last executing test programs: 21.786660682s ago: executing program 1 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x31, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r5 = syz_open_procfs(r2, &(0x7f00000021c0)='net/ip_tables_targets\x00') mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r7, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r6, 0x0}]) 18.278965689s ago: executing program 1 (id=1010): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, 0x0, 0x8040) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="2a004f800c"], 0x218}}, 0xc000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) sendfile(r1, r1, 0x0, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000260000002600000002000000040000000121a60f0100000000000000000000000800000049000000000000000f00ffde000000000000"], 0x0, 0x42, 0x0, 0xfffffffc}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2055ea38, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15.59468903s ago: executing program 1 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x14, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x1b}]}, 0x14}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r6, &(0x7f0000000240)={@val={0x0, 0xf5}, @val={0x0, 0x0, 0x6, 0xe, 0x0, 0x33}, @ipv6=@dccp_packet={0x4, 0x6, "f51d51", 0xf7d, 0x21, 0x1, @empty, @empty, {[@dstopts={0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0xd8, 0x8, 0x5, [@private0={0xfc, 0x0, '\x00', 0xff}, @private2]}, @hopopts={0x0, 0x1c6, '\x00', [@generic={0x7, 0xe26, "289dc3b093f1b7745335c93ee8bba41f1a4bb1b05943a75c5ddad194f76812095464d4a568b8d62e83c60efe6e895d36b50619cf89d63aeb35d7b8437e75dd5b16eb4febd6412eac3ca81acb69fde417184e755637ce3fb3302a404c69f78f32aecb0fdf2d28bd7d0cc299d315bccf45b38b475f3a6ce196f0d91c971d8ef6bb56b0f03e6c6338bfc88bd3f0afba37e1a07d8d3ce508a06cd6f9aa825c37bf52717fe7a5e338145f88e72d87b0c088cf54cd4e34b5887c1466957992be6a64be91a54a7c12fb5fce81fcc752c80b01cdccea108a29dfa7bb3ff1b316ab1012a663bd655e9bb5a38056dbc90492075dd609d8642f20c6e7cfe1418ce81234ddceea4a4aa059d1f951e38a4f7dba17769091104a44f245b7b656626717e077c0e7a70892a59a1f58efc3ac0a6591db26826923379b64a8dd59d21e7e5bd3bda93fe842bd7e7f6366ce1f2b0c08bffa3ea7a3a6b08c17b0e82c02de0f62ca372cde28745c3208736e8a2d14d644d4fc5a931a753a6810806cd1aabca38e63d574829eb662df3e589b860525ff9ec7593fc6f40cd3de985e93252bc8dfe1dc259c628115946232bc82fd0ce5f7b3b949e093a46d59e1f7dffac7f39cbe6748974eadec79bf12e11271b4a5dfd49971be41399d6d9ffe9f1d89b6a469e8460cf3eed678644bc0fe6b6f45df487a4aea0b680b6530660129257cc0a9d992a67147b3e40d9aa0c11f15e338847b0d61e342fdda5de99dc51fbed29009b083c0004da6779dae0763f704e6bfed2989ff6c7eb1f1cf214d2638733a3cbc696e67101680e881f6ad88230319ee408000c69f418e3a78c976464e28bb1ebed10f7ed2fb9267456756437dcf253b61cc1cf81e6f57462ad925b575b0cfcc65ffa8cdade706aef8ef1ba320e6aeef98b8bb1117c10c2989b785ebb57843d05dbd687d14a5b456b144f8a91fc60bd0cd459448dfc13cb5b0f66ccb30726fb3274c3161aa487b8f5fb34c8709b45c068a8c6fd42418dd023934d9fa7ec3a9628ec177f128677998ea8dac0b61d8dd5241785a980043d58e5406a031c99ed8453e8acad682a95eda8a4cd549393d8404a7d7614266fa1707b25ccf564a9b2a4acefe0dcbcb48018e80a866afc17e8d548dd0024bcc011a7361ae3830439fbf25b1a040350f7e2515af3580e9dbdbf49118866e006e6eec8ac1e525cd4e0bd2fb2fcd6812fa7d107985c369d01747799ea80d4fca95498b24778fac498935867c9dc9e3fc6fdf56fe4ebc7ebfd5cda093786f643aa8d4696fd12f8a7f4bfe40810d16138fcec001f46b4635044f1c4763fb69c62877524c58fc61d00f5a07f30eaedda85f800ba0652a0c28753f9ffc9dc7fe91055e05dc9605991b5d07758606c32d1ad3a9989b7bb99b1317521949af878d603e4a672d6ea4bd6b446af4fd081b215936be9da556a4e868d2ee4b9be42b363d831f633d0247e42dcc28330578a0663eaadab4a80481716fb168bb50d029a2977e8a0d819efb1fa606cd4a3431bd76170e3ebad893d7ad6f369cb3e49f6d2beb2a40778a8a461536a90e579c9e6bab2ce0482252fa2562a744e3324357763c2e4c55f8576e622288898fead8824e2cce4f173cc029d27ef3a34d6ff473a627c8507b21d125209ce3b733100a5dfde6d7755029bceb657eb7ae8264ec81010eddb3d15dfb7abde28c842c0a3a05340be899230aba91bf53a54edf804354dacbd5c7ced752ca3e4fc29e250f6c629d70cc3fec64b3d485203c3c43b5651ebf7f3e3294b5c224333f87c99096eaa66cf00b75e3ffbddfb29c678a0b75c4cb4eb06939f8fa53554c10b499455dfec3315c97e8cc9bf29cb5936b3781843a8f040f3a63c2b8b7e1395a6cee74111dde92a194c0e604a56b2ba72b08deab9d76aa170e185213492c9978df38d574f8232938016dd49f5115d71c5e6fe6935b4475cced92da602a0457f4b8f1e00e7c12558408fa945786d716c9d249071c3e665351779a5132b022d70aaf37420c94a514e65cd8cea037805aa185bf9228a223e36be646e33db47ed08b4c06b9555f1b4e6a21d730e1d6803d27b3a4cca6a9e31384d67ee2af2e31216b9c2e8365fce11dbec845a624d5a187bc0f976cc6a2e4d102aa751356d48503109f883a84377334d30e0df395aa2d6b6844d6e5d7f9e610331983c82f57b94182acc292fe8373a8f60fe944995f7d627585f33842fbc6c1c362f5eda832f836d1f072ad078bfebd1fe2e4fc5e34707d4c71be08bdc0a56cf2dfdf2714724a2996ec95fcdbb4b897044ecdb5f76aed15024bcd837059245966bc21d011a298fa05e987a3eb0bfcabb476c8478264ab76c7a520ac30dea6b4ed03930715f582f7bdcfa0943c4efcdc6a60b65429c588d046414bea27ac02d1ff109d4f592b7d95904a94162fc60dce0f4b2f683537d9e078d02f38fcacd6587cb677d0884f39a3c5b0428ea529f80fe1d3edbba2d800b0150fe99d78d9a209e60e44677749f63d6a7443a876239fcba877fb9ecf413903bbbe22ec270538821186df6bee0f6810f8ed71e120dd2ef1f8cc3c8d82c1170de6d08c43d5525e3f7ebdddc197639ecd2414ab02a4a498368d024f59a07db718730e342813254a7dfb52779abe8267af04160155f2642d967768c2dee5f324e79021f70ac1a60268013d47c8094db7fec99b902b82338a80f04f88bdc3ae572c653c6a0cde7b100be5183980ff649e05e2b51a32ca0f704749adea97ad81212a22c5ad4b31b3f813eb82b2ca9e565f01af7f17c0e34ad53bd36ce53ca16f0299f400312772733cdabba2268f923a8fce9869b03db40f025b61764ace575f6602750fb85fcd0b7d4a877b25206bc5b00b5f4c52f6321ded8866bedde49ef7a397c32a066b4a99060bb2ef5a38534e12c550c277774c4253a2a3e9b7c1416f4d8fc39cb9178a03f0b2c776afecbcb3e383a91554f23fb6701c07c364019738eb5bddbc8071a589759ae10215a52d2681c7b8fb48b960865a1e8c09460c44eceed0f3dbfbd94fd87461affa30f2369f34a79453b3f58e354ef977eb82e02887b02d83bdd3d22648f54de3e53c30efbbe4291dd8ea7297dc3830eeca1497b46fe2eb76a1bdd8f36f7b632628d5fe0af8aab816b7c189ffe94bfd62b838aa348c6c614c7d02881a07a33cf7f43df7df3a6907827ca41d326f1ef15083e9a9f33eb15674b916e11c5bc4ef5ef47e60c4d95723d115a3f5adc9e7e7aa3ed04fe5f495f74dab3779a235efed99030e360f1b8d34e25741353258681657e15790702c2e8a957ffa7424229bd0591ab93f107a121340062b5f418213d286b53152c5bc63f89293b3cccbe2c0572a4b2adb4b8d7556cf2065f79444551e11dca0e5e7672a3c85dae870be98086ca46c74351cadfde6bd64bc1cb67ec96c2eec88b2b44dac1b7821968948ed74cdb654ac1944c654d4412fc07876bf7f8250323fddaea6d457375201fd98e25a34826564d31a1b1fe70178f7af3c2106f3cbe906bbf12fdf3bd90dc2832f01514c3aa98042f8ec8a36fcdda884bca488948b7fb201a53667cf44ed888298427a04098904e90e9243930b8eece1f08ca20d9d488c2ce1e50479e87f61d5a8a6ddd36a5d086fa545f54476646c1ac47870c25a7f40afa612b58235137eb3a96f3223b87e70eacbfffbc7f446bdaf83277efc47a4e9119f777c8822f865f96abecd9b4dabd59d1775c8c345e589e5eab96b26160830c9d3ef253980d68caf919b50070d6c15f433fa2c7afefd5234b2123bac555c2db6a46a3dc182777c4620a63191e3ddd8446698d05630cc13d540b9097b911a5644512f213291c2a06501ec59608465d86d032f6e8c52800b6183f200e63dc972a9bf08eb13c2fd514688b182b5edfcdc3d5b25d6748e8d0351b87efbc937bc8aa9c9a8190ef3d0b0cfcdb1f26b7ac8b0a1bd896084a72e5f205fd07269ce1e21b859f07dba35c967df506cf0c935724696248c9e1b31aa0860bff3a33f8ba3083dfb12a641c279ec862167b467b797761fea0f1937fed930b122c76082a7a22764287c556f810b27da0a4716dcf1c504adeaf79a4e9ec6ee12c252a677d91efabb91ac6d166f7c5f2c1ad9a60429243e40e460240790c10bbf07f9b1a8e965fd85206284c2faf97177574ee295c60f9c3e31b67d7dc7aed6bdc93379b747142f9d01ca9063e9e398dfb8001034c7bcf6a2d1c786f153f6ba35aa560b6b3d254bbfd42e6cf4673af0cafa8c5ea552b2fe8f56bceea9787e1907c4521eb0a176af918a07414f9524164b3e2c4bb11ee4d5cf6f1d7d5a3db348268e4c33429db9a65e4891e198d7a92cf703b904f5cf33f13bd378d87e322c78a300575fbcb33c2d38c604c77828f42d37621040dde90ce500298648a31f6afea82ba9fb40e669981b5651de5e25865bc9f49dcc6a0cab8b36f66c1060fe6eec1867ad54b3257ef2e693ef7083cdff9c96b9a02511d5e28da00186f1e47adb9623a48b9b00836ad4e55299e3591b0f75b42e3a1d69265950c8851c297908b7a8f49ed54b2939af203cb5ad3ea0762ca7407c96cfc7631db24713ca8dd64973c982982326263cf885c992f70006c7dfa64bd0fa5e18d853197eba01a86bf1ba6fa3dd3638b4017f68a2fa937d7120f5c539aef5e3018e7aba15295b5e711ba8fa560548a8ddcc742827ff91500e1cde184a13e7adb8a87526aa8db61e3419e30ab0ea03a042be42dcb144bf8c9a7c84720155830c4db99079885e9d7855052c45e5b55dda789a74b5aea842943c73cf39cb591d147608970a55a4b7d6868d85a7bb9a66079a882d63e42774264529654d3d8557778a266c151672310aa12dd55f5b8a5ce0b0b4dd1f89b2a7c8b35d6761b88b59f25298f989bef46cd1e1324cc1987c8fbcc50b4ebe7844da8bab843092b33bb5b23def3d5d0b334ffcdd67643f6a92220ea9e55ed943f380e0fd52a8a0e45c3e28504b7b386a2ab6fe91c8d39fae4581a2477ed5d83ae03ec4a2646232c6f2bfcbffc39ebe9a5977114520f7b38f6d28ad2b16be17bce0b9bf4755b487b257167c7099c317faef8582a305d614c2a11e53ebddf335fbd8f9ab866f09ad043c"}, @jumbo={0xc2, 0x4, 0x800}, @enc_lim={0x4, 0x1, 0xd}]}], {{0x4e21, 0x4e23, 0x4, 0x1, 0xc, 0x0, 0x0, 0x5, 0x6, "173153", 0x38, "74c149"}, "b943d731c580ae6e3d63da638a803f3a5e041e3666bd3e26ca94482a779f847f87c83abf3990c5cba82803b123fd5e51327cb48b29723e3ea6b15709d7d7eade99e05fefb305691cf7d2054ff535dc456ea165a108cbd86053c42f3e9f45829914ad28772779ad1f40f70b292c5165196e40e6938911f9b9be4f7814b2fd600cd8aa1d640d07f9b641b36502e2e4e8ab13d0cb38dc5babfeca5090b52681a0f30cadcc7bb61fd2c704de373a0608bb24ee28c3cd58d07c170c4d576e988e9b162c38736dd0ad47e52123f02635bc66fceab0960d5282e7aa3d82851871486dfcd6de11c143cb7ca0728b9eaa89a8942c8cc46f0b23"}}}}, 0xfb3) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r8) 15.511186775s ago: executing program 4 (id=1017): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00') r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpgid(0xffffffffffffffff, r3) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20009805}, 0x24000004) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000840)=[{&(0x7f0000000640)=""/215, 0xd7}], 0x1, 0x2b, 0x0, 0x0) 15.290755995s ago: executing program 3 (id=1018): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000008", @ANYRES8=r0, @ANYBLOB="010000e60000000000001b0000000700000061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = eventfd2(0x80000000, 0x80000) io_submit(r2, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r1, 0x0, 0x0, 0x400, 0x0, 0x1, r3}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r9) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r10, 0x101, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 14.516044784s ago: executing program 4 (id=1019): pipe2$watch_queue(0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00'}) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0xfffffffffffffc01, 0x1) tee(r2, r5, 0x60000000000, 0x0) 13.814973935s ago: executing program 1 (id=1021): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1cb902, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x34040081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r2) socket$caif_stream(0x25, 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000000c0)=""/111) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 11.720614959s ago: executing program 3 (id=1023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() inotify_add_watch(0xffffffffffffffff, 0x0, 0x16000f57) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xf, "9687748e"}]}}, 0x0}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r6 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, 0x0, 0x40) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.635456441s ago: executing program 0 (id=1026): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffff, 0xb7, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) close(r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x7ffffff7, 0x884e1, 0x2f, 0x2007, 0x7, 0x8, 0x80ffe, 0x1, 0x4, 0x8500, 0x1003, 0x1000004, 0xb, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x8, 0x10, 0x40000, 0x8, 0xe2df, 0x746f, 0xffff, 0x5, 0x3, 0x0, 0xffffffff, 0x7fff]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.967926485s ago: executing program 3 (id=1027): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)='cpuset\x00', 0xc2, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000300)={0xfffffffffeff8001, 0x9, 0x1}) request_key(0x0, &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = io_uring_setup(0xfc6, &(0x7f0000000180)={0x0, 0xfffffffc, 0x0, 0x0, 0x29d}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x68}}, 0x0) 9.947217133s ago: executing program 1 (id=1028): socket$inet(0x10, 0xa, 0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r8 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 8.729634805s ago: executing program 0 (id=1029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, &(0x7f0000000380)) getpeername(r1, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) 8.666354477s ago: executing program 4 (id=1030): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) get_robust_list(0x0, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x23, 0x5, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce, 0x0, r3}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a00), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0xfffffffffffffe14, 0x0, 0x0}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.501032942s ago: executing program 3 (id=1031): r0 = socket(0x2a, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setattr(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0), 0x8) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000080)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 7.900353748s ago: executing program 2 (id=1032): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x6d314c62590670e4}, 0x200480c1) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8408e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000003000/0x3000)=nil) readlink(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x5, "00f400", 0x9, 0xf8}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r6, 0x0, 0x0) 7.693268721s ago: executing program 0 (id=1033): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xffffffffffffff91}, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=""/166, 0xa6}, 0xfffeffff}], 0x1, 0x40002022, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000380)=[{}], 0x2, 0x1000) close_range(r2, 0xffffffffffffffff, 0x0) 6.422815602s ago: executing program 0 (id=1034): read$dsp(0xffffffffffffffff, &(0x7f0000000700)=""/228, 0xe4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x401, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd70000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) io_setup(0x202, &(0x7f0000000200)=0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=[0x8000, 0x8, 0x6, 0x10], &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)}) io_getevents(r4, 0xc, 0x0, 0x0, 0x0) 6.411891235s ago: executing program 2 (id=1035): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x65250b2a79c9e6de) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 5.532564331s ago: executing program 4 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r4 = syz_open_procfs(r1, &(0x7f00000021c0)='net/ip_tables_targets\x00') mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x177) close(r6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x4, 0x53ce, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x10) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x10000000000) 5.411088221s ago: executing program 0 (id=1037): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001980)=[{0x0}, {&(0x7f0000000380)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="5825be0600", 0x5}], 0x1}}], 0x2, 0x4080) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r6 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r6}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x8, 0xffff}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000881c) 4.449592187s ago: executing program 4 (id=1038): timer_create(0x9, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x85, &(0x7f0000003e80)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0x77, 0x0, 0x0, 0xfe, 0x2f, 0x0, @private, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x2, 0x0, [0xff], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0x2, "4f5a8ba30949e3216e789f4149faf5557fb618e3f701000000eaaf"}}}}}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) recvmmsg(r4, &(0x7f0000003c80)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/116, 0x74}], 0x1, &(0x7f0000000740)=""/204, 0xcc}, 0x4}, {{&(0x7f0000000840), 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/133, 0x85}], 0x1, &(0x7f00000009c0)=""/28, 0x1c}, 0x2}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a00)=""/223, 0xdf}, {&(0x7f0000000b00)=""/101, 0x65}, {&(0x7f0000000b80)=""/150, 0x96}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000c80)=""/30, 0x1e}, {&(0x7f0000000cc0)=""/117, 0x75}, {&(0x7f0000000d40)=""/177, 0xb1}, {&(0x7f0000000e00)=""/44, 0x2c}, {&(0x7f0000000e40)=""/55, 0x37}, {&(0x7f0000000e80)=""/53, 0x35}], 0xa}}, {{&(0x7f0000000f80)=@hci, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001000)=""/146, 0x92}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x2, &(0x7f0000002100)=""/248, 0xf8}, 0x3}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002780)=""/72, 0x48}], 0x1, &(0x7f0000002840)=""/44, 0x2c}, 0x4}, {{&(0x7f0000002880)=@ax25={{0x3, @rose}, [@rose, @rose, @bcast, @null, @rose, @netrom, @bcast, @null]}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/58, 0x3a}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/44, 0x2c}, {&(0x7f0000003a80)=""/89, 0x59}, {&(0x7f0000003b00)=""/126, 0x7e}], 0x6, &(0x7f0000003c00)=""/71, 0x47}, 0x7f}], 0x6, 0xe6c9f656e9e49545, &(0x7f0000003e40)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101201, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="536a509314cb0f4943dca10de3e661847a51d1b07d1cbadba7d0595d1595bb71d671dbdd5ddfed0ff99f2a6135f0f7cbe291bdb854417c774ad33b6867b77fa1c2052617d64b29053b545d869915504b15c26e9175866d685e241f017cdbb41771dbbc439e298b9070e2c8cd59e10fc3ad3106025beaedc9029c740709b35ebb39308c44b191297c46c5aa93ba3bd85432f52e6093cae950ce218c66a89589eb5507ff12aac9bb6948985feca880b8692cf7beddf3fd64dc4194be62fe", 0xbd}], 0x1, &(0x7f0000000480)=[{0xa0, 0x8c, 0x0, "ceddefefe293f8bb7564f536f85e5c5aac2921fa20c81cd42f11ee85224d50b657904e49d3beaee7067a5dd2574bcdce161e6cad93387582065dcd20f26a2cde7f6f5b22165622422201b568d8b95f1a7985762e5cc5d5cd91f9dba6485aef1e78fa34ba75d5bbeb0c969372965771c6eddaeb0f1a5da835544eec674d697ad86bc78b756c17d7ca406e725eed"}, {0x58, 0x10b, 0x100, "09b4fc8aa1eb6cca9999264e1db6394e229e71830e13497e17ab1880e68b16764e594f0bef854ccc5841105cd4e92001a75f21b83cd85b733055c797c840e72ec5d9ecde77be"}, {0x20, 0x112, 0x8, "07375f7756e46861d1f1e1a31abb"}, {0xc8, 0xa3, 0x89c, "28b5b879e742fbc7c3dd8fd3a4aeca5eebb1492211ee6684721aaf49f5459cb154f1586f846f4e8775cbce63eafbc2354c0052d74d8b96be32dc0980e2e614834b136cd169784bf377dc66ce79a9d033da0e59a036a6dea10a7503acfda44848c1c8d3b8ff0b1460a869d0d428088dc02295b772a705ee8e5e6728331f13263dfcbda8515129a688f2c4580c4eae508ceaf9ee5b5272f6752dcf2f87f5c05908b1cc29280c16c5dea047314dffbe949d4dcc"}], 0x1e0}, 0x40080) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffb, 0x141c42) writev(r6, 0x0, 0x0) read$watch_queue(r6, &(0x7f0000003e80), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 3.434527678s ago: executing program 4 (id=1039): openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004090}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000004c0)={[0xa, 0xffffffffff7ffffe, 0x7000000, 0x2d6c00000000000, 0x8000, 0xfffffffffffffffc, 0xb0, 0x1ff, 0x80000000000b1d, 0x5, 0x9, 0x81, 0x5, 0x7, 0xe5, 0x7], 0xffffffff, 0x3877c4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.280148055s ago: executing program 2 (id=1040): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) syz_io_uring_submit(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x408400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x80000000}, &(0x7f00000001c0)=0x2, 0x0, 0x6, 0x2, 0x1b, 0x7, 0x2e, 0x9}}], 0x58, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) read(r3, &(0x7f0000000040)=""/225, 0xe1) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) 3.116589349s ago: executing program 3 (id=1041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e00"/16], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_wait(r6, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000007}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x600, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x12, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xb}, @jmp={0x5, 0x0, 0x8, 0xa, 0x0, 0x40, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x3, 0xd4, &(0x7f0000000500)=""/212, 0x41000, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x10, 0x80, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000780)=[r1, 0xffffffffffffffff, r7, r1], &(0x7f00000007c0)=[{0x1, 0x3, 0x0, 0x7}, {0x1, 0x4, 0xe, 0x5}, {0x1, 0x5, 0xe}, {0x5, 0x4, 0xe, 0x6}, {0x2, 0x1, 0x7, 0x3}, {0x4, 0x2, 0x4, 0x7}, {0x3, 0x4, 0x8, 0x2}, {0x3, 0x1, 0x8, 0x6}], 0x10, 0xfffffffc}, 0x94) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x0, 0x0, 0x0}) 2.801182614s ago: executing program 2 (id=1042): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000140), 0x0, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x40}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x81a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x1, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x3024ec81, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r7, 0xc0184d15, 0x0) 1.369623537s ago: executing program 2 (id=1043): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write(r3, &(0x7f0000000000)='$\x00\x00', 0x3) socket$netlink(0x10, 0x3, 0x400000000000004) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.3504019s ago: executing program 0 (id=1044): io_uring_setup(0x53b5, &(0x7f0000000580)={0x0, 0xbf6b, 0x1000, 0x100002, 0x30f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x2e, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r5}, 0x10) r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mq_notify(r6, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000), 0x0) 1.343545797s ago: executing program 3 (id=1045): getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) 1.30646398s ago: executing program 1 (id=1046): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x73e0, 0xbd66, 0x1, 0x0, 0x27) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c010) 0s ago: executing program 2 (id=1047): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8021, 0x0, 0x3f26, 0xf01, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x202480, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) getsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000), &(0x7f00000002c0)=0x4) kernel console output (not intermixed with test programs): er: syz [ 95.130363][ T5961] usb 2-1: SerialNumber: syz [ 95.151791][ T5961] usb 2-1: config 0 descriptor?? [ 95.159188][ T5961] smsc75xx v1.0.0 [ 95.390618][ T6419] pim6reg1: entered allmulticast mode [ 95.629101][ T6413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.338314][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.523188][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 96.523204][ T30] audit: type=1400 audit(1767557422.299:247): avc: denied { create } for pid=6433 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 96.638503][ T30] audit: type=1400 audit(1767557422.409:248): avc: denied { sys_admin } for pid=6433 comm="syz.2.161" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 96.672202][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 96.691325][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.714864][ T5873] usb 4-1: config 0 descriptor?? [ 96.726705][ T5873] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 97.362571][ T5961] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 97.378321][ T5961] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 97.403263][ T5961] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 97.414870][ T5961] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 97.426815][ T5961] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 97.438357][ T5961] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 97.448511][ T5961] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 97.462449][ T5961] usb 2-1: USB disconnect, device number 4 [ 97.631450][ T30] audit: type=1400 audit(1767557423.409:249): avc: denied { write } for pid=6449 comm="syz.2.163" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.692849][ T30] audit: type=1400 audit(1767557423.459:250): avc: denied { create } for pid=6451 comm="syz.0.165" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.714125][ T30] audit: type=1400 audit(1767557423.459:251): avc: denied { link } for pid=6451 comm="syz.0.165" name="#5" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.738499][ T30] audit: type=1400 audit(1767557423.459:252): avc: denied { rename } for pid=6451 comm="syz.0.165" name="#6" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.868685][ T30] audit: type=1400 audit(1767557423.639:253): avc: denied { ioctl } for pid=6454 comm="syz.0.166" path="socket:[10185]" dev="sockfs" ino=10185 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.920393][ T30] audit: type=1400 audit(1767557423.689:254): avc: denied { create } for pid=6456 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.998469][ T30] audit: type=1400 audit(1767557423.719:255): avc: denied { write } for pid=6456 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.039705][ T30] audit: type=1400 audit(1767557423.749:256): avc: denied { read } for pid=6456 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.125314][ T6459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.233980][ T6465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.464662][ T5873] usb 4-1: USB disconnect, device number 2 [ 100.137609][ T6496] overlayfs: failed to decode file handle (len=5, type=1, flags=0, err=-22) [ 100.766240][ T5899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.481379][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 101.489735][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 101.512185][ T5899] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 101.520797][ T5899] usb 1-1: Product: syz [ 101.543263][ T5899] usb 1-1: Manufacturer: syz [ 101.547891][ T5899] usb 1-1: SerialNumber: syz [ 101.572954][ T5899] usb 1-1: config 0 descriptor?? [ 101.580980][ T5899] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 101.584706][ T6519] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.735050][ T6521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.777264][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 101.777279][ T30] audit: type=1400 audit(1767557427.549:259): avc: denied { create } for pid=6520 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.812825][ T30] audit: type=1400 audit(1767557427.549:260): avc: denied { bind } for pid=6520 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.833114][ T30] audit: type=1400 audit(1767557427.549:261): avc: denied { create } for pid=6520 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.853272][ T30] audit: type=1400 audit(1767557427.549:262): avc: denied { ioctl } for pid=6520 comm="syz.2.183" path="socket:[11358]" dev="sockfs" ino=11358 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.024713][ T5899] gspca_zc3xx: reg_r err -71 [ 102.029858][ T5899] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 102.053842][ T5899] usb 1-1: USB disconnect, device number 5 [ 102.337960][ T6490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.421258][ T30] audit: type=1400 audit(1767557428.189:263): avc: denied { search } for pid=6522 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.497879][ T30] audit: type=1400 audit(1767557428.229:264): avc: denied { search } for pid=6522 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.608896][ T30] audit: type=1400 audit(1767557428.229:265): avc: denied { search } for pid=6522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.641274][ T30] audit: type=1400 audit(1767557428.229:266): avc: denied { search } for pid=6522 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.879388][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 103.918394][ T30] audit: type=1400 audit(1767557428.239:267): avc: denied { read open } for pid=6523 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.945977][ T30] audit: type=1400 audit(1767557428.239:268): avc: denied { getattr } for