last executing test programs: 29.754608381s ago: executing program 4 (id=510): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427c", 0x30}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 29.403762537s ago: executing program 4 (id=514): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) 26.057481893s ago: executing program 4 (id=529): mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 25.173477542s ago: executing program 4 (id=532): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) open(&(0x7f0000000140)='./file3/file0\x00', 0x2200, 0x9a) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 24.815362198s ago: executing program 4 (id=534): openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 24.196751275s ago: executing program 4 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x24}}, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r6, 0x40046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x6d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 23.685590039s ago: executing program 32 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x24}}, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r6, 0x40046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x6d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11.936047903s ago: executing program 5 (id=587): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) 10.766766863s ago: executing program 5 (id=592): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) close(r3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 9.492724625s ago: executing program 5 (id=598): r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x42f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0xf, "", [{{0x9, 0x4, 0x0, 0x7, 0xb9, 0x3, 0x1, 0x1, 0xf9, {0x9, 0x21, 0xf, 0x8, 0x1, {0x22, 0x9a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xa, 0x1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0xf7, 0x9, 0xd, 0x8, 0xa}, 0x8, &(0x7f0000000480)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x30, &(0x7f00000004c0)=@string={0x30, 0x3, "96782e47f52d7b667b2ef3aa6d5521bf7795b9d6860d21ef4d5fc1c4f5160b9ddcb5a5b3a6ae589af5799b607665"}}]}) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r3 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145) sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000053d2) execveat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={[&(0x7f00000001c0)='/dev/input/event#\x00', &(0x7f0000000200)='/dev/snd/seq\x00', &(0x7f0000000240)='/dev/snd/seq\x00']}, &(0x7f0000000380)={[&(0x7f00000002c0)='#/!\x00', &(0x7f0000000300)='/dev/snd/seq\x00', &(0x7f0000000340)='/dev/snd/seq\x00']}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ca061a2583ec6813"], 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x3150c0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/150) 7.905108593s ago: executing program 3 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000080)=0x1, 0xff79) 7.820896054s ago: executing program 5 (id=606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000300)='AQB1234=67890123456789012345678901234567=\x00', 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x24, r1, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x10000003, 0x8, 0x0, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039ad0106000109021b0001000000000904"], 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) 6.870057814s ago: executing program 3 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a74020000060a030400000000000000000a0000010900010073797a3100000000400204803c0201800a0001006d617463680000002c0202800b0001006367726f7570000008000240000000021402030006275c852770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a02bfec3c72f303f719fe6ca141e405417118a3316ef2a473417d47a2c37cecc2f4333caf9b5d8096a71bc60c57dd3fc882043377d4140b7f4580a622043a0da245a977be1af6ec12bf2ec5c7ed50e1b4f9e144fe641036e5673089a6707b709515c62734ab864914ef7e6e82143b0f6a3a6ec884fb0ecb0567dff30ef656a1316898954a71db76db8b74d4749e35b33481ad897934c4c5b1ca2f8b7e93e8dadaa1d2c96c5f1e9ce253fc6f3335b981003f183afc65a3618d2ac0582a557154862dc7805bf408ec8c74aef836fff2e2caf6925c8bb1f460cc68d410733bd2ff5d15c60bfd8c080839e416b589d51e18c402e0282aa1918d13aadca89120112ba089e9925a0b4cbf9441a2e63268c0b2fc90c38b840eb48e9800d6f4d731051bcae4924d5a7176d83d5951cf4dbd6108032b6a35b67d6c585ee1c047b1fea250f941fccce0210922b1d9f6c6a0da7e9bf3704c31afdf08438c1021cbe05fb24ec20dc9630f8c92a4f833f431b8ac1b0cc0a19fbf9420900020073797a3200"], 0x29c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5.606397871s ago: executing program 3 (id=612): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 5.532739156s ago: executing program 0 (id=613): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66", 0x53}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.305639619s ago: executing program 3 (id=614): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 5.260568378s ago: executing program 0 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr\n', 0x1c) write(r0, &(0x7f0000000140)='e:my_read_msr2', 0xe) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="0891d81ff9b15a644ed2cfb3e1caf76f7129285785e38c14dbe68dfc70ce6c3e764cfc105d87de4abfbc2d4b80f3bad5cf211a74efb842bef63c2148040000d8d8813fc7fe0ccb46bdd6b60667ab4a5cedab", 0x52) write(0xffffffffffffffff, &(0x7f0000000240)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) pread64(r2, &(0x7f0000000340)=""/8, 0x8, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f0000000000)={0x20000000, 0x9}) 5.106231467s ago: executing program 2 (id=616): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7b5d051a47465618fe24ce2a25419cbd2d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x128}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.996323031s ago: executing program 0 (id=617): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fsopen(&(0x7f0000000200)='pstore\x00', 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) landlock_restrict_self(r2, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.984461236s ago: executing program 3 (id=618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000015c0)=""/4071, 0xfe7, 0x10020, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0b", 0x84a}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.85209491s ago: executing program 2 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3ffffffffffde, {0x0, 0x200000000, 0x8000001, 0x4, 0x6, 0x0, {0xfffffffffffffffc, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r4 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000011000000000000000000000850000004f000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) signalfd(r4, &(0x7f0000000000)={[0x4]}, 0x8) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a740)={0x90, 0x0, 0x3, {0xfffffffffffffffe, 0x1, 0x8000000000000001, 0x7, 0x9, 0xffffffff, {0x3, 0x7, 0x7, 0xc90e, 0x8, 0x9, 0x6, 0xdd, 0xc, 0x1000, 0x6, r7, r3, 0x4, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.519216162s ago: executing program 2 (id=620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r4, 0x851, 0x1) 4.452877172s ago: executing program 5 (id=621): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x800) getrandom(0xfffffffffffffffc, 0x15, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80f1}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x3c}}, 0x800) 4.176624379s ago: executing program 3 (id=622): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x60) shutdown(r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) 4.053829936s ago: executing program 1 (id=623): socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101482, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) pipe2$9p(&(0x7f0000000000), 0x800) signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 3.932001364s ago: executing program 1 (id=624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) 3.767642975s ago: executing program 0 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a20000000000a01040000000000000000010000000900010073797a310000000030000000030a050000000000000000000100ffff0900010073797a310000000008000b400000000308000a4000000004140000001100010000"], 0x78}}, 0x200000d4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 3.766171572s ago: executing program 2 (id=626): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) r3 = socket(0x1a, 0xa, 0x6) recvmmsg(r3, 0x0, 0x0, 0x10041, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, &(0x7f0000000040)) 2.769067799s ago: executing program 0 (id=627): syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x1c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x85, 0x0, 0x0, @str='*$]&\x00'}]}, 0x1c}], 0x1, 0x0, 0x0, 0xb305e06d8ab482f7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e008e76b2c734411ad8c57", 0xa2}, {&(0x7f00000005c0)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60edeb9", 0x87}, {&(0x7f0000000780)="395b7b9931074d3e26deed94dab0ab3d30a80a8806029d7a7f1e0367db29c9eac20789979cad7071d6bf4e4f222296281cfaf2c95f85adcf76cf8be4345a9bf66ad6baac6c502e0894d518279c8c310b355c34da938cdab36a66f17bfa8986708fb9fc296c5a48e8ed5f67758de22b2ae9c2f6bdb5fe832560470db8c522cfccf093eff1eb8f12ee44ac52a236b3cc2c068f94fd39e24151f6f3ee9cb32efb", 0x9f}, {&(0x7f0000001040)="e9d0376617b6ae818347431572c82f0192df5b81e96dad6d4cbf4cdb6a7ad9b847dc6efd1f3bbdcabed7c88ae9f151bf55be11730366045dca45f488d409865bcfb67d075e9e7a902d448cc8dcfc5f525bdc7e7a5581b08418aa3674c01b8dca5ece6eed4e8f117eb5a8b4563d6cae679ade9c551ccf84b7c5d82fa986afa23d7274f9c9f055c70ea57ed7daf03971a673fdae9d7c5a845b80175a3a9dce96fbe56a68954cd6834c62e52d8f470f5eb392a275c05078819ca57ebc45bbdd53a95018719fc5658699b5cc295efae976839d122b7a402db082cf9949279ad55da8164ce66d1961b4e8ced928fcdef158606197fe4911afc82ae328f4745ea13d267466ef91c81f2f1f84e55f0c74fb42ac6b8530176ffe21daf5c859f0a2ca9ba424f2bbe424cb6408c717114882faecae2ce920fa2cc6e9a787cfc68f966807371348fedb719ea600358c3a490ca484b2028e0396b9e06c97602ec4e319db7b6119a8aa03732a6fd2f2654a6f05f4bc322178020de4ed2c9e6bc3a5a2aec066bb4b1c1f17e4af1372d12c750900ab19a2b6e8c241027cf1d7899d1b099f40fc083a16ce0b6f748c6b6a5ed14e317778cf576003999c9914aa2b507a073ff24d8f5b9c2a7cc3edf301baa9e5976e84c816b1d9b00e4d36d75c59031c4b809112927e8fdb8affedfc27525b7e7d8136cbc77ed0f852bd476a48bee701c5890ffd8dbc967191d6ec623290d4a4effee412cddf718f5cec11071c7feb5bedef9f262b6f6143e616f224822103801e1371968b3714e3a67336baa8b41aba47fb4f27f33dc0e759dd6e18df9a766b7abe9294880c11de03bd19c1668544dbc90fb9b96d8339f41a4d6761efdea34436ab48dc0d41752993712098bb923e40b5eadfad040e90762148a2b8eb76344e8e93ff80bc795c90237ee80dddb7c5b54a138606e85934f021df7d0c1f1c1665f706ff9358e4b990248d1ff9a515a1d3916abf42d79ec54e5129ae17ca52e0a7b874ee59e76df8f2464b48a5b8d9ea526c4611c23b8aaba2a16415457cdb30de0d85f13885902c2c57e484497c3fac951b4b1831b132e66544294194cc2eeb7648d4e7c28f2f3257c20a588808b04d1960cd528e62e6511155c172aabce9a94956d66523c33e9adb8313c775f41c6b2a1bf37119add71d81fc08271e8982dd17983853b0898a3c0af908a598fb088eebc91cfbb809eefca3a722ed38464ce4514fc5516624f3b35163196f4257b83794e60146ec0100fc594e5fd62860d3a386c3b0d78dd9ee2f8aa2e8324940ba3dc3e4f79b379404773801c125e94269f10fc1ee983909765ccbaa014b146c4ee0f97fd2", 0x3bd}], 0x4, &(0x7f0000006200)=[@ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xdf, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@local, 0xfffffff8}, {@remote, 0x7}]}]}}}], 0x38}}], 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, 0x0, 0x4000000) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x13, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="5024280000002804b7ff3df3357b81ec20b6a7c55ad298894c90e39af67f876619d02a52a024d1ac9bbd8565a05de608eb88a8d86196c1adba95d78b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac3(0x5, 0x9b, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100100000040532b3100400001020301090289000301091002080b0102016230040904000000010130000a24012125005300000005240c06000b240dfc1000effffffe070b240d7f010700e400ffff090401000001023000090401010101023000090501"], 0x0) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)="71f9ae6e9a036bb944af66adace15fe6cd8b2d5c21b5531a6ae867b44e4748e2e87ab52bb7a1350c966e88e5dc90c85a51077cef12fe8d406be470b246be52c8bcb71e1f86e306e7764b3fe674db33a36cdf3f3bd87a6589013d9bda07fc7442db9f20d9316955f6d62e4e143682fb981a88ac11fa4a5257dff3a185efe899374b", 0x81}, {&(0x7f00000001c0)="2a793e18a6f8bcd934c029558760a6857b5f98de7560178531c1b2d9308df9b51f4d5e217612751a5cc61230ec2d2fa3c59773e65a39896b088fb31d1d002b5119f7204d2c613b1e261706c9cfd5899cf2cef0908bf7b6275b8a03", 0x5b}, {&(0x7f0000000240)="a18ce14ab77eb146e2732c3bc4e4e45615ae63198db841f3a8dd6a5b92608e5ab567d273a8cf8bc25463bb3b2a0d61a27afa9cf6b5de8f669aa2d04bdda6895ce9a0c0bfe9ec", 0x46}], 0x3) 2.709113069s ago: executing program 1 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1ff, 0x101200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000280)={0x1, 0x0, 0xd3b3, 0x4, 0x0}) 2.616211261s ago: executing program 2 (id=629): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010058, 0x0, 0xffffffffffffffff}]}) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x3, 0x4, 0x1, 0x3}}, 0x26) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xffffffffffffffb1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x280, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1000}, {0x2, 0x8, 0x1f}, {}, {}, 0x0, 0x2, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xa}) 2.558508983s ago: executing program 5 (id=630): syz_usb_connect$uac1(0x5, 0x84, &(0x7f0000000a80)={{0x12, 0x1, 0x73b46220ac5b36a4, 0x0, 0x0, 0x0, 0x20, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0xc, 0xe0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x6, 0xf}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x3, 0x2, "b356"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x30, 0x0, 0x6, {0x7, 0x25, 0x1, 0x0, 0xc, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xae, 0x5, 0x0, {0x7, 0x25, 0x1, 0xc, 0x1e, 0x7d}}}}}}}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r3, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, &(0x7f0000001840)=0x5d4) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/239, 0xef}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000440)=""/192, 0xc0}], 0x3) 1.771971007s ago: executing program 2 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4010) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$bt_hci(r1, 0x84, 0x3, &(0x7f0000001080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0x16, 0x7, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x8, 0xfb}}}}}]}}]}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\aR'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x38, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) memfd_secret(0x0) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010001", 0x7) 1.684568998s ago: executing program 1 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}}, 0x0) 1.114383958s ago: executing program 0 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='bd', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='serial8250\x00', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='snd_aloop.0\x00', 0xc) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r4) 767.347694ms ago: executing program 1 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x44, r1, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x1, 