last executing test programs:
6m4.620246768s ago: executing program 2 (id=1219):
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x68c0, 0x4646, 0x4, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74)
syz_io_uring_setup(0x497, &(0x7f0000002340)={0x0, 0x7076, 0x0, 0x14, 0x129, 0x0, r1}, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x8800)
syz_io_uring_setup(0x4fc, &(0x7f0000000100)={0x0, 0xc6bc, 0x8000, 0x3, 0x1df}, &(0x7f00000023c0), 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0)
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x80)
syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0)
6m1.258283935s ago: executing program 2 (id=1228):
syz_io_uring_submit(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresuid(0x0, 0xee00, 0x0)
r4 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_open_dev$cec(0x0, 0x0, 0x80)
ioctl$CEC_RECEIVE(r5, 0xc0386106, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, 0x0, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x800)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
5m59.323990512s ago: executing program 2 (id=1230):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x5b04, 0x0)
write$char_usb(r0, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
5m57.834689836s ago: executing program 2 (id=1233):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f00000009c0)="0000fc00607bef8eb2bafd0e6083d21ef8b1c6e9ed7ad8f2dd5889e21bd50ef4ae3fdaf23bae3824f4022d14adcb8e43b7fdefe2bb594551881d793d650d0b404ec21499a841e08e2137ddff0c58efc9", 0x50, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, &(0x7f00000001c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
5m56.631278167s ago: executing program 2 (id=1235):
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$evdev(0x0, 0x0, 0x60000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
5m54.692896356s ago: executing program 2 (id=1242):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4808}, 0x880)
connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x2, 0x2, 0xbb, 0x8, 0x18, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x34ff}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x4d4, 0xf2, 0x3, 0x76, 0x1, 0x1}, @sadb_address={0x5, 0x7, 0x33, 0x80, 0x0, @in6={0xa, 0x4e20, 0x7, @empty, 0x1000}}, @sadb_lifetime={0x4, 0x2, 0xff, 0xbb, 0x7fff, 0x7}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0xc0}}, 0x5)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'xfrm0\x00', 0x100}, 0x18)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
5m53.307560193s ago: executing program 32 (id=1242):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4808}, 0x880)
connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x2, 0x2, 0xbb, 0x8, 0x18, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x34ff}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x4d4, 0xf2, 0x3, 0x76, 0x1, 0x1}, @sadb_address={0x5, 0x7, 0x33, 0x80, 0x0, @in6={0xa, 0x4e20, 0x7, @empty, 0x1000}}, @sadb_lifetime={0x4, 0x2, 0xff, 0xbb, 0x7fff, 0x7}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0xc0}}, 0x5)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'xfrm0\x00', 0x100}, 0x18)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
6.928140949s ago: executing program 3 (id=2118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)={0x5c, r1, 0x1, 0x0, 0x40000000, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x5c}}, 0x20000010)
6.343647096s ago: executing program 3 (id=2121):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x7, 0x7, {0x7, 0x9, "64ac59c019"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
4.997007334s ago: executing program 4 (id=2127):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x5c89}]}}}}}}}}, 0x0)
4.869438677s ago: executing program 4 (id=2128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x5c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1342, 0x1, 0x2, 0x0, {0x9, 0x2, 0x0, 0x9}, 0x300, 0x800, 0xf7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850)
4.788919043s ago: executing program 4 (id=2129):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = socket$igmp6(0xa, 0x3, 0x2)
mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1000, &(0x7f0000000240)={0x20006b, 0x0, 0x120000}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000919}, 0xc4b7bac946ebace2)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791", 0x6b}, {&(0x7f0000000500)="12109e71143949c567756f564b826216827f15e1560cb5d1e06c0507f98c804b296299bb95ae1ede20edbf342ba39983366f6dd693d9b82c24cd55a1054a945f8b22dc3d15488ce5954ff2742385d678b423f0963074e350d1a335d4f5ffa71e3e2daf3813ecec6d3b79565f73", 0x6d}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
4.152698099s ago: executing program 1 (id=2131):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0xfd}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x3, 0xb, 0x0, 0x100, 0x8000000000020001, 0x0, r2})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150042, r2})
3.979211262s ago: executing program 1 (id=2133):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1)
3.857448071s ago: executing program 4 (id=2135):
r0 = gettid()
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
tkill(r0, 0x7)
3.644491465s ago: executing program 1 (id=2136):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = fcntl$getown(r1, 0x9)
ptrace$getsig(0x4202, r6, 0x7, &(0x7f00000002c0))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)
socket$packet(0x11, 0x3, 0x300)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
3.633187099s ago: executing program 4 (id=2137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000007ffffffffffffaaaaaaaaaabb0800450000290001e0000001"], 0x3e)
3.496013813s ago: executing program 5 (id=2139):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x3)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000)
epoll_create1(0x80000)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x80000001})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000040)={{@host, 0x80000000}, 0xb, 0x1, 0x5, 0xfffffff5})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340))
chdir(0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
2.958114541s ago: executing program 1 (id=2140):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
write$proc_mixer(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4c494e453120274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202743442043617074757265272030303030303030303030fc3030303030303030300a494741494e2027436170747572653030303030303030303030303014a06bb5bf4d6173746572"], 0x178)
dup3(r1, r0, 0x0)
2.445067601s ago: executing program 1 (id=2141):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0)
2.406005625s ago: executing program 3 (id=2143):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x11, 0x0, 0x0)
2.262842581s ago: executing program 4 (id=2145):
pipe(0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f00000000c0)={0x40, 0x11, 0x5, {0x5, 0x24, "b1cb1a"}}, 0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x4e)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0xfffffffffffffff8)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
syslog(0x2, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
2.168906256s ago: executing program 1 (id=2147):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f00000003c0)=ANY=[])
2.160759531s ago: executing program 5 (id=2148):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
2.134547268s ago: executing program 3 (id=2149):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090030000300301200006000000001"], 0xfdef)
1.96095274s ago: executing program 5 (id=2150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r1, 0x1, 0xffffffff, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
1.876941015s ago: executing program 5 (id=2152):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)
1.775051956s ago: executing program 3 (id=2153):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r1, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
connect$ax25(r1, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
1.757803442s ago: executing program 5 (id=2154):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x2}}}}}}, 0x0)
1.6369849s ago: executing program 3 (id=2155):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRESOCT=r0], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
1.601910798s ago: executing program 5 (id=2157):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc3)
1.221212043s ago: executing program 0 (id=2159):
ioperm(0x0, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
1.219000606s ago: executing program 0 (id=2160):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x2)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
1.177613851s ago: executing program 0 (id=2161):
ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x9, 0x201, 0x2, {0x2, 0x0, 0x1e, 0x8}})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x40, 0xf, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
55.415668ms ago: executing program 0 (id=2162):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005840)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x20044000)
25.08183ms ago: executing program 0 (id=2163):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
pselect6(0x40, &(0x7f0000000200)={0x4, 0xfffffffffffffffd, 0x5, 0x4, 0x5, 0xb, 0x2, 0x2}, &(0x7f00000002c0)={0xf, 0x3, 0xdb53, 0x1, 0x8, 0x4, 0x434, 0x800}, 0x0, 0x0, 0x0)
0s ago: executing program 0 (id=2164):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x58c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x454, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x418, 0x1, [@m_simple={0x108, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '!_\x00'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x3, 0x20000000, 0x7f7, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0xfffffffffffffee8, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x5}}, @TCA_DEF_DATA={0x7, 0x3, '#/\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0x10}}]}, {0x69, 0x6, "5719917cb8105b22946505febf0e0aa3a6a3c936bc58c12ca05b5b72f14eca9f4839c0a627a1ee3e7c02d3627befa20be28fae39b4e5923ee1f2eaaa556383b018f71019599cb045e5c24c8d18f72a313727dd4becc4896b5eda9f91778d4f49d8c3b96412"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x10c, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x80, 0x5, 0x6, 0x3}}]}, {0xc5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2bc46895b3232929964907b2fcec2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90dc3f5fa19aa4"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x0, 0x2, {0x10000, 0x0, 0x6, 0x5, 0x2}}]}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x7, 0x2}}}}, @m_connmark={0xfc, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0xc9, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7fbb0c799f243d3827c1ff7060f9d56b77b6373212745232c734d9b45311b3eceeeb16cae2bfd77942d880d60c94991d896d67e1bf08b6ace5ba70ca5035668dfb4a725515d32b5a22a556f44e2b89730fe1a6221a70915b9bb25a23fd56b076c247e9e184eb4980fc772ce669d90a37e3bc81abb7f8109cf546a0bad7edec29176f5ad026bb5c011ec1e98fd9327bd98ce49db71100caf7d4a691394bef2ae5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xe8, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xd4, 0x6, [@m_mirred={0xd0, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x10000000, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1336e5ff, 0x9, 0x6, 0x0, 0x1}, 0x7}}]}, {0x41, 0x6, "216194e50e7faa7649d1c06839be3b59a7f1bb6c7fbd0e7344b4e9b561d4b406f4a7a0c7e6ebe935ccd4c10fd3ff9357cc52da0d5a0f390e738e2309da"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x58c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d6170"], 0x6c}}, 0x0)
r4 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
setreuid(0xffffffffffffffff, 0xee00)
keyctl$setperm(0x5, r4, 0x220c)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x27b, 0x8}, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50)
lsm_get_self_attr(0x67, 0x0, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
kernel console output (not intermixed with test programs):
=1, Product=2, SerialNumber=3
[ 638.867315][ T5861] usb 5-1: Product: syz
[ 638.872835][ T5861] usb 5-1: Manufacturer: syz
[ 638.877454][ T5861] usb 5-1: SerialNumber: syz
[ 638.920398][ T5861] usb 5-1: config 0 descriptor??
[ 639.368524][T11376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 639.380352][T11376] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 639.649411][ T54] Bluetooth: hci1: command tx timeout
[ 639.988632][ T5861] hid-generic 0000:0004:0009.0003: unknown main item tag 0x0
[ 640.034738][ T5861] hid-generic 0000:0004:0009.0003: unknown main item tag 0x0
[ 640.206970][ T5861] hid-generic 0000:0004:0009.0003: hidraw0: <UNKNOWN> HID v0.04 Device [syz0] on syz1
[ 640.476410][ T5858] usb 5-1: USB disconnect, device number 11
[ 640.578194][T11390] fido_id[11390]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 640.752096][T11273] chnl_net:caif_netlink_parms(): no params data found
[ 640.931284][T11401] fuse: Bad value for 'fd'
[ 641.560003][T11414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1271'.
[ 642.171890][T11389] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 643.377028][T11273] bridge0: port 1(bridge_slave_0) entered blocking state
[ 643.386759][T11273] bridge0: port 1(bridge_slave_0) entered disabled state
[ 643.395558][T11273] bridge_slave_0: entered allmulticast mode
[ 643.403171][T11273] bridge_slave_0: entered promiscuous mode
[ 643.435928][T11273] bridge0: port 2(bridge_slave_1) entered blocking state
[ 643.448666][T11273] bridge0: port 2(bridge_slave_1) entered disabled state
[ 643.456301][T11273] bridge_slave_1: entered allmulticast mode
[ 643.466519][T11273] bridge_slave_1: entered promiscuous mode
[ 643.707360][T11273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 643.783427][ T1134] hsr_slave_0: left promiscuous mode
[ 643.791659][ T1134] hsr_slave_1: left promiscuous mode
[ 643.878147][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 643.887754][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 643.895221][ T30] kauditd_printk_skb: 18 callbacks suppressed
[ 643.895234][ T30] audit: type=1400 audit(1746917501.503:1764): avc: denied { open } for pid=11436 comm="syz.4.1274" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 643.926985][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 643.935286][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 644.485737][ T1134] veth1_macvtap: left promiscuous mode
[ 644.497828][ T1134] veth0_macvtap: left promiscuous mode
[ 644.507490][ T1134] veth1_vlan: left promiscuous mode
[ 644.517162][ T1134] veth0_vlan: left promiscuous mode
[ 645.693536][ T1134] team0 (unregistering): Port device team_slave_1 removed
[ 645.734243][ T1134] team0 (unregistering): Port device team_slave_0 removed
[ 646.031152][T11273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 646.090900][T11460] lo speed is unknown, defaulting to 1000
[ 646.392789][T11273] team0: Port device team_slave_0 added
[ 646.467898][T11273] team0: Port device team_slave_1 added
[ 647.610443][ T30] audit: type=1400 audit(1746917504.313:1765): avc: denied { accept } for pid=11466 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 649.973194][T11273] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 649.980471][T11273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 650.009852][T11273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 650.094792][ T1134] IPVS: stop unused estimator thread 0...
