1-1: USB disconnect, device number 17 [ 944.046788][ T30] audit: type=1400 audit(1760320300.457:1058): avc: denied { ioctl } for pid=18280 comm="syz.2.2185" path="socket:[45877]" dev="sockfs" ino=45877 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 946.205582][T18313] vivid-001: disconnect [ 946.215629][T18313] vivid-001: reconnect [ 946.534202][ T30] audit: type=1400 audit(1760320302.907:1059): avc: denied { connect } for pid=18280 comm="syz.2.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 946.814329][T18321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2180'. [ 946.872341][ T30] audit: type=1400 audit(1760320303.267:1060): avc: denied { connect } for pid=18319 comm="syz.5.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 947.004535][T18325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2180'. [ 947.203947][T18332] lo speed is unknown, defaulting to 1000 [ 947.377413][ T30] audit: type=1400 audit(1760320303.767:1061): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 950.211676][ T30] audit: type=1400 audit(1760320306.607:1062): avc: denied { read write } for pid=18363 comm="syz.0.2190" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 950.235543][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.435962][T13148] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 950.897369][T13148] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 950.908153][ T30] audit: type=1400 audit(1760320306.607:1063): avc: denied { open } for pid=18363 comm="syz.0.2190" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 953.713697][T18358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.815251][T18358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.159202][ T5881] lo speed is unknown, defaulting to 1000 [ 956.166328][ T5881] syz2: Port: 1 Link DOWN [ 956.205589][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.231880][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.240809][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.371722][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.607437][T18458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2202'. [ 959.282132][ T30] audit: type=1400 audit(1760320315.687:1064): avc: denied { write } for pid=18466 comm="syz.2.2204" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 959.792210][ T30] audit: type=1400 audit(1760320316.157:1065): avc: denied { ioctl } for pid=18471 comm="syz.5.2205" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 960.177144][T18480] ISOFS: Unable to identify CD-ROM format. [ 960.851683][ T30] audit: type=1400 audit(1760320317.207:1066): avc: denied { connect } for pid=18494 comm="syz.1.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 961.521979][T18502] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2211'. [ 961.881003][T18507] binder: 18506:18507 ioctl c0046209 0 returned -22 [ 962.461660][T18406] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 962.653430][T18406] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 962.669821][T18406] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 962.710231][T18406] usb 2-1: Product: syz [ 962.720352][T18406] usb 2-1: Manufacturer: syz [ 962.736344][T18406] usb 2-1: SerialNumber: syz [ 962.761484][T18406] usb 2-1: config 0 descriptor?? [ 962.800457][T18406] ch341 2-1:0.0: ch341-uart converter detected [ 963.011693][T18406] usb 2-1: failed to receive control message: -121 [ 963.024710][T18406] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 965.788690][T18406] usb 2-1: USB disconnect, device number 17 [ 965.818478][T18406] ch341 2-1:0.0: device disconnected [ 966.071915][T18543] netlink: 'syz.5.2220': attribute type 1 has an invalid length. [ 967.254753][T18541] netlink: 'syz.2.2219': attribute type 4 has an invalid length. [ 967.583955][T18541] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2219'. [ 967.851259][T18543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 968.212504][T18552] ip6tnl1: entered allmulticast mode [ 968.256201][T18552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 968.293889][T18552] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 968.337321][T18552] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 972.045411][T18627] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 972.581526][T18625] fanotify_encode_fh: 1 callbacks suppressed [ 972.582730][T18623] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 972.587704][T18625] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 975.599052][T18647] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 978.836517][T18693] sit1: entered allmulticast mode [ 979.021934][T18698] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 979.101493][ T7377] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.110269][ T7377] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.424365][ T7377] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.504622][ T7377] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.027905][T18708] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 980.036747][T18708] overlayfs: missing 'lowerdir' [ 980.870246][T18713] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 983.368097][T18737] netlink: 'syz.1.2260': attribute type 8 has an invalid length. [ 985.577734][T18748] tty tty1: ldisc open failed (-12), clearing slot 0 [ 988.256218][T18779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2273'. [ 988.447315][T18787] netlink: 34 bytes leftover after parsing attributes in process `syz.1.2272'. [ 989.131161][T18227] udevd[18227]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 990.424177][T18816] selinux_netlink_send: 16 callbacks suppressed [ 990.424213][T18816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18816 comm=syz.2.2279 [ 993.466199][ T30] audit: type=1400 audit(1760320349.627:1067): avc: denied { append } for pid=18825 comm="syz.0.2293" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 995.707657][ T30] audit: type=1400 audit(1760320352.107:1068): avc: denied { recv } for pid=18866 comm="syz.0.2289" saddr=10.128.0.169 src=30006 daddr=10.128.0.211 dest=45908 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 996.929133][T18887] lo speed is unknown, defaulting to 1000 [ 998.881099][T18902] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 998.918541][ T30] audit: type=1400 audit(1760320355.327:1069): avc: denied { accept } for pid=18900 comm="syz.1.