0x2, 0x0, {0x2, 0x111b, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x4, 0x1}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kernel console output (not intermixed with test programs): e "mtdram test device", size 0 MiB) [ 78.902514][ T5808] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 78.919966][ T5808] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 78.944030][ T5808] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 78.964054][ T5808] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 78.981293][ T5808] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 78.990627][ T1169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.013334][ T5808] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2661515222 [ 79.034246][ T5808] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 79.047862][ T5809] ubi0: background thread "ubi_bgt0d" started, PID 5809 [ 79.068844][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.082072][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.159477][ T807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.173980][ T807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.192384][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.272707][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.284373][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.298968][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.420946][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.462267][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.522125][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.535887][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.551191][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.560886][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.632987][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.647811][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.666123][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.722622][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.752582][ T1151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.982361][ T5617] Bluetooth: hci1: command tx timeout [ 79.988114][ T50] Bluetooth: hci2: command tx timeout [ 79.993743][ T5611] Bluetooth: hci4: command tx timeout [ 80.001414][ T5624] Bluetooth: hci0: command tx timeout [ 80.006916][ T5616] Bluetooth: hci3: command tx timeout [ 80.243813][ T5804] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.666311][ T5804] usb 1-1: Using ep0 maxpacket: 16 [ 81.086495][ T5734] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.130435][ T5804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.151120][ T5804] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.168278][ T5804] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.176855][ T5804] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 81.186039][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.236325][ T5804] usb 1-1: config 0 descriptor?? [ 81.297690][ T5804] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 81.353608][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 81.374096][ T5734] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.565607][ T5734] usb 5-1: config 0 has no interface number 0 [ 81.578543][ T5734] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 81.952231][ T5734] usb 5-1: config 0 interface 184 has no altsetting 0 [ 81.966999][ T5734] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.982252][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.004950][ T5734] usb 5-1: Product: syz [ 82.017013][ T5734] usb 5-1: Manufacturer: syz [ 82.041745][ T5734] usb 5-1: SerialNumber: syz [ 82.091124][ T5734] usb 5-1: config 0 descriptor?? [ 82.108291][ T5826] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 82.349874][ T5826] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 82.489128][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 82.791336][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 82.806525][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.846938][ T5852] netlink: 'syz.3.15': attribute type 12 has an invalid length. [ 83.073219][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.104307][ T5720] usb 1-1: USB disconnect, device number 2 [ 83.197167][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 83.197190][ T29] audit: type=1400 audit(1785564043.788:207): avc: denied { create } for pid=5854 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.232328][ T29] audit: type=1400 audit(1785564043.818:208): avc: denied { bind } for pid=5854 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.264916][ T29] audit: type=1400 audit(1785564043.848:209): avc: denied { setopt } for pid=5854 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.287306][ T29] audit: type=1400 audit(1785564043.848:210): avc: denied { listen } for pid=5854 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.292280][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 83.355227][ T29] audit: type=1400 audit(1785564043.848:211): avc: denied { connect } for pid=5854 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.405414][ T46] usb 2-1: config 0 has no interfaces? [ 83.408856][ T29] audit: type=1400 audit(1785564043.858:212): avc: denied { accept } for pid=5854 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.414810][ T46] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.434712][ T29] audit: type=1400 audit(1785564043.858:213): avc: denied { write } for pid=5854 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.467911][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.517208][ T46] usb 2-1: config 0 descriptor?? [ 83.603911][ T29] audit: type=1400 audit(1785564043.918:214): avc: denied { read } for pid=5854 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.630378][ T29] audit: type=1400 audit(1785564044.068:215): avc: denied { allowed } for pid=5857 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.687551][ T29] audit: type=1400 audit(1785564044.078:216): avc: denied { create } for pid=5857 comm="syz.3.17" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.885363][ T5865] netlink: 'syz.3.20': attribute type 3 has an invalid length. [ 83.918426][ T5865] netlink: 64 bytes leftover after parsing attributes in process `syz.3.20'. [ 84.012384][ T5713] usb 2-1: USB disconnect, device number 2 [ 84.331395][ T5870] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 84.513774][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 84.525667][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 84.558585][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 84.591437][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 84.622865][ T5734] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 84.655616][ T5734] usb 5-1: USB disconnect, device number 2 [ 85.616064][ T5909] process 'syz.4.28' launched './file0' with NULL argv: empty string added [ 85.655893][ T5909] Invalid argument reading file caps for ./file0 [ 86.453302][ T24] cfg80211: failed to load regulatory.db [ 88.328912][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 88.328928][ T29] audit: type=1400 audit(1785564048.918:285): avc: denied { read } for pid=5937 comm="syz.1.36" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.416661][ T29] audit: type=1400 audit(1785564048.918:286): avc: denied { open } for pid=5937 comm="syz.1.36" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.455354][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.486794][ T29] audit: type=1400 audit(1785564048.978:287): avc: denied { ioctl } for pid=5937 comm="syz.1.36" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.508454][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.562294][ T29] audit: type=1400 audit(1785564048.988:288): avc: denied { name_bind } for pid=5939 comm="syz.3.38" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.598109][ T29] audit: type=1400 audit(1785564048.988:289): avc: denied { listen } for pid=5939 comm="syz.3.38" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.619858][ T29] audit: type=1400 audit(1785564048.998:290): avc: denied { name_connect } for pid=5939 comm="syz.3.38" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.646156][ T29] audit: type=1400 audit(1785564049.068:291): avc: denied { create } for pid=5939 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.661172][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.680532][ T29] audit: type=1400 audit(1785564049.068:292): avc: denied { listen } for pid=5939 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.736336][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.753431][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.769561][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.799233][ T5950] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 88.817220][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.866831][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 88.916593][ T5951] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 89.032023][ T5942] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 89.633186][ T29] audit: type=1400 audit(1785564050.178:293): avc: denied { write } for pid=5958 comm="syz.4.43" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 89.982040][ T29] audit: type=1400 audit(1785564050.188:294): avc: denied { open } for pid=5958 comm="syz.4.43" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 90.536079][ T5974] nvme_fabrics: missing parameter 'transport=%s' [ 90.596849][ T5974] nvme_fabrics: missing parameter 'nqn=%s' [ 90.608153][ T46] IPVS: starting estimator thread 0... [ 90.712319][ T5983] IPVS: using max 41 ests per chain, 98400 per kthread [ 90.812319][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.996542][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 91.024470][ T24] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 91.037109][ T24] usb 2-1: config 0 has no interface number 0 [ 91.053781][ T24] usb 2-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 91.099117][ T24] usb 2-1: config 0 interface 89 has no altsetting 0 [ 91.123784][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 91.134316][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.143368][ T24] usb 2-1: Product: syz [ 91.147606][ T24] usb 2-1: Manufacturer: syz [ 91.154628][ T24] usb 2-1: SerialNumber: syz [ 91.175827][ T5994] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 91.186393][ T24] usb 2-1: config 0 descriptor?? [ 91.193244][ T5977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.209504][ T24] hub 2-1:0.89: bad descriptor, ignoring hub [ 91.222439][ T24] hub 2-1:0.89: probe with driver hub failed with error -5 [ 91.242485][ T24] option 2-1:0.89: GSM modem (1-port) converter detected [ 91.267040][ T5995] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 91.389685][ T24] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 91.731620][ T6006] capability: warning: `syz.2.55' uses 32-bit capabilities (legacy support in use) [ 91.865397][ T6006] netlink: 72 bytes leftover after parsing attributes in process `syz.2.55'. [ 92.133616][ T5720] usb 2-1: USB disconnect, device number 3 [ 92.180203][ T5720] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 92.250589][ T5720] option 2-1:0.89: device disconnected [ 92.648266][ T6023] usb usb9: usbfs: process 6023 (syz.3.58) did not claim interface 0 before use [ 93.907958][ T6037] syzkaller0: entered promiscuous mode [ 93.924708][ T6037] syzkaller0: entered allmulticast mode [ 94.068369][ T6045] netlink: 76 bytes leftover after parsing attributes in process `syz.4.65'. [ 94.089669][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 94.089685][ T29] audit: type=1400 audit(1785564054.678:323): avc: denied { mount } for pid=6046 comm="syz.0.66" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 94.163362][ T29] audit: type=1400 audit(1785564054.718:324): avc: denied { name_bind 0x1000000 } for pid=6044 comm="syz.4.65" path="socket:[9811]" dev="sockfs" ino=9811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.313303][ T29] audit: type=1400 audit(1785564054.898:325): avc: denied { mount } for pid=6050 comm="syz.3.67" name="/" dev="autofs" ino=9831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.437645][ T6053] bridge0: port 3(vlan2) entered blocking state [ 94.470379][ T29] audit: type=1400 audit(1785564055.058:326): avc: denied { watch } for pid=6054 comm="syz.4.69" path="/9/net_prio.prioidx" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.486656][ T6053] bridge0: port 3(vlan2) entered disabled state [ 94.495328][ T29] audit: type=1400 audit(1785564055.058:327): avc: denied { watch_sb watch_reads } for pid=6054 comm="syz.4.69" path="/9/net_prio.prioidx" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.548434][ T6053] vlan2: entered allmulticast mode [ 94.577776][ T6053] geneve0: entered allmulticast mode [ 94.617792][ T6053] vlan2: entered promiscuous mode [ 94.655848][ T6053] geneve0: entered promiscuous mode [ 94.726148][ T29] audit: type=1400 audit(1785564055.318:328): avc: denied { read } for pid=6060 comm="syz.3.70" path="socket:[9847]" dev="sockfs" ino=9847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.778780][ T29] audit: type=1400 audit(1785564055.368:329): avc: denied { connect } for pid=6060 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.864522][ T29] audit: type=1400 audit(1785564055.368:330): avc: denied { read } for pid=6060 comm="syz.3.70" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.060626][ T29] audit: type=1400 audit(1785564055.368:331): avc: denied { open } for pid=6060 comm="syz.3.70" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.097977][ T29] audit: type=1400 audit(1785564055.458:332): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.156387][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 96.064751][ T6080] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 96.224168][ T6080] bond1 (unregistering): Released all slaves [ 96.412348][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 96.766511][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.842743][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.872560][ T24] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 96.887025][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.903496][ T24] usb 5-1: config 0 descriptor?? [ 96.917052][ T6096] netlink: 140 bytes leftover after parsing attributes in process `syz.0.79'. [ 97.107939][ T6100] 9p: Bad value for 'wfdno' [ 97.503868][ T6109] Invalid source name [ 98.232361][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.241532][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.421108][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.451921][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.768768][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.790915][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.822244][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.858812][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.060665][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 99.152921][ T24] usb 5-1: USB disconnect, device number 3 [ 99.188788][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 99.188804][ T29] audit: type=1400 audit(1785564059.778:357): avc: denied { lock } for pid=6132 