[ 650.105006][T11273] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 650.145935][T11273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 650.298595][T11273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 650.477914][T11490] random: crng reseeded on system resumption
[ 650.581000][T11273] hsr_slave_0: entered promiscuous mode
[ 650.680869][T11273] hsr_slave_1: entered promiscuous mode
[ 650.729582][T11495] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 650.750123][T11273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 650.779369][T11273] Cannot create hsr debugfs directory
[ 651.700394][T11508] 9pnet_fd: Insufficient options for proto=fd
[ 653.162662][T11273] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 653.222580][T11273] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 653.350539][T11273] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 653.428793][T11540] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 653.537670][T11273] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 653.577829][ T30] audit: type=1400 audit(1746917511.183:1766): avc: denied { ioctl } for pid=11543 comm="syz.3.1292" path="socket:[28422]" dev="sockfs" ino=28422 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 654.301666][ T30] audit: type=1400 audit(1746917511.283:1767): avc: denied { write } for pid=11532 comm="syz.0.1291" path="socket:[29181]" dev="sockfs" ino=29181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 655.829425][T11558] lo speed is unknown, defaulting to 1000
[ 656.227113][T11273] 8021q: adding VLAN 0 to HW filter on device bond0
[ 656.600037][ T30] audit: type=1400 audit(1746917514.203:1768): avc: denied { write } for pid=11561 comm="syz.4.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 656.901913][ T30] audit: type=1400 audit(1746917514.203:1769): avc: denied { override_creds } for pid=11561 comm="syz.4.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 657.397832][T11273] 8021q: adding VLAN 0 to HW filter on device team0
[ 657.942701][T11570] ceph: No mds server is up or the cluster is laggy
[ 658.247846][ T10] libceph: connect (1)[c::]:6789 error -101
[ 658.279204][ T10] libceph: mon0 (1)[c::]:6789 connect error
[ 658.736554][ T10] libceph: connect (1)[c::]:6789 error -101
[ 658.814404][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state
[ 658.821510][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 658.843065][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state
[ 658.850234][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 658.858020][ T10] libceph: mon0 (1)[c::]:6789 connect error
[ 659.276501][T11588] fuse: Bad value for 'group_id'
[ 659.281680][T11588] fuse: Bad value for 'group_id'
[ 659.302893][T11588] overlayfs: conflicting options: userxattr,verity=require
[ 659.385979][ T30] audit: type=1400 audit(1746917516.993:1770): avc: denied { setopt } for pid=11582 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 660.111869][ T30] audit: type=1400 audit(1746917517.723:1771): avc: denied { bind } for pid=11593 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 660.727318][T11602] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[11602]
[ 661.725820][T11609] syz.4.1304 (11609): drop_caches: 2
[ 661.987643][T11609] syz.4.1304 (11609): drop_caches: 2
[ 662.084076][T11609] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 663.816242][T11273] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 665.089954][T11640] lo speed is unknown, defaulting to 1000
[ 666.157075][T11273] veth0_vlan: entered promiscuous mode
[ 666.215545][T11273] veth1_vlan: entered promiscuous mode
[ 666.334556][T11273] veth0_macvtap: entered promiscuous mode
[ 666.351424][T11273] veth1_macvtap: entered promiscuous mode
[ 666.883171][T11273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 666.909602][T11273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 666.938578][T11273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 666.968945][T11273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 667.000285][T11273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 667.028549][T11273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 667.928899][T11273] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 668.045019][T11273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 669.626626][T11273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 669.726438][T11273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 670.040251][T11273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 670.160174][T11273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 670.291866][T11273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 670.401301][T11273] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 670.730558][T11273] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 670.743858][T11273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 670.752634][T11273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 670.761516][T11273] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 670.840280][T10950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 670.899492][T10950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 670.981371][ T6105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 670.989233][ T6105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 671.103145][ T30] audit: type=1400 audit(1746917528.713:1772): avc: denied { mounton } for pid=11273 comm="syz-executor" path="/root/syzkaller.VRfx4N/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 671.175927][T11703] random: crng reseeded on system resumption
[ 671.209410][ T30] audit: type=1400 audit(1746917528.713:1773): avc: denied { mounton } for pid=11273 comm="syz-executor" path="/root/syzkaller.VRfx4N/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 671.237773][ T30] audit: type=1400 audit(1746917528.783:1774): avc: denied { mount } for pid=11273 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 671.262077][ T30] audit: type=1400 audit(1746917528.783:1775): avc: denied { mounton } for pid=11273 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 673.902070][T11731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1243'.
[ 674.337758][T11743] 9pnet_fd: Insufficient options for proto=fd
[ 674.400029][ T30] audit: type=1400 audit(1746917531.973:1776): avc: denied { setattr } for pid=11742 comm="syz.1.1323" name="NETLINK" dev="sockfs" ino=30756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 674.596447][T11747] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1322'.
[ 674.931128][T11748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 676.064625][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'.
[ 677.877872][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1332'.
[ 677.896122][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1332'.
[ 677.912727][T11786] netlink: 'syz.5.1332': attribute type 3 has an invalid length.
[ 678.210551][ T30] audit: type=1400 audit(1746917535.823:1777): avc: denied { mount } for pid=11789 comm="syz.1.1333" name="/" dev="autofs" ino=30258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 679.602032][T11805] mkiss: ax0: crc mode is auto.
[ 680.107397][ T30] audit: type=1400 audit(1746917537.703:1778): avc: denied { map } for pid=11789 comm="syz.1.1333" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 680.259154][ T30] audit: type=1400 audit(1746917537.703:1779): avc: denied { execute } for pid=11789 comm="syz.1.1333" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 681.732071][T11822] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 682.169569][ T30] audit: type=1400 audit(1746917539.673:1780): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[ 682.585816][T11832] 9pnet_fd: Insufficient options for proto=fd
[ 682.841403][T10024] Bluetooth: hci5: command 0x1003 tx timeout
[ 682.869518][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 683.916946][T11853] fuse: Bad value for 'fd'
[ 684.212809][T11859] lo speed is unknown, defaulting to 1000
[ 684.218873][T11859] lo speed is unknown, defaulting to 1000
[ 684.228016][T11859] lo speed is unknown, defaulting to 1000
[ 684.284093][T11859] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 684.705794][T11859] lo speed is unknown, defaulting to 1000
[ 684.712343][T11859] lo speed is unknown, defaulting to 1000
[ 684.719741][T11859] lo speed is unknown, defaulting to 1000
[ 684.729428][T11859] lo speed is unknown, defaulting to 1000
[ 684.735864][T11859] lo speed is unknown, defaulting to 1000
[ 684.770859][T11861] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 685.375678][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 685.382327][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 685.470884][T11877] /dev/nullb0: Can't lookup blockdev
[ 687.379470][T11892] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1354'.
[ 688.563196][T11909] syz.4.1357 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 688.944739][T11910] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1355'.
[ 692.389922][T11941] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 692.399914][T11941] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 692.650014][T11693] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 692.750292][T11943] pim6reg: entered allmulticast mode
[ 692.876439][T11693] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 692.888086][T11693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 692.902486][T11693] usb 2-1: Product: syz
[ 692.955108][T11693] usb 2-1: Manufacturer: syz
[ 692.973568][T11693] usb 2-1: SerialNumber: syz
[ 693.308779][T11956] block device autoloading is deprecated and will be removed.
[ 693.320005][T11956] syz.5.1366: attempt to access beyond end of device
[ 693.320005][T11956] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 694.037837][T11693] usb 2-1: config 0 descriptor??
[ 694.396472][ T30] audit: type=1800 audit(1746917551.963:1781): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1363" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[ 694.801407][T11963] lo speed is unknown, defaulting to 1000
[ 694.817720][T11963] lo speed is unknown, defaulting to 1000
[ 697.300838][T11693] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 697.785574][T11975] syz.4.1369 (11975): drop_caches: 2
[ 697.815759][T11975] syz.4.1369 (11975): drop_caches: 2
[ 698.526115][T11693] usb 2-1: USB disconnect, device number 10
[ 700.166543][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'.
[ 700.571332][T11997] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 703.443355][T12024] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 703.593497][T12027] siw: device registration error -23
[ 704.079364][T12028] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 706.419375][ T30] audit: type=1326 audit(1746917563.973:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 706.495027][ T30] audit: type=1326 audit(1746917563.973:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 706.521201][ T30] audit: type=1326 audit(1746917563.973:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 706.651760][ T30] audit: type=1326 audit(1746917563.973:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 706.675742][ T30] audit: type=1326 audit(1746917563.973:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 707.139685][ T30] audit: type=1326 audit(1746917563.973:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 707.177386][ T30] audit: type=1326 audit(1746917563.973:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 707.204362][ T30] audit: type=1326 audit(1746917563.973:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 707.239729][ T30] audit: type=1326 audit(1746917563.973:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 707.816873][ T30] audit: type=1326 audit(1746917563.973:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7fc00000
[ 708.340650][T12085] netlink: 'syz.5.1389': attribute type 3 has an invalid length.
[ 708.348453][T12085] netlink: 'syz.5.1389': attribute type 1 has an invalid length.
[ 709.556578][T12095] lo speed is unknown, defaulting to 1000
[ 709.565129][T12095] lo speed is unknown, defaulting to 1000
[ 711.697055][T12127] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1395'.
[ 712.193833][T12119] infiniband syz!: set down
[ 712.198605][T12119] infiniband syz!: added team_slave_0
[ 712.204934][T12119] syz!: rxe_create_cq: returned err = -12
[ 712.211126][T12119] infiniband syz!: Couldn't create ib_mad CQ
[ 712.217174][T12119] infiniband syz!: Couldn't open port 1
[ 712.232390][T12119] RDS/IB: syz!: added
[ 712.236654][T12119] smc: adding ib device syz! with port count 1
[ 712.243045][T12119] smc: ib device syz! port 1 has pnetid
[ 712.789793][ T30] kauditd_printk_skb: 58 callbacks suppressed
[ 712.789833][ T30] audit: type=1400 audit(1746917570.393:1850): avc: denied { read } for pid=12125 comm="syz.3.1396" dev="sockfs" ino=31394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 712.965961][ T30] audit: type=1400 audit(1746917570.403:1851): avc: denied { map } for pid=12125 comm="syz.3.1396" path="socket:[31408]" dev="sockfs" ino=31408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 714.207237][T12149] netlink: 'syz.3.1399': attribute type 5 has an invalid length.
[ 714.228761][T12149] ip6erspan0: entered promiscuous mode
[ 714.247718][T12149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'.
[ 714.377870][ T30] audit: type=1400 audit(1746917571.973:1852): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 717.321206][T12170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1404'.
[ 717.340961][T12170] netlink: 'syz.5.1404': attribute type 11 has an invalid length.
[ 717.349004][T12170] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1404'.
[ 717.664490][T12167] syz.1.1402: attempt to access beyond end of device
[ 717.664490][T12167] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 717.678308][T12167] SQUASHFS error: Failed to read block 0x0: -5
[ 717.684758][T12167] unable to read squashfs_super_block
[ 717.909023][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'.
[ 718.416157][T12189] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1408'.
[ 718.896606][T12191] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 720.089275][T12187] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 720.479328][ T5945] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 720.588320][ T30] audit: type=1400 audit(1746917578.193:1853): avc: denied { bind } for pid=12185 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 720.609259][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'.
[ 720.709379][ T5945] usb 2-1: Using ep0 maxpacket: 32
[ 720.717542][ T5945] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 721.369576][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 721.611429][ T5945] usb 2-1: config 0 descriptor??
[ 721.934463][ T5945] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 722.089434][ T5945] gspca_sq930x: reg_r 001f failed -32
[ 722.094924][ T5945] sq930x 2-1:0.0: probe with driver sq930x failed with error -32
[ 722.108310][T12216] lo speed is unknown, defaulting to 1000
[ 722.597725][T12216] lo speed is unknown, defaulting to 1000
[ 723.036098][T11693] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 723.559798][T11693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 723.607664][T12241] 9pnet_fd: Insufficient options for proto=fd
[ 723.628350][T11693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 724.179769][ T30] audit: type=1400 audit(1746917581.533:1854): avc: denied { ioctl } for pid=12230 comm="syz.3.1418" path="socket:[31580]" dev="sockfs" ino=31580 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 724.300926][ T5945] usb 2-1: USB disconnect, device number 11
[ 724.321251][T11693] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[ 724.361783][T11693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 724.418315][ T30] audit: type=1400 audit(1746917582.003:1855): avc: denied { watch_mount } for pid=12247 comm="syz.1.1421" path="/277" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 724.532709][T12250] 9pnet_fd: Insufficient options for proto=fd
[ 724.543978][T11693] usb 5-1: config 0 descriptor??
[ 725.284535][T12258] Lens B: ================= START STATUS =================
[ 725.293520][T12258] Lens B: Focus, Absolute: 0
[ 725.298898][T12258] Lens B: ================== END STATUS ==================
[ 725.335763][T12258] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 726.504184][T11693] usbhid 5-1:0.0: can't add hid device: -71
[ 726.511570][T11693] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 726.526734][T11693] usb 5-1: USB disconnect, device number 12
[ 726.970756][ T30] audit: type=1400 audit(1746917584.443:1856): avc: denied { getopt } for pid=12265 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 727.421564][T12271] binder: 12270:12271 ioctl c0306201 0 returned -14
[ 728.716418][ T30] audit: type=1400 audit(1746917586.283:1857): avc: granted { setsecparam } for pid=12279 comm="syz.4.1425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 730.020334][T12287] delete_channel: no stack
[ 731.851454][T12323] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1432'.
[ 731.959149][T12323] input: syz1 as /devices/virtual/input/input19
[ 735.360190][T12339] syz.1.1433 (12339): drop_caches: 2
[ 735.640433][ T30] audit: type=1400 audit(1746917593.153:1858): avc: denied { accept } for pid=12366 comm="syz.4.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 736.473716][T12379] overlayfs: failed to clone lowerpath
[ 736.958782][ T30] audit: type=1400 audit(1746917594.523:1859): avc: denied { map } for pid=12375 comm="syz.1.1443" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 737.403349][T12390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'.