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 999.318468][ T30] audit: type=1400 audit(1760320355.727:1070): avc: denied { ioctl } for pid=18915 comm="syz.4.2300" path="socket:[46778]" dev="sockfs" ino=46778 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 999.343201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.074076][T18926] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2303'. [ 1000.083462][T18926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2303'. [ 1000.313798][ T30] audit: type=1400 audit(1760320356.717:1071): avc: denied { map } for pid=18927 comm="syz.2.2304" path="socket:[47997]" dev="sockfs" ino=47997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1000.392235][ T30] audit: type=1400 audit(1760320356.717:1072): avc: denied { read accept } for pid=18927 comm="syz.2.2304" path="socket:[47997]" dev="sockfs" ino=47997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1003.498916][ T30] audit: type=1400 audit(1760320359.907:1073): avc: denied { mounton } for pid=18960 comm="syz.1.2314" path="/file0" dev="ramfs" ino=48119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1003.511824][T18970] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1003.522060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.548667][T18970] overlayfs: failed to set xattr on upper [ 1003.554631][T18970] overlayfs: ...falling back to redirect_dir=nofollow. [ 1003.561751][T18970] overlayfs: ...falling back to metacopy=off. [ 1003.567962][T18970] overlayfs: ...falling back to uuid=null. [ 1003.944345][T18975] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.2315'. [ 1004.164939][T18977] netlink: 'syz.2.2316': attribute type 21 has an invalid length. [ 1004.172849][T18977] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2316'. [ 1004.181970][T18977] netlink: 'syz.2.2316': attribute type 5 has an invalid length. [ 1004.189669][T18977] netlink: 'syz.2.2316': attribute type 6 has an invalid length. [ 1004.197447][T18977] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2316'. [ 1006.352028][T18408] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1007.051570][T18408] usb 6-1: Using ep0 maxpacket: 8 [ 1007.058282][T18408] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1007.069921][T18408] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1007.125551][T18408] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1007.134899][T18408] usb 6-1: Product: syz [ 1007.214040][T18408] usb 6-1: Manufacturer: syz [ 1007.230470][T18408] usb 6-1: SerialNumber: syz [ 1008.214463][T19023] netlink: 'syz.1.2327': attribute type 1 has an invalid length. [ 1008.365515][ T30] audit: type=1400 audit(1760320364.767:1074): avc: denied { create } for pid=19022 comm="syz.1.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1008.525661][T19025] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1009.167748][ T30] audit: type=1400 audit(1760320364.777:1075): avc: denied { write } for pid=19022 comm="syz.1.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1009.226496][T19025] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1009.244161][T19026] bond3: (slave gretap1): making interface the new active one [ 1009.895824][T19026] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1009.955234][T19023] macvlan2: entered promiscuous mode [ 1009.969630][T19023] macvlan2: entered allmulticast mode [ 1009.976004][T19023] bond3: entered promiscuous mode [ 1009.981036][T19023] gretap1: entered promiscuous mode [ 1009.988183][T19023] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1010.004696][T19023] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1010.932452][T19023] bond3: left promiscuous mode [ 1010.937382][T19023] gretap1: left promiscuous mode [ 1011.171853][T18679] usb 6-1: USB disconnect, device number 15 [ 1012.652897][T19075] syzkaller0: entered promiscuous mode [ 1012.658484][T19075] syzkaller0: entered allmulticast mode [ 1014.788350][T19089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.797022][T19089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.843773][T18679] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1015.005341][T18679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.255023][T18679] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1015.343477][T18679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.785539][T18679] usb 1-1: Product: syz [ 1015.794425][T18679] usb 1-1: Manufacturer: syz [ 1015.804338][T18679] usb 1-1: SerialNumber: syz [ 1015.815723][T18679] usb 1-1: config 0 descriptor?? [ 1015.855093][T18679] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 1017.123000][T18408] usb 1-1: USB disconnect, device number 18 [ 1017.611956][ T30] audit: type=1400 audit(1760320373.755:1076): avc: denied { mount } for pid=19107 comm="syz.5.2359" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1017.782609][T19114] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2348'. [ 