comm="syz.0.93" path="socket:[8905]" dev="sockfs" ino=8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 99.311931][ T29] audit: type=1400 audit(1785564059.898:358): avc: denied { accept } for pid=6130 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.343502][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.95'. [ 99.394227][ T29] audit: type=1400 audit(1785564059.928:359): avc: denied { read } for pid=6130 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.752440][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.922749][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 99.940926][ T24] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 99.959187][ T24] usb 5-1: config 0 has no interface number 0 [ 99.982034][ T24] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 100.009598][ T24] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 100.044513][ T24] usb 5-1: config 0 interface 49 has no altsetting 0 [ 100.051910][ T24] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 100.063409][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.096578][ T24] usb 5-1: config 0 descriptor?? [ 100.340955][ T24] usb 5-1: string descriptor 0 read error: -71 [ 100.350108][ T6149] netlink: 3 bytes leftover after parsing attributes in process `syz.2.97'. [ 100.372852][ T24] usb 5-1: USB disconnect, device number 4 [ 100.505065][ T6151] tipc: Started in network mode [ 100.520216][ T6151] tipc: Node identity ac14140f, cluster identity 4711 [ 100.529158][ T29] audit: type=1400 audit(1785564061.118:360): avc: denied { name_connect } for pid=6152 comm="syz.2.99" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 100.555485][ T6151] tipc: New replicast peer: 255.255.255.255 [ 100.586234][ T29] audit: type=1400 audit(1785564061.148:361): avc: denied { accept } for pid=6152 comm="syz.2.99" lport=49640 faddr=::ffff:100.1.1.1 fport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.648696][ T6151] tipc: Enabled bearer , priority 10 [ 100.793972][ T29] audit: type=1400 audit(1785564061.388:362): avc: denied { write } for pid=6158 comm="syz.1.101" laddr=fe80::13 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.907149][ T29] audit: type=1326 audit(1785564061.498:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.2.100" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170b9e019 code=0x7ffc0000 [ 100.971674][ T29] audit: type=1326 audit(1785564061.498:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.2.100" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170b9e019 code=0x7ffc0000 [ 101.067184][ T29] audit: type=1326 audit(1785564061.498:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.2.100" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170b9e019 code=0x7ffc0000 [ 101.212371][ T29] audit: type=1326 audit(1785564061.498:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.2.100" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb170b9e019 code=0x7ffc0000 [ 101.828767][ T5713] tipc: Node number set to 2886997007 [ 102.242126][ T6173] syzkaller0: entered promiscuous mode [ 102.298376][ T6173] syzkaller0: entered allmulticast mode [ 102.604069][ T6188] netlink: 14 bytes leftover after parsing attributes in process `syz.2.109'. [ 103.218634][ T6204] Zero length message leads to an empty skb [ 105.123938][ T5720] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.392486][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 105.419915][ T5720] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 105.433886][ T5720] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.452225][ T5720] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.475794][ T5720] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 105.486060][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.518804][ T5720] usb 1-1: config 0 descriptor?? [ 105.941543][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.956186][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.000649][ T5720] usbhid 1-1:0.0: can't add hid device: -71 [ 106.015010][ T5720] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.047812][ T5720] usb 1-1: USB disconnect, device number 3 [ 107.044836][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 107.044850][ T29] audit: type=1400 audit(1785564067.638:399): avc: denied { append } for pid=6235 comm="syz.1.123" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.262935][ T29] audit: type=1400 audit(1785564067.858:400): avc: denied { create } for pid=6238 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.297255][ T29] audit: type=1400 audit(1785564067.888:401): avc: denied { connect } for pid=6238 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.935124][ T6239] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 108.074406][ T6239] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 108.248650][ T6245] bridge_slave_0: left allmulticast mode [ 108.283586][ T6239] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 108.319997][ T6245] bridge_slave_0: left promiscuous mode [ 108.409205][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.579624][ T6239] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.760108][ T6239] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.025795][ T6245] bridge_slave_1: left allmulticast mode [ 109.038635][ T6245] bridge_slave_1: left promiscuous mode [ 109.050915][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.101790][ T6245] bond0: (slave bond_slave_0): Releasing backup interface [ 109.144769][ T6245] bond0: (slave bond_slave_1): Releasing backup interface [ 109.175591][ T6245] team0: Port device team_slave_0 removed [ 109.189519][ T6245] team0: Port device team_slave_1 removed [ 109.217845][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.234009][ T6245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.269187][ T6245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.330056][ T6248] team0: Port device xfrm0 added [ 109.349061][ T6249] tipc: Started in network mode [ 109.354233][ T29] audit: type=1400 audit(1785564069.948:402): avc: denied { write } for pid=6255 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.375581][ T6249] tipc: Node identity beb464939ee2, cluster identity 4711 [ 109.433011][ T6249] tipc: Enabled bearer , priority 0 [ 109.553961][ T29] audit: type=1400 audit(1785564070.148:403): avc: denied { ioctl } for pid=6263 comm="syz.0.132" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.596599][ T6262] Mass Storage Function, version: 2009/09/11 [ 109.599370][ T6264] binder_alloc: 6263: binder_alloc_buf, no vma [ 109.613966][ T6262] LUN: removable file: (no medium) [ 109.642313][ T5734] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.657166][ T29] audit: type=1400 audit(1785564070.148:404): avc: denied { set_context_mgr } for pid=6263 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.677949][ T29] audit: type=1400 audit(1785564070.178:405): avc: denied { map } for pid=6263 comm="syz.0.132" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.705667][ T29] audit: type=1400 audit(1785564070.178:406): avc: denied { search } for pid=6261 comm="syz.4.131" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.782292][ T29] audit: type=1400 audit(1785564070.188:407): avc: denied { search } for pid=6261 comm="syz.4.131" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.822447][ T29] audit: type=1400 audit(1785564070.188:408): avc: denied { search } for pid=6261 comm="syz.4.131" name="usb_gadget" dev="configfs" ino=3151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.827406][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 109.869138][ T6267] sound umpC3D1: No UMP Group is found in FB [ 109.889727][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 109.901100][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.919928][ T5734] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 109.959262][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.007292][ T5734] usb 2-1: Product: syz [ 110.029899][ T5734] usb 2-1: Manufacturer: syz [ 110.210648][ T5734] usb 2-1: SerialNumber: syz [ 110.428622][ T5734] usb 2-1: config 0 descriptor?? [ 110.443719][ T46] tipc: Node number set to 542532755 [ 110.455177][ T5734] adutux 2-1:0.0: interrupt endpoints not found [ 110.852095][ T5733] usb 2-1: USB disconnect, device number 4 [ 111.653795][ T6297] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 111.756106][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 111.852236][ T5733] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.025055][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.041338][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.056901][ T5733] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 112.061678][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 112.061691][ T29] audit: type=1400 audit(1785564072.648:440): avc: denied { write } for pid=6304 comm="syz.0.153" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 112.075392][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.143122][ T5733] usb 3-1: config 0 descriptor?? [ 112.256455][ T29] audit: type=1400 audit(1785564072.848:441): avc: denied { mounton } for pid=6305 comm="syz.3.143" path="/file0" dev="bpf" ino=11448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 112.286263][ T6307] overlayfs: upper fs does not support tmpfile. [ 112.419432][ T29] audit: type=1400 audit(1785564073.008:442): avc: denied { watch } for pid=6313 comm="syz.0.144" path="/33/file1" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.585781][ T29] audit: type=1400 audit(1785564073.168:443): avc: denied { write } for pid=6315 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.632284][ T29] audit: type=1400 audit(1785564073.218:444): avc: denied { read } for pid=6315 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.021714][ T5733] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 113.068004][ T29] audit: type=1400 audit(1785564073.658:445): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.121151][ T29] audit: type=1400 audit(1785564073.658:446): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.208375][ T5733] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 113.209379][ T29] audit: type=1400 audit(1785564073.688:447): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.248019][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.295830][ T5733] usb 3-1: USB disconnect, device number 2 [ 113.346957][ T6329] fido_id[6329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 113.369521][ T29] audit: type=1400 audit(1785564073.688:448): avc: denied { read } for pid=5273 comm="dhcpcd" name="n69" dev="tmpfs" ino=2496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.467782][ T29] audit: type=1400 audit(1785564073.688:449): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=2496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.519087][ T46] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 113.548394][ T46] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 113.597771][ T46] usb 4-1: Product: syz [ 113.632487][ T46] usb 4-1: SerialNumber: syz [ 113.679556][ T46] usb 4-1: config 0 descriptor?? [ 113.923144][ T46] hso 4-1:0.0: Failed to find INT IN ep [ 114.146624][ T46] usb 4-1: USB disconnect, device number 2 [ 116.254762][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.755153][ T6378] Bluetooth: MGMT ver 1.23 [ 117.320384][ T6392] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 117.401172][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 117.742527][ T5734] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.907604][ T5734] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 117.918951][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.931823][ T5734] usb 4-1: config 0 descriptor?? [ 117.941785][ T5734] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 118.662852][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 118.662869][ T29] audit: type=1400 audit(3933047727.251:468): avc: denied { append } for pid=6420 comm="syz.4.172" name="frontend0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 119.371433][ T29] audit: type=1400 audit(3933047727.961:469): avc: denied { read } for pid=6429 comm="syz.4.176" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.440647][ T29] audit: type=1400 audit(3933047727.961:470): avc: denied { open } for pid=6429 comm="syz.4.176" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.511180][ T29] audit: type=1400 audit(3933047727.991:471): avc: denied { ioctl } for pid=6429 comm="syz.4.176" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.579375][ T29] audit: type=1400 audit(3933047728.171:472): avc: denied { write } for pid=6429 comm="syz.4.176" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.876919][ T5734] usb 4-1: USB disconnect, device number 3 [ 119.988139][ T29] audit: type=1400 audit(3933047728.581:473): avc: denied { create } for pid=6441 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.034809][ T29] audit: type=1400 audit(3933047728.601:474): avc: denied { setopt } for pid=6441 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.094077][ T29] audit: type=1400 audit(3933047728.611:475): avc: denied { bind } for pid=6441 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.141655][ T29] audit: type=1400 audit(3933047728.611:476): avc: denied { getopt } for pid=6441 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 120.166556][ T29] audit: type=1400 audit(3933047728.631:477): avc: denied { setopt } for pid=6439 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.519760][ T6450] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.731048][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.184'. [ 122.759470][ T6470] gadgetfs: bound to dummy_udc driver [ 123.022260][ T5733] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 123.073312][ C1] gadgetfs: connected [ 123.078737][ T5733] gadgetfs: disconnected [ 123.618842][ T6472] gadgetfs: suspended from state 2 [ 123.865620][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 123.865636][ T29] audit: type=1400 audit(3933047732.461:484): avc: denied { read } for pid=6479 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 123.910092][ T5733] usb 1-1: device not accepting address 4, error -71 [ 123.995476][ T29] audit: type=1400 audit(3933047732.571:485): avc: denied { write } for pid=6479 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 125.204792][ T6503] ======================================================= [ 125.204792][ T6503] WARNING: The mand mount option has been deprecated and [ 125.204792][ T6503] and is ignored by this kernel. Remove the mand [ 125.204792][ T6503] option from the mount to silence this warning. [ 125.204792][ T6503] ======================================================= [ 125.800304][ T29] audit: type=1400 audit(3933047734.391:486): avc: denied { setopt } for pid=6510 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.958949][ T29] audit: type=1400 audit(3933047734.421:487): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 126.513305][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 127.056515][ T6527] ve: renamed from veth0_vlan [ 127.568017][ T6536] bridge_slave_0: left allmulticast mode [ 127.591606][ T6536] bridge_slave_0: left promiscuous mode [ 127.600050][ T6534] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 