[ 737.419377][ T30] audit: type=1326 audit(1746917595.003:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 737.579549][ T30] audit: type=1326 audit(1746917595.003:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 737.665412][T12396] rdma_rxe: rxe_newlink: failed to add lo
[ 738.103924][ T30] audit: type=1326 audit(1746917595.003:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 738.130745][ T30] audit: type=1326 audit(1746917595.003:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 738.155009][ T30] audit: type=1326 audit(1746917595.003:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 738.232857][ T30] audit: type=1326 audit(1746917595.003:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 738.286422][ T30] audit: type=1326 audit(1746917595.003:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 738.471882][ T30] audit: type=1326 audit(1746917595.003:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.1.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 738.710761][T12407] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 739.359433][T12415] delete_channel: no stack
[ 739.914679][T11303] udevd[11303]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 740.058873][T12422] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 740.068195][T12422] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 740.172050][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 740.517569][ T5910] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 740.531441][ T5910] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 740.551218][ T5910] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 740.653130][ T30] kauditd_printk_skb: 61 callbacks suppressed
[ 740.653143][ T30] audit: type=1326 audit(1746917598.253:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 740.660270][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 740.724318][ T30] audit: type=1326 audit(1746917598.253:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 740.801247][ T30] audit: type=1326 audit(1746917598.253:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 740.880279][T12421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 741.087103][ T30] audit: type=1326 audit(1746917598.253:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 741.091846][ T5910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 741.111279][ T30] audit: type=1326 audit(1746917598.253:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 741.141970][ T30] audit: type=1326 audit(1746917598.253:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 741.165615][ T30] audit: type=1326 audit(1746917598.253:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 741.189349][ T30] audit: type=1326 audit(1746917598.253:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 741.213113][ T30] audit: type=1326 audit(1746917598.253:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 741.236745][ T30] audit: type=1326 audit(1746917598.253:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.5.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 742.571348][ T5910] usb 4-1: USB disconnect, device number 14
[ 742.914056][T12457] input: syz0 as /devices/virtual/input/input21
[ 743.110894][T12461] netlink: 'syz.3.1458': attribute type 10 has an invalid length.
[ 743.119262][T12461] bridge0: port 2(bridge_slave_1) entered disabled state
[ 743.127850][T12461] bridge0: port 1(bridge_slave_0) entered disabled state
[ 743.317353][T12459] Invalid ELF header magic: != ELF
[ 743.568991][T12461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 743.576274][T12461] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 743.583777][T12461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 743.590899][T12461] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 743.600683][T12461] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 744.134575][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'.
[ 744.149418][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'.
[ 744.162452][T12476] netlink: 'syz.4.1459': attribute type 1 has an invalid length.
[ 745.746138][T12505] qrtr: Invalid version 0
[ 745.754443][T12505] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[12505]
[ 746.222616][T12504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1463'.
[ 746.469310][ T30] kauditd_printk_skb: 13 callbacks suppressed
[ 746.469326][ T30] audit: type=1326 audit(1746917604.003:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 746.762052][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 746.779510][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 746.802156][T12513] /dev/nbd0: Can't lookup blockdev
[ 746.818798][ T30] audit: type=1326 audit(1746917604.003:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 746.877569][ T30] audit: type=1326 audit(1746917604.003:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 746.988069][ T30] audit: type=1326 audit(1746917604.003:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 747.059409][T12516] fuse: Unknown parameter 'grou00000000000000000000'
[ 747.139796][ T30] audit: type=1326 audit(1746917604.003:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 747.201384][ T30] audit: type=1326 audit(1746917604.003:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 747.329270][ T30] audit: type=1326 audit(1746917604.003:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 747.919136][ T5945] Process accounting resumed
[ 748.046619][ T30] audit: type=1326 audit(1746917604.003:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 748.349281][ T5945] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 748.922472][ T30] audit: type=1326 audit(1746917604.003:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 748.945889][ C1] vkms_vblank_simulate: vblank timer overrun
[ 748.993471][ T30] audit: type=1326 audit(1746917604.003:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 749.139289][ T5945] usb 4-1: Using ep0 maxpacket: 16
[ 749.150816][ T5945] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 749.161183][ T5945] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 749.181979][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'.
[ 749.335596][ T5945] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 749.354507][ T5945] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 749.709604][T12553] overlayfs: failed to clone upperpath
[ 750.035813][ T5945] usb 4-1: config 7 interface 0 has no altsetting 0
[ 750.042650][ T5945] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 750.051819][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 750.609757][ T5945] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0004/input/input22
[ 750.771472][ T5945] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0
[ 751.611166][ T5945] usb 4-1: USB disconnect, device number 15
[ 751.678151][T12570] random: crng reseeded on system resumption
[ 751.734038][T12568] fido_id[12568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[ 752.233749][T12580] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 752.881305][T12599] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000'
[ 752.906252][T12599] fuse: Bad value for 'fd'
[ 754.453009][T10024] Bluetooth: hci1: command 0x0406 tx timeout
[ 754.464890][ T30] kauditd_printk_skb: 30 callbacks suppressed
[ 754.464909][ T30] audit: type=1400 audit(2000000001.550:1992): avc: denied { getopt } for pid=12605 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 756.652327][ T30] audit: type=1400 audit(2000000003.710:1993): avc: denied { name_bind } for pid=12630 comm="syz.1.1493" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[ 757.235298][T12642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1482'.
[ 757.409657][ T30] audit: type=1400 audit(2000000004.340:1994): avc: denied { map } for pid=12638 comm="syz.3.1482" path="socket:[32588]" dev="sockfs" ino=32588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 757.484393][ T30] audit: type=1400 audit(2000000004.340:1995): avc: denied { accept } for pid=12638 comm="syz.3.1482" path="socket:[32588]" dev="sockfs" ino=32588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 757.662142][T12644] random: crng reseeded on system resumption
[ 758.567601][ T30] audit: type=1400 audit(2000000005.650:1996): avc: denied { getopt } for pid=12646 comm="syz.5.1494" lport=49121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 758.794936][ T30] audit: type=1400 audit(2000000005.880:1997): avc: denied { write } for pid=12664 comm="syz.4.1498" path="socket:[33314]" dev="sockfs" ino=33314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 759.087533][T12671] random: crng reseeded on system resumption
[ 759.368644][T12680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1501'.
[ 760.459517][T12690] overlayfs: failed to resolve './file0': -2
[ 761.579224][ T30] audit: type=1326 audit(2000000008.660:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f78e969 code=0x7ffc0000
[ 761.660282][ T30] audit: type=1326 audit(2000000008.660:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12699 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f78e969 code=0x7ffc0000
[ 762.526471][T12720] mkiss: ax0: crc mode is auto.
[ 763.983623][T12733] bpq0: entered promiscuous mode
[ 763.992648][T12733] bpq0: entered allmulticast mode
[ 764.866168][T12741] binder: BINDER_SET_CONTEXT_MGR already set
[ 764.872253][T12741] binder: 12734:12741 ioctl 4018620d 200000000040 returned -16
[ 764.974475][ T30] audit: type=1400 audit(2000000012.060:2000): avc: denied { ioctl } for pid=12730 comm="syz.3.1510" path="socket:[32740]" dev="sockfs" ino=32740 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 765.344882][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'.
[ 766.305159][ T30] audit: type=1400 audit(2000000012.610:2001): avc: denied { ioctl } for pid=12751 comm="syz.3.1516" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 767.692350][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'.
[ 767.707613][ T30] audit: type=1400 audit(2000000014.780:2002): avc: denied { ioctl } for pid=12776 comm="syz.0.1521" path="socket:[33813]" dev="sockfs" ino=33813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 767.952445][ T30] audit: type=1400 audit(2000000015.030:2003): avc: denied { write } for pid=12782 comm="syz.4.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 767.993524][T12787] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1514'.
[ 768.495900][ T30] audit: type=1400 audit(2000000015.100:2004): avc: denied { shutdown } for pid=12782 comm="syz.4.1522" laddr=::1 lport=50521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 769.068739][T12795] siw: device registration error -23
[ 769.432027][T12797] IPVS: stopping master sync thread 12028 ...
[ 769.659113][ T30] audit: type=1400 audit(2000000016.740:2005): avc: denied { ioctl } for pid=12808 comm="syz.4.1526" path="socket:[33510]" dev="sockfs" ino=33510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 769.782268][T12814] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 769.832026][T12814] input: syz1 as /devices/virtual/input/input23
[ 770.700476][T12805] fuse: Unknown parameter 'group_i00000000000000000000'
[ 770.865882][ T30] audit: type=1400 audit(2000000017.950:2006): avc: denied { read write } for pid=12819 comm="syz.3.1530" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 771.354453][ T30] audit: type=1400 audit(2000000017.950:2007): avc: denied { open } for pid=12819 comm="syz.3.1530" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 773.112993][T12835] netlink: 'syz.0.1531': attribute type 16 has an invalid length.
[ 773.120907][T12835] netlink: 'syz.0.1531': attribute type 17 has an invalid length.
[ 773.130406][T12835] tipc: Resetting bearer <eth:team0>
[ 773.142056][T12833] raw_sendmsg: syz.1.1533 forgot to set AF_INET. Fix it!
[ 773.170541][T12835] overlayfs: failed to clone upperpath
[ 774.486758][T12849] lo speed is unknown, defaulting to 1000
[ 774.493933][T12849] lo speed is unknown, defaulting to 1000
[ 775.508577][T12865] random: crng reseeded on system resumption
[ 775.559587][ T30] audit: type=1400 audit(2000000022.140:2008): avc: denied { append } for pid=12852 comm="syz.3.1535" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 775.584747][T12866] kvm: kvm [12852]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b)
[ 776.106495][T12868] netlink: 'syz.5.1537': attribute type 21 has an invalid length.
[ 776.679463][T12856] vlan2: entered allmulticast mode
[ 776.684607][T12856] vlan1: entered allmulticast mode
[ 777.382978][T12882] siw: device registration error -23
[ 777.985729][T12889] libceph: resolve '�@��e2��OAq���cz' (ret=-3): failed
[ 778.551791][ T30] audit: type=1400 audit(2000000025.593:2009): avc: denied { connect } for pid=12892 comm="syz.3.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 780.148454][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'.
[ 780.161929][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'.
[ 780.176104][T12914] netlink: 'syz.3.1546': attribute type 1 has an invalid length.
[ 780.589783][T12609] Bluetooth: hci1: command 0x0406 tx timeout
[ 781.235455][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'.
[ 782.574190][T12930] lo speed is unknown, defaulting to 1000
[ 783.645603][T12930] lo speed is unknown, defaulting to 1000
[ 785.364516][T12966] fuse: Bad value for 'fd'
[ 786.106269][T12976] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped).
[ 786.129210][ T30] audit: type=1400 audit(2000000033.203:2010): avc: denied { relabelto } for pid=12973 comm="syz.0.1559" name="378" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex"
[ 786.162953][ T30] audit: type=1400 audit(2000000033.203:2011): avc: denied { associate } for pid=12973 comm="syz.0.1559" name="378" dev="tmpfs" ino=2027 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex"
[ 786.189635][ C0] vkms_vblank_simulate: vblank timer overrun
[ 786.550794][T12985] mkiss: ax0: crc mode is auto.
[ 786.833377][T12987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=12987 comm=syz.0.1559
[ 786.843818][T12976] lo speed is unknown, defaulting to 1000
[ 786.853100][T12976] lo speed is unknown, defaulting to 1000
[ 787.131082][ T30] audit: type=1400 audit(2000000034.213:2012): avc: denied { bind } for pid=12991 comm="syz.4.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 787.961053][ T30] audit: type=1400 audit(2000000034.493:2013): avc: denied { write } for pid=5813 comm="syz-executor" name="378" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex"
[ 787.986633][ T30] audit: type=1400 audit(2000000034.493:2014): avc: denied { remove_name } for pid=5813 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex"
[ 788.016582][ T30] audit: type=1400 audit(2000000034.573:2015): avc: denied { rmdir } for pid=5813 comm="syz-executor" name="378" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex"
[ 788.997338][T13003] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2
[ 789.007285][T13003] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0
[ 789.471072][ T30] audit: type=1400 audit(2000000036.453:2016): avc: denied { write } for pid=13013 comm="syz.4.1565" lport=35303 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 789.590034][T11693] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 789.862779][T13025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 790.259448][T11693] usb 4-1: Using ep0 maxpacket: 32
[ 790.350312][T13027] kvm: MONITOR instruction emulated as NOP!
[ 790.584035][T11693] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 790.599071][T11693] usb 4-1: config 0 has no interface number 0
[ 790.611139][T11693] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 790.634134][T11693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 790.678154][T11693] usb 4-1: Product: syz
[ 790.715198][T11693] usb 4-1: Manufacturer: syz
[ 790.741668][T11693] usb 4-1: SerialNumber: syz
[ 790.775305][T11693] usb 4-1: config 0 descriptor??