1017.914247][T19115] lo speed is unknown, defaulting to 1000 [ 1018.095764][ T30] audit: type=1400 audit(1760320373.765:1077): avc: denied { search } for pid=19107 comm="syz.5.2359" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1018.118481][ T30] audit: type=1400 audit(1760320373.775:1078): avc: denied { search } for pid=19107 comm="syz.5.2359" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1018.471794][ T30] audit: type=1400 audit(1760320373.775:1079): avc: denied { read open } for pid=19107 comm="syz.5.2359" path="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1019.648706][ T30] audit: type=1400 audit(1760320373.785:1080): avc: denied { setattr } for pid=19107 comm="syz.5.2359" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1019.673006][ T30] audit: type=1400 audit(1760320373.795:1081): avc: denied { search } for pid=19107 comm="syz.5.2359" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1019.864792][ T30] audit: type=1400 audit(1760320373.795:1082): avc: denied { search } for pid=19107 comm="syz.5.2359" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1019.978267][ T30] audit: type=1400 audit(1760320373.795:1083): avc: denied { search } for pid=19107 comm="syz.5.2359" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1020.095914][ T30] audit: type=1400 audit(1760320373.795:1084): avc: denied { add_name } for pid=19107 comm="syz.5.2359" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1020.202464][T19131] mkiss: ax0: crc mode is auto. [ 1020.903312][ T30] audit: type=1400 audit(1760320373.795:1085): avc: denied { create } for pid=19107 comm="syz.5.2359" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1021.228483][T19129] lo speed is unknown, defaulting to 1000 [ 1021.299010][T19143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2353'. [ 1022.674887][T19165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2357'. [ 1022.742428][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1022.750399][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1022.758649][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1022.768126][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1022.777409][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1022.809122][T19167] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1022.823333][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1022.836638][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1022.977810][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1022.986925][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1023.001156][T19166] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 1025.117611][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 1025.126825][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1025.126839][ T30] audit: type=1400 audit(1760320381.535:1087): avc: denied { write } for pid=19180 comm="syz.4.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1027.445707][ T30] audit: type=1400 audit(1760320381.625:1088): avc: denied { write } for pid=19184 comm="syz.1.2366" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1027.802059][T19202] netlink: get zone limit has 8 unknown bytes [ 1027.914908][T19202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1030.808428][T19233] lo speed is unknown, defaulting to 1000 [ 1032.088747][T19240] validate_nla: 34 callbacks suppressed [ 1032.088763][T19240] netlink: 'syz.0.2387': attribute type 9 has an invalid length. [ 1032.105701][T19240] netlink: 'syz.0.2387': attribute type 9 has an invalid length. [ 1034.511622][ T30] audit: type=1400 audit(1760320390.605:1089): avc: denied { ioctl } for pid=19256 comm="syz.0.2382" path="socket:[49308]" dev="sockfs" ino=49308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1034.711350][ T30] audit: type=1326 audit(1760320390.915:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1035.385175][ T30] audit: type=1326 audit(1760320390.915:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1035.409117][ T30] audit: type=1326 audit(1760320390.915:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1035.513980][ T30] audit: type=1326 audit(1760320390.915:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1035.653550][ T30] audit: type=1326 audit(1760320390.915:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1035.680076][ T30] audit: type=1326 audit(1760320390.915:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1035.823678][ T30] audit: type=1326 audit(1760320390.915:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1035.935265][ T30] audit: type=1326 audit(1760320390.915:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1036.472667][ T30] audit: type=1326 audit(1760320390.915:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19255 comm="syz.4.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1036.588499][T19286] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2380'. [ 1037.803843][T19301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2391'. [ 1039.635057][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1039.635071][ T30] audit: type=1326 audit(1760320396.055:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19304 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1039.749490][ T30] audit: type=1326 audit(1760320396.055:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19304 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1040.671023][ T30] audit: type=1400 audit(1760320396.645:1125): avc: denied { read } for pid=19318 comm="syz.0.