127.619763][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.678056][ T6536] bridge_slave_1: left allmulticast mode [ 127.694026][ T6536] bridge_slave_1: left promiscuous mode [ 127.710442][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.793617][ T6536] bond0: (slave bond_slave_0): Releasing backup interface [ 127.833119][ T6536] bond0: (slave bond_slave_1): Releasing backup interface [ 127.890467][ T6536] team0: Port device team_slave_0 removed [ 127.946762][ T6536] team0: Port device team_slave_1 removed [ 127.977488][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.001528][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.021330][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.039304][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.070012][ T6536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.311345][ T6538] team0: Port device xfrm0 added [ 128.319768][ T29] audit: type=1400 audit(3933047736.911:488): avc: denied { write } for pid=6537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.326422][ T6539] tipc: Enabled bearer , priority 0 [ 128.783938][ T29] audit: type=1400 audit(3933047737.381:489): avc: denied { setopt } for pid=6559 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.846409][ T29] audit: type=1400 audit(3933047737.401:490): avc: denied { ioctl } for pid=6559 comm="syz.3.210" path="socket:[11760]" dev="sockfs" ino=11760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.977762][ T29] audit: type=1400 audit(3933047737.411:491): avc: denied { bind } for pid=6559 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 129.059820][ T29] audit: type=1400 audit(3933047737.441:492): avc: denied { write } for pid=6561 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.089930][ T5273] ve: left promiscuous mode [ 129.121435][ T29] audit: type=1400 audit(3933047737.681:493): avc: denied { getopt } for pid=6567 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.147296][ T5805] ve: entered promiscuous mode [ 129.827230][ T29] audit: type=1400 audit(3933047738.401:494): avc: denied { mount } for pid=6580 comm="syz.2.217" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 131.473382][ T29] audit: type=1400 audit(3933047740.071:495): avc: denied { write } for pid=6584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.551526][ T29] audit: type=1400 audit(3933047740.141:496): avc: denied { mount } for pid=6610 comm="syz.4.222" name="/" dev="autofs" ino=11094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 131.683900][ T29] audit: type=1400 audit(3933047740.281:497): avc: denied { write } for pid=6614 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.045426][ T29] audit: type=1400 audit(3933047740.641:498): avc: denied { accept } for pid=6620 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.427460][ T6632] batman_adv: batadv0: Adding interface: dummy0 [ 132.435400][ T29] audit: type=1400 audit(3933047741.021:499): avc: denied { name_connect } for pid=6635 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 132.459377][ T6632] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.486595][ T29] audit: type=1400 audit(3933047741.051:500): avc: denied { ioctl } for pid=6628 comm="syz.2.227" path="socket:[11913]" dev="sockfs" ino=11913 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.517969][ T6632] batman_adv: batadv0: Interface activated: dummy0 [ 132.528798][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.543383][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.658187][ T6637] batadv0: mtu less than device minimum [ 132.672750][ T6637] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.685550][ T6637] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.696973][ T6637] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.708392][ T6637] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.719817][ T6637] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.731242][ T6637] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.742690][ T6637] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.754118][ T6637] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.993626][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 133.050571][ T6648] Cannot find add_set index 0 as target [ 134.803550][ T6661] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 134.812804][ T29] audit: type=1804 audit(3933047743.391:501): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.235" name="/newroot/45/file0" dev="tmpfs" ino=275 res=1 errno=0 [ 134.844005][ T6661] ref_ctr increment failed for inode: 0x113 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c294c80 [ 134.910706][ T6663] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 134.932430][ T6663] ref_ctr decrement failed for inode: 0x113 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c294c80 [ 134.995485][ T6663] uprobe: syz.4.235:6663 failed to unregister, leaking uprobe [ 135.110606][ T6666] net_ratelimit: 11 callbacks suppressed [ 135.110628][ T6666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.510932][ T29] audit: type=1400 audit(3933047744.101:502): avc: denied { block_suspend } for pid=6672 comm="syz.1.239" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.606246][ T29] audit: type=1804 audit(3933047744.201:503): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.238" name="bus" dev="ramfs" ino=12610 res=1 errno=0 [ 135.662255][ T29] audit: type=1804 audit(3933047744.201:504): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.238" name="bus" dev="ramfs" ino=12610 res=1 errno=0 [ 136.025688][ T6685] netlink: 44 bytes leftover after parsing attributes in process `syz.4.241'. [ 136.339401][ T29] audit: type=1400 audit(3933047744.931:505): avc: denied { read write } for pid=6691 comm="syz.2.245" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.835809][ T29] audit: type=1400 audit(3933047744.931:506): avc: denied { open } for pid=6691 comm="syz.2.245" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.889446][ T29] audit: type=1400 audit(3933047744.931:507): avc: denied { ioctl } for pid=6691 comm="syz.2.245" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.920001][ T6703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.941891][ T29] audit: type=1400 audit(3933047745.071:508): avc: denied { create } for pid=6692 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.551184][ T6715] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 137.627938][ T6718] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.649004][ T6715] bond1: entered promiscuous mode [ 137.650837][ T6721] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 137.679823][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 137.698772][ T6715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.752125][ T6725] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 137.770333][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.782613][ T6719] bond1: entered allmulticast mode [ 137.796349][ T6723] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 137.854159][ T6725] bond1: entered promiscuous mode [ 137.868640][ T6725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.899522][ T6728] vlan3: entered allmulticast mode [ 137.904816][ T6728] bond1: entered allmulticast mode [ 137.923684][ T6719] bond1: (slave bridge1): making interface the new active one [ 137.931299][ T6719] bridge1: entered promiscuous mode [ 137.936863][ T6719] bridge1: entered allmulticast mode [ 137.953013][ T6719] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 137.964665][ T6711] tipc: Enabling not permitted [ 137.970342][ T6711] tipc: Enabling of bearer rejected, failed to enable media [ 138.105750][ T6731] bond1: (slave bridge1): making interface the new active one [ 138.155921][ T6731] bridge1: entered promiscuous mode [ 138.181764][ T6731] bridge1: entered allmulticast mode [ 138.207089][ T6731] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 138.406389][ T29] audit: type=1400 audit(3933047747.001:509): avc: denied { setopt } for pid=6742 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.460363][ T29] audit: type=1400 audit(3933047747.001:510): avc: denied { ioctl } for pid=6742 comm="syz.1.262" path="socket:[12794]" dev="sockfs" ino=12794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.649026][ T5805] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.828807][ T6753] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 139.864250][ T6739] netlink: 104 bytes leftover after parsing attributes in process `syz.4.260'. [ 139.898578][ T5805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.927620][ T5805] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 139.953058][ T5805] usb 5-1: can't read configurations, error -71 [ 140.435362][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 140.435379][ T29] audit: type=1400 audit(3933047749.031:514): avc: denied { read write } for pid=6761 comm="syz.3.268" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.489496][ T29] audit: type=1400 audit(3933047749.031:515): avc: denied { open } for pid=6761 comm="syz.3.268" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.855399][ T29] audit: type=1400 audit(3933047749.451:516): avc: denied { read append } for pid=6774 comm="syz.0.270" name="sg0" dev="devtmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.915717][ T29] audit: type=1400 audit(3933047749.451:517): avc: denied { open } for pid=6774 comm="syz.0.270" path="/dev/sg0" dev="devtmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 140.957546][ T29] audit: type=1400 audit(3933047749.461:518): avc: denied { read append } for pid=6774 comm="syz.0.270" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 140.994575][ T29] audit: type=1400 audit(3933047749.461:519): avc: denied { open } for pid=6774 comm="syz.0.270" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 141.061607][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 141.065965][ T29] audit: type=1400 audit(3933047749.461:520): avc: denied { ioctl } for pid=6774 comm="syz.0.270" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 141.095685][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 141.451737][ T29] audit: type=1400 audit(3933047750.041:521): avc: denied { create } for pid=6783 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.488514][ T29] audit: type=1400 audit(3933047750.041:522): avc: denied { bind } for pid=6783 comm="syz.0.274" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.547588][ T29] audit: type=1400 audit(3933047750.041:523): avc: denied { name_bind } for pid=6783 comm="syz.0.274" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 143.091692][ T6816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.198176][ T6857] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 145.251785][ T6857] ref_ctr increment failed for inode: 0x14c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bc2bfc0 [ 145.351445][ T6863] syzkaller0: entered promiscuous mode [ 145.359752][ T6863] syzkaller0: entered allmulticast mode [ 145.389886][ T6862] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 145.411443][ T6862] ref_ctr decrement failed for inode: 0x14c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bc2bfc0 [ 145.424075][ T6862] uprobe: syz.0.287:6862 failed to unregister, leaking uprobe [ 145.443682][ T6867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.290'. [ 145.455236][ T6867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.290'. [ 145.482278][ T6867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.290'. [ 145.797609][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 145.797625][ T29] audit: type=1400 audit(3933047754.391:530): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.479992][ T29] audit: type=1400 audit(3933047755.051:531): avc: denied { write } for pid=6877 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.846312][ T6886] binder_alloc: 6885: binder_alloc_buf, no vma [ 147.396398][ T5733] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 147.561506][ T29] audit: type=1400 audit(3933047756.151:532): avc: denied { write } for pid=6882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.573744][ T5733] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 147.682222][ T5741] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.698411][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 147.733896][ T5733] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 147.777168][ T5733] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 147.800448][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.851030][ T5733] usb 5-1: config 0 descriptor?? [ 147.864288][ T6899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.962362][ T5741] usb 1-1: Using ep0 maxpacket: 8 [ 147.981837][ T29] audit: type=1400 audit(3933047756.571:533): avc: denied { write } for pid=6911 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.016295][ T5741] usb 1-1: config 0 has no interfaces? [ 148.028273][ T5741] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.042787][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.115641][ T5741] usb 1-1: config 0 descriptor?? [ 148.178972][ T6917] capability: warning: `syz.3.304' uses deprecated v2 capabilities in a way that may be insecure [ 148.240161][ T29] audit: type=1400 audit(3933047756.831:534): avc: denied { read } for pid=6918 comm="syz.2.305" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.301794][ T29] audit: type=1400 audit(3933047756.861:535): avc: denied { open } for pid=6918 comm="syz.2.305" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.382879][ T29] audit: type=1400 audit(3933047756.861:536): avc: denied { ioctl } for pid=6918 comm="syz.2.305" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.468095][ T29] audit: type=1400 audit(3933047756.921:537): avc: denied { create } for pid=6897 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.544088][ T29] audit: type=1400 audit(3933047756.921:538): avc: denied { write } for pid=6897 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.838834][ T5741] usb 1-1: USB disconnect, device number 6 [ 148.857894][ T6932] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 148.906019][ T6932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.104045][ T6932] bond1: (slave ip6gretap1): making interface the new active one [ 149.134517][ T6932] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 149.466075][ T29] audit: type=1400 audit(3933047758.061:539): avc: denied { read write } for pid=6946 comm="syz.1.308" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 150.382790][ T5733] usbhid 5-1:0.0: can't add hid device: -71 [ 150.442030][ T5733] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 150.522839][ T5733] usb 5-1: USB disconnect, device number 7 [ 150.925917][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 150.925949][ T29] audit: type=1400 audit(3933047759.431:542): avc: denied { setopt } for pid=6964 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.173677][ T5733] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 152.434285][ T5733] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 152.537550][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.621954][ T5733] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.647384][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.690155][ T5733] usb 3-1: Product: syz [ 152.719830][ T5733] usb 3-1: Manufacturer: syz [ 152.751661][ T5733] usb 3-1: SerialNumber: syz [ 152.785690][ T5733] usb 3-1: config 0 descriptor?? [ 152.824284][ T5733] usb 3-1: selecting invalid altsetting 0 [ 152.968653][ T29] audit: type=1400 audit(3933047761.561:543): avc: denied { setopt } for pid=6998 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.047158][ T29] audit: type=1400 audit(3933047761.641:544): avc: denied { read } for pid=6979 comm="syz.2.318" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 153.133499][ T29] audit: type=1400 audit(3933047761.641:545): avc: denied { open } for pid=6979 comm="syz.2.318" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 153.226070][ T6981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6981 comm=syz.2.318 [ 153.290477][ T5734] usb 3-1: USB disconnect, device number 3 [ 155.322324][ T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.493090][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 155.589672][ T46] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 155.710031][ T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.827810][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.911810][ T46] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.018218][ T46] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.135452][ T46] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.218032][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.933582][ T46] usb 5-1: usb_control_msg returned -32 [ 156.940296][ T46] usbtmc 5-1:16.0: can't read capabilities [ 156.978262][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'. [ 156.991695][ T29] audit: type=1400 audit(3933047765.581:546): avc: denied { setopt } for pid=7036 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.068437][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.335'. [ 157.080488][ T7039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.089406][ T7039] IPv6: NLM_F_CREATE should be set when creating new route [ 157.098921][ T7040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7040 comm=syz.3.334 [ 157.271700][ T7044] syzkaller0: entered promiscuous mode [ 157.295807][ T7044] syzkaller0: entered allmulticast mode [ 157.335882][ T7046] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 158.009422][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.016935][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.045731][ T7064] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.289084][ T7069] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.345'. [ 158.298501][ T7069] ksmbd: Unknown IPC event: 4, ignore. [ 158.697943][ T29] audit: type=1400 audit(3933047767.291:547): avc: denied { read } for pid=7070 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.730426][ T5734] usb 5-1: USB disconnect, device number 8 [ 158.739798][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.794576][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.815205][ T29] audit: type=1800 audit(3933047767.401:548): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.341" name="bus" dev="ramfs" ino=13976 res=0 errno=0 [ 159.106139][ T7064] bond1: left promiscuous mode [ 159.118244][ T7064] bridge1: left promiscuous mode [ 159.140389][ T7064] vlan3: left allmulticast mode [ 159.159764][ T7064] bond1: left allmulticast mode [ 159.173519][ T7064] bridge1: left allmulticast mode [ 159.325937][ T29] audit: type=1400 audit(3933047767.921:549): avc: denied { connect } for pid=7080 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.358814][ T7079] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.409504][ T7079] bond1: (slave macvlan2): making interface the new active one [ 160.436402][ T7079] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 160.467793][ T5741] bond_slave_0: entered promiscuous mode [ 160.474455][ T5741] bond_slave_1: entered promiscuous mode [ 160.572288][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.591600][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.620218][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.650360][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.706479][ T29] audit: type=1400 audit(3933047769.301:550): avc: denied { write } for pid=7093 comm="syz.3.352" name="functions" dev="configfs" ino=8459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.741564][ T7096] sound umpC3D1: No UMP Group is found in FB [ 160.775657][ T29] audit: type=1400 audit(3933047769.331:551): avc: denied { write } for pid=7093 comm="syz.3.352" name="c.1" dev="configfs" ino=8466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.847782][ T29] audit: type=1400 audit(3933047769.331:552): avc: denied { create } for pid=7093 comm="syz.3.352" name="eem.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 160.926889][ T29] audit: type=1400 audit(3933047769.331:553): avc: denied { write } for pid=7093 comm="syz.3.352" name="c.1" dev="configfs" ino=8466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.973690][ T7096] configfs-gadget.g1 gadget.0: HOST MAC 7a:98:b2:b5:22:33 [ 160.996639][ T7096] configfs-gadget.g1 gadget.0: MAC 96:d9:bb:ab:11:26 [ 161.272243][ T5741] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 161.445204][ T5741] usb 1-1: Dual-Role OTG device on HNP port [ 161.499955][ T5741] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 161.558810][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.670644][ T5741] gspca_main: spca501-2.14.0 probing 0000:0000 [ 161.699330][ T5741] gspca_spca501: reg write: error -32 [ 161.732602][ T5741] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 161.769915][ T5741] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 162.338319][ T5741] cdc_eem 1-1:1.2 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, ce:31:49:69:cb:ba [ 162.357483][ T7132] kvm: emulating exchange as write [ 162.773591][ T29] audit: type=1400 audit(3933047771.351:554): avc: denied { write } for pid=7108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.218420][ T29] audit: type=1400 audit(3933047771.811:555): avc: denied { write } for pid=7149 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.401353][ T29] audit: type=1400 audit(3933047772.991:556): avc: denied { ioctl } for pid=7181 comm="syz.3.369" path="socket:[14671]" dev="sockfs" ino=14671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.466422][ T7184] smc: net device lo applied user defined pnetid SYZ0 [ 164.502864][ T29] audit: type=1400 audit(3933047773.091:557): avc: denied { bind } for pid=7183 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.595487][ T29] audit: type=1400 audit(3933047773.121:558): avc: denied { connect } for pid=7183 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.671030][ T29] audit: type=1400 audit(3933047773.171:559): avc: denied { accept } for pid=7183 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.778873][ T29] audit: type=1400 audit(3933047773.191:560): avc: denied { write } for pid=7161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.959723][ T7195] netlink: 164 bytes leftover after parsing attributes in process `syz.0.371'. [ 165.002409][ T7195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.371'. [ 165.028240][ T29] audit: type=1400 audit(3933047773.621:561): avc: denied { write } for pid=7192 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.692286][ T7202] gfs2: gfs2 mount does not exist [ 167.115237][ T29] audit: type=1400 audit(3933047775.711:562): avc: denied { setopt } for pid=7215 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.370646][ T29] audit: type=1400 audit(3933047775.961:563): avc: denied { connect } for pid=7214 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.334822][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.382'. [ 168.393142][ T7246] netlink: 17 bytes leftover after parsing attributes in process `syz.0.382'. [ 168.461862][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 168.461878][ T29] audit: type=1400 audit(3933047777.051:565): avc: denied { map } for pid=7245 comm="syz.0.382" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.493829][ T7246] tipc: Invalid UDP bearer configuration [ 168.493929][ T7246] tipc: Enabling of bearer rejected, failed to enable media [ 168.549336][ T29] audit: type=1400 audit(3933047777.101:566): avc: denied { execute } for pid=7245 comm="syz.0.382" path="/dev/comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.617789][ T29] audit: type=1400 audit(3933047777.141:567): avc: denied { write } for pid=7213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.692117][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 169.066364][ T29] audit: type=1400 audit(3933047777.661:568): avc: denied { write } for pid=7262 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.135853][ T7266] syzkaller0: entered promiscuous mode [ 169.164524][ T7266] syzkaller0: entered allmulticast mode [ 169.268887][ T29] audit: type=1400 audit(3933047777.851:569): avc: denied { map } for pid=7268 comm="syz.0.389" path="socket:[15505]" dev="sockfs" ino=15505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.352964][ T29] audit: type=1400 audit(3933047777.851:570): avc: denied { read write } for pid=7268 comm="syz.0.389" path="socket:[15505]" dev="sockfs" ino=15505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 172.230296][ T29] audit: type=1400 audit(3933047780.821:571): avc: denied { append } for pid=7299 comm="syz.4.396" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.307334][ T29] audit: type=1400 audit(3933047780.901:572): avc: denied { map } for pid=7299 comm="syz.4.396" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.353929][ T29] audit: type=1400 audit(3933047780.901:573): avc: denied { execute } for pid=7299 comm="syz.4.396" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.481116][ T5805] IPVS: starting estimator thread 0... [ 172.506381][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.397'. [ 172.544442][ T7306] netlink: 17 bytes leftover after parsing attributes in process `syz.2.397'. [ 172.580448][ T7306] tipc: Invalid UDP bearer configuration [ 172.580498][ T7306] tipc: Enabling of bearer rejected, failed to enable media [ 172.592921][ T29] audit: type=1400 audit(3933047781.181:574): avc: denied { create } for pid=7313 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.619268][ T7308] IPVS: using max 66 ests per chain, 158400 per kthread [ 172.688203][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 172.700376][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 172.700407][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 172.700427][ T5616] Workqueue: hci3 hci_rx_work [ 172.700460][ T5616] Call Trace: [ 172.700468][ T5616] [ 172.700476][ T5616] dump_stack_lvl+0x100/0x190 [ 172.700508][ T5616] sysfs_warn_dup.cold+0x1c/0x28 [ 172.700545][ T5616] sysfs_create_dir_ns+0x24b/0x2b0 [ 172.700569][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 172.700605][ T5616] ? find_held_lock+0x2b/0x80 [ 172.700627][ T5616] ? kobject_add_internal+0x25f/0x930 [ 172.700660][ T5616] ? kobject_add_internal+0x25f/0x930 [ 172.700697][ T5616] ? do_raw_spin_unlock+0x145/0x1e0 [ 172.700731][ T5616] kobject_add_internal+0x2c8/0x930 [ 172.700770][ T5616] kobject_add+0x16a/0x1e0 [ 172.700803][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 172.700834][ T5616] ? class_to_subsys+0x10f/0x150 [ 172.700872][ T5616] ? kobject_put+0xb9/0x640 [ 172.700904][ T5616] ? _raw_spin_unlock+0x28/0x50 [ 172.700936][ T5616] device_add+0x294/0x1970 [ 172.700968][ T5616] ? __pfx_dev_set_name+0x10/0x10 [ 172.700991][ T5616] ? __pfx_device_add+0x10/0x10 [ 172.701022][ T5616] ? mgmt_send_event_skb+0x2fb/0x460 [ 172.701066][ T5616] hci_conn_add_sysfs+0x1a3/0x260 [ 172.701099][ T5616] le_conn_complete_evt+0x11eb/0x1f60 [ 172.701134][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 172.701159][ T5616] ? hci_event_packet+0x186/0xcd0 [ 172.701193][ T5616] hci_le_conn_complete_evt+0x23c/0x3a0 [ 172.701221][ T5616] ? skb_pull_data+0x15f/0x1e0 [ 172.701259][ T5616] hci_le_meta_evt+0x34a/0x5f0 [ 172.701287][ T5616] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 172.701320][ T5616] hci_event_packet+0x51c/0xcd0 [ 172.701346][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 172.701375][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 172.701404][ T5616] ? kcov_remote_start+0x384/0x670 [ 172.701430][ T5616] ? lockdep_hardirqs_on+0x78/0x100 [ 172.701465][ T5616] hci_rx_work+0x451/0xfc0 [ 172.701494][ T5616] process_one_work+0xa23/0x1940 [ 172.701532][ T5616] ? __pfx_process_one_work+0x10/0x10 [ 172.701565][ T5616] ? __pfx_hci_rx_work+0x10/0x10 [ 172.701593][ T5616] worker_thread+0x5ef/0xe50 [ 172.701629][ T5616] ? kthread+0x13a/0x450 [ 172.701650][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 172.701672][ T5616] kthread+0x370/0x450 [ 172.701693][ T5616] ? __pfx_kthread+0x10/0x10 [ 172.701717][ T5616] ret_from_fork+0x72b/0xd50 [ 172.701749][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 172.701779][ T5616] ? rcu_is_watching+0x12/0xc0 [ 172.701811][ T5616] ? __switch_to+0x800/0x10f0 [ 172.701835][ T5616] ? __pfx_kthread+0x10/0x10 [ 172.701859][ T5616] ret_from_fork_asm+0x1a/0x30 [ 172.701908][ T5616] [ 172.965753][ T5616] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 172.980407][ T5616] Bluetooth: hci3: failed to register connection device [ 173.460834][ T7337] binder: 7330:7337 ioctl c0306201 0 returned -14 [ 177.317483][ T7363] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 177.604419][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 177.604435][ T29] audit: type=1400 audit(3933047786.201:578): avc: denied { search } for pid=7362 comm="syz.3.411" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 177.634634][ T29] audit: type=1400 audit(3933047786.201:579): avc: denied { read } for pid=7362 comm="syz.3.411" name="trace_pipe" dev="tracefs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 177.657873][ T29] audit: type=1400 audit(3933047786.201:580): avc: denied { open } for pid=7362 comm="syz.3.411" path="/78/debug/tracing/trace_pipe" dev="tracefs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 177.699868][ T7371] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 177.731076][ T7374] netlink: 240 bytes leftover after parsing attributes in process `syz.1.409'. [ 178.017166][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 178.054240][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 178.098801][ T7383] ceph: No mds server is up or the cluster is laggy [ 178.386964][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.717907][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.808168][ T7396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7396 comm=syz.0.415 [ 178.840759][ T7401] syzkaller0: entered promiscuous mode [ 178.850867][ T7401] syzkaller0: entered allmulticast mode [ 179.826576][ T29] audit: type=1400 audit(3933047788.421:581): avc: denied { bind } for pid=7409 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.100028][ T7410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.420'. [ 181.246023][ T29] audit: type=1400 audit(3933047789.841:582): avc: denied { write } for pid=7425 comm="syz.2.425" name="functions" dev="configfs" ino=8459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.531216][ T7436] xt_SECMARK: invalid mode: 2 [ 182.262509][ T29] audit: type=1400 audit(3933047790.851:583): avc: denied { read } for pid=7439 comm="syz.2.429" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 183.367560][ T29] audit: type=1326 audit(3933047791.961:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.2.429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb170b9e019 code=0x0 [ 183.977208][ T29] audit: type=1400 audit(3933047792.571:585): avc: denied { write } for pid=7437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.544340][ T29] audit: type=1400 audit(3933047792.901:586): avc: denied { read } for pid=7467 comm="syz.2.434" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 185.099667][ T29] audit: type=1400 audit(3933047793.681:587): avc: denied { write } for pid=7473 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.380566][ T29] audit: type=1400 audit(3933047793.971:588): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 185.672808][ T5720] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 186.512252][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 186.536446][ T5720] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 186.578428][ T5720] usb 3-1: config 0 has no interface number 0 [ 186.630011][ T5720] usb 3-1: config 0 interface 184 has no altsetting 0 [ 186.714920][ T5720] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 186.776166][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.807048][ T5720] usb 3-1: Product: syz [ 186.821008][ T5720] usb 3-1: Manufacturer: syz [ 186.838995][ T5720] usb 3-1: SerialNumber: syz [ 186.951670][ T5720] usb 3-1: config 0 descriptor?? [ 187.336483][ T7500] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 188.159273][ T7476] loop5: detected capacity change from 0 to 7 [ 188.326145][ T7476] Dev loop5: unable to read RDB block 7 [ 188.356087][ T7476] loop5: unable to read partition table [ 188.376979][ T7476] loop5: partition table beyond EOD, truncated [ 188.424436][ T7476] loop_reread_partitions: partition scan of loop5 (þè¢) failed (rc=-5) [ 188.494532][ T5720] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 188.507151][ T29] audit: type=1400 audit(3933047797.051:589): avc: denied { read } for pid=7506 comm="syz.0.444" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 188.545529][ T5720] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 188.569053][ T29] audit: type=1400 audit(3933047797.051:590): avc: denied { open } for pid=7506 comm="syz.0.444" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 188.598156][ T5720] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 188.637915][ T5720] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 188.722171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.772162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.802150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.817076][ T5720] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 188.830476][ T5720] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 188.867817][ T5720] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 188.920567][ T5720] usb 3-1: USB disconnect, device number 4 [ 188.930894][ T29] audit: type=1800 audit(3933047797.521:591): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.440" name="bus" dev="ramfs" ino=15165 res=0 errno=0 [ 189.021955][ T7512] batman_adv: batadv0: Adding interface: macvtap1 [ 189.046740][ T7512] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.102518][ T7512] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 189.149746][ T29] audit: type=1400 audit(3933047797.741:592): avc: denied { mount } for pid=7517 comm="syz.4.448" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 189.222587][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 189.458141][ T7516] batman_adv: batadv0: Removing interface: macvtap1 [ 189.875206][ T7520] binder: 7519:7520 ioctl c0306201 0 returned -14 [ 190.947454][ T29] audit: type=1400 audit(3933047798.851:593): avc: denied { setopt } for pid=7522 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 190.978310][ T7518] bridge_slave_1: left allmulticast mode [ 191.014402][ T7518] bridge_slave_1: left promiscuous mode [ 191.032509][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.074238][ T7518] bridge_slave_0: left allmulticast mode [ 191.076513][ T29] audit: type=1400 audit(3933047799.671:594): avc: denied { setopt } for pid=7526 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.080048][ T7518] bridge_slave_0: left promiscuous mode [ 191.124178][ T7529] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 191.171749][ T29] audit: type=1400 audit(3933047799.711:595): avc: denied { getopt } for pid=7526 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.191928][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.271152][ T29] audit: type=1400 audit(3933047799.721:596): avc: denied { mounton } for pid=7526 comm="syz.1.451" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 191.325590][ T29] audit: type=1400 audit(3933047799.741:597): avc: denied { write } for pid=7526 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.370154][ T7533] trusted_key: syz.0.454 sent an empty control message without MSG_MORE. [ 192.053700][ T29] audit: type=1400 audit(3933047800.641:598): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 193.679210][ T7570] netlink: 80 bytes leftover after parsing attributes in process `syz.4.461'. [ 194.044927][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.066316][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.176297][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 194.176361][ T29] audit: type=1400 audit(3933047802.771:600): avc: denied { write } for pid=7571 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.212155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.214053][ T7573] ceph: No mds server is up or the cluster is laggy [ 194.227589][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 194.234133][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 194.482148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 194.819099][ T29] audit: type=1400 audit(3933047803.411:601): avc: denied { execute } for pid=7589 comm="syz.1.465" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 196.132511][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 196.133183][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 196.138828][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 196.145433][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 196.473737][ T7619] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 196.918795][ T29] audit: type=1400 audit(3933047805.511:602): avc: denied { write } for pid=7591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.139959][ T29] audit: type=1400 audit(3933047805.681:603): avc: denied { map } for pid=7617 comm="syz.3.471" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 197.220800][ T7622] macsec1: entered promiscuous mode [ 197.254973][ T7622] virt_wifi0: entered promiscuous mode [ 197.295901][ T29] audit: type=1400 audit(3933047805.831:604): avc: denied { ioctl } for pid=7617 comm="syz.3.471" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 197.326386][ T7624] ip6tnl0: Caught tx_queue_len zero misconfig [ 197.542942][ T29] audit: type=1400 audit(3933047806.131:605): avc: denied { write } for pid=7631 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.615595][ T35] tipc: Subscription rejected, illegal request [ 197.703766][ T7634] veth1: Caught tx_queue_len zero misconfig [ 197.739006][ T7634] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 197.762158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 198.485601][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 198.611026][ T7654] netlink: 'syz.4.476': attribute type 10 has an invalid length. [ 198.632936][ T7649] bridge0: port 1(dummy0) entered blocking state [ 198.639414][ T7649] bridge0: port 1(dummy0) entered disabled state [ 198.645956][ T7649] dummy0: entered allmulticast mode [ 198.652871][ T7649] dummy0: entered promiscuous mode [ 198.670117][ T7654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.476'. [ 198.737067][ T7654] bridge0: port 1(dummy0) entered blocking state [ 198.744375][ T7654] bridge0: port 1(dummy0) entered forwarding state [ 198.765756][ T7654] dummy0: left allmulticast mode [ 198.795244][ T7654] bridge0: port 1(dummy0) entered disabled state [ 198.814630][ T29] audit: type=1400 audit(3933047807.401:606): avc: denied { write } for pid=7638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.874691][ T7659] netlink: 'syz.2.479': attribute type 3 has an invalid length. [ 199.222820][ T7666] openvswitch: netlink: IP tunnel TTL not specified. [ 199.651750][ T29] audit: type=1400 audit(3933047808.241:607): avc: denied { write } for pid=7660 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.742152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 199.762608][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.798060][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.890781][ T7668] netlink: 'syz.0.482': attribute type 21 has an invalid length. [ 199.979630][ T7668] netlink: 156 bytes leftover after parsing attributes in process `syz.0.482'. [ 200.491040][ T7682] lo: Caught tx_queue_len zero misconfig [ 200.500457][ T7682] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 201.774485][ T7695] bridge1: entered promiscuous mode [ 201.780344][ T7695] bridge1: entered allmulticast mode [ 201.794898][ T7695] team0: Port device bridge1 added [ 201.805896][ T7700] bridge0: port 3(team0) entered blocking state [ 201.921715][ T7700] bridge0: port 3(team0) entered disabled state [ 201.995132][ T7700] team0: entered allmulticast mode [ 202.013481][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.032294][ T7700] team_slave_0: entered allmulticast mode [ 202.038169][ T5741] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 202.059209][ T7700] team_slave_1: entered allmulticast mode [ 202.066972][ T29] audit: type=1400 audit(3933047810.661:608): avc: denied { getopt } for pid=7698 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.072485][ T7700] team0: entered promiscuous mode [ 202.088472][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.103556][ T7700] team_slave_0: entered promiscuous mode [ 202.137035][ T29] audit: type=1400 audit(3933047810.711:609): avc: denied { write } for pid=7705 comm="syz.3.493" lport=35623 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 202.139057][ T7700] team_slave_1: entered promiscuous mode [ 202.234290][ T5741] usb 3-1: Using ep0 maxpacket: 32 [ 202.247849][ T29] audit: type=1400 audit(3933047810.721:610): avc: denied { setopt } for pid=7705 comm="syz.3.493" lport=35623 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 202.260082][ T5741] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 202.303895][ T7700] bridge0: port 3(team0) entered blocking state [ 202.310471][ T7700] bridge0: port 3(team0) entered forwarding state [ 202.312259][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.345159][ T5741] usb 3-1: Product: syz [ 202.360298][ T5741] usb 3-1: Manufacturer: syz [ 202.374665][ T5741] usb 3-1: SerialNumber: syz [ 202.421656][ T5741] usb 3-1: config 0 descriptor?? [ 202.473752][ T7712] syzkaller0: entered promiscuous mode [ 202.487875][ T7712] syzkaller0: entered allmulticast mode [ 202.668008][ T5741] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 202.695800][ T5741] airspy 3-1:0.0: Could not detect board [ 202.705992][ T5741] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 202.757318][ T5741] usb 3-1: USB disconnect, device number 5 [ 202.902238][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1045 jiffies old. [ 203.939760][ T29] audit: type=1400 audit(3933047812.531:611): avc: denied { mounton } for pid=7719 comm="syz.1.497" path="/file0" dev="autofs" ino=16167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 204.127360][ T29] audit: type=1400 audit(3933047812.721:612): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 204.296272][ T7724] can0: slcan on ttyS3. [ 204.381328][ T7732] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.498'. [ 205.905989][ T29] audit: type=1400 audit(3933047814.501:613): avc: denied { write } for pid=7734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.006764][ T7736] warning: `syz.1.501' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 206.079948][ T7724] can0 (unregistered): slcan off ttyS3. [ 206.103677][ T7738] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 206.113084][ T7738] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 206.122988][ T7738] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 206.167940][ T29] audit: type=1800 audit(3933047814.691:614): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.2.500" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 206.217915][ T29] audit: type=1400 audit(3933047814.701:615): avc: denied { firmware_load } for pid=7730 comm="syz.2.500" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 206.402194][ T29] audit: type=1400 audit(3933047814.711:616): avc: denied { write } for pid=7760 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.434040][ T29] audit: type=1400 audit(3933047814.721:617): avc: denied { firmware_load } for pid=7730 comm="syz.2.500" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 207.225855][ T7782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.508'. [ 207.235354][ T29] audit: type=1400 audit(3933047815.811:618): avc: denied { write } for pid=7779 comm="syz.4.507" name="functions" dev="configfs" ino=8459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.288614][ T7782] netlink: 59 bytes leftover after parsing attributes in process `syz.1.508'. [ 207.314771][ T29] audit: type=1400 audit(3933047815.871:619): avc: denied { write } for pid=7779 comm="syz.4.507" name="c.1" dev="configfs" ino=8466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.344779][ T7784] usbip-vudc usbip-vudc.0: gadget not bound [ 207.351034][ T7782] netlink: 59 bytes leftover after parsing attributes in process `syz.1.508'. [ 207.441650][ T29] audit: type=1400 audit(3933047816.031:620): avc: denied { write } for pid=7768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.627882][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 207.759517][ T29] audit: type=1400 audit(3933047816.351:621): avc: denied { write } for pid=7794 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.910826][ T29] audit: type=1400 audit(3933047816.501:622): avc: denied { getopt } for pid=7789 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.458279][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 208.675414][ T7813] binfmt_misc: register: failed to install interpreter file ./file1 [ 208.779251][ T7820] syzkaller0: entered promiscuous mode [ 208.779277][ T7820] syzkaller0: entered allmulticast mode [ 209.113379][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'. [ 211.626146][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 211.626162][ T29] audit: type=1400 audit(3933047820.221:624): avc: denied { write } for pid=7851 comm="syz.0.528" name="functions" dev="configfs" ino=8459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.642148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 