[ 790.821405][T11693] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 791.759427][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 791.774824][T11693] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 791.787285][T11693] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 791.864345][T11693] usb 4-1: USB disconnect, device number 16
[ 791.907715][T11693] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 791.955223][T11693] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 792.015847][T11693] quatech2 4-1:0.51: device disconnected
[ 793.462119][T13062] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 794.637562][ T30] audit: type=1400 audit(2000000040.973:2017): avc: denied { listen } for pid=13061 comm="syz.3.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 795.074381][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'.
[ 795.083887][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'.
[ 795.097250][T13085] netlink: 'syz.1.1577': attribute type 3 has an invalid length.
[ 795.105321][T13085] netlink: 'syz.1.1577': attribute type 1 has an invalid length.
[ 796.348816][T13106] lo speed is unknown, defaulting to 1000
[ 796.355934][T13106] lo speed is unknown, defaulting to 1000
[ 796.466789][ T30] audit: type=1326 audit(2000000043.543:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.5.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 797.323710][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 797.982152][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 797.989864][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 797.997259][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 798.006120][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 798.014008][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 798.023938][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 798.031934][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 798.533925][T13117] lo speed is unknown, defaulting to 1000
[ 798.602915][T13117] lo speed is unknown, defaulting to 1000
[ 798.619448][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 798.626830][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 798.706878][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 798.760851][T13138] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 799.782340][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 799.890358][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 799.930711][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 799.944827][T12427] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[ 800.013400][T12427] hid-generic 009C:0008:0003.0005: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[ 800.054746][T13144] fido_id[13144]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 800.153789][T13146] fuse: Invalid rootmode
[ 800.398864][T13155] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 800.454206][T13151] syz.3.1592 (13151): drop_caches: 2
[ 800.775661][ T30] audit: type=1400 audit(2000000047.503:2019): avc: denied { getopt } for pid=13147 comm="syz.5.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 800.793226][T13151] syz.3.1592 (13151): drop_caches: 2
[ 800.943693][ T30] audit: type=1400 audit(2000000048.033:2020): avc: denied { connect } for pid=13153 comm="syz.1.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 800.964019][T13157] bpq0: left promiscuous mode
[ 800.974188][T13157] bpq0: left allmulticast mode
[ 801.595179][T13173] libceph: resolve '�@��e2��OAq���cz' (ret=-3): failed
[ 801.999590][T13172] trusted_key: encrypted_key: insufficient parameters specified
[ 805.295841][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'.
[ 807.179991][ T30] audit: type=1400 audit(2000000053.963:2021): avc: denied { write } for pid=13199 comm="syz.1.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 808.239741][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 808.246069][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 810.644550][T13254] overlayfs: missing 'lowerdir'
[ 810.653149][ T30] audit: type=1400 audit(2000000057.733:2022): avc: denied { mounton } for pid=13244 comm="syz.3.1611" path="/310/file1/bus/bus" dev="autofs" ino=35366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[ 812.419307][T13275] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1617'.
[ 812.428268][T13278] 9pnet_fd: Insufficient options for proto=fd
[ 813.660821][T13275] IPv4: Oversized IP packet from 127.0.0.1
[ 813.662007][ C1] IPv4: Oversized IP packet from 127.0.0.1
[ 814.038690][T13300] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 814.038839][T13300] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 814.188209][T13302] vivid-002: disconnect
[ 814.846386][T13296] vivid-002: reconnect
[ 814.893718][ T30] audit: type=1326 audit(2000000061.893:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894627][ T30] audit: type=1326 audit(2000000061.903:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894663][ T30] audit: type=1326 audit(2000000061.903:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894696][ T30] audit: type=1326 audit(2000000061.903:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894726][ T30] audit: type=1326 audit(2000000061.903:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894759][ T30] audit: type=1326 audit(2000000061.903:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894795][ T30] audit: type=1326 audit(2000000061.903:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894833][ T30] audit: type=1326 audit(2000000061.903:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894870][ T30] audit: type=1326 audit(2000000061.903:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 814.894905][ T30] audit: type=1326 audit(2000000061.903:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13296 comm="syz.1.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7fc00000
[ 815.474677][ C1] vkms_vblank_simulate: vblank timer overrun
[ 815.759446][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 816.087843][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 816.087872][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 816.087889][ T10] usb 4-1: Product: syz
[ 816.087903][ T10] usb 4-1: Manufacturer: syz
[ 816.087917][ T10] usb 4-1: SerialNumber: syz
[ 816.090600][ T10] usb 4-1: config 0 descriptor??
[ 817.088150][ C1] vkms_vblank_simulate: vblank timer overrun
[ 817.137004][ C1] vkms_vblank_simulate: vblank timer overrun
[ 817.137200][T13340] No source specified
[ 817.392185][T13342] /dev/nullb0: Can't lookup blockdev
[ 817.915386][T13299] tty tty1: ldisc open failed (-12), clearing slot 0
[ 818.078503][T13351] binder: 13350:13351 ioctl c0306201 0 returned -14
[ 818.538421][ T10] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22
[ 818.567087][ T10] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 818.583002][ T10] usb 4-1: USB disconnect, device number 17
[ 818.641416][T13356] ipt_ECN: cannot use operation on non-tcp rule
[ 824.182608][ T30] kauditd_printk_skb: 57 callbacks suppressed
[ 824.182623][ T30] audit: type=1400 audit(2000000071.263:2090): avc: denied { mounton } for pid=13411 comm="syz.3.1639" path="/318/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 824.227958][ T30] audit: type=1400 audit(2000000071.313:2091): avc: denied { mount } for pid=13411 comm="syz.3.1639" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 824.322405][ T30] audit: type=1400 audit(2000000071.413:2092): avc: denied { remount } for pid=13411 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 824.767292][T13427] fuse: Unknown parameter 'security.selinux'
[ 825.727834][T13441] 9pnet_fd: Insufficient options for proto=fd
[ 826.432616][T13451] binder: 13449:13451 ioctl c0306201 0 returned -14
[ 828.726920][ T30] audit: type=1326 audit(2000000075.753:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 828.727066][ T30] audit: type=1326 audit(2000000075.753:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 828.727185][ T30] audit: type=1326 audit(2000000075.763:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 828.727383][ T30] audit: type=1326 audit(2000000075.763:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 828.727508][ T30] audit: type=1326 audit(2000000075.763:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 828.727625][ T30] audit: type=1326 audit(2000000075.773:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 828.727742][ T30] audit: type=1326 audit(2000000075.773:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13480 comm="syz.3.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7618e969 code=0x7ffc0000
[ 829.223820][T13484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 829.226392][T13483] tipc: Resetting bearer <eth:syzkaller0>
[ 829.808467][T13497] qrtr: Invalid version 0
[ 829.808776][T13497] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[13497]
[ 830.467297][ T30] kauditd_printk_skb: 28 callbacks suppressed
[ 830.467324][ T30] audit: type=1400 audit(2000000077.523:2128): avc: denied { setopt } for pid=13492 comm="syz.4.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 830.521076][T11693] tipc: Node number set to 2917782650
[ 831.730237][T13513] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 831.738745][ T30] audit: type=1400 audit(2000000078.743:2129): avc: granted { setsecparam } for pid=13507 comm="syz.5.1654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[ 832.682752][T13483] tipc: Disabling bearer <eth:syzkaller0>
[ 832.770289][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1653'.
[ 832.810440][T13505] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 832.827305][T13512] bridge0: port 3(batadv0) entered blocking state
[ 832.834880][T13512] bridge0: port 3(batadv0) entered disabled state
[ 832.841393][T13512] batadv0: entered allmulticast mode
[ 832.847337][T13512] batadv0: entered promiscuous mode
[ 832.853266][T13512] bridge0: port 3(batadv0) entered blocking state
[ 832.859720][T13512] bridge0: port 3(batadv0) entered forwarding state
[ 833.403615][ T6111] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 833.413718][ T6111] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 833.672999][T12609] Bluetooth: hci1: unexpected event for opcode 0x2041
[ 835.648202][ T30] audit: type=1400 audit(2000000081.843:2130): avc: denied { setopt } for pid=13537 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 836.076643][T13563] syz.1.1666 (13563): drop_caches: 2
[ 836.330709][T13573] libceph: resolve '�@��e2��OAq���cz' (ret=-3): failed
[ 837.330376][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'.
[ 838.734508][T13563] syz.1.1666 (13563): drop_caches: 2
[ 839.058542][T13578] netlink: 'syz.1.1666': attribute type 2 has an invalid length.
[ 841.008810][T13591] lo speed is unknown, defaulting to 1000
[ 841.027212][T13591] lo speed is unknown, defaulting to 1000
[ 841.445766][T13595] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 844.374163][T13606] xt_hashlimit: size too large, truncated to 1048576
[ 844.483263][T13607] xt_HMARK: proto mask must be zero with L3 mode
[ 844.800815][T13602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 844.854115][T13612] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 845.288085][T13618] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 845.313564][T13613] lo speed is unknown, defaulting to 1000
[ 845.319513][T13613] lo speed is unknown, defaulting to 1000
[ 845.325590][T13613] lo speed is unknown, defaulting to 1000
[ 845.336106][T13613] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 845.351495][T13613] lo speed is unknown, defaulting to 1000
[ 845.357949][T13613] lo speed is unknown, defaulting to 1000
[ 845.364573][T13613] lo speed is unknown, defaulting to 1000
[ 845.371047][T13613] lo speed is unknown, defaulting to 1000
[ 845.377456][T13613] lo speed is unknown, defaulting to 1000
[ 845.383930][T13613] lo speed is unknown, defaulting to 1000
[ 847.897828][T13647] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 848.265629][T13645] tty tty31: ldisc open failed (-12), clearing slot 30
[ 848.487266][T13649] binder: 13648:13649 ioctl c0306201 0 returned -14
[ 849.019651][T13651] lo speed is unknown, defaulting to 1000
[ 849.026745][T13651] lo speed is unknown, defaulting to 1000
[ 849.106804][T13651] lo speed is unknown, defaulting to 1000
[ 849.217027][T13655] lo speed is unknown, defaulting to 1000
[ 849.949894][T13666] libceph: resolve '�@��e2��OAq���cz' (ret=-3): failed
[ 850.242421][T13655] lo speed is unknown, defaulting to 1000
[ 851.685938][ T30] audit: type=1326 audit(2000000098.753:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 851.709423][ C0] vkms_vblank_simulate: vblank timer overrun
[ 851.719938][T13655] lo speed is unknown, defaulting to 1000
[ 852.057656][ T30] audit: type=1326 audit(2000000098.753:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 852.159602][ T30] audit: type=1326 audit(2000000098.753:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 852.161736][T13689] SET target dimension over the limit!
[ 852.332151][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'.
[ 852.776575][ T30] audit: type=1326 audit(2000000098.763:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 852.807801][T13693] netlink: 'syz.4.1689': attribute type 5 has an invalid length.
[ 852.837019][T13693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1689'.
[ 852.903948][ T30] audit: type=1326 audit(2000000098.763:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 853.130578][T13702] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1694'.
[ 853.168471][ T30] audit: type=1326 audit(2000000098.763:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 853.194087][T13703] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1695'.
[ 853.274597][T13693] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 853.284617][T13693] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 853.295177][T13693] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 853.303882][T13693] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 853.313345][T13693] geneve2: entered promiscuous mode
[ 853.318590][T13693] geneve2: entered allmulticast mode
[ 853.471879][ T30] audit: type=1326 audit(2000000098.763:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 853.558359][ T30] audit: type=1326 audit(2000000098.763:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 853.622441][ T30] audit: type=1326 audit(2000000098.763:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 853.706334][ T30] audit: type=1326 audit(2000000098.763:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x7ffc0000
[ 854.264383][T13714] lo speed is unknown, defaulting to 1000
[ 854.395680][T13714] lo speed is unknown, defaulting to 1000
[ 855.932798][T13731] libceph: resolve '�@��e2��OAq���cz' (ret=-3): failed
[ 856.614687][T13714] lo speed is unknown, defaulting to 1000
[ 856.776539][T13742] binder: 13740:13742 ioctl c0306201 0 returned -14
[ 857.299515][ T5861] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 857.333381][ T30] kauditd_printk_skb: 59 callbacks suppressed
[ 857.333398][ T30] audit: type=1400 audit(2000000104.423:2200): avc: denied { map } for pid=13746 comm="syz.3.1708" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 857.515180][ T5861] usb 5-1: Using ep0 maxpacket: 16
[ 857.620889][ T5861] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[ 857.686259][ T5861] usb 5-1: config 0 has no interface number 0
[ 857.776515][ T5861] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 857.896633][ T5861] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 857.976239][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 857.999819][ T5862] kernel read not supported for file /dsp1 (pid: 5862 comm: kworker/1:5)
[ 858.081702][ T5861] usb 5-1: Product: syz
[ 858.136252][ T5861] usb 5-1: Manufacturer: syz
[ 858.188728][ T5861] usb 5-1: SerialNumber: syz
[ 858.418032][ T5861] usb 5-1: config 0 descriptor??
[ 858.450332][ T30] audit: type=1400 audit(2000000104.423:2201): avc: denied { execute } for pid=13746 comm="syz.3.1708" path="/dev/dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 858.474279][ T30] audit: type=1400 audit(2000000105.343:2202): avc: denied { write } for pid=13753 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 858.494542][T13754] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 858.644447][ T30] audit: type=1400 audit(2000000105.733:2203): avc: denied { ioctl } for pid=13758 comm="syz.5.1711" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 859.237985][ T5861] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0
[ 859.266093][ T5861] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5
[ 859.940988][T13739] ubi31: attaching mtd0
[ 860.049910][ T5862] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 860.053600][T13739] ubi31: scanning is finished
[ 860.362542][T13774] netlink: 'syz.1.1710': attribute type 21 has an invalid length.
