last executing test programs: 6.710898681s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) alarm(0x2) 5.785409479s ago: executing program 2 (id=42): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) 5.189819111s ago: executing program 1 (id=46): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x21, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5.18971535s ago: executing program 1 (id=47): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000043d8a0870272091776c010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 3.918189415s ago: executing program 2 (id=55): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.482248102s ago: executing program 0 (id=86): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 1.790526446s ago: executing program 3 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140d0000060a090400000000000000000200000018000480140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32000000000500074075000000c80c04805000018008000100"], 0xd3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.790268306s ago: executing program 3 (id=99): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x400, 0x109) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 '], 0x9) 1.789942096s ago: executing program 3 (id=100): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009b40)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000600)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000d80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000003680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, &(0x7f0000003700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000004380)=[{0x0}, {&(0x7f0000009480)=""/236, 0xec}], 0x2, &(0x7f0000009580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x5, 0x142, &(0x7f0000009d80)={0x0, 0x989680}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1.789743486s ago: executing program 3 (id=101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x1, 0x4) 1.789377136s ago: executing program 3 (id=102): pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xd, 0x7, 0x1, {{}, 0xaf90}}, 0xd) write$P9_RATTACH(r0, &(0x7f0000000340)={0x14, 0x69, 0x1, {0x40, 0x1}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(0x0) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)) r5 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0xa0000000}) 1.274387856s ago: executing program 1 (id=105): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r2}, 0x38) 1.201406497s ago: executing program 1 (id=106): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x1ff]}, 0x8) 1.189816917s ago: executing program 1 (id=107): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd8, 0x57, 0xe0, 0x40, 0xdfc, 0x1, 0xc19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x25, 0x7d, 0x27}}]}}]}}, 0x0) keyctl$set_timeout(0xf, r1, 0xfffff49f) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, r1) 1.086407289s ago: executing program 2 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 1.03049959s ago: executing program 4 (id=112): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00010100000000060000fdff000000", @ANYBLOB="04"], 0x1c}], 0x1}, 0x0) 1.03016957s ago: executing program 4 (id=113): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1a6d6d6630c1415be15bb7a046f8ab4531a0e53c87562fe6eb0b2a9ef86bef100438272ba0a1139406fc8a3c6835ee4820ca3390d5cbe5156fcd7158e6246784b5f632797e0f3588"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216"], 0x10}}, 0x0) 1.0299458s ago: executing program 4 (id=114): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$'], 0x20) 1.02970999s ago: executing program 4 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x14, r4, 0x1, 0xffffffff, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f0000000040)=""/250, 0xfa) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000001240)={0xf1, "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"}) 101.678648ms ago: executing program 4 (id=116): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x0, 0x77}, {0x0, 0x4, 0x0, 0x0, 0xfffffffbfffffffd, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1502, 0x1, 0x2, 0x0, 0x5, 0x6, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 90.732108ms ago: executing program 4 (id=117): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) pwritev(r0, 0x0, 0x0, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 0s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000280)=ANY=[]) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 13.777565][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 13.777581][ T30] audit: type=1400 audit(1759577525.569:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.787547][ T30] audit: type=1400 audit(1759577525.569:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.794683][ T30] audit: type=1400 audit(1759577525.569:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[13977]" dev="pipefs" ino=13977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.811415][ T30] audit: type=1400 audit(1759577525.569:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.830268][ T30] audit: type=1400 audit(1759577525.569:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 21.045248][ T30] audit: type=1400 audit(1759577532.839:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.046770][ T273] cgroup: Unknown subsys name 'net' [ 21.067970][ T30] audit: type=1400 audit(1759577532.839:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.095239][ T30] audit: type=1400 audit(1759577532.869:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.095881][ T273] cgroup: Unknown subsys name 'devices' [ 21.234021][ T273] cgroup: Unknown subsys name 'hugetlb' [ 21.239689][ T273] cgroup: Unknown subsys name 'rlimit' [ 21.439997][ T30] audit: type=1400 audit(1759577533.229:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.463175][ T30] audit: type=1400 audit(1759577533.229:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.466702][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.488185][ T30] audit: type=1400 audit(1759577533.229:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.519694][ T30] audit: type=1400 audit(1759577533.289:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.529563][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.545316][ T30] audit: type=1400 audit(1759577533.289:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.579548][ T30] audit: type=1400 audit(1759577533.319:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.605077][ T30] audit: type=1400 audit(1759577533.319:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.276427][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.283660][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.291136][ T281] device bridge_slave_0 entered promiscuous mode [ 23.298192][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.305253][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.312714][ T281] device bridge_slave_1 entered promiscuous mode [ 23.450031][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.457116][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.464714][ T282] device bridge_slave_0 entered promiscuous mode [ 23.481398][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.488495][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.495953][ T284] device bridge_slave_0 entered promiscuous mode [ 23.502723][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.509762][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.517259][ T282] device bridge_slave_1 entered promiscuous mode [ 23.526487][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.533550][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.540851][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.547895][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.557381][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.564480][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.571803][ T284] device bridge_slave_1 entered promiscuous mode [ 23.614710][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.621765][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.629290][ T283] device bridge_slave_0 entered promiscuous mode [ 23.641439][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.648508][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.655979][ T283] device bridge_slave_1 entered promiscuous mode [ 23.685806][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.692905][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.700279][ T285] device bridge_slave_0 entered promiscuous mode [ 23.716909][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.724110][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.731455][ T285] device bridge_slave_1 entered promiscuous mode [ 23.777683][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.785169][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.793591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.801051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.865673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.875071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.883385][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.890406][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.897796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.906572][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.913617][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.920959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.928953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.948080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.971114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.978828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.990917][ T281] device veth0_vlan entered promiscuous mode [ 24.052780][ T281] device veth1_macvtap entered promiscuous mode [ 24.059970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.068605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.077102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.085404][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.092460][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.099935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.108201][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.115233][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.122735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.152410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.160861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.193295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.203020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.210431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.218736][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.225795][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.233796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.241919][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.249066][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.256538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.264569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.272588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.280488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.288502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.296650][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.303687][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.311065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.319320][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.326375][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.333933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.342181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.363320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.371771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.380420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.388835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.397076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.405364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.413511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.421825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.435843][ T282] device veth0_vlan entered promiscuous mode [ 24.446653][ T283] device veth0_vlan entered promiscuous mode [ 