211.707142][ T29] audit: type=1400 audit(3933047820.281:625): avc: denied { write } for pid=7851 comm="syz.0.528" name="c.1" dev="configfs" ino=8466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 211.741764][ T29] audit: type=1400 audit(3933047820.281:626): avc: denied { write } for pid=7851 comm="syz.0.528" name="c.1" dev="configfs" ino=8466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.064523][ T29] audit: type=1400 audit(3933047820.661:627): avc: denied { read } for pid=7859 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.378112][ T29] audit: type=1400 audit(3933047820.971:628): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 213.019992][ T29] audit: type=1400 audit(3933047821.611:629): avc: denied { cmd } for pid=7879 comm="syz.3.539" path="socket:[16931]" dev="sockfs" ino=16931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 213.133786][ T29] audit: type=1400 audit(3933047821.731:630): avc: denied { getopt } for pid=7880 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.428329][ T29] audit: type=1400 audit(3933047823.021:631): avc: denied { ioctl } for pid=7899 comm="syz-executor" path="socket:[17428]" dev="sockfs" ino=17428 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.449586][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.492157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 214.522149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 214.542390][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.553280][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.568293][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.579813][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.985694][ T29] audit: type=1400 audit(3933047824.581:632): avc: denied { read } for pid=7924 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.491391][ T7935] syzkaller0: entered promiscuous mode [ 216.502394][ T7935] syzkaller0: entered allmulticast mode [ 216.517394][ T7935] tipc: Started in network mode [ 216.522876][ T7935] tipc: Node identity 56213d0e3e5e, cluster identity 4711 [ 216.533022][ T7935] tipc: Enabled bearer , priority 0 [ 216.544421][ T7934] tipc: Resetting bearer [ 216.584434][ T7934] tipc: Disabling bearer [ 216.682954][ T50] Bluetooth: hci1: command tx timeout [ 217.592024][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.617441][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.731134][ T7899] bridge_slave_0: entered allmulticast mode [ 217.770529][ T7899] bridge_slave_0: entered promiscuous mode [ 217.800105][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.822269][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.841292][ T7899] bridge_slave_1: entered allmulticast mode [ 217.860232][ T7899] bridge_slave_1: entered promiscuous mode [ 218.013403][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.046987][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.106065][ T29] audit: type=1400 audit(3933047826.701:633): avc: denied { ioctl } for pid=7956 comm="syz.3.558" path="socket:[17612]" dev="sockfs" ino=17612 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 218.153413][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 218.253386][ T7899] team0: Port device team_slave_0 added [ 218.281595][ T7899] team0: Port device team_slave_1 added [ 218.382500][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.400146][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.484502][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.536833][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.573789][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.668032][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.762329][ T5624] Bluetooth: hci1: command tx timeout [ 218.949752][ T7899] hsr_slave_0: entered promiscuous mode [ 218.956538][ T7899] hsr_slave_1: entered promiscuous mode [ 218.987065][ T7899] debugfs: 'hsr0' already exists in 'hsr' [ 219.009237][ T7899] Cannot create hsr debugfs directory [ 220.017086][ T29] audit: type=1800 audit(3933047828.611:634): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.559" name="bus" dev="ramfs" ino=17627 res=0 errno=0 [ 220.045088][ T7899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.121723][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.131953][ T7899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.202605][ T5624] Bluetooth: hci5: command 0x1003 tx timeout [ 220.206029][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.209715][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.283579][ T7899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.394735][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.408456][ T7899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.444756][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.513851][ T7974] bond1: (slave syz_tun): Removing an active aggregator [ 220.556917][ T7974] bond1: (slave syz_tun): Releasing backup interface [ 220.588281][ T7974] team0: Port device xfrm0 removed [ 220.601945][ T7974] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.775281][ T7974] team0: Mode changed to "loadbalance" [ 220.803230][ T7974] team0: Port device xfrm0 added [ 220.842374][ T50] Bluetooth: hci1: command tx timeout [ 220.899589][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.921804][ T7974] tipc: Enabling of bearer rejected, already enabled [ 220.958057][ T7983] sch_fq: defrate 4294967295 ignored. [ 220.997304][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.032352][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.039465][ T5903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.085154][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.092311][ T5903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.249989][ T7989] ip6_vti0: entered promiscuous mode [ 221.266096][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'. [ 221.652391][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 221.958867][ T29] audit: type=1400 audit(3933047830.551:635): avc: denied { write } for pid=8008 comm="syz.1.571" path="socket:[17343]" dev="sockfs" ino=17343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 222.458997][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.922702][ T5616] Bluetooth: hci1: command tx timeout [ 223.015776][ T8033] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 223.079799][ T29] audit: type=1400 audit(3933047831.671:636): avc: denied { write } for pid=8029 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.237115][ T7899] veth0_vlan: entered promiscuous mode [ 223.290136][ T7899] veth1_vlan: entered promiscuous mode [ 223.379484][ T7899] veth0_macvtap: entered promiscuous mode [ 223.401355][ T7899] veth1_macvtap: entered promiscuous mode [ 223.456787][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.500558][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.553431][ T1176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.570149][ T1176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.624213][ T5903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.713053][ T1176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.839908][ T29] audit: type=1400 audit(3933047832.431:637): avc: denied { write } for pid=8043 comm="syz.3.578" name="functions" dev="configfs" ino=8459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.875028][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.906422][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.965435][ T29] audit: type=1400 audit(3933047832.561:638): avc: denied { write } for pid=8043 comm="syz.3.578" name="uncompressed" dev="configfs" ino=18674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.014599][ T29] audit: type=1400 audit(3933047832.591:639): avc: denied { write } for pid=8043 comm="syz.3.578" name="header" dev="configfs" ino=18673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.036692][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.065065][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.128230][ T29] audit: type=1400 audit(3933047832.721:640): avc: denied { mounton } for pid=7899 comm="syz-executor" path="/root/syzkaller.JEbwIw/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 224.194733][ T29] audit: type=1400 audit(3933047832.751:641): avc: denied { mounton } for pid=7899 comm="syz-executor" path="/root/syzkaller.JEbwIw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 224.259219][ T29] audit: type=1400 audit(3933047832.781:642): avc: denied { mounton } for pid=7899 comm="syz-executor" path="/root/syzkaller.JEbwIw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 224.289699][ T29] audit: type=1400 audit(3933047832.831:643): avc: denied { mounton } for pid=7899 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 224.613242][ T5734] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 224.953932][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 224.964900][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.977620][ T5734] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 224.987550][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.996566][ T5734] usb 3-1: Product: syz [ 225.000934][ T5734] usb 3-1: Manufacturer: syz [ 225.006913][ T5734] usb 3-1: SerialNumber: syz [ 225.349662][ T29] audit: type=1400 audit(3933047833.941:644): avc: denied { listen } for pid=8072 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.358660][ T8073] netlink: 'syz.5.587': attribute type 2 has an invalid length. [ 225.441742][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.482646][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.526961][ T5734] usb 3-1: unit 0 not found! [ 225.791810][ T5734] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.851409][ T5734] usb 3-1: unit 0 not found! [ 225.880700][ T29] audit: type=1400 audit(3933047834.471:645): avc: denied { bind } for pid=8075 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.915148][ T5734] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 225.983240][ T5734] usb 3-1: unit 0 not found! [ 225.993742][ T29] audit: type=1400 audit(3933047834.481:646): avc: denied { connect } for pid=8075 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 226.238032][ T8080] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 226.245664][ T5734] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 226.345448][ T5734] usb 3-1: USB disconnect, device number 6 [ 226.592925][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 227.317604][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.362934][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.591295][ T8101] bridge1: entered promiscuous mode [ 227.606832][ T8101] bridge1: entered allmulticast mode [ 227.625361][ T8101] team0: Device bridge1 is of different type [ 227.942319][ T5805] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 228.003489][ T5733] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 228.167084][ T5733] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.187403][ T5733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 228.198822][ T5733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 228.215999][ T5733] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 228.225596][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.233912][ T5733] usb 6-1: Product: syz [ 228.238395][ T5733] usb 6-1: Manufacturer: syz [ 228.243211][ T5733] usb 6-1: SerialNumber: syz [ 228.253618][ T5733] usb 6-1: config 0 descriptor?? [ 228.266177][ T8106] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 228.418075][ T5733] rc_core: IR keymap rc-streamzap not found [ 228.428575][ T5733] Registered IR keymap rc-empty [ 228.440711][ T5733] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 228.457617][ T5733] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 228.495579][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.539600][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.725426][ T5805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.769341][ T10] usb 6-1: USB disconnect, device number 2 [ 228.773911][ T5805] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 228.801682][ T5805] usb 2-1: can't read configurations, error -71 [ 228.960005][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 228.960023][ T29] audit: type=1400 audit(3933047837.551:656): avc: denied { write } for pid=8120 comm="syz.3.601" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 229.048280][ T8124] sit1: entered promiscuous mode [ 229.114749][ T29] audit: type=1400 audit(3933047837.711:657): avc: denied { bind } for pid=8127 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.137557][ T8128] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 229.182755][ T8128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.219118][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.232473][ T8128] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 229.243698][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.251684][ T8128] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 229.293870][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.303242][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.312644][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.321845][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.342329][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.440056][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.462524][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.484491][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.510210][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 229.549743][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 230.092383][ T46] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 230.303751][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 230.394716][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.480206][ T46] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 230.548522][ T46] usb 6-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 230.626360][ T46] usb 6-1: Product: syz [ 230.670025][ T46] usb 6-1: Manufacturer: syz [ 230.807559][ T8151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.814837][ T8151] IPv6: NLM_F_CREATE should be set when creating new route [ 230.823637][ T8151] IPv6: NLM_F_CREATE should be set when creating new route [ 230.883430][ T46] usb 6-1: config 0 descriptor?? [ 230.895939][ T46] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 230.970528][ T8151] bridge1: entered promiscuous mode [ 231.414559][ T46] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 231.424933][ T46] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 231.843006][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.018471][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.029088][ T46] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 232.046402][ T46] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 232.057127][ T29] audit: type=1400 audit(3933047840.641:658): avc: denied { write } for pid=8164 comm="syz.0.615" name="dynamic_events" dev="tracefs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 232.092227][ T46] usb 2-1: config 63 has no interface number 0 [ 232.107212][ T46] usb 2-1: config 63 interface 66 has no altsetting 0 [ 232.119756][ T29] audit: type=1400 audit(3933047840.681:659): avc: denied { open } for