[ 860.430835][ T5862] usb 4-1: Using ep0 maxpacket: 32
[ 860.437818][ T5862] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 860.451206][ T5862] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 860.462543][ T5862] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 860.476069][T13739] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 860.484767][T13739] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 860.495844][T13739] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 860.503929][ T5862] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 860.655515][ T30] audit: type=1400 audit(2000000107.693:2204): avc: denied { connect } for pid=13777 comm="syz.5.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 861.040255][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 861.437226][ T5862] usb 4-1: Product: syz
[ 861.441444][ T5862] usb 4-1: Manufacturer: syz
[ 861.446029][ T5862] usb 4-1: SerialNumber: syz
[ 861.450658][T13739] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 861.458116][T13739] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 861.467714][T13739] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 861.476273][T13739] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1977554613
[ 861.486448][T13739] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 861.501700][ T5862] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input26
[ 861.553958][T13787] ubi31: background thread "ubi_bgt31d" started, PID 13787
[ 861.724431][ T5945] usb 4-1: USB disconnect, device number 18
[ 861.752378][ T5862] usb 5-1: USB disconnect, device number 13
[ 862.256039][T13802] tmpfs: Unknown parameter 'smackfstransmute'
[ 862.611036][T13803] libceph: resolve '�@��e2��OAq���cz' (ret=-3): failed
[ 863.042120][ T5945] appletouch 4-1:1.0: input: appletouch disconnected
[ 863.658291][T13809] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'.
[ 863.852244][T13817] loop6: detected capacity change from 0 to 524287999
[ 864.120591][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'.
[ 864.250615][T13824] Lens B: ================= START STATUS =================
[ 864.258079][T13824] Lens B: Focus, Absolute: 0
[ 864.263228][T13824] Lens B: ================== END STATUS ==================
[ 864.357674][T13824] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 867.665109][T13849] random: crng reseeded on system resumption
[ 868.222483][ T30] audit: type=1400 audit(2000000115.313:2205): avc: denied { bind } for pid=13858 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 868.319677][ T30] audit: type=1400 audit(2000000115.313:2206): avc: denied { listen } for pid=13858 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 868.460398][ T30] audit: type=1400 audit(2000000115.313:2207): avc: denied { accept } for pid=13858 comm="syz.5.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 868.489359][T13872] fuse: Bad value for 'fd'
[ 869.633766][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 869.777737][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 870.457500][ T30] audit: type=1400 audit(2000000117.463:2208): avc: denied { ioctl } for pid=13886 comm="syz.1.1737" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 870.482248][ C0] vkms_vblank_simulate: vblank timer overrun
[ 871.605310][ T30] audit: type=1400 audit(2000000118.073:2209): avc: denied { map } for pid=13896 comm="syz.3.1741" path="socket:[37776]" dev="sockfs" ino=37776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 871.952749][T13907] netlink: 'syz.5.1739': attribute type 1 has an invalid length.
[ 872.109802][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'.
[ 872.132583][T13912] SELinux: syz.3.1743 (13912) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[ 872.842830][T13915] veth0_vlan: left promiscuous mode
[ 872.849013][T13915] veth0_vlan: entered promiscuous mode
[ 872.870291][T13916] lo speed is unknown, defaulting to 1000
[ 872.878419][T13916] lo speed is unknown, defaulting to 1000
[ 873.038866][T13918] 8021q: adding VLAN 0 to HW filter on device bond1
[ 873.178970][T13916] lo speed is unknown, defaulting to 1000
[ 873.349115][T13922] bond0: entered promiscuous mode
[ 873.354556][T13922] bond_slave_0: entered promiscuous mode
[ 873.362686][T13922] bond_slave_1: entered promiscuous mode
[ 873.378168][T13922] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 873.441554][T13922] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[ 874.047778][T13941] binder: 13939:13941 ioctl c0306201 0 returned -14
[ 874.776274][T13947] binder: 13946:13947 ioctl c0306201 0 returned -14
[ 880.272619][T14007] binder: 14006:14007 ioctl c0306201 0 returned -14
[ 882.437206][T14016] netlink: 'syz.1.1762': attribute type 10 has an invalid length.
[ 882.455561][T14024] lo speed is unknown, defaulting to 1000
[ 882.463210][T14016] veth0_macvtap: left promiscuous mode
[ 882.483008][ T30] audit: type=1400 audit(2000000129.573:2210): avc: denied { setattr } for pid=14019 comm="syz.4.1763" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1
[ 883.125934][T14016] batman_adv: batadv0: Adding interface: macvtap0
[ 883.152880][T14016] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 883.179237][T14016] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[ 883.253248][T14016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1762'.
[ 883.372221][T14024] lo speed is unknown, defaulting to 1000
[ 884.651180][T13616] udevd[13616]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 884.673252][T14056] syz.1.1768: attempt to access beyond end of device
[ 884.673252][T14056] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 884.700090][T14056] SQUASHFS error: Failed to read block 0x0: -5
[ 884.737825][ T30] audit: type=1326 audit(2000000131.813:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7ffc0000
[ 884.835329][T13616] udevd[13616]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 884.855953][ T30] audit: type=1326 audit(2000000131.813:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7ffc0000
[ 884.887553][T14024] lo speed is unknown, defaulting to 1000
[ 884.893402][T14059] veth0_vlan: entered allmulticast mode
[ 884.899826][T14056] unable to read squashfs_super_block
[ 884.904031][T14062] syz.1.1768 (14062): drop_caches: 2
[ 884.928275][T14059] veth0_vlan: left promiscuous mode
[ 885.373010][T14059] veth0_vlan: entered promiscuous mode
[ 885.379857][ T5861] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 885.484373][T14062] syz.1.1768 (14062): drop_caches: 2
[ 885.709959][ T30] audit: type=1326 audit(2000000131.813:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2436b8d2d0 code=0x7ffc0000
[ 885.733781][ T30] audit: type=1326 audit(2000000131.823:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 885.757251][ T30] audit: type=1326 audit(2000000131.823:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 885.781878][ T30] audit: type=1326 audit(2000000131.853:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 885.865710][ T30] audit: type=1326 audit(2000000131.853:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 885.884332][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 886.915869][ T30] audit: type=1326 audit(2000000131.933:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 886.939740][ T30] audit: type=1326 audit(2000000132.003:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 886.967413][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 887.079754][ T5861] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 887.088831][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 887.123795][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 887.146362][ T5861] usb 5-1: config 0 descriptor??
[ 887.176837][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 887.300080][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 887.319524][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 887.329836][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 887.340564][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 887.713025][ T30] kauditd_printk_skb: 19 callbacks suppressed
[ 887.713040][ T30] audit: type=1326 audit(2000000134.803:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 887.840939][ T30] audit: type=1326 audit(2000000134.833:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 887.924670][ T30] audit: type=1326 audit(2000000134.833:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2436bc1225 code=0x7ffc0000
[ 887.967260][ T5861] pantherlord 0003:0810:0001.0006: item fetching failed at offset 5/11
[ 888.019730][ T5861] pantherlord 0003:0810:0001.0006: parse failed
[ 888.943877][ T30] audit: type=1326 audit(2000000135.033:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7ffc0000
[ 888.967765][ T30] audit: type=1326 audit(2000000135.043:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 889.001215][ T5861] pantherlord 0003:0810:0001.0006: probe with driver pantherlord failed with error -22
[ 889.008731][ T30] audit: type=1326 audit(2000000135.043:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2436b8e56b code=0x7ffc0000
[ 889.038442][ T30] audit: type=1326 audit(2000000135.043:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2436bc1225 code=0x7ffc0000
[ 889.169501][T14097] sctp: [Deprecated]: syz.4.1772 (pid 14097) Use of int in maxseg socket option.
[ 889.169501][T14097] Use struct sctp_assoc_value instead
[ 889.372339][ T30] audit: type=1326 audit(2000000135.193:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14092 comm="syz.1.1778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93f658e969 code=0x0
[ 889.481577][ T6105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 889.509601][ T30] audit: type=1326 audit(2000000135.243:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7ffc0000
[ 889.533289][ T30] audit: type=1326 audit(2000000135.243:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14060 comm="syz.4.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2436b8e969 code=0x7ffc0000
[ 889.712449][ T5945] usb 5-1: USB disconnect, device number 14
[ 892.239595][ T5945] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 892.889235][ T5945] usb 6-1: Using ep0 maxpacket: 32
[ 893.221702][ T5945] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[ 893.248402][ T5945] usb 6-1: config 0 has no interface number 0
[ 893.440380][ T5945] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 893.458502][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 893.543093][ T5945] usb 6-1: Product: syz
[ 893.624048][T14154] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1786'.
[ 893.973773][ T5945] usb 6-1: Manufacturer: syz
[ 893.978415][ T5945] usb 6-1: SerialNumber: syz
[ 893.985519][ T5945] usb 6-1: config 0 descriptor??
[ 893.992286][ T5945] hub 6-1:0.89: bad descriptor, ignoring hub
[ 894.033460][ T5945] hub 6-1:0.89: probe with driver hub failed with error -5
[ 894.074261][ T5945] option 6-1:0.89: GSM modem (1-port) converter detected
[ 894.087337][ T5945] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 894.131621][ T5945] usb 6-1: USB disconnect, device number 2
[ 894.147854][ T5945] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 894.335439][ T5945] option 6-1:0.89: device disconnected
[ 894.351003][T14157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1789'.
[ 894.754384][ T1134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 895.829332][ T5945] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 895.969987][ T5945] usb 6-1: device descriptor read/64, error -71
[ 896.316054][ T5945] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 896.454925][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'.
[ 896.464361][T14183] bridge_slave_1: left allmulticast mode
[ 896.470143][T14183] bridge_slave_1: left promiscuous mode
[ 896.477163][T14183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 896.488494][ T5945] usb 6-1: device descriptor read/64, error -71
[ 896.521714][T14183] bridge_slave_0: left allmulticast mode
[ 896.527367][T14183] bridge_slave_0: left promiscuous mode
[ 896.533494][T14183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 896.662499][ T5945] usb usb6-port1: attempt power cycle
[ 897.061450][ T5945] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 897.103176][ T5945] usb 6-1: device descriptor read/8, error -71
[ 897.143109][T14189] ubi: mtd0 is already attached to ubi31
[ 897.279732][T14189] netlink: 'syz.3.1794': attribute type 1 has an invalid length.
[ 897.413689][T14195] binder: 14194:14195 ioctl c0306201 0 returned -14
[ 897.562582][T14197] lo speed is unknown, defaulting to 1000
[ 897.586330][T14197] lo speed is unknown, defaulting to 1000
[ 897.645849][ T5945] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 897.749823][ T5945] usb 6-1: device descriptor read/8, error -71
[ 897.941584][ T5945] usb usb6-port1: unable to enumerate USB device
[ 898.043355][T14198] wg1: entered promiscuous mode
[ 898.048291][T14198] wg1: entered allmulticast mode
[ 898.278542][T14197] lo speed is unknown, defaulting to 1000
[ 898.526134][ T54] Bluetooth: hci1: unexpected event for opcode 0x203d
[ 898.579946][ T5861] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 898.834658][ T5861] usb 5-1: Using ep0 maxpacket: 16
[ 898.880367][ T5861] usb 5-1: config 12 has an invalid interface number: 3 but max is 1
[ 898.880394][ T5861] usb 5-1: config 12 has an invalid interface number: 110 but max is 1
[ 898.880410][ T5861] usb 5-1: config 12 has no interface number 0
[ 898.880425][ T5861] usb 5-1: config 12 has no interface number 1
[ 898.880551][ T5861] usb 5-1: config 12 interface 110 has no altsetting 0
[ 898.887852][ T5861] usb 5-1: New USB device found, idVendor=05c6, idProduct=9203, bcdDevice=7c.38
[ 898.887870][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 898.887882][ T5861] usb 5-1: Product: syz
[ 898.887890][ T5861] usb 5-1: Manufacturer: syz
[ 898.887898][ T5861] usb 5-1: SerialNumber: syz
[ 899.154054][T14192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 899.154302][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 899.695620][T14216] syzkaller0: entered promiscuous mode
[ 899.695674][T14216] syzkaller0: entered allmulticast mode
[ 899.793004][T14216] overlayfs: failed to resolve './file0': -2
[ 900.361094][ T6111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 900.958548][T14192] tty tty1: ldisc open failed (-12), clearing slot 0
[ 901.067295][ T5861] usb 5-1: unknown number of interfaces: 2
[ 901.079292][ T30] kauditd_printk_skb: 42 callbacks suppressed
[ 901.079306][ T30] audit: type=1326 audit(2000000148.163:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.5.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x7fc00000
[ 901.143019][ T5861] usb 5-1: USB disconnect, device number 15
[ 901.512482][T14222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1811'.
[ 902.680275][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 902.691395][ T54] Bluetooth: hci1: Injecting HCI hardware error event
[ 902.700722][ T54] Bluetooth: hci1: hardware error 0x00
[ 903.585869][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'.