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1040.690394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1041.189293][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 1043.621622][T18408] Process accounting resumed [ 1046.049864][T19385] loop6: detected capacity change from 0 to 524288000 [ 1046.996557][T19377] batman_adv: batadv0: Adding interface: ipvlan0 [ 1047.010956][T19377] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.806472][T19377] batman_adv: batadv0: Interface activated: ipvlan0 [ 1047.820755][ T30] audit: type=1326 audit(1760320404.235:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19389 comm="syz.4.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1048.674284][ T30] audit: type=1326 audit(1760320404.275:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19389 comm="syz.4.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1051.032472][T19441] bond0: entered promiscuous mode [ 1051.037526][T19441] bond_slave_0: entered promiscuous mode [ 1051.043380][T19441] bond_slave_1: entered promiscuous mode [ 1051.049190][T19441] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 1051.058055][T19441] dummy0: entered promiscuous mode [ 1051.064525][T19441] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1051.074374][T19441] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 1051.084504][T19441] hsr1: entered promiscuous mode [ 1051.089458][T19441] hsr1: entered allmulticast mode [ 1051.094656][T19441] bond0: entered allmulticast mode [ 1051.099759][T19441] bond_slave_0: entered allmulticast mode [ 1051.105490][T19441] bond_slave_1: entered allmulticast mode [ 1051.111202][T19441] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1051.118362][T19441] dummy0: entered allmulticast mode [ 1051.422735][T19442] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2420'. [ 1051.529409][ T30] audit: type=1400 audit(1760320407.895:1128): avc: denied { name_bind } for pid=19426 comm="syz.1.2420" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1053.585000][T19471] bond4: (slave batadv0): Device is not bonding slave [ 1053.591992][T19471] bond4: option active_slave: invalid value (batadv0) [ 1053.836221][T19471] bond4 (unregistering): Released all slaves [ 1055.517334][ T30] audit: type=1326 audit(1760320411.935:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1055.604231][T19510] mkiss: ax0: crc mode is auto. [ 1055.631123][ T30] audit: type=1326 audit(1760320411.935:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1055.729927][ T30] audit: type=1326 audit(1760320411.935:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1055.893443][ T30] audit: type=1326 audit(1760320411.935:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1056.009746][ T30] audit: type=1326 audit(1760320411.935:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1056.249841][ T30] audit: type=1326 audit(1760320411.935:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1056.351118][ T30] audit: type=1326 audit(1760320411.985:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1056.441724][ T30] audit: type=1326 audit(1760320411.985:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1056.537816][ T30] audit: type=1326 audit(1760320411.985:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1056.561631][T16461] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1056.575054][ T30] audit: type=1326 audit(1760320411.985:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="syz.5.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1aff8eec9 code=0x7ffc0000 [ 1056.722626][T16461] usb 2-1: Using ep0 maxpacket: 8 [ 1056.729009][T16461] usb 2-1: config 1 has an invalid interface number: 133 but max is 0 [ 1056.757764][T16461] usb 2-1: config 1 has no interface number 0 [ 1056.773053][T16461] usb 2-1: config 1 interface 133 has no altsetting 0 [ 1056.794441][T16461] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=40.f3 [ 1056.823058][T16461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.229877][T19533] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 1057.235789][T19533] syzkaller1: ignored: set checksum enabled [ 1058.072932][T19542] bond0: entered promiscuous mode [ 1058.078078][T19542] bond_slave_0: entered promiscuous mode [ 1058.084908][T19542] bond_slave_1: entered promiscuous mode [ 1058.093195][T19542] dummy0: entered promiscuous mode [ 1058.106967][T19542] debugfs: 'hsr1' already exists in 'hsr' [ 1058.112888][T19542] Cannot create hsr debugfs directory [ 1058.119401][T19542] hsr1: entered promiscuous mode [ 1058.124481][T19542] hsr1: entered allmulticast mode [ 1058.129672][T19542] bond0: entered allmulticast mode [ 1058.135056][T19542] bond_slave_0: entered allmulticast mode [ 1058.140884][T19542] bond_slave_1: entered allmulticast mode [ 1058.146789][T19542] dummy0: entered allmulticast mode [ 1058.572414][T16461] usb 2-1: string descriptor 0 read error: -71 [ 1058.583303][T16461] i2c-tiny-usb 2-1:1.133: version 40.f3 found at bus 002 address 018 [ 1059.152391][T16461] (null): failure setting delay to 10us [ 1059.168915][T16461] i2c-tiny-usb 2-1:1.133: probe with driver i2c-tiny-usb failed with error -5 [ 1059.196606][T16461] usb 2-1: USB disconnect, device number 18 [ 1060.704795][T19560] netlink: 'syz.5.2440': attribute type 9 has an invalid length. [ 1063.020644][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1063.020657][ T30] audit: type=1400 audit(1760320418.655:1153): avc: denied { bind } for pid=19572 comm="syz.5.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1063.055302][T19586] netlink: 'syz.1.2444': attribute type 4 has an invalid length. [ 1063.421617][ T30] audit: type=1326 audit(1760320419.715:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19571 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1063.541578][T18408] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1063.567765][ T30] audit: type=1326 audit(1760320419.715:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19571 comm="syz.4.