pid=6523 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.291663][ T6566] syz_tun: entered allmulticast mode [ 104.605626][ T6562] syz_tun: left allmulticast mode [ 104.753281][ T5816] udevd[5816]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 104.902051][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.069480][ T6587] sp0: Synchronizing with TNC [ 105.121264][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 105.383981][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 105.440865][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.473322][ T5899] usb 4-1: Product: syz [ 105.489833][ T5899] usb 4-1: Manufacturer: syz [ 105.500836][ T5899] usb 4-1: SerialNumber: syz [ 105.519367][ T5899] usb 4-1: config 0 descriptor?? [ 105.930486][ T5899] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.981486][ T6604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.367113][ T5899] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 106.425137][ T5899] usb 4-1: USB disconnect, device number 3 [ 106.433106][ T6623] kvm: pic: non byte read [ 106.439235][ T6623] kvm: pic: non byte read [ 106.459006][ T6623] kvm: pic: non byte read [ 106.478945][ T6623] kvm: pic: non byte read [ 106.491385][ T6623] kvm: pic: non byte read [ 106.504082][ T6623] kvm: pic: non byte read [ 106.508610][ T6623] kvm: pic: non byte read [ 106.528307][ T6623] kvm: pic: non byte read [ 106.541361][ T6623] kvm: pic: non byte read [ 106.551467][ T6623] kvm: pic: non byte read [ 106.671537][ T5934] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.832665][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 106.850263][ T5934] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.881222][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.904843][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.929991][ T5934] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.954501][ T5934] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.967003][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.696757][ T5934] usb 5-1: GET_CAPABILITIES returned 0 [ 107.705903][ T5934] usbtmc 5-1:16.0: can't read capabilities [ 107.737689][ T6655] gre0: entered promiscuous mode [ 107.744320][ T6655] gre0: entered allmulticast mode [ 107.933974][ T976] usb 5-1: USB disconnect, device number 8 [ 108.064032][ T6670] syz_tun: entered allmulticast mode [ 108.083589][ T6669] syz_tun: left allmulticast mode [ 108.746283][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 108.746298][ T30] audit: type=1400 audit(1767557434.519:282): avc: denied { write } for pid=6682 comm="syz.2.219" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.819682][ T30] audit: type=1400 audit(1767557434.569:283): avc: denied { mount } for pid=6680 comm="syz.0.217" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.166778][ T6691] kvm: pic: single mode not supported [ 109.166843][ T6691] kvm: pic: single mode not supported [ 109.958220][ T30] audit: type=1400 audit(1767557435.729:284): avc: denied { mount } for pid=6712 comm="syz.4.229" name="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.052951][ T30] audit: type=1400 audit(1767557435.729:285): avc: denied { search } for pid=6712 comm="syz.4.229" name="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.110903][ T30] audit: type=1400 audit(1767557435.729:286): avc: denied { search } for pid=6712 comm="syz.4.229" name="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.155982][ T6723] syzkaller1: entered promiscuous mode [ 110.162063][ T30] audit: type=1400 audit(1767557435.729:287): avc: denied { read open } for pid=6712 comm="syz.4.229" path="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.201547][ T6723] syzkaller1: entered allmulticast mode [ 110.212891][ T6724] netlink: 96 bytes leftover after parsing attributes in process `syz.4.233'. [ 110.226784][ T30] audit: type=1400 audit(1767557435.839:288): avc: denied { mounton } for pid=6718 comm="syz.3.231" path="/47/file0" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.387888][ T30] audit: type=1400 audit(1767557436.159:289): avc: denied { write } for pid=6734 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.426993][ T30] audit: type=1400 audit(1767557436.169:290): avc: denied { ioctl } for pid=6731 comm="syz.2.236" path="socket:[12898]" dev="sockfs" ino=12898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.453680][ T30] audit: type=1400 audit(1767557436.169:291): avc: denied { ioctl } for pid=6731 comm="syz.2.236" path="socket:[12897]" dev="sockfs" ino=12897 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.618005][ T6711] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 110.636221][ T6711] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 112.002631][ T6771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.616964][ T6784] capability: warning: `syz.4.251' uses deprecated v2 capabilities in a way that may be insecure [ 112.920421][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.931838][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.944738][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.952351][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.981357][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.988079][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 113.224462][ T6802] geneve2: entered promiscuous mode [ 114.182105][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 114.182120][ T30] audit: type=1400 audit(1767557439.959:303): avc: denied { execute } for pid=6823 comm="syz.0.266" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.523314][ T30] audit: type=1400 audit(1767557440.299:304): avc: denied { write } for pid=6817 comm="syz.1.263" name="config" dev="proc" ino=4026533450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.732895][ T30] audit: type=1400 audit(1767557440.509:305): avc: denied { create } for pid=6841 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.121589][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.305698][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.318081][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 115.327215][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.337565][ T10] usb 4-1: config 0 descriptor?? [ 115.355382][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 115.625259][ T6870] sp0: Synchronizing with TNC [ 115.972036][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.980555][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.987595][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.994734][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 116.002158][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 116.009018][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 116.015952][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 116.038923][ T6873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.283081][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 116.290746][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 116.298399][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 116.307176][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 116.318638][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 116.325589][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 116.333025][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 116.339922][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.350001][ T10] pwc: Registered as video103. [ 116.367329][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 116.411702][ T10] usb 4-1: USB disconnect, device number 4 [ 116.730565][ T30] audit: type=1400 audit(1767557442.499:306): avc: denied { setcurrent } for pid=6889 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 117.892287][ T30] audit: type=1400 audit(1767557443.669:307): avc: denied { open } for pid=6903 comm="syz.4.289" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 117.949971][ T5821] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 118.008917][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 118.073809][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 118.308852][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.328737][ T6921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.461556][ T6922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.524223][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.535404][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.546062][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 118.565044][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.577155][ T10] usb 5-1: config 0 descriptor?? [ 118.627810][ T6932] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.296'. [ 118.637621][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'. [ 119.003189][ T6938] sp0: Synchronizing with TNC [ 119.368015][ T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 119.379510][ T10] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 119.560415][ T10] cp2112 0003:10C4:EA90.0002: Part Number: 0xA0 Device Version: 0x66 [ 119.591657][ T6945] uprobe: syz.1.300:6945 failed to unregister, leaking uprobe [ 119.639350][ T30] audit: type=1804 audit(1767557445.359:308): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.300" name="/newroot/56/file0" dev="tmpfs" ino=305 res=1 errno=0 [ 119.672887][ T6944] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 120.119071][ T6957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.186663][ T6917] cp2112 0003:10C4:EA90.0002: Error starting transaction: -38 [ 120.199775][ T10] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 120.232310][ T10] usb 5-1: USB disconnect, device number 9 [ 120.824116][ T30] audit: type=1400 audit(1767557446.599:309): avc: denied { read } for pid=6963 comm="syz.0.305" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.431337][ T30] audit: type=1400 audit(1767557446.629:310): avc: denied { open } for pid=6963 comm="syz.0.305" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.468110][ T30] audit: type=1400 audit(1767557446.629:311): avc: denied { write } for pid=6963 comm="syz.0.305" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.554519][ T30] audit: type=1400 audit(1767557447.329:312): avc: denied { setopt } for pid=6972 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.601518][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 121.751424][ T30] audit: type=1400 audit(1767557447.529:313): avc: denied { write } for pid=6972 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.061417][ T5933] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 123.183727][ T30] audit: type=1326 audit(1767557448.959:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.3.312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaab18f749 code=0x0 [ 123.197041][ T7007] netlink: zone id is out of range [ 123.233550][ T5933] usb 1-1: device descriptor read/64, error -71 [ 123.258389][ T7007] netlink: zone id is out of range [ 123.290560][ T7010] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 123.292877][ T7007] netlink: zone id is out of range [ 123.303665][ T7007] netlink: zone id is out of range [ 123.309575][ T7007] netlink: zone id is out of range [ 123.318967][ T7007] netlink: zone id is out of range [ 123.324306][ T7007] netlink: zone id is out of range [ 123.325700][ T7010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.372987][ T7012] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 123.516515][ T5933] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 123.985066][ T7010] bond1: (slave ip6gretap1): making interface the new active one 35900 ms earlier [ 124.010542][ T7010] bond1: active interface up! [ 124.020174][ T7010] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 124.041459][ T5933] usb 1-1: device descriptor read/64, error -71 [ 124.229844][ T5933] usb usb1-port1: attempt power cycle [ 124.386996][ T7022] sp0: Synchronizing with TNC [ 124.561279][ T976] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.711350][ T5933] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 124.762302][ T5933] usb 1-1: device descriptor read/8, error -71 [ 124.891222][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 124.897909][ T976] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.906159][ T976] usb 3-1: config 0 has no interface number 0 [ 124.912468][ T976] usb 3-1: config 0 interface 184 has no altsetting 0 [ 124.921934][ T976] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.930993][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.945219][ T976] usb 3-1: Product: syz [ 124.951106][ T976] usb 3-1: Manufacturer: syz [ 124.963059][ T976] usb 3-1: SerialNumber: syz [ 124.983228][ T976] usb 3-1: config 0 descriptor?? [ 124.992282][ T976] smsc75xx v1.0.0 [ 125.001364][ T5933] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 125.081870][ T5933] usb 1-1: device descriptor read/8, error -71 [ 125.121275][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.191676][ T5933] usb usb1-port1: unable to enumerate USB device [ 125.281283][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 125.292998][ T5899] usb 5-1: config 0 has no interfaces? [ 125.308468][ T5899] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 125.317809][ T5899] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.325907][ T5899] usb 5-1: Manufacturer: syz [ 125.334592][ T5899] usb 5-1: config 0 descriptor?? [ 125.369879][ T30] audit: type=1400 audit(1767557451.139:315): avc: denied { search } for pid=7029 comm="syz.1.325" name="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.395297][ T30] audit: type=1400 audit(1767557451.169:316): avc: denied { search } for pid=7029 comm="syz.1.325" name="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.418446][ T30] audit: type=1400 audit(1767557451.169:317): avc: denied { read open } for pid=7029 comm="syz.1.325" path="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.450296][ T30] audit: type=1400 audit(1767557451.219:318): avc: denied { watch watch_reads } for pid=7029 comm="syz.1.325" path="/" dev="configfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.617914][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 125.630347][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.085363][ T7038] kvm: emulating exchange