pid=8164 comm="syz.0.615" path="/125/tracing/dynamic_events" dev="tracefs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 232.141109][ T8165] Line length is too long: Should be less than 4094 [ 232.174787][ T46] usb 2-1: string descriptor 0 read error: -22 [ 232.181135][ T46] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 232.199478][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.245265][ T46] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 232.262558][ T46] uvcvideo 2-1:63.66: Found UVC 0.07 device (174f:8acf) [ 232.281003][ T46] uvcvideo 2-1:63.66: No valid video chain found. [ 232.503958][ T10] usb 2-1: USB disconnect, device number 7 [ 232.679047][ T5734] usb 6-1: USB disconnect, device number 3 [ 232.979608][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.987211][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.156412][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.188066][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.519478][ T5734] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 233.582811][ T35] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.761590][ T8194] nftables ruleset with unbound chain [ 234.089198][ T5903] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.313084][ T5890] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.331047][ T29] audit: type=1400 audit(3933047842.921:660): avc: denied { getopt } for pid=8190 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.441489][ T5890] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.559076][ T8198] __nla_validate_parse: 45 callbacks suppressed [ 234.559095][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 234.575590][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 234.586751][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.602472][ T5734] usb 4-1: config 0 has no interfaces? [ 234.618824][ T5734] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 234.653264][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.676637][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.686131][ T5734] usb 4-1: Product: syz [ 234.711100][ T5734] usb 4-1: Manufacturer: syz [ 234.778427][ T5734] usb 4-1: SerialNumber: syz [ 234.812291][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.828798][ T29] audit: type=1400 audit(3933047843.411:661): avc: denied { append } for pid=8201 comm="syz.2.629" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 235.057479][ T5734] usb 4-1: config 0 descriptor?? [ 235.083742][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.164097][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.178389][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.209214][ T8198] SELinux: syz.0.627 (8198) wrote to user. This is no longer supported. [ 235.242470][ T5741] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 235.290152][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.306856][ T8205] kvm: kvm [8201]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffffffffffffffff [ 235.375323][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.423966][ T5741] usb 6-1: Using ep0 maxpacket: 32 [ 235.467236][ T5741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 235.492742][ T5741] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 235.554119][ T5741] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 235.577826][ T29] audit: type=1400 audit(3933047844.161:662): avc: denied { getopt } for pid=8211 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.604316][ T5741] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 235.616621][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.626597][ T5741] usb 6-1: Product: syz [ 235.631056][ T5741] usb 6-1: Manufacturer: syz [ 235.632047][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.642174][ T5741] usb 6-1: SerialNumber: syz [ 235.935570][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 236.206540][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 236.217469][ T10] usb 3-1: config 0 interface 0 altsetting 22 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 236.233364][ T29] audit: type=1400 audit(3933047844.821:663): avc: denied { mounton } for pid=8203 comm="syz.5.630" path=2F362FE91F7189591E9233614B dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 236.273021][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.284802][ T5741] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 236.305641][ T10] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 236.321408][ T5741] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 236.338309][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.376454][ T10] usb 3-1: config 0 descriptor?? [ 236.573172][ T5741] usb 6-1: USB disconnect, device number 4 [ 236.749950][ T8223] binder: 8222:8223 ioctl c0306201 0 returned -14 [ 236.781282][ T8223] binder: 8222:8223 ioctl c0306201 0 returned -14 [ 236.859845][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 236.894521][ T8223] kvm: pic: level sensitive irq not supported [ 236.913158][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 236.969337][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 237.011123][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 237.040873][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 237.076798][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 237.105381][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 237.129668][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 237.157732][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 237.177745][ T10] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 237.223581][ T10] zydacron 0003:13EC:0006.0002: hidraw0: USB HID v0.06 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 237.299216][ T10] usb 3-1: USB disconnect, device number 7 [ 237.435963][ T8233] fido_id[8233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 237.480494][ T35] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 237.515759][ T35] bridge1 (unregistering): left promiscuous mode [ 237.533462][ T35] bridge1 (unregistering): left allmulticast mode [ 237.616864][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.633795][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.676069][ T8206] ================================================================== [ 237.684147][ T8206] BUG: KASAN: use-after-free in release_card_device+0x17d/0x1a0 [ 237.691784][ T8206] Read of size 1 at addr ffff88814a70c909 by task syz.5.630/8206 [ 237.699498][ T8206] [ 237.701811][ T8206] CPU: 0 UID: 0 PID: 8206 Comm: syz.5.630 Not tainted syzkaller #0 PREEMPT(full) [ 237.701833][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 237.701845][ T8206] Call Trace: [ 237.701851][ T8206] [ 237.701858][ T8206] dump_stack_lvl+0x100/0x190 [ 237.701884][ T8206] print_report+0x13d/0x4b0 [ 237.701908][ T8206] ? __virt_addr_valid+0x239/0x430 [ 237.701932][ T8206] ? release_card_device+0x17d/0x1a0 [ 237.701948][ T8206] kasan_report+0xdf/0x1c0 [ 237.701971][ T8206] ? release_card_device+0x17d/0x1a0 [ 237.701990][ T8206] release_card_device+0x17d/0x1a0 [ 237.702007][ T8206] ? __pfx_release_card_device+0x10/0x10 [ 237.702023][ T8206] device_release+0xd2/0x270 [ 237.702040][ T8206] kobject_put+0x1f7/0x640 [ 237.702066][ T8206] put_device+0x1f/0x30 [ 237.702081][ T8206] snd_card_file_remove+0x38f/0x560 [ 237.702101][ T8206] snd_pcm_oss_release+0x217/0x300 [ 237.702118][ T8206] ? __pfx_snd_disconnect_release+0x10/0x10 [ 237.702135][ T8206] __fput+0x3ff/0xb50 [ 237.702160][ T8206] task_work_run+0x150/0x240 [ 237.702180][ T8206] ? __pfx_task_work_run+0x10/0x10 [ 237.702200][ T8206] ? do_raw_spin_unlock+0x145/0x1e0 [ 237.702225][ T8206] do_exit+0x951/0x2ae0 [ 237.702253][ T8206] ? __pfx_do_exit+0x10/0x10 [ 237.702278][ T8206] ? do_raw_spin_lock+0x128/0x260 [ 237.702301][ T8206] ? find_held_lock+0x2b/0x80 [ 237.702316][ T8206] ? get_signal+0x7e0/0x21e0 [ 237.702344][ T8206] do_group_exit+0xd5/0x2a0 [ 237.702361][ T8206] get_signal+0x1ec7/0x21e0 [ 237.702387][ T8206] ? __pfx_get_signal+0x10/0x10 [ 237.702410][ T8206] ? do_futex+0x190/0x440 [ 237.702435][ T8206] arch_do_signal_or_restart+0x91/0x7e0 [ 237.702455][ T8206] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 237.702482][ T8206] exit_to_user_mode_loop+0x139/0x6f0 [ 237.702504][ T8206] ? rcu_is_watching+0x12/0xc0 [ 237.702530][ T8206] do_syscall_64+0x666/0x870 [ 237.702550][ T8206] ? clear_bhb_loop+0x40/0x90 [ 237.702570][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.702588][ T8206] RIP: 0033:0x7f883d59e019 [ 237.702617][ T8206] Code: Unable to access opcode bytes at 0x7f883d59dfef. [ 237.702625][ T8206] RSP: 002b:00007f883e4a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 237.702646][ T8206] RAX: fffffffffffffe00 RBX: 00007f883d825fa8 RCX: 00007f883d59e019 [ 237.702658][ T8206] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f883d825fa8 [ 237.702669][ T8206] RBP: 00007f883d825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 237.702680][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.702691][ T8206] R13: 00007f883d826038 R14: 00007fff416628d0 R15: 00007fff416629b8 [ 237.702710][ T8206] [ 237.702716][ T8206] [ 237.957964][ T8206] The buggy address belongs to the physical page: [ 237.964351][ T8206] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14a70c [ 237.973191][ T8206] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 237.980379][ T8206] raw: 057ff00000000000 ffff8880b8541800 ffff8880b8541800 0000000000000000 [ 237.988947][ T8206] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 237.997505][ T8206] page dumped because: kasan: bad access detected [ 238.003906][ T8206] page_owner tracks the page as freed [ 238.009249][ T8206] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 17137786410, free_ts 237675753363 [ 238.026427][ T8206] post_alloc_hook+0xfd/0x120 [ 238.031095][ T8206] get_page_from_freelist+0xf48/0x3530 [ 238.036534][ T8206] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 238.042408][ T8206] alloc_pages_mpol+0x1fb/0x540 [ 238.047243][ T8206] ___kmalloc_large_node+0xe5/0x120 [ 238.052428][ T8206] __kmalloc_large_node_noprof+0x1c/0x70 [ 238.058045][ T8206] __kmalloc_node_track_caller_noprof+0x5ac/0x830 [ 238.064442][ T8206] __devres_alloc_node+0x6e/0x1e0 [ 238.069452][ T8206] snd_devm_card_new+0x9d/0x190 [ 238.074283][ T8206] loopback_probe+0x140/0x11a0 [ 238.079032][ T8206] platform_probe+0x106/0x1d0 [ 238.083689][ T8206] really_probe+0x241/0xa60 [ 238.088178][ T8206] __driver_probe_device+0x20e/0x450 [ 238.093445][ T8206] driver_probe_device+0x4a/0x140 [ 238.098453][ T8206] __device_attach_driver+0x1df/0x320 [ 238.103808][ T8206] bus_for_each_drv+0x159/0x1e0 [ 238.108641][ T8206] page last free pid 8220 tgid 8219 stack trace: [ 238.114941][ T8206] __free_frozen_pages+0x79f/0x1090 [ 238.120127][ T8206] release_nodes+0xc3/0x120 [ 238.124617][ T8206] devres_release_all+0x112/0x180 [ 238.129630][ T8206] device_unbind_cleanup+0x81/0x270 [ 238.134812][ T8206] device_release_driver_internal+0x4c4/0x620 [ 238.140864][ T8206] unbind_store+0xf8/0x110 [ 238.145259][ T8206] drv_attr_store+0x74/0xb0 [ 238.149754][ T8206] sysfs_kf_write+0xf2/0x150 [ 238.154334][ T8206] kernfs_fop_write_iter+0x3e0/0x5f0 [ 238.159606][ T8206] vfs_write+0x6ac/0x1050 [ 238.163927][ T8206] ksys_write+0x12a/0x250 [ 238.168245][ T8206] do_syscall_64+0x115/0x870 [ 238.172819][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.178694][ T8206] [ 238.180996][ T8206] Memory state around the buggy address: [ 238.186614][ T8206] ffff88814a70c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.194655][ T8206] ffff88814a70c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.202696][ T8206] >ffff88814a70c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.210733][ T8206] ^ [ 238.215037][ T8206] ffff88814a70c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.223081][ T8206] ffff88814a70ca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 238.231117][ T8206] ================================================================== [ 238.272425][ T29] audit: type=1400 audit(3933047846.851:664): avc: denied { read } for pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 238.294939][ T8206] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 238.302143][ T8206] CPU: 1 UID: 0 PID: 8206 Comm: syz.5.630 Not tainted syzkaller #0 PREEMPT(full) [ 238.311333][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 238.321378][ T8206] Call Trace: [ 238.324638][ T8206] [ 238.327554][ T8206] dump_stack_lvl+0x100/0x190 [ 238.332222][ T8206] vpanic+0x552/0x970 [ 238.336189][ T8206] ? __pfx_vpanic+0x10/0x10 [ 238.340677][ T8206] ? release_card_device+0x17d/0x1a0 [ 238.345947][ T8206] panic+0xd1/0xe0 [ 238.349649][ T8206] ? __pfx_panic+0x10/0x10 [ 238.354062][ T8206] ? release_card_device+0x17d/0x1a0 [ 238.359346][ T8206] ? preempt_schedule_common+0x42/0xc0 [ 238.364807][ T8206] ? check_panic_on_warn+0x1f/0x90 [ 238.369913][ T8206] check_panic_on_warn.cold+0x19/0x34 [ 238.375289][ T8206] end_report.part.0+0x3a/0x90 [ 238.380054][ T8206] kasan_report.cold+0xe/0x18 [ 238.384725][ T8206] ? release_card_device+0x17d/0x1a0 [ 238.390000][ T8206] release_card_device+0x17d/0x1a0 [ 238.395095][ T8206] ? __pfx_release_card_device+0x10/0x10 [ 238.400709][ T8206] device_release+0xd2/0x270 [ 238.405292][ T8206] kobject_put+0x1f7/0x640 [ 238.409706][ T8206] put_device+0x1f/0x30 [ 238.413848][ T8206] snd_card_file_remove+0x38f/0x560 [ 238.419049][ T8206] snd_pcm_oss_release+0x217/0x300 [ 238.424161][ T8206] ? __pfx_snd_disconnect_release+0x10/0x10 [ 238.430048][ T8206] __fput+0x3ff/0xb50 [ 238.434033][ T8206] task_work_run+0x150/0x240 [ 238.438620][ T8206] ? __pfx_task_work_run+0x10/0x10 [ 238.443721][ T8206] ? do_raw_spin_unlock+0x145/0x1e0 [ 238.448912][ T8206] do_exit+0x951/0x2ae0 [ 238.453065][ T8206] ? __pfx_do_exit+0x10/0x10 [ 238.457650][ T8206] ? do_raw_spin_lock+0x128/0x260 [ 238.462664][ T8206] ? find_held_lock+0x2b/0x80 [ 238.467325][ T8206] ? get_signal+0x7e0/0x21e0 [ 238.471911][ T8206] do_group_exit+0xd5/0x2a0 [ 238.476399][ T8206] get_signal+0x1ec7/0x21e0 [ 238.480897][ T8206] ? __pfx_get_signal+0x10/0x10 [ 238.485745][ T8206] ? do_futex+0x190/0x440 [ 238.490085][ T8206] arch_do_signal_or_restart+0x91/0x7e0 [ 238.495639][ T8206] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 238.501792][ T8206] exit_to_user_mode_loop+0x139/0x6f0 [ 238.507161][ T8206] ? rcu_is_watching+0x12/0xc0 [ 238.511925][ T8206] do_syscall_64+0x666/0x870 [ 238.516509][ T8206] ? clear_bhb_loop+0x40/0x90 [ 238.521180][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.527065][ T8206] RIP: 0033:0x7f883d59e019 [ 238.531470][ T8206] Code: Unable to access opcode bytes at 0x7f883d59dfef. [ 238.538477][ T8206] RSP: 002b:00007f883e4a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 238.546877][ T8206] RAX: fffffffffffffe00 RBX: 00007f883d825fa8 RCX: 00007f883d59e019 [ 238.554836][ T8206] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f883d825fa8 [ 238.562797][ T8206] RBP: 00007f883d825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 238.570753][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.578712][ T8206] R13: 00007f883d826038 R14: 00007fff416628d0 R15: 00007fff416629b8 [ 238.586674][ T8206] [ 238.589982][ T8206] Kernel Offset: disabled [ 238.594314][ T8206] Rebooting in 86400 seconds..