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133f58eec9 code=0x7ffc0000 [ 1063.772171][T18408] usb 1-1: Using ep0 maxpacket: 32 [ 1064.368315][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1064.393046][T18408] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1064.417102][T18408] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1064.439677][T18408] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1064.449060][T18408] usb 1-1: Product: syz [ 1064.454009][T18408] usb 1-1: Manufacturer: syz [ 1064.460341][T18408] usb 1-1: SerialNumber: syz [ 1064.489715][T18408] usb 1-1: config 0 descriptor?? [ 1064.503809][T19589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1064.553038][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1064.571361][ T9] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1064.596290][ T9] usb 6-1: config 0 has no interface number 0 [ 1064.611080][ T9] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1064.634182][ T9] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1064.654421][ T9] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1064.678428][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1064.740401][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.782491][ T9] usb 6-1: Product: syz [ 1064.793819][ T9] usb 6-1: Manufacturer: syz [ 1064.800387][ T9] usb 6-1: SerialNumber: syz [ 1064.824705][ T9] usb 6-1: config 0 descriptor?? [ 1064.916797][T18408] usb 1-1: USB disconnect, device number 19 [ 1065.114068][ T9] appletouch 6-1:0.85: Failed to read mode from device. [ 1065.154378][ T9] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1065.186284][ T9] usb 6-1: USB disconnect, device number 16 [ 1065.749321][T19610] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2452'. [ 1065.893408][T19613] new mount options do not match the existing superblock, will be ignored [ 1068.891700][ T30] audit: type=1326 audit(1760320425.285:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1068.970547][ T30] audit: type=1326 audit(1760320425.285:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1069.008476][ T30] audit: type=1326 audit(1760320425.285:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1069.049054][ T30] audit: type=1326 audit(1760320425.385:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1069.077839][ T30] audit: type=1326 audit(1760320425.385:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1069.105816][ T30] audit: type=1326 audit(1760320425.495:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1069.129672][ T30] audit: type=1326 audit(1760320425.495:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1069.156873][ T30] audit: type=1326 audit(1760320425.495:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1070.094860][ T30] audit: type=1326 audit(1760320425.825:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1070.510141][ T30] audit: type=1326 audit(1760320426.495:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19641 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0978eec9 code=0x7ffc0000 [ 1071.571313][T19640] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1072.726764][T19677] new mount options do not match the existing superblock, will be ignored [ 1072.753812][T19677] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1073.508843][T19685] new mount options do not match the existing superblock, will be ignored [ 1073.521692][T19685] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1074.444412][T19694] new mount options do not match the existing superblock, will be ignored [ 1074.457502][T19694] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1075.347342][T19706] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 1075.355439][T19706] netlink: 'syz.2.2474': attribute type 2 has an invalid length. [ 1077.094642][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1077.094657][ T30] audit: type=1400 audit(1760320433.515:1176): avc: denied { write } for pid=19698 comm="syz.5.2483" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1077.127474][T19714] No source specified [ 1077.183701][T19714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2476'. [ 1078.395695][T19728] new mount options do not match the existing superblock, will be ignored [ 1078.409673][T19728] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1079.789097][ T30] audit: type=1400 audit(1760320436.205:1177): avc: denied { link } for pid=19730 comm="syz.5.2481" name="#31" dev="tmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1079.879115][ T30] audit: type=1400 audit(1760320436.205:1178): avc: denied { rename } for pid=19730 comm="syz.5.2481" name="#32" dev="tmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1080.128328][T19743] sd 0:0:1:0: device reset [ 1081.326275][T19754] new mount options do not match the existing superblock, will be ignored [ 1081.338898][T19754] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1083.456655][T19762] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1083.723076][T19763] netlink: 'syz.5.2487': attribute type 4 has an invalid length. [ 1083.730830][T19763] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2487'. [ 1084.711610][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1084.804483][T19792] new mount options do not match the existing superblock, will be ignored [ 1085.281623][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1085.336166][ T9] usb 1-1: config 1 has an invalid interface number: 133 but max is 0 [ 