24.454876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.463554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.471558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.479711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.487957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.495645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.503297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.510708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.538903][ T283] device veth1_macvtap entered promiscuous mode [ 24.545897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.553918][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 24.554505][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.568582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.577100][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.585409][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.592463][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.599928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.608366][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.616550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.624226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.632709][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.641006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.654576][ T282] device veth1_macvtap entered promiscuous mode [ 24.673109][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.682984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.691170][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.699934][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.708494][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.717091][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.725556][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.733989][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.742437][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.750687][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.758747][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.769453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.777056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.784675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.793086][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.801244][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.808292][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.816132][ T284] device veth0_vlan entered promiscuous mode [ 24.826081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.834450][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.851545][ T284] device veth1_macvtap entered promiscuous mode [ 24.862919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.871279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.879764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.887596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.895762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.903776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.911793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.933145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.941508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.950477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.961384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.038678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.056350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.114608][ T285] device veth0_vlan entered promiscuous mode [ 25.165454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.174807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.189836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.198397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.263685][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.274289][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.285977][ T285] device veth1_macvtap entered promiscuous mode [ 25.297394][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.310297][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.320021][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.365113][ T361] hub 6-0:1.0: USB hub found [ 25.370017][ T361] hub 6-0:1.0: 1 port detected [ 26.260421][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 26.260438][ T30] audit: type=1400 audit(1759577537.179:120): avc: denied { create } for pid=352 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.315505][ T30] audit: type=1400 audit(1759577537.189:121): avc: denied { write } for pid=352 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 26.357869][ T30] audit: type=1400 audit(1759577537.319:122): avc: denied { map_create } for pid=352 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.377730][ T30] audit: type=1400 audit(1759577537.539:123): avc: denied { map_read map_write } for pid=352 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.919486][ T30] audit: type=1400 audit(1759577538.029:124): avc: denied { create } for pid=358 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.945104][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.946007][ T30] audit: type=1400 audit(1759577538.029:125): avc: denied { getopt } for pid=358 comm="syz.3.11" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.961799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.974957][ T30] audit: type=1400 audit(1759577538.049:126): avc: denied { create } for pid=365 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.011798][ T30] audit: type=1400 audit(1759577538.279:127): avc: denied { setopt } for pid=365 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.033928][ T30] audit: type=1400 audit(1759577538.709:128): avc: denied { read write } for pid=372 comm="syz.0.14" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.064534][ T30] audit: type=1400 audit(1759577538.709:129): avc: denied { open } for pid=372 comm="syz.0.14" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.095618][ T384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.574828][ T409] kvm: vcpu 1024: requested lapic timer restore with starting count register 0x390=2452513283 (39240212528 ns) > initial count (24967832624 ns). Using initial count to start timer. [ 27.595418][ T413] netlink: 440 bytes leftover after parsing attributes in process `syz.4.30'. [ 27.604507][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.862018][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 28.152133][ T60] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 28.161287][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.169358][ T60] usb 1-1: Product: syz [ 28.173636][ T60] usb 1-1: Manufacturer: syz [ 28.178257][ T60] usb 1-1: SerialNumber: syz [ 28.184372][ T60] usb 1-1: config 0 descriptor?? [ 28.242037][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.482090][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 28.538749][ T448] Zero length message leads to an empty skb [ 28.602770][ T20] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 28.611132][ T20] usb 3-1: config 2 has no interface number 0 [ 28.617463][ T20] usb 3-1: config 2 interface 31 has no altsetting 0 [ 28.982047][ T344] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.992168][ T20] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 29.001278][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.009418][ T20] usb 3-1: Product: syz [ 29.013648][ T20] usb 3-1: Manufacturer: syz [ 29.018246][ T20] usb 3-1: SerialNumber: syz [ 29.222017][ T344] usb 2-1: Using ep0 maxpacket: 8 [ 29.263769][ T26] usb 3-1: USB disconnect, device number 2 [ 29.440832][ T468] loop8: detected capacity change from 0 to 1 [ 29.532229][ T344] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 29.579886][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.588007][ T344] usb 2-1: Product: syz [ 29.592388][ T344] usb 2-1: Manufacturer: syz [ 29.598570][ T344] usb 2-1: SerialNumber: syz [ 29.611112][ T344] usb 2-1: config 0 descriptor?? [ 30.222028][ T344] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.244426][ T505] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 30.252437][ T505] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 30.285969][ T60] usb 1-1: USB disconnect, device number 2 [ 30.722106][ T344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.974137][ T344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.984289][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.993403][ T344] usb 3-1: Product: syz [ 30.998638][ T344] usb 3-1: Manufacturer: syz [ 31.005810][ T344] usb 3-1: SerialNumber: syz [ 31.288149][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 31.288165][ T30] audit: type=1400 audit(1759577543.079:161): avc: denied { setopt } for pid=561 comm="syz.0.88" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.326844][ T564] overlayfs: unrecognized mount option "workdir=" or missing value [ 31.389860][ T570] netlink: 84 bytes leftover after parsing attributes in process `syz.4.92'. [ 31.428131][ T30] audit: type=1400 audit(1759577543.219:162): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.590584][ T26] usb 2-1: USB disconnect, device number 2 [ 31.772088][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.878182][ T289] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.899238][ T30] audit: type=1326 audit(1759577543.689:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.3.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5367bb8ec9 code=0x7fc00000 [ 32.342055][ T344] cdc_ncm 3-1:1.0: failed to get mac address [ 32.362267][ T344] cdc_ncm 3-1:1.0: bind() failure [ 32.382059][ T344] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 32.392222][ T289] usb 1-1: device descriptor read/64, error -71 [ 32.402206][ T344] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 32.413758][ T344] usb 3-1: USB disconnect, device number 3 [ 32.635562][ T30] audit: type=1400 audit(1759577544.429:164): avc: denied { connect } for pid=612 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.412448][ T30] audit: type=1400 audit(1759577544.689:165): avc: denied { bind } for pid=616 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.463964][ T289] usb 1-1: device descriptor read/64, error -71 [ 33.512082][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.737476][ T30] audit: type=1400 audit(1759577545.509:166): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.773670][ T637] ================================================================== [ 33.781771][ T637] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 33.791004][ T637] Read of size 1 at addr ffff888112220bf8 by task syz.4.117/637 [ 33.798647][ T637] [ 33.800989][ T637] CPU: 0 PID: 637 Comm: syz.4.117 Not tainted syzkaller #0 [ 33.808194][ T637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 33.818277][ T637] Call Trace: [ 33.821567][ T637] [ 33.824507][ T637] __dump_stack+0x21/0x30 [ 33.828861][ T637] dump_stack_lvl+0xee/0x150 [ 33.833468][ T637] ? show_regs_print_info+0x20/0x20 [ 33.838683][ T637] ? load_image+0x3a0/0x3a0 [ 33.843200][ T637] ? unwind_get_return_address+0x4d/0x90 [ 33.848851][ T637] print_address_description+0x7f/0x2c0 [ 33.854435][ T637] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 33.860953][ T637] kasan_report+0xf1/0x140 [ 33.865424][ T637] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 33.871962][ T637] __asan_report_load1_noabort+0x14/0x20 [ 33.877610][ T637] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 33.883951][ T637] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 33.890116][ T637] ? xfrm_netlink_rcv+0x72/0x90 [ 33.894984][ T637] ? netlink_unicast+0x876/0xa40 [ 33.899942][ T637] ? netlink_sendmsg+0x86a/0xb70 [ 33.904906][ T637] ? ____sys_sendmsg+0x5a2/0x8c0 [ 33.909861][ T637] ? ___sys_sendmsg+0x1f0/0x260 [ 33.914725][ T637] ? x64_sys_call+0x4b/0x9a0 [ 33.919328][ T637] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.925441][ T637] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 33.931647][ T637] xfrm_policy_inexact_insert+0x70/0x1130 [ 33.937383][ T637] ? __get_hash_thresh+0x10c/0x420 [ 33.942520][ T637] ? policy_hash_bysel+0x110/0x4f0 [ 33.947668][ T637] xfrm_policy_insert+0x126/0x9a0 [ 33.952708][ T637] ? xfrm_policy_construct+0x54f/0x1f00 [ 33.958273][ T637] xfrm_add_policy+0x4d1/0x830 [ 33.963051][ T637] ? xfrm_dump_sa_done+0xc0/0xc0 [ 33.968005][ T637] xfrm_user_rcv_msg+0x45c/0x6e0 [ 33.972955][ T637] ? xfrm_netlink_rcv+0x90/0x90 [ 33.977830][ T637] ? avc_has_perm_noaudit+0x460/0x460 [ 33.983214][ T637] ? x64_sys_call+0x4b/0x9a0 [ 33.987824][ T637] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 33.993213][ T637] netlink_rcv_skb+0x1e0/0x430 [ 33.997992][ T637] ? xfrm_netlink_rcv+0x90/0x90 [ 34.002858][ T637] ? netlink_ack+0xb60/0xb60 [ 34.007465][ T637] ? wait_for_completion_killable_timeout+0x10/0x10 [ 34.014068][ T637] ? __netlink_lookup+0x387/0x3b0 [ 34.019105][ T637] xfrm_netlink_rcv+0x72/0x90 [ 34.023798][ T637] netlink_unicast+0x876/0xa40 [ 34.028577][ T637] netlink_sendmsg+0x86a/0xb70 [ 34.033376][ T637] ? netlink_getsockopt+0x530/0x530 [ 34.038595][ T637] ? sock_alloc_file+0xba/0x260 [ 34.043461][ T637] ? security_socket_sendmsg+0x82/0xa0 [ 34.048932][ T637] ? netlink_getsockopt+0x530/0x530 [ 34.054144][ T637] ____sys_sendmsg+0x5a2/0x8c0 [ 34.058927][ T637] ? __sys_sendmsg_sock+0x40/0x40 [ 34.063977][ T637] ? import_iovec+0x7c/0xb0 [ 34.068502][ T637] ___sys_sendmsg+0x1f0/0x260 [ 34.073198][ T637] ? __sys_sendmsg+0x250/0x250 [ 34.077981][ T637] ? __fdget+0x1a1/0x230 [ 34.082234][ T637] __x64_sys_sendmsg+0x1e2/0x2a0 [ 34.087185][ T637] ? ___sys_sendmsg+0x260/0x260 [ 34.092050][ T637] ? __kasan_check_write+0x14/0x20 [ 34.097169][ T637] ? switch_fpu_return+0x15d/0x2c0 [ 34.102317][ T637] x64_sys_call+0x4b/0x9a0 [ 34.106756][ T637] do_syscall_64+0x4c/0xa0 [ 34.111186][ T637] ? clear_bhb_loop+0x50/0xa0 [ 34.115878][ T637] ? clear_bhb_loop+0x50/0xa0 [ 34.120567][ T637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.126476][ T637] RIP: 0033:0x7fd6bf553ec9 [ 34.130897][ T637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.150521][ T637] RSP: 002b:00007fd6bdfbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.158957][ T637] RAX: ffffffffffffffda RBX: 00007fd6bf7aafa0 RCX: 00007fd6bf553ec9 [ 34.166940][ T637] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 34.174921][ T637] RBP: 00007fd6bf5d6f91 R08: 0000000000000000 R09: 0000000000000000 [ 34.182911][ T637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.190899][ T637] R13: 00007fd6bf7ab038 R14: 00007fd6bf7aafa0 R15: 00007ffe585cb8b8 [ 34.198889][ T637] [ 34.201917][ T637] [ 34.204247][ T637] Allocated by task 637: [ 34.208489][ T637] __kasan_kmalloc+0xda/0x110 [ 34.213176][ T637] __kmalloc+0x13d/0x2c0 [ 34.217431][ T637] sk_prot_alloc+0xed/0x320 [ 34.221939][ T637] sk_alloc+0x38/0x430 [ 34.226140][ T637] pfkey_create+0x12a/0x660 [ 34.230678][ T637] __sock_create+0x38d/0x7a0 [ 34.235288][ T637] __sys_socket+0xec/0x190 [ 34.239741][ T637] __x64_sys_socket+0x7a/0x90 [ 34.244437][ T637] x64_sys_call+0x8c5/0x9a0 [ 34.249044][ T637] do_syscall_64+0x4c/0xa0 [ 34.253470][ T637] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.259382][ T637] [ 34.261709][ T637] The buggy address belongs to the object at ffff888112220800 [ 34.261709][ T637] which belongs to the cache kmalloc-1k of size 1024 [ 34.275779][ T637] The buggy address is located 1016 bytes inside of [ 34.275779][ T637] 1024-byte region [ffff888112220800, ffff888112220c00) [ 34.289238][ T637] The buggy address belongs to the page: [ 34.294864][ T637] page:ffffea0004488800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112220 [ 34.305117][ T637] head:ffffea0004488800 order:3 compound_mapcount:0 compound_pincount:0 [ 34.313445][ T637] flags: 0x4000000000010200(slab|head|zone=1) [ 34.319539][ T637] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 34.328119][ T637] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 34.336692][ T637] page dumped because: kasan: bad access detected [ 34.343096][ T637] page_owner tracks the page as allocated [ 34.348822][ T637] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 115, ts 5390818821, free_ts 0 [ 34.366879][ T637] post_alloc_hook+0x192/0x1b0 [ 34.371645][ T637] prep_new_page+0x1c/0x110 [ 34.376150][ T637] get_page_from_freelist+0x2cc5/0x2d50 [ 34.381695][ T637] __alloc_pages+0x18f/0x440 [ 34.386280][ T637] new_slab+0xa1/0x4d0 [ 34.390350][ T637] ___slab_alloc+0x381/0x810 [ 34.394958][ T637] __slab_alloc+0x49/0x90 [ 34.399305][ T637] __kmalloc_track_caller+0x169/0x2c0 [ 34.404674][ T637] __alloc_skb+0x21a/0x740 [ 34.409087][ T637] alloc_uevent_skb+0x85/0x240 [ 34.413843][ T637] kobject_uevent_net_broadcast+0x335/0x5a0 [ 34.419742][ T637] kobject_uevent_env+0x52e/0x700 [ 34.424788][ T637] kobject_synth_uevent+0x520/0xaf0 [ 34.430000][ T637] uevent_store+0x25/0x60 [ 34.434341][ T637] dev_attr_store+0x5e/0x80 [ 34.438847][ T637] sysfs_kf_write+0x129/0x150 [ 34.443536][ T637] page_owner free stack trace missing [ 34.448899][ T637] [ 34.451221][ T637] Memory state around the buggy address: [ 34.456850][ T637] ffff888112220a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.464912][ T637] ffff888112220b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.472967][ T637] >ffff888112220b80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 34.481026][ T637] ^ [ 34.488989][ T637] ffff888112220c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.497040][ T637] ffff888112220c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.505091][ T637] ================================================================== [ 34.513146][ T637] Disabling lock debugging due to kernel taint [ 34.523505][ T289] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.543326][ T30] audit: type=1400 audit(1759577545.549:167): avc: denied { read write } for pid=635 comm="syz.4.117" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.566511][ T30] audit: type=1400 audit(1759577545.559:168): avc: denied { open } for pid=635 comm="syz.4.117" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.589966][ T30] audit: type=1400 audit(1759577545.559:169): avc: denied { ioctl } for pid=635 comm="syz.4.117" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.614610][ T30] audit: type=1400 audit(1759577545.559:170): avc: denied { setopt } for pid=635 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.852051][ T39] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 34.860241][ T39] usb 2-1: config 0 has no interface number 0 [ 34.866509][ T39] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 34.875595][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.884515][ T39] usb 2-1: config 0 descriptor?? [ 35.125802][ T39] usb 2-1: USB disconnect, device number 3