[ 904.780675][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 905.626545][ T30] audit: type=1400 audit(2000000152.695:2292): avc: denied { name_bind } for pid=14243 comm="syz.0.1806" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 905.848007][T14257] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 906.119694][ T6105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 907.220111][T14275] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1814'.
[ 907.988846][T14280] lo speed is unknown, defaulting to 1000
[ 907.996845][T14280] lo speed is unknown, defaulting to 1000
[ 908.089673][T14280] lo speed is unknown, defaulting to 1000
[ 908.589625][ T5945] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 908.967807][T14291] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 909.067274][ T30] audit: type=1326 audit(2000000156.145:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.5.1818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e4cb8e969 code=0x0
[ 909.799209][ T5945] usb 5-1: Using ep0 maxpacket: 8
[ 909.861038][ T5945] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 910.079546][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 910.095157][T14302] fuse: Bad value for 'fd'
[ 910.241885][ T5945] usb 5-1: config 0 descriptor??
[ 910.708409][ T5945] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 910.761532][T14299] lo speed is unknown, defaulting to 1000
[ 910.787387][T14299] lo speed is unknown, defaulting to 1000
[ 910.996024][T14313] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 911.152259][ T6111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 911.659478][T12427] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 911.932769][ T30] audit: type=1400 audit(2000000159.015:2294): avc: denied { mounton } for pid=14284 comm="syz.4.1816" path="/proc/1410/cgroup" dev="proc" ino=39672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[ 911.962042][ T5945] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 912.055975][ T5945] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[ 912.109852][ T5945] asix 5-1:0.0: probe with driver asix failed with error -71
[ 912.119219][T12427] usb 2-1: Using ep0 maxpacket: 32
[ 912.125458][ T5945] usb 5-1: USB disconnect, device number 16
[ 912.141796][T12427] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 912.181273][T12427] usb 2-1: config 0 has no interface number 0
[ 912.219491][T12427] usb 2-1: config 0 interface 184 has no altsetting 0
[ 912.258329][T12427] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 912.268184][T12427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 912.298310][T12427] usb 2-1: Product: syz
[ 912.316393][T12427] usb 2-1: Manufacturer: syz
[ 912.333890][T14299] lo speed is unknown, defaulting to 1000
[ 912.339937][T12427] usb 2-1: SerialNumber: syz
[ 912.362831][T12427] usb 2-1: config 0 descriptor??
[ 912.383161][T12427] smsc75xx v1.0.0
[ 912.621781][T14331] overlayfs: failed to clone lowerpath
[ 912.716887][T14332] overlayfs: missing 'lowerdir'
[ 913.835079][ T30] audit: type=1400 audit(2000000160.385:2295): avc: denied { ioctl } for pid=14310 comm="syz.1.1823" path="socket:[38570]" dev="sockfs" ino=38570 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 914.523845][T12427] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 914.589723][T12427] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 914.613836][T12427] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 914.647503][T12427] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[ 915.924251][T12427] usb 2-1: USB disconnect, device number 12
[ 915.966717][T14347] ALSA: mixer_oss: invalid OSS volume ''
[ 916.251508][ T30] audit: type=1400 audit(2000000163.335:2296): avc: denied { mounton } for pid=14360 comm="syz.4.1835" path="/336/file0" dev="rpc_pipefs" ino=38654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1
[ 916.284601][T14359] syz.1.1834 (14359): /proc/14358/oom_adj is deprecated, please use /proc/14358/oom_score_adj instead.
[ 916.990110][ T1134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 917.140918][T14361] trusted_key: encrypted_key: keylen parameter is missing
[ 919.065575][T14385] lo speed is unknown, defaulting to 1000
[ 919.135749][T14385] lo speed is unknown, defaulting to 1000
[ 919.763125][T12427] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 921.138188][T12427] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 921.162596][T12427] usb 2-1: config 0 interface 0 has no altsetting 0
[ 921.180104][T14385] lo speed is unknown, defaulting to 1000
[ 921.192987][T12427] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 921.229310][T12427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 921.334527][T12427] usb 2-1: config 0 descriptor??
[ 921.944531][T14404] netlink: 'syz.4.1846': attribute type 16 has an invalid length.
[ 921.952537][T14404] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1846'.
[ 922.298968][T12427] uclogic 0003:5543:0004.0007: item fetching failed at offset 4/5
[ 922.308788][T12427] uclogic 0003:5543:0004.0007: parse failed
[ 922.335564][T12427] uclogic 0003:5543:0004.0007: probe with driver uclogic failed with error -22
[ 922.679401][T12427] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 922.750320][ T1134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 922.902506][T12427] usb 6-1: config 0 has an invalid interface number: 109 but max is 0
[ 922.917566][T12427] usb 6-1: config 0 has no interface number 0
[ 922.927387][T12427] usb 6-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 922.944856][T12427] usb 6-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[ 922.954461][T12427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 923.189653][ T5862] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 923.488750][T12427] usb 6-1: config 0 descriptor??
[ 923.551221][T12427] cxacru 6-1:0.109: cxacru_bind: interface has incorrect endpoints
[ 923.559504][ T5862] usb 4-1: Using ep0 maxpacket: 32
[ 923.620503][ T5862] usb 4-1: config 0 has an invalid interface number: 202 but max is 0
[ 923.642833][ T5862] usb 4-1: config 0 has no interface number 0
[ 923.657460][T12427] cxacru 6-1:0.109: usbatm_usb_probe: bind failed: -19!
[ 923.668322][ T5862] usb 4-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 923.694453][ T5862] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 923.704682][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 923.728437][ T5862] usb 4-1: Product: syz
[ 923.809317][T14431] 9pnet_fd: Insufficient options for proto=fd
[ 923.828573][ T5862] usb 4-1: Manufacturer: syz
[ 923.978494][ T5862] usb 4-1: SerialNumber: syz
[ 924.046447][T12427] usb 6-1: USB disconnect, device number 7
[ 924.096025][ T5862] usb 4-1: config 0 descriptor??
[ 924.198629][ T5862] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 924.391096][T12427] usb 4-1: USB disconnect, device number 19
[ 924.399479][ T1134] usb 4-1: Failed to submit usb control message: -71
[ 924.417173][ T1134] usb 4-1: unable to send the bmi data to the device: -71
[ 924.429649][ T1134] usb 4-1: unable to get target info from device
[ 924.446207][ T1134] usb 4-1: could not get target info (-71)
[ 924.455636][T14439] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT
[ 924.459666][ T1134] usb 4-1: could not probe fw (-71)
[ 924.469707][T14439] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 924.812539][ T10] usb 2-1: USB disconnect, device number 13
[ 925.624269][T14460] xt_hashlimit: size too large, truncated to 1048576
[ 925.951666][T14462] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1860'.
[ 927.842541][T12427] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 927.994804][ T30] audit: type=1400 audit(2000000175.035:2297): avc: denied { accept } for pid=14471 comm="syz.1.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 928.269279][T12427] usb 5-1: Using ep0 maxpacket: 32
[ 928.278711][T12427] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[ 928.279277][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 928.304220][T12427] usb 5-1: config 0 has no interface number 0
[ 928.310841][ T30] audit: type=1400 audit(2000000175.065:2298): avc: denied { bind } for pid=14471 comm="syz.1.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 928.332807][T12427] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 928.344564][T12427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 928.364428][T12427] usb 5-1: Product: syz
[ 928.368780][T12427] usb 5-1: Manufacturer: syz
[ 928.374270][T12427] usb 5-1: SerialNumber: syz
[ 928.398059][T12427] usb 5-1: config 0 descriptor??
[ 928.511393][ T10] usb 6-1: config 0 has an invalid interface number: 95 but max is 0
[ 928.537989][ T6111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 929.049500][T12427] radio-si470x 5-1:0.35: this is not a si470x device.
[ 929.388011][ T10] usb 6-1: config 0 has no interface number 0
[ 929.394384][ T10] usb 6-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[ 929.407619][ T10] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[ 929.417158][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 929.425406][ T10] usb 6-1: Product: syz
[ 929.430069][ T10] usb 6-1: Manufacturer: syz
[ 929.434679][ T10] usb 6-1: SerialNumber: syz
[ 929.434719][T12427] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[ 929.441760][ T10] usb 6-1: config 0 descriptor??
[ 929.452960][T14478] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 929.937162][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 929.966929][T12427] usb 5-1: USB disconnect, device number 17
[ 929.976156][ T10] usb 6-1: MIDIStreaming interface descriptor not found
[ 930.050553][T14501] ubi: mtd0 is already attached to ubi31
[ 930.425926][ T30] audit: type=1400 audit(2000000177.155:2299): avc: denied { setcurrent } for pid=14494 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 930.445500][ C1] vkms_vblank_simulate: vblank timer overrun
[ 930.588467][ T10] usb 6-1: USB disconnect, device number 8
[ 930.800105][T13798] udevd[13798]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 931.240536][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 931.246914][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 932.377799][T12427] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[ 932.804908][ T5861] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 932.952905][T12427] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 932.965306][T12427] usb 2-1: config 0 has no interface number 0
[ 932.999112][T14545] lo speed is unknown, defaulting to 1000
[ 933.000654][T12427] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 933.007322][T14545] lo speed is unknown, defaulting to 1000
[ 933.017895][T12427] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 933.052055][ T5861] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 933.170709][ T5861] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 933.241194][ T5861] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 933.270783][T12427] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 933.282835][T12427] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 933.298648][T12427] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 933.312554][ T5861] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 933.321749][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 933.331572][T12427] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 933.345106][ T5861] usb 6-1: Product: syz
[ 933.350632][ T5861] usb 6-1: Manufacturer: syz
[ 933.355372][ T5861] usb 6-1: SerialNumber: syz
[ 933.360585][T12427] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 933.373184][T12427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 933.382745][ T5861] smsusb:smsusb_probe: board id=8, interface number 0
[ 933.392010][ T5861] smsusb:smsusb_probe: Device initialized with return code -19
[ 933.429668][T12427] usb 2-1: config 0 descriptor??
[ 933.435615][T14525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 933.443119][T14525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 933.465185][T12427] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 933.618601][ T5861] usb 6-1: USB disconnect, device number 9
[ 933.700145][ T5945] usb 2-1: USB disconnect, device number 14
[ 933.716785][T14545] lo speed is unknown, defaulting to 1000
[ 933.723840][ T5945] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 934.467558][T14559] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[ 934.477634][T14559] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[ 935.610554][T14576] SELinux: policydb magic number 0xff8c does not match expected magic number 0xf97cff8c
[ 935.621078][T14576] SELinux: failed to load policy
[ 935.636280][ T30] audit: type=1400 audit(2000000182.685:2300): avc: denied { load_policy } for pid=14574 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 936.144968][ T5945] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[ 936.204483][T14579] 8021q: adding VLAN 0 to HW filter on device bond1
[ 936.253981][T14579] bond0: (slave bond1): Enslaving as an active interface with an up link
[ 936.350121][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 936.388489][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 936.419342][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 936.520815][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 936.530899][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 936.545855][ T5945] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 936.559169][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 936.579413][ T5945] usb 4-1: Product: syz
[ 936.583642][ T5945] usb 4-1: Manufacturer: syz
[ 936.588247][ T5945] usb 4-1: SerialNumber: syz
[ 936.620378][ T5945] usb 4-1: config 0 descriptor??
[ 937.323541][ T5945] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110
[ 937.339424][ T30] audit: type=1400 audit(2000000184.195:2301): avc: denied { write } for pid=14595 comm="syz.4.1905" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 937.420959][ T5945] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[ 937.438542][ T30] audit: type=1400 audit(2000000184.195:2302): avc: denied { ioctl } for pid=14595 comm="syz.4.1905" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 938.413909][T14618] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[ 938.423826][T14618] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[ 940.033009][ T5945] usb 4-1: USB disconnect, device number 20
[ 941.492586][T14626] lo speed is unknown, defaulting to 1000
[ 941.530803][T14626] lo speed is unknown, defaulting to 1000
[ 943.610792][T14639] lo speed is unknown, defaulting to 1000
[ 943.617806][T14639] lo speed is unknown, defaulting to 1000
[ 944.415161][T14626] lo speed is unknown, defaulting to 1000
[ 944.488403][ T54] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[ 945.018608][T14673] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 946.184959][T14639] lo speed is unknown, defaulting to 1000
[ 947.713365][ T6105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 947.783240][T14698] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1932'.
[ 948.718169][T14714] lo speed is unknown, defaulting to 1000
[ 948.746962][T14714] lo speed is unknown, defaulting to 1000
[ 949.030098][T14717] overlayfs: failed to resolve './file0': -2
[ 950.478443][ T54] Bluetooth: hci3: Ignoring connect complete event for invalid link type
[ 950.541355][T14714] lo speed is unknown, defaulting to 1000
[ 950.758694][T14744] delete_channel: no stack
[ 951.143247][T14760] syz.4.1952: attempt to access beyond end of device
[ 951.143247][T14760] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 951.838768][T14761] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 953.018772][T14781] binder: 14780:14781 ioctl c0306201 200000000100 returned -14
[ 953.070268][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1959'.
[ 953.128470][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1959'.