1085.359274][ T9] usb 1-1: config 1 has no interface number 0 [ 1085.382471][ T9] usb 1-1: config 1 interface 133 has no altsetting 0 [ 1085.564001][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=40.f3 [ 1086.022936][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.637790][T19810] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 1087.647119][T19810] syzkaller1: ignored: set checksum enabled [ 1087.907564][T18408] Process accounting resumed [ 1088.345268][T19816] pimreg: entered allmulticast mode [ 1088.619872][ T24] Process accounting resumed [ 1088.860898][T19825] fuse: Unknown parameter '0xffffffffffffffff' [ 1089.061510][T19826] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1089.431934][T19813] pimreg: left allmulticast mode [ 1089.444473][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 1089.823702][ T9] usb 1-1: string descriptor 0 read error: -71 [ 1089.924741][T19831] netlink: zone id is out of range [ 1090.328332][ T9] i2c-tiny-usb 1-1:1.133: version 40.f3 found at bus 001 address 020 [ 1090.348225][ T9] (null): failure setting delay to 10us [ 1090.360415][ T9] i2c-tiny-usb 1-1:1.133: probe with driver i2c-tiny-usb failed with error -5 [ 1090.387370][ T9] usb 1-1: USB disconnect, device number 20 [ 1091.004120][ T30] audit: type=1400 audit(1760320447.425:1179): avc: denied { setopt } for pid=19837 comm="syz.2.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1091.222844][T19845] lo speed is unknown, defaulting to 1000 [ 1091.597810][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1091.606347][T15825] Bluetooth: hci0: command 0x1003 tx timeout [ 1092.673198][T19858] new mount options do not match the existing superblock, will be ignored [ 1093.121606][T16461] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1093.351104][T19866] CIFS mount error: No usable UNC path provided in device string! [ 1093.351104][T19866] [ 1093.361608][T19866] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1093.891704][T16461] usb 1-1: Using ep0 maxpacket: 16 [ 1093.900007][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1093.908726][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1093.916616][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1093.924113][T16461] usb 1-1: device descriptor read/all, error -32 [ 1094.322899][T19880] new mount options do not match the existing superblock, will be ignored [ 1095.339551][ T30] audit: type=1400 audit(1760320451.745:1180): avc: denied { read write } for pid=19873 comm="syz.0.2514" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1095.732430][ T30] audit: type=1400 audit(1760320451.745:1181): avc: denied { open } for pid=19873 comm="syz.0.2514" path="/478/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1096.331854][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1096.474261][T19882] bond3: (slave batadv0): Device is not bonding slave [ 1096.498341][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1096.508242][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.519162][ T9] usb 6-1: Product: syz [ 1096.524295][ T9] usb 6-1: Manufacturer: syz [ 1096.529020][ T9] usb 6-1: SerialNumber: syz [ 1096.535925][ T9] usb 6-1: config 0 descriptor?? [ 1096.541089][T19882] bond3: option active_slave: invalid value (batadv0) [ 1096.550007][T19882] bond3 (unregistering): Released all slaves [ 1096.576573][T19893] lo speed is unknown, defaulting to 1000 [ 1097.039814][T19914] new mount options do not match the existing superblock, will be ignored [ 1097.456296][T19915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.488810][T19915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.644057][T19918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.701089][T19918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.278478][T19928] Option 'D' to dns_resolver key: bad/missing value [ 1099.142699][T16461] usb 6-1: USB disconnect, device number 17 [ 1101.033739][T19954] new mount options do not match the existing superblock, will be ignored [ 1105.223158][T19987] new mount options do not match the existing superblock, will be ignored [ 1105.679610][T19989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2537'. [ 1106.103657][T19999] netlink: 'syz.2.2539': attribute type 9 has an invalid length. [ 1106.123109][T19999] netlink: 'syz.2.2539': attribute type 6 has an invalid length. [ 1112.117375][T20059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1112.350075][T20054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1113.068910][T20059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.087126][T20059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.166540][T20073] ptrace attach of "./syz-executor exec"[15057] was attempted by "./syz-executor exec"[20073] [ 1114.206075][T20080] netlink: 'syz.0.2555': attribute type 4 has an invalid length. [ 1114.214396][T20080] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2555'. [ 1115.584161][T20094] lo speed is unknown, defaulting to 1000 [ 1115.590169][T20094] lo speed is unknown, defaulting to 1000 [ 1115.602063][T20094] lo speed is unknown, defaulting to 1000 [ 1115.660746][T20094] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1116.077609][T20094] lo speed is unknown, defaulting to 1000 [ 1116.084353][T20094] lo speed is unknown, defaulting to 1000 [ 1116.090807][T20094] lo speed is unknown, defaulting to 1000 [ 1116.097545][T20094] lo speed is unknown, defaulting to 1000 [ 1116.251757][T20094] lo speed is unknown, defaulting to 1000 [ 1116.258341][T20094] lo speed is unknown, defaulting to 1000 [ 1116.264982][T20094] lo speed is unknown, defaulting to 1000 [ 1116.864428][T20106] ================================================================== [ 