as write [ 126.405577][ T30] audit: type=1400 audit(1767557452.179:319): avc: denied { create } for pid=7044 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 127.122665][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 127.314268][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 127.324906][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 127.334600][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 127.344613][ T976] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 127.356303][ T976] usb 3-1: USB disconnect, device number 11 [ 127.488480][ T30] audit: type=1400 audit(1767557453.259:320): avc: denied { create } for pid=7056 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.798431][ T30] audit: type=1400 audit(1767557453.259:321): avc: denied { bind } for pid=7056 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.874163][ T30] audit: type=1400 audit(1767557453.259:322): avc: denied { listen } for pid=7056 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.896570][ T5934] usb 5-1: USB disconnect, device number 10 [ 127.976525][ T30] audit: type=1400 audit(1767557453.259:323): avc: denied { connect } for pid=7056 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.009686][ T30] audit: type=1400 audit(1767557453.259:324): avc: denied { accept } for pid=7056 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.321678][ T7073] sp0: Synchronizing with TNC [ 128.449126][ T7070] input: syz0 as /devices/virtual/input/input9 [ 128.953261][ T7082] kvm: pic: level sensitive irq not supported [ 128.953311][ T7082] picdev_read: 589 callbacks suppressed [ 128.953321][ T7082] kvm: pic: non byte read [ 128.975590][ T7082] kvm: pic: single mode not supported [ 128.975606][ T7082] kvm: pic: level sensitive irq not supported [ 128.981091][ T7082] kvm: pic: non byte read [ 129.080461][ T7082] kvm: pic: non byte read [ 129.086598][ T7082] kvm: pic: single mode not supported [ 129.086654][ T7082] kvm: pic: non byte read [ 129.251491][ T7082] kvm: pic: single mode not supported [ 129.251532][ T7082] kvm: pic: non byte read [ 129.341608][ T7082] kvm: pic: non byte read [ 129.349889][ T7082] kvm: pic: single mode not supported [ 129.349900][ T7082] kvm: pic: level sensitive irq not supported [ 129.355951][ T7082] kvm: pic: non byte read [ 129.371692][ T7082] kvm: pic: non byte read [ 129.378598][ T7082] kvm: pic: non byte read [ 129.395332][ T7082] kvm: pic: non byte read [ 129.410354][ T7082] kvm: pic: single mode not supported [ 129.410371][ T7082] kvm: pic: level sensitive irq not supported [ 129.751055][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ca5400: rx timeout, send abort [ 130.251558][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ca7000: rx timeout, send abort [ 130.759810][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ca7000: abort rx timeout. Force session deactivation [ 131.431319][ T5934] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 132.015726][ T5934] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 132.051722][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.091269][ T5934] usb 5-1: config 0 has no interfaces? [ 132.118927][ T5934] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 132.369775][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.450138][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.457366][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.480565][ T5934] usb 5-1: config 0 descriptor?? [ 132.572878][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 132.572893][ T30] audit: type=1400 audit(1767557458.349:341): avc: denied { create } for pid=7130 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.686369][ T30] audit: type=1400 audit(1767557458.389:342): avc: denied { write } for pid=7130 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.351240][ T5899] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.594210][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 134.608593][ T5899] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 134.617872][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.628235][ T5899] usb 1-1: Product: syz [ 134.639911][ T5899] usb 1-1: Manufacturer: syz [ 134.653400][ T5899] usb 1-1: SerialNumber: syz [ 134.678370][ T5899] usb 1-1: config 0 descriptor?? [ 134.709908][ T5932] usb 5-1: USB disconnect, device number 11 [ 134.867852][ T30] audit: type=1400 audit(1767557460.639:343): avc: denied { write } for pid=7182 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.918869][ T30] audit: type=1400 audit(1767557460.679:344): avc: denied { mounton } for pid=7184 comm="syz.3.368" path="/78/file0" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 135.108905][ T5899] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 135.145261][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.163275][ T5899] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 135.175754][ T5899] usb 1-1: media controller created [ 135.186736][ T7191] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 135.202065][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.290909][ T7193] gre1: entered promiscuous mode [ 135.300221][ T30] audit: type=1400 audit(1767557461.069:345): avc: denied { ioctl } for pid=7194 comm="syz.3.372" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14304 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 135.359592][ T7193] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 135.389911][ T5899] zl10353_read_register: readreg error (reg=127, ret==0) [ 135.439813][ T7193] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 135.443961][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 135.457514][ T5899] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 135.470826][ T5899] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 135.486482][ T7193] bond1: (slave gre1): making interface the new active one [ 135.503385][ T30] audit: type=1400 audit(1767557461.279:346): avc: denied { mount } for pid=7197 comm="syz.3.373" name="/" dev="autofs" ino=14310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 135.533015][ T7193] bond1: (slave gre1): Enslaving as an active interface with an up link [ 135.612696][ T7191] bond1 (unregistering): (slave gre1): Releasing backup interface [ 135.640545][ T30] audit: type=1400 audit(1767557461.409:347): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 135.641426][ T7191] bond1 (unregistering): Released all slaves [ 135.758485][ T30] audit: type=1400 audit(1767557461.529:348): avc: denied { read } for pid=7204 comm="syz.3.375" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.823557][ T30] audit: type=1400 audit(1767557461.529:349): avc: denied { open } for pid=7204 comm="syz.3.375" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.856296][ T30] audit: type=1400 audit(1767557461.569:350): avc: denied { ioctl } for pid=7204 comm="syz.3.375" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.938118][ T5899] usb 1-1: USB disconnect, device number 10 [ 135.998917][ T5899] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 136.133353][ T7219] binder: 7218:7219 ioctl c0306201 200000000680 returned -14 [ 138.632958][ T7253] syzkaller0: entered promiscuous mode [ 138.638463][ T7253] syzkaller0: entered allmulticast mode [ 140.127695][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 140.127711][ T30] audit: type=1400 audit(1767557465.899:359): avc: denied { getopt } for pid=7270 comm="syz.4.397" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.341039][ T30] audit: type=1400 audit(1767557466.109:360): avc: denied { write } for pid=7275 comm="syz.2.398" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.382139][ T30] audit: type=1400 audit(1767557466.129:361): avc: denied { create } for pid=7267 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.421287][ T30] audit: type=1400 audit(1767557466.129:362): avc: denied { connect } for pid=7267 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.452876][ T30] audit: type=1400 audit(1767557466.139:363): avc: denied { bind } for pid=7267 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.482298][ T30] audit: type=1400 audit(1767557466.149:364): avc: denied { read } for pid=7267 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.657149][ T30] audit: type=1400 audit(1767557466.249:365): avc: denied { write } for pid=7267 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.070971][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.078069][ T7296] bridge0: port 2(bridge_slave_1) entered listening state [ 142.085306][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.092356][ T7296] bridge0: port 1(bridge_slave_0) entered listening state [ 142.518065][ T7296] net_ratelimit: 275 callbacks suppressed [ 142.518072][ T7296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.076566][ T7309] netlink: 76 bytes leftover after parsing attributes in process `syz.0.405'. [ 145.227774][ T30] audit: type=1400 audit(1767557470.989:366): avc: denied { connect } for pid=7329 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.281372][ T5821] Bluetooth: hci4: link tx timeout [ 145.286932][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.300563][ T30] audit: type=1400 audit(1767557471.049:367): avc: denied { shutdown } for pid=7329 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.332071][ T7341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.411260][ T30] audit: type=1400 audit(1767557471.179:368): avc: denied { read } for pid=7335 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.568093][ T30] audit: type=1400 audit(1767557471.339:369): avc: denied { create } for pid=7345 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.657436][ T30] audit: type=1400 audit(1767557471.359:370): avc: denied { write } for pid=7345 comm="syz.4.416" path="socket:[16673]" dev="sockfs" ino=16673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 145.783315][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 147.136927][ T7354] syzkaller0: entered promiscuous mode [ 147.314688][ T7354] syzkaller0: entered allmulticast mode [ 147.320295][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 147.764037][ T7368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.828921][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.001255][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 148.065249][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.091335][ T10] usb 2-1: config 0 has no interface number 0 [ 148.097436][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.281268][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.341358][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 148.365647][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.842341][ T10] usb 2-1: config 0 descriptor?? [ 149.409485][ T10] hid (null): report_id 1710561283 is invalid [ 149.652948][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input10 [ 149.838407][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input11 [ 149.977780][ T10] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 150.010063][ T10] usb 2-1: USB disconnect, device number 5 [ 150.602446][ T7388] fido_id[7388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 150.673728][ T30] audit: type=1400 audit(1767557476.449:371): avc: denied { read } for pid=5176 comm="acpid" name="event5" dev="devtmpfs" ino=2880 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.794425][ T30] audit: type=1400 audit(1767557476.469:372): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2880 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.874321][ T30] audit: type=1400 audit(1767557476.529:373): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2880 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.605174][ T30] audit: type=1400 audit(1767557477.379:374): avc: denied { create } for pid=7400 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.872458][ T30] audit: type=1400 audit(1767557477.619:375): avc: denied { mount } for pid=7404 comm="syz.1.434" name="/" dev="ramfs" ino=15775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.960002][ T7407] syzkaller0: entered promiscuous mode [ 151.981471][ T7407] syzkaller0: entered allmulticast mode [ 152.012173][ T7411] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 152.724059][ T7411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.020452][ T30] audit: type=1800 audit(1767557478.769:376): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.434" name="bus" dev="ramfs" ino=15776 res=0 errno=0 [ 153.258011][ T7414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.277178][ T7414] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.372391][ T7414] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 157.081017][ T7421] ip6erspan0: entered promiscuous mode [ 157.103355][ T7421] bond2: (slave ip6erspan0): making interface the new active one [ 157.112030][ T7421] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 159.822417][ T7485] kvm: vcpu 0: requested 448 ns lapic timer period limited to 200000 ns [ 160.465169][ T7485] kvm: pic: non byte write [ 160.851401][ T30] audit: type=1400 audit(1767557486.601:377): avc: denied { name_connect } for pid=7495 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 161.057453][ T7490] NFSD: Failed to start, no listeners configured. [ 161.278102][ T7504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.140036][ T30] audit: type=1400 audit(1767557487.911:378): avc: denied { ioctl } for pid=7513 comm="syz.0.459" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 163.320804][ T7530] syzkaller0: entered promiscuous mode [ 163.331262][ T7530] syzkaller0: entered allmulticast mode [ 163.377279][ T7530] 0: reclassify loop, rule prio 0, protocol 800 [ 167.071486][ T7558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.108075][ T30] audit: type=1400 audit(1767557494.881:379): avc: denied { connect } for pid=7573 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.120134][ T30] audit: type=1400 audit(1767557496.891:380): avc: denied { read } for pid=7596 comm="syz.2.480" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 172.661903][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 172.669619][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 175.819305][ T7622] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 176.564469][ T7645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.826585][ T30] audit: type=1400 audit(1767557502.601:381): avc: denied { read } for pid=7657 comm="syz.3.490" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.941233][ T7660] Invalid logical block size (7) [ 178.573143][ T7669] syzkaller0: entered promiscuous mode [ 178.578639][ T7669] syzkaller0: entered allmulticast mode [ 178.739732][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 178.751257][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 179.238929][ T7678] tipc: Started in network mode [ 179.452549][ T7678] tipc: Node identity ea1953e291b, cluster identity 4711 [ 179.473635][ T30] audit: type=1400 audit(1767557505.251:382): avc: denied { append } for pid=7689 comm="syz.0.498" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.477027][ T7678] tipc: Enabled bearer , priority 0 [ 179.570724][ T7691] kvm: pic: non byte write [ 179.575276][ T7691] kvm: pic: non byte write [ 179.579707][ T7691] kvm: pic: level sensitive irq not supported [ 179.713144][ T7668] tipc: Resetting bearer [ 180.003987][ T7668] tipc: Disabling bearer [ 180.118484][ T30] audit: type=1400 audit(1767557505.891:383): avc: denied { bind } for pid=7703 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.398537][ T7708] binder: 7707:7708 ioctl 4018620d 0 returned -22 [ 180.442350][ T30] audit: type=1400 audit(1767557506.221:384): avc: denied { ioctl } for pid=7707 comm="syz.0.501" path="socket:[18441]" dev="sockfs" ino=18441 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 181.543247][ T30] audit: type=1400 audit(1767557507.321:385): avc: denied { connect } for pid=7711 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.769629][ T7724] gre0: entered promiscuous mode [ 181.774678][ T7724] gre0: entered allmulticast mode [ 182.567479][ T7728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.721223][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.988626][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.023954][ T5899] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.059151][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.111811][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.333735][ T7731] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.374493][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.126912][ T5961] usb 4-1: USB disconnect, device number 5 [ 185.302830][ T7769] warning: `syz.2.506' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 185.794194][ T7784] NILFS (nullb0): couldn't find nilfs on the device [ 185.846176][ T30] audit: type=1400 audit(1767557511.561:386): avc: denied { mounton } for pid=7775 comm="syz.4.512" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 189.191238][ T976] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.990128][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.014094][ T976] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.233428][ T976] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 190.242886][ T7820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.411230][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.461226][ T976] usb 4-1: Product: syz [ 190.471249][ T976] usb 4-1: Manufacturer: syz [ 190.475852][ T976] usb 4-1: SerialNumber: syz [ 190.492942][ T976] usb 4-1: config 0 descriptor?? [ 190.506914][ T976] usb 4-1: ucan: probing device on interface #0 [ 190.545502][ T976] usb 4-1: ucan: invalid EP count (0) [ 190.570792][ T976] usb 4-1: ucan: probe failed; try to update the device firmware [ 190.711867][ T7808] netlink: 'syz.3.518': attribute type 1 has an invalid length. [ 190.741318][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 190.743317][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 190.756962][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 190.765356][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 190.776752][ T7808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.892836][ T7843] bond1: (slave veth3): Enslaving as an active interface with a down link [ 191.014399][ T7808] vlan2: entered allmulticast mode [ 191.019552][ T7808] bond_slave_1: entered allmulticast mode [ 191.025674][ T7808] bond_slave_1: entered promiscuous mode [ 191.032867][ T7808] bond_slave_1: left promiscuous mode [ 191.039412][ T7808] bond1: (slave vlan2): making interface the new active one [ 191.047213][ T7808] bond_slave_1: entered promiscuous mode [ 191.054526][ T7808] vlan2: entered promiscuous mode [ 191.060058][ T7808] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 191.214663][ T5961] usb 4-1: USB disconnect, device number 6 [ 194.021972][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.028282][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.123365][ T7890] batman_adv: batadv0: Adding interface: ipvlan2 [ 195.129723][ T7890] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.155323][ T7890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.165779][ T7890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.175625][ T7890] batman_adv: batadv0: Interface activated: ipvlan2 [ 195.566731][ T7894] tipc: Started in network mode [ 195.661305][ T7894] tipc: Node identity 080211000001, cluster identity 4711 [ 195.691372][ T7894] tipc: Enabled bearer , priority 0 [ 195.716924][ T7899] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 196.179906][ T7899] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 196.204000][ T7894] tipc: Resetting bearer [ 196.890029][ T49] tipc: Node number set to 134418688 [ 196.948292][ T30] audit: type=1400 audit(1767557522.721:387): avc: denied { watch watch_reads } for pid=7915 comm="syz.1.538" path="/" dev="ramfs" ino=17707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 197.383484][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 197.561598][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 197.576676][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.605331][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.636918][ T10] usb 1-1: Product: syz [ 197.658381][ T10] usb 1-1: Manufacturer: syz [ 197.687607][ T10] usb 1-1: SerialNumber: syz [ 197.842766][ T10] usb 1-1: config 0 descriptor?? [ 197.854331][ T30] audit: type=1800 audit(1767557523.631:388): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.538" name="bus" dev="ramfs" ino=17708 res=0 errno=0 [ 198.201308][ T5899] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 198.461306][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.602911][ T5899] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.638477][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.693769][ T5899] usb 3-1: Product: syz [ 198.880813][ T5899] usb 3-1: Manufacturer: syz [ 198.898088][ T5899] usb 3-1: SerialNumber: syz [ 199.122313][ T5899] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 199.194782][ T30] audit: type=1400 audit(1767557524.971:389): avc: denied { firmware_load } for pid=5933 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 199.245514][ T5933] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.345880][ T5933] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 200.360842][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 200.371017][ T5933] ath9k_htc: Failed to initialize the device [ 200.829250][ T10] usb 1-1: USB disconnect, device number 11 [ 201.363327][ T976] usb 3-1: USB disconnect, device number 12 [ 201.402118][ T976] usb 3-1: ath9k_htc: USB layer deinitialized [ 201.693849][ T30] audit: type=1400 audit(1767557527.451:390): avc: denied { read } for pid=7955 comm="syz.4.546" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 201.774396][ T30] audit: type=1400 audit(1767557527.451:391): avc: denied { open } for pid=7955 comm="syz.4.546" path="/105/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 202.002239][ T7962] input: syz1 as /devices/virtual/input/input12 [ 202.725724][ T7960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 202.741229][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.748453][ C0] bridge0: topology change detected, propagating [ 202.756344][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.763581][ C0] bridge0: topology change detected, propagating [ 202.927532][ T7960] block device autoloading is deprecated and will be removed. [ 202.932101][ T7957] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.611262][ T7957] block device autoloading is deprecated and will be removed. [ 204.573894][ T30] audit: type=1400 audit(1767557530.351:392): avc: denied { ioctl } for pid=7984 comm="syz.2.553" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.912579][ T30] audit: type=1400 audit(1767557530.461:393): avc: denied { watch watch_reads } for pid=7984 comm="syz.2.553" path="/122" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 207.037083][ T8001] syzkaller0: entered promiscuous mode [ 207.081264][ T8001] syzkaller0: entered allmulticast mode [ 207.561323][ T30] audit: type=1400 audit(1767557533.241:394): avc: denied { module_request } for pid=8003 comm="syz.4.559" kmod="net-pf-2-proto-262-type-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 207.694943][ T37] vlan2: left promiscuous mode [ 207.975168][ T8017] gre0: left promiscuous mode [ 207.981333][ T8017] gre0: left allmulticast mode [ 208.589313][ T8017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.835382][ T30] audit: type=1400 audit(1767557535.241:395): avc: denied { mount } for pid=8027 comm="syz.2.562" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 209.871376][ T30] audit: type=1400 audit(1767557535.241:396): avc: denied { mounton } for pid=8027 comm="syz.2.562" path="/124/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 210.137128][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 210.163611][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 210.230328][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 210.371078][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 210.389656][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 210.403363][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 211.959672][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 212.753297][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 212.776012][ T8035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.564'. [ 213.330937][ T30] audit: type=1400 audit(1767557539.101:397): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 214.901449][ T5866] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 215.005910][ T8059] NFSD: Failed to start, no listeners configured. [ 215.071253][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 215.099035][ T8073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 215.356110][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.401882][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.431398][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 215.440812][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.481548][ T5866] usb 2-1: config 0 descriptor?? [ 215.854494][ T8078] tipc: Started in network mode [ 215.859607][ T8078] tipc: Node identity 9e5f1c4612c7, cluster identity 4711 [ 215.867230][ T8078] tipc: Enabled bearer , priority 0 [ 215.876443][ T8078] syzkaller0: entered promiscuous mode [ 215.882045][ T8078] syzkaller0: entered allmulticast mode [ 215.903136][ T8078] __nla_validate_parse: 1 callbacks suppressed [ 215.903147][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 215.922247][ T8078] tipc: Resetting bearer [ 215.930901][ T8077] tipc: Resetting bearer [ 215.947548][ T8077] tipc: Disabling bearer [ 217.065368][ T5866] usbhid 2-1:0.0: can't add hid device: -71 [ 217.075722][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 217.092086][ T5866] usb 2-1: USB disconnect, device number 6 [ 222.881658][ T8128] syzkaller0: entered promiscuous mode [ 222.887151][ T8128] syzkaller0: entered allmulticast mode [ 223.224782][ T8135] SELinux: failed to load policy [ 223.243796][ T30] audit: type=1400 audit(1767557548.991:398): avc: denied { load_policy } for pid=8132 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 226.391344][ T8160] nbd0: detected capacity change from 0 to 8589934655 [ 227.111677][ T5821] block nbd0: Receive control failed (result -104) [ 230.651377][ T30] audit: type=1400 audit(1767557556.291:399): avc: denied { create } for pid=8179 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 232.320555][ T30] audit: type=1400 audit(1767557556.471:400): avc: denied { ioctl } for pid=8179 comm="syz.1.602" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.345393][ T30] audit: type=1400 audit(1767557556.991:401): avc: denied { mounton } for pid=8179 comm="syz.1.602" path="/109/file0" dev="gadgetfs" ino=7146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 232.665719][ T8200] gre0: entered promiscuous mode [ 232.670739][ T8200] gre0: entered allmulticast mode [ 233.115460][ T30] audit: type=1400 audit(1767557558.891:402): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 233.364712][ T30] audit: type=1400 audit(1767557558.921:403): avc: denied { create } for pid=8196 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.829495][ T30] audit: type=1400 audit(1767557559.121:404): avc: denied { accept } for pid=8196 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.852352][ T8207] futex_wake_op: syz.0.609 tries to shift op by -1; fix this program [ 236.536802][ T8238] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 238.255679][ T30] audit: type=1400 audit(1767557563.581:405): avc: denied { create } for pid=8248 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 238.940125][ T30] audit: type=1400 audit(1767557563.581:406): avc: denied { write } for pid=8248 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 239.794072][ T30] audit: type=1400 audit(1767557565.571:407): avc: denied { read write } for pid=8256 comm="syz.0.622" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 239.859666][ T30] audit: type=1400 audit(1767557565.601:408): avc: denied { open } for pid=8256 comm="syz.0.622" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 240.321317][ T30] audit: type=1400 audit(1767557565.671:409): avc: denied { map } for pid=8258 comm="syz.3.624" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 