[ 953.279637][ T5945] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 953.450846][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 953.482951][ T6105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 953.913544][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 953.926070][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 953.956009][ T5945] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 954.001339][T14801] lo speed is unknown, defaulting to 1000
[ 954.013765][T14801] lo speed is unknown, defaulting to 1000
[ 954.303839][T14801] lo speed is unknown, defaulting to 1000
[ 954.334150][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 954.342806][ T5945] usb 2-1: Product: syz
[ 954.346974][ T5945] usb 2-1: Manufacturer: syz
[ 954.352033][ T5945] usb 2-1: SerialNumber: syz
[ 954.358859][ T5945] usb 2-1: config 0 descriptor??
[ 955.089964][T14830] random: crng reseeded on system resumption
[ 955.695484][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'.
[ 955.786753][ T30] audit: type=1400 audit(2000000202.855:2303): avc: denied { setopt } for pid=14842 comm="syz.5.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 958.255579][T14862] lo speed is unknown, defaulting to 1000
[ 958.388196][T14862] lo speed is unknown, defaulting to 1000
[ 958.543232][T14878] netlink: 'syz.4.2002': attribute type 13 has an invalid length.
[ 958.751078][T14862] lo speed is unknown, defaulting to 1000
[ 959.001911][ T6105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 959.385343][T14913] autofs: Bad value for 'fd'
[ 959.456152][T14915] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2017'.
[ 960.033739][T14944] sp0: Synchronizing with TNC
[ 960.254919][T14954] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2037'.
[ 960.640695][T11693] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[ 960.654223][ T30] audit: type=1400 audit(2000000207.735:2304): avc: denied { getopt } for pid=14927 comm="syz.0.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 961.475440][T11693] usb 4-1: config index 0 descriptor too short (expected 539, got 27)
[ 961.487057][T11693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64
[ 961.529017][T11693] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 961.576848][T11693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 961.587276][T11693] usb 4-1: Product: syz
[ 961.597489][T11693] usb 4-1: Manufacturer: syz
[ 961.641698][T11693] usb 4-1: SerialNumber: syz
[ 961.653955][T11693] usb 4-1: config 0 descriptor??
[ 961.670496][T14953] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 961.678575][T11693] hub 4-1:0.0: bad descriptor, ignoring hub
[ 961.686524][T11693] hub 4-1:0.0: probe with driver hub failed with error -5
[ 961.706993][T11693] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30
[ 961.775198][T14954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 961.799804][T14954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 962.458503][ T10] usb 4-1: USB disconnect, device number 21
[ 962.464600][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[ 962.477610][T14954] bond0 (unregistering): Released all slaves
[ 962.652387][T14959] lo speed is unknown, defaulting to 1000
[ 962.682558][T14959] lo speed is unknown, defaulting to 1000
[ 962.709739][T14972] random: crng reseeded on system resumption
[ 963.038335][T14959] lo speed is unknown, defaulting to 1000
[ 963.472709][T14982] xt_hashlimit: max too large, truncated to 1048576
[ 963.545120][T14982] No such timeout policy "syz1"
[ 963.635001][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'.
[ 964.024245][T14987] lo speed is unknown, defaulting to 1000
[ 964.083668][T14987] lo speed is unknown, defaulting to 1000
[ 964.352793][ T6105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 964.821385][T14987] lo speed is unknown, defaulting to 1000
[ 965.013765][ T5945] iguanair 2-1:0.0: failed to get version
[ 965.020768][ T5945] iguanair 2-1:0.0: probe with driver iguanair failed with error -110
[ 965.606027][ T5945] usb 2-1: USB disconnect, device number 15
[ 965.929434][ T5945] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 966.079467][ T5945] usb 2-1: Using ep0 maxpacket: 8
[ 966.110410][ T5945] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 966.140362][ T5945] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 966.184427][ T5945] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 966.208674][ T5945] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 966.260373][ T5945] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 966.292977][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 966.557680][ T5945] usb 2-1: GET_CAPABILITIES returned 0
[ 966.571232][ T5945] usbtmc 2-1:16.0: can't read capabilities
[ 967.040939][ T5862] usb 2-1: USB disconnect, device number 16
[ 968.398505][T15038] netlink: 'syz.3.2068': attribute type 1 has an invalid length.
[ 968.422448][T15038] netlink: 'syz.3.2068': attribute type 2 has an invalid length.
[ 968.479579][T15038] netlink: 'syz.3.2068': attribute type 1 has an invalid length.
[ 968.504059][T15038] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.2068'.
[ 969.829726][ T5945] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 970.050115][ T5945] usb 4-1: Using ep0 maxpacket: 32
[ 970.111296][ T5945] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[ 970.141208][ T6125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 970.216928][ T5945] usb 4-1: config 0 has no interface number 0
[ 970.294523][ T5945] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 970.443172][ T5945] usb 4-1: config 0 interface 85 has no altsetting 0
[ 970.577129][ T5945] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 970.693940][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 970.778294][ T5945] usb 4-1: Product: syz
[ 970.792627][ T5945] usb 4-1: Manufacturer: syz
[ 970.807496][ T5945] usb 4-1: SerialNumber: syz
[ 970.818634][ T5945] usb 4-1: config 0 descriptor??
[ 971.608636][ T5945] appletouch 4-1:0.85: Failed to request geyser raw mode
[ 971.615907][ T5945] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[ 971.641410][ T5945] usb 4-1: USB disconnect, device number 22
[ 973.791083][T15111] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 973.799801][T15111] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 973.814454][T15111] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 973.820745][ T5862] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[ 973.828635][T15111] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 974.277488][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[ 974.295131][ T5862] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[ 974.323073][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 974.333411][ T5862] usb 5-1: config 0 descriptor??
[ 974.341647][T15128] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 974.349343][ T5861] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 974.419281][ T5862] rc_core: IR keymap rc-xbox-dvd not found
[ 974.433649][ T5862] Registered IR keymap rc-empty
[ 974.443983][T15159] xt_hashlimit: size too large, truncated to 1048576
[ 974.551668][ T5862] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 974.593349][ T5861] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 974.606331][ T5862] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32
[ 974.621687][ T5861] usb 6-1: config 0 interface 0 has no altsetting 0
[ 974.628373][ T5861] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 974.642274][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 974.656334][ T5862] usb 5-1: USB disconnect, device number 18
[ 974.656378][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[ 974.690793][ T5861] usb 6-1: config 0 descriptor??
[ 974.835793][T15168] netlink: 'syz.3.2117': attribute type 46 has an invalid length.
[ 974.855734][T15168] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2117'.
[ 975.312202][ T6123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 975.644677][ T5861] uclogic 0003:5543:0004.0008: item fetching failed at offset 4/5
[ 975.655593][ T5861] uclogic 0003:5543:0004.0008: parse failed
[ 975.662365][ T5861] uclogic 0003:5543:0004.0008: probe with driver uclogic failed with error -22
[ 976.291315][T15186] random: crng reseeded on system resumption
[ 976.772929][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 976.996588][ T10] usb 4-1: Using ep0 maxpacket: 8
[ 977.122910][T15200] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 977.138787][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 977.159213][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 977.193840][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 977.327672][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 977.341708][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 977.357726][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 977.437107][T15206] xt_hashlimit: size too large, truncated to 1048576
[ 977.562036][T15207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 977.660265][T15208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2129'.
[ 977.788095][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 977.796467][ T10] usb 4-1: Product: syz
[ 977.800677][ T10] usb 4-1: Manufacturer: syz
[ 977.805289][ T10] usb 4-1: SerialNumber: syz
[ 977.819681][ T10] usb 4-1: config 0 descriptor??
[ 977.952252][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'.
[ 978.153871][ T5861] usb 6-1: USB disconnect, device number 10
[ 978.197974][ T10] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32
[ 978.235203][T15221] lo speed is unknown, defaulting to 1000
[ 978.242414][T15221] lo speed is unknown, defaulting to 1000
[ 978.316441][T15221] lo speed is unknown, defaulting to 1000
[ 978.393787][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[ 978.560054][ T10] usb 4-1: USB disconnect, device number 23
[ 979.201303][T15237] overlayfs: missing 'lowerdir'
[ 980.199388][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 980.200993][ T5861] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 980.302983][ T30] audit: type=1400 audit(2000000227.385:2305): avc: denied { create } for pid=15275 comm="syz.3.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 980.364721][ T30] audit: type=1400 audit(2000000227.405:2306): avc: denied { bind } for pid=15275 comm="syz.3.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 980.369262][ T10] usb 2-1: Using ep0 maxpacket: 8
[ 980.385500][ T5185] udevd[5185]: worker [13593] terminated by signal 33 (Unknown signal 33)
[ 980.399614][ T5185] udevd[5185]: worker [13593] failed while handling '/devices/virtual/block/loop5'
[ 980.422911][ T30] audit: type=1400 audit(2000000227.405:2307): avc: denied { connect } for pid=15275 comm="syz.3.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 980.449661][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 980.472474][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 980.479976][ T5861] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 980.496540][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 980.499680][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0
[ 980.510368][T10950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 980.534685][T15284] lo speed is unknown, defaulting to 1000
[ 980.541758][T15284] lo speed is unknown, defaulting to 1000
[ 980.616980][T15284] lo speed is unknown, defaulting to 1000
[ 980.651154][ T5861] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[ 980.660855][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 980.668152][ T10] usb 2-1: config 0 descriptor??
[ 980.676764][ T5861] usb 5-1: config 0 descriptor??
[ 980.880107][T12427] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 980.932845][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 981.043244][T12427] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 981.054052][T12427] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 981.064039][T12427] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 981.073440][T12427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 981.082507][T12427] usb 4-1: SerialNumber: syz
[ 981.104598][ T5861] uclogic 0003:5543:0004.0009: item fetching failed at offset 4/5
[ 981.113336][ T5861] uclogic 0003:5543:0004.0009: parse failed
[ 981.119414][ T5861] uclogic 0003:5543:0004.0009: probe with driver uclogic failed with error -22
[ 981.296479][T12427] usb 4-1: 0:2 : does not exist
[ 981.301777][T12427] usb 4-1: unit 48 not found!
[ 981.323047][T12427] usb 4-1: USB disconnect, device number 24
[ 981.344807][T13616] udevd[13616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 981.913382][ T10] usb 2-1: USB disconnect, device number 17
[ 982.226842][T15306] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2164'.