1116.872512][T20106] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 1116.880503][T20106] Read of size 8 at addr ffff88804f938830 by task syz.2.2564/20106 [ 1116.888415][T20106] [ 1116.890744][T20106] CPU: 0 UID: 0 PID: 20106 Comm: syz.2.2564 Not tainted syzkaller #0 PREEMPT(full) [ 1116.890767][T20106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1116.890778][T20106] Call Trace: [ 1116.890786][T20106] [ 1116.890794][T20106] dump_stack_lvl+0x116/0x1f0 [ 1116.890819][T20106] print_report+0xcd/0x630 [ 1116.890846][T20106] ? __virt_addr_valid+0x81/0x610 [ 1116.890866][T20106] ? __phys_addr+0xe8/0x180 [ 1116.890887][T20106] ? sysfs_remove_file_ns+0x63/0x70 [ 1116.890913][T20106] kasan_report+0xe0/0x110 [ 1116.890939][T20106] ? sysfs_remove_file_ns+0x63/0x70 [ 1116.890968][T20106] sysfs_remove_file_ns+0x63/0x70 [ 1116.890994][T20106] driver_remove_file+0x4a/0x60 [ 1116.891016][T20106] bus_remove_driver+0x224/0x2c0 [ 1116.891045][T20106] driver_unregister+0x76/0xb0 [ 1116.891065][T20106] comedi_device_detach_locked+0x12f/0xa50 [ 1116.891090][T20106] do_devconfig_ioctl+0x555/0x710 [ 1116.891113][T20106] ? __mutex_lock+0x1c5/0x1060 [ 1116.891137][T20106] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1116.891168][T20106] ? trace_sched_exit_tp+0xd1/0x120 [ 1116.891197][T20106] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1116.891224][T20106] ? rcu_is_watching+0x12/0xc0 [ 1116.891241][T20106] ? irqentry_exit+0x3b/0x90 [ 1116.891262][T20106] ? lockdep_hardirqs_on+0x7c/0x110 [ 1116.891284][T20106] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1116.891312][T20106] ? do_vfs_ioctl+0xca/0x14f0 [ 1116.891331][T20106] ? do_vfs_ioctl+0xdb7/0x14f0 [ 1116.891350][T20106] ? do_vfs_ioctl+0x128/0x14f0 [ 1116.891368][T20106] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1116.891387][T20106] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1116.891422][T20106] ? selinux_file_ioctl+0x180/0x270 [ 1116.891442][T20106] ? selinux_file_ioctl+0xb4/0x270 [ 1116.891461][T20106] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1116.891485][T20106] __x64_sys_ioctl+0x18e/0x210 [ 1116.891504][T20106] do_syscall_64+0xcd/0xfa0 [ 1116.891526][T20106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.891551][T20106] RIP: 0033:0x7fa063f8eec9 [ 1116.891567][T20106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.891586][T20106] RSP: 002b:00007fa064e74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.891605][T20106] RAX: ffffffffffffffda RBX: 00007fa0641e6180 RCX: 00007fa063f8eec9 [ 1116.891618][T20106] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 1116.891630][T20106] RBP: 00007fa064011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1116.891642][T20106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.891653][T20106] R13: 00007fa0641e6218 R14: 00007fa0641e6180 R15: 00007ffdb8c0f568 [ 1116.891674][T20106] [ 1116.891681][T20106] [ 1117.157175][T20106] Allocated by task 20029: [ 1117.161570][T20106] kasan_save_stack+0x33/0x60 [ 1117.166240][T20106] kasan_save_track+0x14/0x30 [ 1117.170898][T20106] __kasan_kmalloc+0xaa/0xb0 [ 1117.175469][T20106] __kmalloc_noprof+0x32f/0x880 [ 1117.180296][T20106] io_cache_alloc_new+0x45/0xf0 [ 1117.185126][T20106] __io_prep_rw+0x21d/0x1090 [ 1117.189706][T20106] io_prep_rw+0x76/0x2c0 [ 1117.193932][T20106] io_prep_readv+0x20/0xa0 [ 1117.198344][T20106] io_submit_sqes+0x855/0x2710 [ 1117.203096][T20106] __do_sys_io_uring_enter+0xd69/0x1630 [ 1117.208642][T20106] do_syscall_64+0xcd/0xfa0 [ 1117.213210][T20106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.219080][T20106] [ 1117.221379][T20106] Freed by task 20029: [ 1117.225416][T20106] kasan_save_stack+0x33/0x60 [ 1117.230074][T20106] kasan_save_track+0x14/0x30 [ 1117.234731][T20106] __kasan_save_free_info+0x3b/0x60 [ 1117.239904][T20106] __kasan_slab_free+0x5f/0x80 [ 1117.244666][T20106] kfree+0x2b8/0x6d0 [ 1117.248798][T20106] __io_submit_flush_completions+0x1482/0x1980 [ 1117.254927][T20106] ctx_flush_and_put+0x9a/0x410 [ 1117.259755][T20106] io_handle_tw_list+0x3c1/0x500 [ 1117.264666][T20106] tctx_task_work_run+0xac/0x380 [ 1117.269578][T20106] tctx_task_work+0x7a/0xd0 [ 1117.274056][T20106] task_work_run+0x150/0x240 [ 1117.278627][T20106] get_signal+0x1d0/0x26d0 [ 1117.283023][T20106] arch_do_signal_or_restart+0x8f/0x7c0 [ 1117.288554][T20106] exit_to_user_mode_loop+0x85/0x130 [ 1117.293821][T20106] do_syscall_64+0x426/0xfa0 [ 1117.298388][T20106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.304256][T20106] [ 1117.306554][T20106] The buggy address belongs to the object at ffff88804f938800 [ 1117.306554][T20106] which belongs to the cache kmalloc-256 of size 256 [ 1117.320580][T20106] The buggy address is located 48 bytes inside of [ 1117.320580][T20106] freed 256-byte region [ffff88804f938800, ffff88804f938900) [ 1117.334262][T20106] [ 1117.336560][T20106] The buggy address belongs to the physical page: [ 1117.342943][T20106] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f938 [ 1117.351675][T20106] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1117.360147][T20106] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1117.367665][T20106] page_type: f5(slab) [ 1117.371624][T20106] raw: 00fff00000000040 ffff88813ff26b40 dead000000000100 dead000000000122 [ 1117.380185][T20106] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1117.388745][T20106] head: 00fff00000000040 ffff88813ff26b40 dead000000000100 dead000000000122 [ 1117.397393][T20106] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1117.406041][T20106] head: 00fff00000000001 ffffea00013e4e01 00000000ffffffff 00000000ffffffff [ 1117.414690][T20106] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1117.423330][T20106] page dumped because: kasan: bad access detected [ 1117.429719][T20106] page_owner tracks the page as allocated [ 1117.435404][T20106] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6834, tgid 6828 (syz.3.230), ts 135512822574, free_ts 134632441174 [ 1117.456652][T20106] post_alloc_hook+0x1c0/0x230 [ 1117.461396][T20106] get_page_from_freelist+0x10a3/0x3a30 [ 1117.466921][T20106] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1117.472793][T20106] alloc_pages_mpol+0x1fb/0x550 [ 1117.477625][T20106] new_slab+0x24a/0x360 [ 1117.481758][T20106] ___slab_alloc+0xdc4/0x1ae0 [ 1117.486410][T20106] __slab_alloc.constprop.0+0x63/0x110 [ 1117.491933][T20106] __kmalloc_noprof+0x501/0x880 [ 1117.496758][T20106] io_cache_alloc_new+0x45/0xf0 [ 1117.501587][T20106] __io_prep_rw+0x21d/0x1090 [ 1117.506166][T20106] io_prep_rw+0x76/0x2c0 [ 1117.510397][T20106] io_prep_readv+0x20/0xa0 [ 1117.514873][T20106] io_submit_sqes+0x855/0x2710 [ 1117.519613][T20106] __do_sys_io_uring_enter+0xd69/0x1630 [ 1117.525139][T20106] do_syscall_64+0xcd/0xfa0 [ 1117.529646][T20106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.535513][T20106] page last free pid 5812 tgid 5812 stack trace: [ 1117.541809][T20106] __free_frozen_pages+0x7df/0x1160 [ 1117.546990][T20106] __put_partials+0x130/0x170 [ 1117.551646][T20106] qlist_free_all+0x4d/0x120 [ 1117.556222][T20106] kasan_quarantine_reduce+0x195/0x1e0 [ 1117.561659][T20106] __kasan_slab_alloc+0x69/0x90 [ 1117.566838][T20106] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1117.572275][T20106] getname_flags.part.0+0x4c/0x550 [ 1117.577364][T20106] getname_flags+0x93/0xf0 [ 1117.581757][T20106] do_sys_openat2+0xb8/0x1d0 [ 1117.586350][T20106] __x64_sys_openat+0x174/0x210 [ 1117.591177][T20106] do_syscall_64+0xcd/0xfa0 [ 1117.595657][T20106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.601527][T20106] [ 1117.603823][T20106] Memory state around the buggy address: [ 1117.609424][T20106] ffff88804f938700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1117.617466][T20106] ffff88804f938780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1117.625514][T20106] >ffff88804f938800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1117.633641][T20106] ^ [ 1117.639242][T20106] ffff88804f938880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1117.647364][T20106] ffff88804f938900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1117.655403][T20106] ================================================================== [ 1117.665899][T20106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1117.673103][T20106] CPU: 0 UID: 0 PID: 20106 Comm: syz.2.2564 Not tainted syzkaller #0 PREEMPT(full) [ 1117.682475][T20106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1117.692530][T20106] Call Trace: [ 1117.695810][T20106] [ 1117.698730][T20106] dump_stack_lvl+0x3d/0x1f0 [ 1117.703297][T20106] vpanic+0x640/0x6f0 [ 1117.707271][T20106] panic+0xca/0xd0 [ 1117.710986][T20106] ? __pfx_panic+0x10/0x10 [ 1117.715430][T20106] ? sysfs_remove_file_ns+0x63/0x70 [ 1117.720615][T20106] ? preempt_schedule_common+0x44/0xc0 [ 1117.726116][T20106] ? preempt_schedule_thunk+0x16/0x30 [ 1117.731511][T20106] check_panic_on_warn+0xab/0xb0 [ 1117.736447][T20106] end_report+0x107/0x170 [ 1117.740769][T20106] kasan_report+0xee/0x110 [ 1117.745184][T20106] ? sysfs_remove_file_ns+0x63/0x70 [ 1117.750368][T20106] sysfs_remove_file_ns+0x63/0x70 [ 1117.755375][T20106] driver_remove_file+0x4a/0x60 [ 1117.760292][T20106] bus_remove_driver+0x224/0x2c0 [ 1117.765217][T20106] driver_unregister+0x76/0xb0 [ 1117.769958][T20106] comedi_device_detach_locked+0x12f/0xa50 [ 1117.775775][T20106] do_devconfig_ioctl+0x555/0x710 [ 1117.780793][T20106] ? __mutex_lock+0x1c5/0x1060 [ 1117.785555][T20106] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1117.791097][T20106] ? trace_sched_exit_tp+0xd1/0x120 [ 1117.796306][T20106] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1117.801779][T20106] ? rcu_is_watching+0x12/0xc0 [ 1117.806539][T20106] ? irqentry_exit+0x3b/0x90 [ 1117.811135][T20106] ? lockdep_hardirqs_on+0x7c/0x110 [ 1117.816347][T20106] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1117.822170][T20106] ? do_vfs_ioctl+0xca/0x14f0 [ 1117.826855][T20106] ? do_vfs_ioctl+0xdb7/0x14f0 [ 1117.831622][T20106] ? do_vfs_ioctl+0x128/0x14f0 [ 1117.836366][T20106] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1117.841375][T20106] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1117.848204][T20106] ? selinux_file_ioctl+0x180/0x270 [ 1117.853387][T20106] ? selinux_file_ioctl+0xb4/0x270 [ 1117.858484][T20106] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1117.864279][T20106] __x64_sys_ioctl+0x18e/0x210 [ 1117.869015][T20106] do_syscall_64+0xcd/0xfa0 [ 1117.873494][T20106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.879369][T20106] RIP: 0033:0x7fa063f8eec9 [ 1117.883762][T20106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.903358][T20106] RSP: 002b:00007fa064e74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.911753][T20106] RAX: ffffffffffffffda RBX: 00007fa0641e6180 RCX: 00007fa063f8eec9 [ 1117.919700][T20106] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 1117.927653][T20106] RBP: 00007fa064011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1117.935593][T20106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.943548][T20106] R13: 00007fa0641e6218 R14: 00007fa0641e6180 R15: 00007ffdb8c0f568 [ 1117.951496][T20106] [ 1117.954705][T20106] Kernel Offset: disabled [ 1117.959009][T20106] Rebooting in 86400 seconds..