240.431585][ T30] audit: type=1326 audit(1767557566.211:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab18f749 code=0x7ffc0000 [ 240.495370][ T30] audit: type=1326 audit(1767557566.211:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab18f749 code=0x7ffc0000 [ 240.845792][ T30] audit: type=1326 audit(1767557566.211:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faaab18f749 code=0x7ffc0000 [ 240.871345][ T30] audit: type=1326 audit(1767557566.211:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab18f749 code=0x7ffc0000 [ 240.953839][ T30] audit: type=1326 audit(1767557566.211:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8267 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaab18f749 code=0x7ffc0000 [ 242.583191][ T8280] syz.3.629 (8280): drop_caches: 2 [ 242.808566][ T5873] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 243.056510][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 243.081057][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.100442][ T5873] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 243.237085][ T5873] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 243.273558][ T5873] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x88 has invalid wMaxPacketSize 0 [ 243.417565][ T5873] usb 5-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.616844][ T5873] usb 5-1: config 8 interface 0 has no altsetting 0 [ 243.934632][ T5873] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 244.746462][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.754530][ T5873] usb 5-1: Product: syz [ 244.758692][ T5873] usb 5-1: Manufacturer: syz [ 244.763357][ T5873] usb 5-1: SerialNumber: syz [ 245.432038][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 245.432054][ T30] audit: type=1400 audit(1767557571.211:437): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 245.563613][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.581199][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.305341][ T8320] mmap: syz.3.637 (8320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 247.028136][ T5873] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.065763][ T5873] usb 5-1: selecting invalid altsetting 0 [ 247.108347][ T8326] mac80211_hwsim hwsim8 4: renamed from wlan1 [ 247.315473][ T5873] snd-usb-audio 5-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 247.846702][ T5873] usb 5-1: USB disconnect, device number 12 [ 248.002844][ T8340] udevd[8340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.399793][ T30] audit: type=1400 audit(1767557576.041:438): avc: denied { kexec_image_load } for pid=8350 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 250.621868][ T30] audit: type=1400 audit(1767557576.381:439): avc: denied { ioctl } for pid=8364 comm="syz.2.646" path="socket:[20917]" dev="sockfs" ino=20917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.126855][ T8377] sp0: Synchronizing with TNC [ 251.493981][ T30] audit: type=1400 audit(1767557577.271:440): avc: denied { read } for pid=5486 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 253.383919][ T8401] Device name cannot be null; rc = [-22] [ 254.287887][ T5821] Bluetooth: hci4: unexpected event 0x32 length: 13 > 9 [ 254.288397][ T30] audit: type=1400 audit(1767557580.051:441): avc: denied { setopt } for pid=8406 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 255.225714][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.232462][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.591734][ T8448] sp0: Synchronizing with TNC [ 256.968771][ T25] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 30 seconds [ 256.980620][ T25] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 30 seconds [ 256.991685][ T25] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 30 seconds [ 257.002689][ T25] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 30 seconds [ 257.831283][ T8461] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 257.831283][ T8461] program syz.1.667 not setting count and/or reply_len properly [ 258.092139][ T8460] gre0: left promiscuous mode [ 258.098028][ T8460] gre0: left allmulticast mode [ 258.145917][ T8460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.920137][ T8473] sp0: Synchronizing with TNC [ 258.970002][ T8474] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.028854][ T8474] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 259.338197][ T8474] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.431272][ T8474] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 259.683530][ T8471] [U] è` [ 259.704843][ T8474] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.712585][ T8474] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 260.299191][ T8474] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.306871][ T8474] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 260.393442][ T30] audit: type=1400 audit(1767557586.161:442): avc: denied { create } for pid=8484 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 260.461912][ T8490] random: crng reseeded on system resumption [ 260.744353][ T8474] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.752547][ T8474] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 260.972564][ T30] audit: type=1400 audit(1767557586.231:443): avc: denied { write } for pid=8484 comm="syz.3.662" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 261.373609][ T30] audit: type=1400 audit(1767557586.231:444): avc: denied { open } for pid=8484 comm="syz.3.662" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.054691][ T8513] sp0: Synchronizing with TNC [ 263.043887][ T5900] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 263.768681][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 263.857973][ T5900] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.947260][ T5900] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.962169][ T5900] usb 5-1: config 0 interface 0 has no altsetting 0 [ 263.968943][ T5900] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 264.071339][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.613868][ T5900] usb 5-1: config 0 descriptor?? [ 264.625704][ T30] audit: type=1400 audit(1767557590.061:445): avc: denied { create } for pid=8530 comm="syz.2.681" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 264.661585][ T30] audit: type=1400 audit(1767557590.071:446): avc: denied { link } for pid=8530 comm="syz.2.681" name="file1" dev="ramfs" ino=20116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 264.982815][ T30] audit: type=1400 audit(1767557590.761:447): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 265.911832][ T5900] usbhid 5-1:0.0: can't add hid device: -71 [ 265.917833][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 265.967300][ T5900] usb 5-1: USB disconnect, device number 13 [ 266.011486][ T30] audit: type=1400 audit(1767557591.251:448): avc: denied { bind } for pid=8536 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.095246][ T30] audit: type=1400 audit(1767557591.261:449): avc: denied { setopt } for pid=8536 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.621581][ T30] audit: type=1400 audit(1767557593.391:450): avc: denied { write } for pid=8556 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 268.275516][ T8571] sp0: Synchronizing with TNC [ 271.528709][ T30] audit: type=1400 audit(1767557597.301:451): avc: denied { create } for pid=8592 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 271.897059][ T8595] hub 8-0:1.0: USB hub found [ 271.904165][ T8595] hub 8-0:1.0: 1 port detected [ 272.413751][ T30] audit: type=1400 audit(1767557598.161:452): avc: denied { connect } for pid=8592 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.725778][ T30] audit: type=1400 audit(1767557598.161:453): avc: denied { write } for pid=8592 comm="syz.4.697" laddr=fe80::c453:16ff:fe14:5f24 lport=19390 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.750225][ T30] audit: type=1400 audit(1767557598.171:454): avc: denied { read } for pid=8592 comm="syz.4.697" laddr=fe80::c453:16ff:fe14:5f24 lport=19390 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 272.774594][ T30] audit: type=1400 audit(1767557598.261:455): avc: denied { append } for pid=8599 comm="syz.3.698" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 275.043951][ T30] audit: type=1400 audit(1767557600.821:456): avc: denied { read write } for pid=8615 comm="syz.2.702" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.095787][ T30] audit: type=1400 audit(1767557600.841:457): avc: denied { open } for pid=8615 comm="syz.2.702" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.120011][ T30] audit: type=1400 audit(1767557600.861:458): avc: denied { ioctl } for pid=8615 comm="syz.2.702" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.356790][ T8624] netlink: 112 bytes leftover after parsing attributes in process `syz.4.704'. [ 275.952346][ T8613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.159311][ T8632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.101848][ T8659] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 280.116862][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.714'. [ 280.611260][ T5933] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 280.643260][ T30] audit: type=1400 audit(1767557606.421:459): avc: denied { write } for pid=8663 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.710361][ T30] audit: type=1400 audit(1767557606.491:460): avc: denied { create } for pid=8678 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 280.735585][ T30] audit: type=1400 audit(1767557606.491:461): avc: denied { write } for pid=8678 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 280.861202][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 280.898238][ T5933] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 280.932145][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.976124][ T5933] usb 5-1: config 0 has no interface number 0 [ 280.989728][ T5933] usb 5-1: config 0 interface 184 altsetting 0 endpoint 0x9 has invalid maxpacket 7331, setting to 64 [ 281.015997][ T5866] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 281.026567][ T5933] usb 5-1: config 0 interface 184 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 281.048590][ T8684] gre0: left promiscuous mode [ 281.053314][ T8684] gre0: left allmulticast mode [ 281.061480][ T8684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.092823][ T5933] usb 5-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=64.bd [ 281.111214][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.173941][ T5933] usb 5-1: Product: syz [ 281.185013][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.198670][ T5933] usb 5-1: Manufacturer: syz [ 281.203776][ T5933] usb 5-1: SerialNumber: syz [ 281.210341][ T5933] usb 5-1: config 0 descriptor?? [ 281.220771][ T5866] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 281.230479][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.242321][ T5933] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.250995][ T5866] usb 2-1: config 0 descriptor?? [ 281.379705][ T5933] snd-usb-audio 5-1:0.184: probe with driver snd-usb-audio failed with error -2 [ 281.474159][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.705863][ T5866] magicmouse 0003:05AC:0265.0004: unknown main item tag 0x5 [ 281.768468][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 281.782559][ T5934] usb 5-1: USB disconnect, device number 14 [ 281.814512][ T5866] magicmouse 0003:05AC:0265.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 281.944260][ T8680] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 282.287916][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.717'. [ 282.325111][ T5866] usb 2-1: USB disconnect, device number 7 [ 284.526696][ T8735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.407709][ T30] audit: type=1400 audit(1767557610.761:462): avc: denied { write } for pid=8733 comm="syz.3.730" name="dev_mcast" dev="proc" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 286.877102][ T30] audit: type=1800 audit(1767557612.621:463): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.733" name="/" dev="fuse" ino=1 res=0 errno=0 [ 286.988007][ T8752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.238318][ T25] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 60 seconds [ 287.250077][ T25] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 60 seconds [ 287.268853][ T25] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 60 seconds [ 287.280651][ T25] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 60 seconds [ 287.888795][ T5934] IPVS: starting estimator thread 0... [ 288.160210][ T30] audit: type=1400 audit(1767557613.931:464): avc: denied { append } for pid=8763 comm="syz.2.738" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 288.184031][ T8762] IPVS: using max 40 ests per chain, 96000 per kthread [ 288.720317][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 288.729142][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 289.039787][ T30] audit: type=1400 audit(1767557614.811:465): avc: denied { ioctl } for pid=8760 comm="syz.4.736" path="socket:[22788]" dev="sockfs" ino=22788 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.406757][ T30] audit: type=1400 audit(1767557615.151:466): avc: denied { setopt } for pid=8776 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.651232][ T30] audit: type=1400 audit(1767557615.171:467): avc: denied { bind } for pid=8776 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.021255][ T5933] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 291.441191][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 291.451000][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 291.459944][ T5933] usb 1-1: config 8 has an invalid interface number: 255 but max is 8 [ 291.468255][ T5933] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 9 [ 291.501195][ T5933] usb 1-1: config 8 has no interface number 0 [ 291.516448][ T5933] usb 1-1: config 8 interface 255 has no altsetting 0 [ 291.534062][ T5933] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 291.630117][ T5933] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 291.661410][ T5933] usb 