[ 982.269425][ C1] ==================================================================
[ 982.277537][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x45a/0x4d0
[ 982.285436][ C1] Read of size 2 at addr ffff8880329f082a by task syz.0.2164/15303
[ 982.293320][ C1]
[ 982.295638][ C1] CPU: 1 UID: 0 PID: 15303 Comm: syz.0.2164 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full)
[ 982.295663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 982.295675][ C1] Call Trace:
[ 982.295681][ C1] <IRQ>
[ 982.295688][ C1] dump_stack_lvl+0x116/0x1f0
[ 982.295714][ C1] print_report+0xc3/0x670
[ 982.295732][ C1] ? __virt_addr_valid+0x5e/0x590
[ 982.295756][ C1] ? __phys_addr+0xc6/0x150
[ 982.295779][ C1] ? rose_timer_expiry+0x45a/0x4d0
[ 982.295803][ C1] kasan_report+0xe0/0x110
[ 982.295821][ C1] ? rose_timer_expiry+0x45a/0x4d0
[ 982.295848][ C1] rose_timer_expiry+0x45a/0x4d0
[ 982.295872][ C1] ? __pfx_rose_timer_expiry+0x10/0x10
[ 982.295895][ C1] call_timer_fn+0x197/0x620
[ 982.295918][ C1] ? __pfx_call_timer_fn+0x10/0x10
[ 982.295943][ C1] ? rcu_is_watching+0x12/0xc0
[ 982.295964][ C1] ? __pfx_rose_timer_expiry+0x10/0x10
[ 982.295989][ C1] __run_timers+0x6ef/0x960
[ 982.296015][ C1] ? __pfx___run_timers+0x10/0x10
[ 982.296051][ C1] run_timer_base+0x114/0x190
[ 982.296074][ C1] ? __pfx_run_timer_base+0x10/0x10
[ 982.296100][ C1] run_timer_softirq+0x1a/0x40
[ 982.296123][ C1] handle_softirqs+0x216/0x8e0
[ 982.296147][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 982.296169][ C1] __irq_exit_rcu+0x109/0x170
[ 982.296190][ C1] irq_exit_rcu+0x9/0x30
[ 982.296210][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 982.296233][ C1] </IRQ>
[ 982.296239][ C1] <TASK>
[ 982.296246][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 982.296266][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10
[ 982.296290][ C1] Code: fb 09 00 00 44 8b 05 49 b8 fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 2f 79 39 00 fb 65 48 8b 1d 8e 82 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[ 982.296307][ C1] RSP: 0000:ffffc90004b57cf8 EFLAGS: 00000202
[ 982.296323][ C1] RAX: 0000000000001db5 RBX: ffff888012e98000 RCX: ffffffff81c2e5af
[ 982.296335][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe14c7 RDI: ffffffff8bf48360
[ 982.296347][ C1] RBP: ffffc90004b57d40 R08: 0000000000000001 R09: 0000000000000001
[ 982.296359][ C1] R10: ffffffff9084f617 R11: 0000000000000000 R12: ffff8880b8539dc0
[ 982.296371][ C1] R13: ffff888012e9a440 R14: 0000000000000000 R15: dffffc0000000000
[ 982.296386][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120
[ 982.296407][ C1] ? finish_task_switch.isra.0+0x221/0xc10
[ 982.296430][ C1] __schedule+0x1177/0x5de0
[ 982.296457][ C1] ? __pfx___schedule+0x10/0x10
[ 982.296476][ C1] ? count_memcg_events_mm.constprop.0+0x142/0x340
[ 982.296498][ C1] ? handle_mm_fault+0x49b/0xad0
[ 982.296524][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30
[ 982.296546][ C1] schedule+0xe7/0x3a0
[ 982.296566][ C1] irqentry_exit_to_user_mode+0xe4/0x280
[ 982.296590][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20
[ 982.296608][ C1] RIP: 0033:0x7fe23f66ea50
[ 982.296625][ C1] Code: 38 44 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 <4c> 89 54 24 08 e8 46 ef fd ff 4c 8b 54 24 08 4c 8b 44 24 10 84 c0
[ 982.296642][ C1] RSP: 002b:00007ffe756e7670 EFLAGS: 00000246
[ 982.296655][ C1] RAX: 000000000000e5c8 RBX: 00007fe2404e5720 RCX: 0000000000012f60
[ 982.296666][ C1] RDX: ffffffff85017549 RSI: ffffffff85017254 RDI: 0000000000000016
[ 982.296678][ C1] RBP: ffffffff85017254 R08: 00007fe23f9b61f8 R09: 00007fe23f9a2000
[ 982.296689][ C1] R10: 00007fe23e5fb008 R11: 0000000000000016 R12: 0000000000000016
[ 982.296700][ C1] R13: 0000000000000782 R14: ffffffff85017549 R15: 0000000000012f60
[ 982.296712][ C1] ? nla_put+0xe9/0x140
[ 982.296738][ C1] ? __nla_put_64bit+0x4/0x40
[ 982.296763][ C1] ? nla_put+0xe9/0x140
[ 982.296785][ C1] ? __nla_put_64bit+0x4/0x40
[ 982.296810][ C1] </TASK>
[ 982.296816][ C1]
[ 982.666230][ C1] Allocated by task 13616:
[ 982.670633][ C1] kasan_save_stack+0x33/0x60
[ 982.675298][ C1] kasan_save_track+0x14/0x30
[ 982.679964][ C1] __kasan_kmalloc+0xaa/0xb0
[ 982.684538][ C1] kernfs_fop_open+0x244/0xda0
[ 982.689278][ C1] do_dentry_open+0x741/0x1c10
[ 982.694026][ C1] vfs_open+0x82/0x3f0
[ 982.698081][ C1] path_openat+0x1e5e/0x2d40
[ 982.702645][ C1] do_filp_open+0x20b/0x470
[ 982.707124][ C1] do_sys_openat2+0x11b/0x1d0
[ 982.711784][ C1] __x64_sys_openat+0x174/0x210
[ 982.716606][ C1] do_syscall_64+0xcd/0x260
[ 982.721083][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 982.726946][ C1]
[ 982.729243][ C1] Freed by task 13616:
[ 982.733284][ C1] kasan_save_stack+0x33/0x60
[ 982.737934][ C1] kasan_save_track+0x14/0x30
[ 982.742584][ C1] kasan_save_free_info+0x3b/0x60
[ 982.747579][ C1] __kasan_slab_free+0x51/0x70
[ 982.752312][ C1] kfree+0x2b6/0x4d0
[ 982.756203][ C1] kernfs_fop_release+0x12c/0x1e0
[ 982.761224][ C1] __fput+0x3ff/0xb70
[ 982.765195][ C1] fput_close_sync+0x118/0x260
[ 982.769950][ C1] __x64_sys_close+0x8b/0x120
[ 982.774610][ C1] do_syscall_64+0xcd/0x260
[ 982.779091][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 982.784965][ C1]
[ 982.787278][ C1] The buggy address belongs to the object at ffff8880329f0800
[ 982.787278][ C1] which belongs to the cache kmalloc-512 of size 512
[ 982.801301][ C1] The buggy address is located 42 bytes inside of
[ 982.801301][ C1] freed 512-byte region [ffff8880329f0800, ffff8880329f0a00)
[ 982.814981][ C1]
[ 982.817278][ C1] The buggy address belongs to the physical page:
[ 982.823656][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880329f1800 pfn:0x329f0
[ 982.833687][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 982.842187][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 982.850671][ C1] page_type: f5(slab)
[ 982.854623][ C1] raw: 00fff00000000240 ffff88801b441c80 ffffea00009dfd10 ffffea0001f30d10
[ 982.863210][ C1] raw: ffff8880329f1800 0000000000100007 00000000f5000000 0000000000000000
[ 982.871772][ C1] head: 00fff00000000240 ffff88801b441c80 ffffea00009dfd10 ffffea0001f30d10
[ 982.880418][ C1] head: ffff8880329f1800 0000000000100007 00000000f5000000 0000000000000000
[ 982.889062][ C1] head: 00fff00000000002 ffffea0000ca7c01 00000000ffffffff 00000000ffffffff
[ 982.897702][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 982.906340][ C1] page dumped because: kasan: bad access detected
[ 982.912721][ C1] page_owner tracks the page as allocated
[ 982.918402][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5185, tgid 5185 (udevd), ts 30809176069, free_ts 30787352685
[ 982.939128][ C1] post_alloc_hook+0x181/0x1b0
[ 982.943878][ C1] get_page_from_freelist+0x135c/0x3920
[ 982.949400][ C1] __alloc_frozen_pages_noprof+0x263/0x23a0
[ 982.955274][ C1] alloc_pages_mpol+0x1fb/0x550
[ 982.960121][ C1] new_slab+0x244/0x340
[ 982.964271][ C1] ___slab_alloc+0xd9c/0x1940
[ 982.968933][ C1] __slab_alloc.constprop.0+0x56/0xb0
[ 982.974284][ C1] __kmalloc_cache_noprof+0xfb/0x3e0
[ 982.979548][ C1] kernfs_fop_open+0x244/0xda0
[ 982.984292][ C1] do_dentry_open+0x741/0x1c10
[ 982.989030][ C1] vfs_open+0x82/0x3f0
[ 982.993081][ C1] path_openat+0x1e5e/0x2d40
[ 982.997646][ C1] do_filp_open+0x20b/0x470
[ 983.002130][ C1] do_sys_openat2+0x11b/0x1d0
[ 983.006777][ C1] __x64_sys_openat+0x174/0x210
[ 983.011609][ C1] do_syscall_64+0xcd/0x260
[ 983.016086][ C1] page last free pid 5187 tgid 5187 stack trace:
[ 983.022404][ C1] __free_frozen_pages+0x69d/0xff0
[ 983.027488][ C1] qlist_free_all+0x4e/0x120
[ 983.032053][ C1] kasan_quarantine_reduce+0x195/0x1e0
[ 983.037489][ C1] __kasan_slab_alloc+0x69/0x90
[ 983.042323][ C1] __kmalloc_cache_noprof+0x1f1/0x3e0
[ 983.047782][ C1] kernfs_fop_open+0x244/0xda0
[ 983.052531][ C1] do_dentry_open+0x741/0x1c10
[ 983.057272][ C1] vfs_open+0x82/0x3f0
[ 983.061325][ C1] path_openat+0x1e5e/0x2d40
[ 983.065896][ C1] do_filp_open+0x20b/0x470
[ 983.070376][ C1] do_sys_openat2+0x11b/0x1d0
[ 983.075026][ C1] __x64_sys_openat+0x174/0x210
[ 983.079861][ C1] do_syscall_64+0xcd/0x260
[ 983.084341][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 983.090211][ C1]
[ 983.092509][ C1] Memory state around the buggy address:
[ 983.098108][ C1] ffff8880329f0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 983.106148][ C1] ffff8880329f0780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 983.114196][ C1] >ffff8880329f0800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 983.122238][ C1] ^
[ 983.127586][ C1] ffff8880329f0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 983.135621][ C1] ffff8880329f0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 983.143650][ C1] ==================================================================
[ 983.151794][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 983.158975][ C1] CPU: 1 UID: 0 PID: 15303 Comm: syz.0.2164 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full)
[ 983.171006][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 983.181051][ C1] Call Trace:
[ 983.184312][ C1] <IRQ>
[ 983.187132][ C1] dump_stack_lvl+0x3d/0x1f0
[ 983.191723][ C1] panic+0x71c/0x800
[ 983.195598][ C1] ? __pfx_panic+0x10/0x10
[ 983.199995][ C1] ? mark_held_locks+0x49/0x80
[ 983.204736][ C1] ? rose_timer_expiry+0x45a/0x4d0
[ 983.209828][ C1] ? check_panic_on_warn+0x1f/0xb0
[ 983.214928][ C1] ? rose_timer_expiry+0x45a/0x4d0
[ 983.220015][ C1] check_panic_on_warn+0xab/0xb0
[ 983.224930][ C1] end_report+0x107/0x170
[ 983.229251][ C1] kasan_report+0xee/0x110
[ 983.233644][ C1] ? rose_timer_expiry+0x45a/0x4d0
[ 983.238746][ C1] rose_timer_expiry+0x45a/0x4d0
[ 983.243680][ C1] ? __pfx_rose_timer_expiry+0x10/0x10
[ 983.249132][ C1] call_timer_fn+0x197/0x620
[ 983.253713][ C1] ? __pfx_call_timer_fn+0x10/0x10
[ 983.258812][ C1] ? rcu_is_watching+0x12/0xc0
[ 983.263562][ C1] ? __pfx_rose_timer_expiry+0x10/0x10
[ 983.268996][ C1] __run_timers+0x6ef/0x960
[ 983.273480][ C1] ? __pfx___run_timers+0x10/0x10
[ 983.278483][ C1] run_timer_base+0x114/0x190
[ 983.283136][ C1] ? __pfx_run_timer_base+0x10/0x10
[ 983.288309][ C1] run_timer_softirq+0x1a/0x40
[ 983.293050][ C1] handle_softirqs+0x216/0x8e0
[ 983.297788][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 983.303048][ C1] __irq_exit_rcu+0x109/0x170
[ 983.307698][ C1] irq_exit_rcu+0x9/0x30
[ 983.311915][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 983.317524][ C1] </IRQ>
[ 983.320429][ C1] <TASK>
[ 983.323336][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 983.329294][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10
[ 983.335702][ C1] Code: fb 09 00 00 44 8b 05 49 b8 fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 2f 79 39 00 fb 65 48 8b 1d 8e 82 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1
[ 983.355282][ C1] RSP: 0000:ffffc90004b57cf8 EFLAGS: 00000202
[ 983.361321][ C1] RAX: 0000000000001db5 RBX: ffff888012e98000 RCX: ffffffff81c2e5af
[ 983.369268][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe14c7 RDI: ffffffff8bf48360
[ 983.377217][ C1] RBP: ffffc90004b57d40 R08: 0000000000000001 R09: 0000000000000001
[ 983.385160][ C1] R10: ffffffff9084f617 R11: 0000000000000000 R12: ffff8880b8539dc0
[ 983.393104][ C1] R13: ffff888012e9a440 R14: 0000000000000000 R15: dffffc0000000000
[ 983.401050][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120
[ 983.407005][ C1] ? finish_task_switch.isra.0+0x221/0xc10
[ 983.412789][ C1] __schedule+0x1177/0x5de0
[ 983.417268][ C1] ? __pfx___schedule+0x10/0x10
[ 983.422091][ C1] ? count_memcg_events_mm.constprop.0+0x142/0x340
[ 983.428565][ C1] ? handle_mm_fault+0x49b/0xad0
[ 983.433481][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30
[ 983.439537][ C1] schedule+0xe7/0x3a0
[ 983.443585][ C1] irqentry_exit_to_user_mode+0xe4/0x280
[ 983.449201][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20
[ 983.454638][ C1] RIP: 0033:0x7fe23f66ea50
[ 983.459028][ C1] Code: 38 44 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 <4c> 89 54 24 08 e8 46 ef fd ff 4c 8b 54 24 08 4c 8b 44 24 10 84 c0
[ 983.478610][ C1] RSP: 002b:00007ffe756e7670 EFLAGS: 00000246
[ 983.484649][ C1] RAX: 000000000000e5c8 RBX: 00007fe2404e5720 RCX: 0000000000012f60
[ 983.492594][ C1] RDX: ffffffff85017549 RSI: ffffffff85017254 RDI: 0000000000000016
[ 983.500537][ C1] RBP: ffffffff85017254 R08: 00007fe23f9b61f8 R09: 00007fe23f9a2000
[ 983.508481][ C1] R10: 00007fe23e5fb008 R11: 0000000000000016 R12: 0000000000000016
[ 983.516423][ C1] R13: 0000000000000782 R14: ffffffff85017549 R15: 0000000000012f60
[ 983.524368][ C1] ? nla_put+0xe9/0x140
[ 983.528500][ C1] ? __nla_put_64bit+0x4/0x40
[ 983.533152][ C1] ? nla_put+0xe9/0x140
[ 983.537280][ C1] ? __nla_put_64bit+0x4/0x40
[ 983.541933][ C1] </TASK>
[ 983.545128][ C1] Kernel Offset: disabled
[ 983.549441][ C1] Rebooting in 86400 seconds..