1-1: Product: syz [ 291.666784][ T5933] usb 1-1: Manufacturer: syz [ 292.189729][ T5933] usb 1-1: SerialNumber: syz [ 292.321468][ T5933] catc 1-1:8.255: Can't set altsetting 1. [ 292.336567][ T5933] catc 1-1:8.255: probe with driver catc failed with error -5 [ 292.412718][ T5933] usb 1-1: USB disconnect, device number 12 [ 292.449268][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 297.648393][ T30] audit: type=1400 audit(1767557623.421:468): avc: denied { setopt } for pid=8858 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 297.782294][ T8857] tipc: Failed to remove unknown binding: 66,1,1/0:1320927938/1320927940 [ 298.293526][ T8857] tipc: Failed to remove unknown binding: 66,1,1/0:1320927938/1320927940 [ 298.371779][ T30] audit: type=1400 audit(1767557623.421:469): avc: denied { bind } for pid=8858 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 298.391292][ T30] audit: type=1400 audit(1767557623.421:470): avc: denied { getopt } for pid=8858 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 298.415388][ T30] audit: type=1400 audit(1767557623.551:471): avc: denied { bind } for pid=8830 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.849660][ T8871] gre0: entered promiscuous mode [ 298.854766][ T8871] gre0: entered allmulticast mode [ 300.649552][ T30] audit: type=1400 audit(1767557626.411:472): avc: denied { ioctl } for pid=8886 comm="syz.2.764" path="socket:[23058]" dev="sockfs" ino=23058 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 301.016240][ T30] audit: type=1326 audit(1767557626.721:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8874 comm="syz.4.762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87dd98f749 code=0x0 [ 303.104910][ T5899] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 303.355087][ T8917] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 303.363652][ T8917] overlayfs: failed to set xattr on upper [ 303.369430][ T8917] overlayfs: ...falling back to redirect_dir=nofollow. [ 303.376515][ T8917] overlayfs: ...falling back to uuid=null. [ 303.469379][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 303.525307][ T5899] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 303.547035][ T5899] usb 4-1: config 179 has no interface number 0 [ 303.571231][ T5899] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 303.606562][ T5899] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 303.640433][ T5899] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 303.754933][ T5899] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 303.888908][ T5899] usb 4-1: config 179 interface 65 has no altsetting 0 [ 303.921037][ T5899] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 304.035080][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.507155][ T5899] usb 4-1: USB disconnect, device number 7 [ 307.884826][ T8955] netlink: 164 bytes leftover after parsing attributes in process `syz.1.778'. [ 307.905423][ T8955] unsupported nla_type 13342 [ 309.751515][ T30] audit: type=1400 audit(1767557635.271:474): avc: denied { create } for pid=8963 comm="syz.3.781" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 309.856081][ T30] audit: type=1400 audit(1767557635.281:475): avc: denied { mounton } for pid=8963 comm="syz.3.781" path="/160/file0" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 310.037926][ T30] audit: type=1400 audit(1767557635.761:476): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 310.338093][ T30] audit: type=1400 audit(1767557636.111:477): avc: denied { getopt } for pid=8974 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.579849][ T30] audit: type=1400 audit(1767557636.191:478): avc: denied { ioctl } for pid=8975 comm="syz.4.783" path="socket:[23318]" dev="sockfs" ino=23318 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 310.663769][ T30] audit: type=1400 audit(1767557636.191:479): avc: denied { write } for pid=8975 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 310.891310][ T5934] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 311.202029][ T8991] comedi comedi0: Minor 3 could not be opened [ 311.644855][ T5934] usb 5-1: config 0 has no interfaces? [ 311.654780][ T5934] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 311.663856][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 311.732171][ T5934] usb 5-1: Product: syz [ 311.736347][ T5934] usb 5-1: Manufacturer: syz [ 311.740924][ T5934] usb 5-1: SerialNumber: syz [ 311.769798][ T5934] usb 5-1: config 0 descriptor?? [ 312.232901][ T8999] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 315.794217][ T5191] udevd[5191]: worker [5816] /devices/virtual/block/nbd0 is taking a long time [ 316.510227][ T5934] usb 5-1: USB disconnect, device number 15 [ 317.032114][ T9030] gfs2: gfs2 mount does not exist [ 317.203858][ T9027] hugetlbfs: Bad value 'm' for mount option 'size' [ 317.203858][ T9027] [ 317.215039][ T30] audit: type=1400 audit(1767557642.911:480): avc: denied { mount } for pid=9025 comm="syz.2.795" name="/" dev="hugetlbfs" ino=22232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 317.282665][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.299356][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.735294][ T30] audit: type=1400 audit(1767557642.981:481): avc: denied { remount } for pid=9025 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 318.319286][ T30] audit: type=1400 audit(1767557643.551:482): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 318.335641][ T25] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 90 seconds [ 318.355354][ T25] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 90 seconds [ 318.371152][ T25] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 90 seconds [ 318.382082][ T25] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 90 seconds [ 319.821198][ T5934] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 319.914736][ T9055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.963214][ T30] audit: type=1400 audit(1767557645.721:483): avc: denied { ioctl } for pid=9047 comm="syz.0.800" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 320.007400][ T5934] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 320.017735][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.045675][ T5934] usb 5-1: Product: syz [ 320.054595][ T5934] usb 5-1: Manufacturer: syz [ 320.064492][ T5934] usb 5-1: SerialNumber: syz [ 320.077797][ T5934] usb 5-1: config 0 descriptor?? [ 320.092137][ T5934] hso 5-1:0.0: Not our interface [ 320.102995][ T5934] usb-storage 5-1:0.0: USB Mass Storage device detected [ 320.303822][ T5934] usb 5-1: USB disconnect, device number 16 [ 321.250122][ T30] audit: type=1400 audit(1767557647.011:484): avc: denied { ioctl } for pid=9065 comm="syz.2.806" path="socket:[22303]" dev="sockfs" ino=22303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 321.606275][ T9074] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 324.419924][ T30] audit: type=1400 audit(1767557650.191:485): avc: denied { read } for pid=9086 comm="syz.3.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.074679][ T30] audit: type=1400 audit(1767557652.848:486): avc: denied { getopt } for pid=9094 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.620112][ T30] audit: type=1400 audit(1767557652.908:487): avc: denied { create } for pid=9103 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 326.668921][ T30] audit: type=1400 audit(1767557652.908:488): avc: denied { bind } for pid=9103 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 327.411390][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.818'. [ 327.420281][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 327.455974][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.818'. [ 327.500589][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 327.509632][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.818'. [ 328.435313][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.818'. [ 328.467387][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 328.476578][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.818'. [ 328.486315][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 328.496525][ T9128] netlink: 52 bytes leftover after parsing attributes in process `syz.2.818'. [ 329.447447][ T9147] gre0: left promiscuous mode [ 329.452247][ T9147] gre0: left allmulticast mode [ 329.490499][ T9147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.514706][ T5899] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 329.722673][ T5899] usb 1-1: device descriptor read/64, error -71 [ 330.541200][ T5899] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 331.006755][ T5899] usb 1-1: device descriptor read/64, error -71 [ 331.051733][ T30] audit: type=1400 audit(1767557657.818:489): avc: denied { watch } for pid=9167 comm="syz.1.827" path="/148/file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 331.601188][ T30] audit: type=1400 audit(1767557657.818:490): avc: denied { watch_sb watch_reads } for pid=9167 comm="syz.1.827" path="/148/file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 331.642302][ T5899] usb usb1-port1: attempt power cycle [ 334.401624][ T9217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.745904][ T30] audit: type=1326 audit(1767557662.478:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 336.738090][ T30] audit: type=1326 audit(1767557662.478:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 336.767780][ T30] audit: type=1326 audit(1767557662.478:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe467f8df90 code=0x7ffc0000 [ 336.935266][ T30] audit: type=1326 audit(1767557662.478:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe467f90f77 code=0x7ffc0000 [ 337.025770][ T30] audit: type=1326 audit(1767557662.478:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 337.241912][ T30] audit: type=1326 audit(1767557662.478:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe467f90f77 code=0x7ffc0000 [ 337.730352][ T30] audit: type=1326 audit(1767557662.488:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe467f8e3aa code=0x7ffc0000 [ 338.411180][ T30] audit: type=1326 audit(1767557662.488:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 338.446599][ T30] audit: type=1326 audit(1767557662.488:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 338.984901][ T30] audit: type=1326 audit(1767557662.488:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe467f8df90 code=0x7ffc0000 [ 339.102677][ T30] audit: type=1326 audit(1767557662.488:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 342.406051][ T9303] __nla_validate_parse: 6 callbacks suppressed [ 342.406082][ T9303] netlink: 220 bytes leftover after parsing attributes in process `syz.2.850'. [ 343.488673][ T9319] netlink: zone id is out of range [ 343.494150][ T9319] netlink: zone id is out of range [ 343.499659][ T9319] netlink: zone id is out of range [ 343.504883][ T9319] netlink: zone id is out of range [ 343.511967][ T9319] netlink: zone id is out of range [ 343.519563][ T9319] netlink: zone id is out of range [ 344.091461][ T9319] netlink: zone id is out of range [ 344.097338][ T9319] netlink: zone id is out of range [ 344.103220][ T9319] netlink: zone id is out of range [ 344.108452][ T9319] netlink: zone id is out of range [ 344.228541][ T9319] batadv_slave_0: entered promiscuous mode [ 344.280518][ T9319] batman_adv: batadv0: Adding interface: macvtap1 [ 344.287263][ T9319] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.312981][ T9319] batman_adv: batadv0: Interface activated: macvtap1 [ 344.729026][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 344.729037][ T30] audit: type=1400 audit(1767557671.508:519): avc: denied { bind } for pid=9331 comm="syz.0.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 345.291860][ T9335] gre0: entered promiscuous mode [ 345.296825][ T9335] gre0: entered allmulticast mode [ 345.806009][ T30] audit: type=1400 audit(1767557672.578:520): avc: denied { map } for pid=9339 comm="syz.2.858" path="socket:[24779]" dev="sockfs" ino=24779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 345.879705][ T30] audit: type=1400 audit(1767557672.578:521): avc: denied { read accept } for pid=9339 comm="syz.2.858" path="socket:[24779]" dev="sockfs" ino=24779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.151403][ T9346] binder: 9339:9346 ioctl c018620c 2000000002c0 returned -1 [ 346.525834][ T5873] IPVS: starting estimator thread 0... [ 346.622096][ T9353] IPVS: using max 77 ests per chain, 184800 per kthread [ 347.172618][ T9361] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 347.531069][ T30] audit: type=1400 audit(1767557673.938:522): avc: denied { create } for pid=9354 comm="syz.4.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 348.241025][ T9371] netlink: 272 bytes leftover after parsing attributes in process `syz.1.863'. [ 348.839485][ T30] audit: type=1400 audit(1767557675.008:523): avc: denied { nlmsg_read } for pid=9362 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.921855][ T25] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 120 seconds [ 348.932605][ T25] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 120 seconds [ 348.943702][ T25] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 120 seconds [ 348.954683][ T25] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 120 seconds [ 349.015669][ T9378] netlink: 'syz.3.861': attribute type 9 has an invalid length. [ 349.032430][ T9378] netlink: 'syz.3.861': attribute type 11 has an invalid length. [ 349.050914][ T9378] netlink: 'syz.3.861': attribute type 12 has an invalid length. [ 349.076283][ T9378] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.861'. [ 349.358705][ T5873] IPVS: starting estimator thread 0... [ 349.581180][ T9381] IPVS: using max 46 ests per chain, 110400 per kthread [ 349.677425][ T9385] ALSA: mixer_oss: invalid OSS volume '' [ 350.362478][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.868'. [ 351.870056][ T9409] 9pnet_virtio: no channels available for device syz [ 351.997564][ T30] audit: type=1400 audit(1767557678.748:524): avc: denied { read } for pid=9404 comm="syz.4.873" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 352.044042][ T9416] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 352.147955][ T9419] gre0: left promiscuous mode [ 352.153396][ T9419] gre0: left allmulticast mode [ 352.208436][ T9419] net_ratelimit: 14 callbacks suppressed [ 352.214472][ T9419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.274648][ T30] audit: type=1400 audit(1767557678.748:525): avc: denied { open } for pid=9404 comm="syz.4.873" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 352.361555][ T30] audit: type=1400 audit(1767557678.748:526): avc: denied { ioctl } for pid=9404 comm="syz.4.873" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 354.842855][ T30] audit: type=1326 audit(1767557681.618:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9430 comm="syz.1.878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdc658f749 code=0x0 [ 355.086054][ T30] audit: type=1400 audit(1767557681.718:528): avc: denied { setopt } for pid=9430 comm="syz.1.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.219494][ T9452] trusted_key: syz.3.883 sent an empty control message without MSG_MORE. [ 356.649726][ T9449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.881'. [ 356.778345][ T30] audit: type=1400 audit(1767557683.548:529): avc: denied { ioctl } for pid=9455 comm="syz.4.884" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 357.360371][ T9456] Device name not specified. [ 357.360371][ T9456] [ 357.443692][ T9467] program syz.2.885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.477337][ T30] audit: type=1400 audit(1767557685.248:530): avc: denied { name_bind } for pid=9475 comm="syz.2.888" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 359.142116][ T9483] gfs2: error -5 reading superblock [ 360.771305][ T8194] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 360.951895][ T8194] usb 4-1: Using ep0 maxpacket: 8 [ 360.974720][ T8194] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 360.984066][ T8194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.997019][ T8194] usb 4-1: Product: syz [ 361.188864][ T8194] usb 4-1: Manufacturer: syz [ 361.193639][ T8194] usb 4-1: SerialNumber: syz [ 362.005846][ T8194] usb 4-1: config 0 descriptor?? [ 362.288674][ T8194] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 362.757645][ T8194] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 362.773065][ T8194] usb 4-1: USB disconnect, device number 8 [ 364.084187][ T30] audit: type=1400 audit(1767557690.858:531): avc: denied { read } for pid=9529 comm="syz.0.900" path="socket:[25233]" dev="sockfs" ino=25233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 364.113483][ T9510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.191916][ T30] audit: type=1400 audit(1767557690.928:532): avc: denied { wake_alarm } for pid=9533 comm="syz.1.899" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 364.221030][ T9539] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 364.234367][ T9539] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 364.871158][ T8194] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 365.082416][ T9548] use of bytesused == 0 is deprecated and will be removed in the future, [ 365.091583][ T9548] use the actual size instead. [ 365.467142][ T8194] usb 1-1: Using ep0 maxpacket: 8 [ 365.491193][ T8194] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 365.491943][ T7053] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 365.512251][ T8194] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 365.522175][ T8194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.530688][ T8194] usb 1-1: Product: syz [ 365.538275][ T8194] usb 1-1: Manufacturer: syz [ 365.543309][ T8194] usb 1-1: SerialNumber: syz [ 365.570575][ T8194] usb 1-1: config 0 descriptor?? [ 365.624691][ T8194] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 365.763467][ T7053] usb 2-1: config 0 has no interfaces? [ 365.768973][ T7053] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 365.778891][ T7053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.840808][ T7053] usb 2-1: config 0 descriptor?? [ 366.229282][ T8194] gspca_zc3xx: reg_w_i err -110 [ 367.721155][ T8194] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 367.727847][ T8194] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 367.766093][ T8194] usb 1-1: USB disconnect, device number 16 [ 370.092032][ T6161] usb 2-1: USB disconnect, device number 8 [ 376.618700][ T9614] xt_socket: unknown flags 0x4c [ 377.868267][ T9628] bond0: entered promiscuous mode [ 377.873368][ T9628] bond_slave_0: entered promiscuous mode [ 377.881227][ T9628] batadv0: entered promiscuous mode [ 377.889710][ T9628] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 378.155849][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.187008][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.165283][ T9638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 379.717308][ T25] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 150 seconds [ 379.728241][ T25] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 150 seconds [ 379.739284][ T25] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 150 seconds [ 379.751338][ T25] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 150 seconds [ 381.349736][ T30] audit: type=1400 audit(1767557708.118:533): avc: denied { accept } for pid=9647 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 381.372030][ T30] audit: type=1400 audit(1767557708.148:534): avc: denied { bind } for pid=9647 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 381.633254][ T30] audit: type=1400 audit(1767557708.408:535): avc: denied { append } for pid=9665 comm="syz.1.927" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 381.967802][ T30] audit: type=1400 audit(1767557708.638:536): avc: denied { listen } for pid=9661 comm="syz.3.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.039269][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.928'. [ 385.915766][ T30] audit: type=1400 audit(1767557712.688:537): avc: denied { getopt } for pid=9695 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.898268][ T9716] netlink: 'syz.3.937': attribute type 4 has an invalid length. [ 387.906052][ T9716] netlink: 152 bytes leftover after parsing attributes in process `syz.3.937'. [ 387.960002][ T9716] .`: renamed from bond0 (while UP) [ 388.270096][ T30] audit: type=1400 audit(1767557715.038:538): avc: denied { getopt } for pid=9690 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 388.555800][ T9716] syz.3.937 (9716) used greatest stack depth: 19960 bytes left [ 389.832024][ T30] audit: type=1400 audit(1767557716.558:539): avc: denied { setopt } for pid=9718 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.041396][ T30] audit: type=1400 audit(1767557716.678:540): avc: denied { append } for pid=9723 comm="syz.3.940" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 390.163378][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.940'. [ 392.101960][ T30] audit: type=1326 audit(1767557718.858:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 392.201807][ T30] audit: type=1326 audit(1767557718.868:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 392.247309][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 392.256901][ T9747] nbd: must specify at least one socket [ 392.368686][ T30] audit: type=1326 audit(1767557719.098:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe467f8df90 code=0x7ffc0000 [ 392.544719][ T30] audit: type=1326 audit(1767557719.098:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe467f8df90 code=0x7ffc0000 [ 392.594797][ T30] audit: type=1326 audit(1767557719.098:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 393.033650][ T30] audit: type=1326 audit(1767557719.108:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 393.058212][ T30] audit: type=1326 audit(1767557719.108:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.0.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe467f8f749 code=0x7ffc0000 [ 395.321730][ T9768] infiniband syz1: set active [ 395.326832][ T9768] infiniband syz1: added syz_tun [ 395.350101][ T9768] RDS/IB: syz1: added [ 395.354713][ T9768] smc: adding ib device syz1 with port count 1 [ 395.360978][ T9768] smc: ib device syz1 port 1 has no pnetid [ 396.322119][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 396.322136][ T30] audit: type=1400 audit(1767557722.818:551): avc: denied { read write } for pid=9767 comm="syz.4.951" name="mouse0" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 396.356282][ T30] audit: type=1400 audit(1767557722.818:552): avc: denied { open } for pid=9767 comm="syz.4.951" path="/dev/input/mouse0" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 396.498533][ T30] audit: type=1400 audit(1767557723.248:553): avc: denied { getopt } for pid=9766 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 398.041967][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 398.598351][ T7053] IPVS: starting estimator thread 0... [ 398.741347][ T9797] IPVS: using max 77 ests per chain, 184800 per kthread [ 398.771224][ T6161] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 398.802568][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.841190][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 398.996114][ T6161] usb 1-1: Using ep0 maxpacket: 16 [ 399.114750][ T9805] tipc: Started in network mode [ 399.687056][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 399.699550][ T6161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.713041][ T9805] tipc: Node identity ac14140f, cluster identity 4711 [ 399.728321][ T9805] tipc: New replicast peer: 255.255.255.255 [ 399.738530][ T9805] tipc: Enabled bearer , priority 10 [ 399.748503][ T6161] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.761880][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.796473][ T24] usb 5-1: can't set config #27, error -71 [ 399.802358][ T6161] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 399.814178][ T24] usb 5-1: USB disconnect, device number 17 [ 399.820089][ T6161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.966531][ T6161] usb 1-1: config 0 descriptor?? [ 401.149811][ T8194] tipc: Node number set to 2886997007 [ 401.752978][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.963'. [ 401.864298][ T6161] usb 1-1: can't set config #0, error -71 [ 402.017873][ T6161] usb 1-1: USB disconnect, device number 17 [ 402.773356][ T9833] 8021q: VLANs not supported on lo [ 402.920425][ T9834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.935499][ T30] audit: type=1400 audit(1767557729.708:554): avc: denied { create } for pid=9829 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 403.002441][ T9834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.074675][ T9834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.486053][ T9853] gre0: left promiscuous mode [ 404.490809][ T9853] gre0: left allmulticast mode [ 404.542498][ T9853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.626287][ T30] audit: type=1326 audit(1767557731.368:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 404.787211][ T30] audit: type=1326 audit(1767557731.368:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 405.151804][ T30] audit: type=1326 audit(1767557731.368:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 405.265571][ T30] audit: type=1326 audit(1767557731.368:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 405.383928][ T30] audit: type=1326 audit(1767557731.428:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 405.869096][ T30] audit: type=1326 audit(1767557731.428:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 405.892565][ T30] audit: type=1326 audit(1767557731.498:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 405.915960][ T30] audit: type=1326 audit(1767557731.498:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 406.073988][ T30] audit: type=1326 audit(1767557731.498:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9847 comm="syz.2.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7faea638f749 code=0x7ffc0000 [ 407.333936][ T5191] udevd[5191]: worker [5816] /devices/virtual/block/nbd0 timeout; kill it [ 407.352520][ T5191] udevd[5191]: seq 13325 '/devices/virtual/block/nbd0' killed [ 408.761906][ T9880] gre0: entered promiscuous mode [ 408.766894][ T9880] gre0: entered allmulticast mode [ 410.348690][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 410.348708][ T30] audit: type=1400 audit(1767557736.838:589): avc: denied { setopt } for pid=9883 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 410.602227][ T25] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 180 seconds [ 410.613245][ T25] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 180 seconds [ 410.631278][ T25] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 180 seconds [ 410.652236][ T25] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 180 seconds [ 410.801212][ T30] audit: type=1400 audit(1767557736.838:590): avc: denied { write } for pid=9883 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 411.399647][ T9902] gre0: left promiscuous mode [ 411.475343][ T9902] gre0: left allmulticast mode [ 411.490729][ T9902] 8021q: adding VLAN 0 to HW filter on device .` [ 411.503862][ T9902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.696160][ T30] audit: type=1400 audit(1767557738.468:591): avc: denied { block_suspend } for pid=9916 comm="syz.2.986" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.436625][ T9935] syz.4.991 (9935): /proc/9929/oom_adj is deprecated, please use /proc/9929/oom_score_adj instead. [ 415.028539][ T9944] gre0: entered promiscuous mode [ 415.033626][ T9944] gre0: entered allmulticast mode [ 415.653669][ T9949] SELinux: policydb version -759146342 does not match my version range 15-35 [ 415.823543][ T9949] SELinux: failed to load policy [ 417.630143][ T9948] SELinux: failed to load policy [ 417.880862][ T30] audit: type=1400 audit(1767557744.648:592): avc: denied { write } for pid=9967 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 418.374909][ T9979] xt_ecn: cannot match TCP bits for non-tcp packets [ 418.641207][ T30] audit: type=1400 audit(1767557745.168:593): avc: denied { bind } for pid=9976 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 419.294179][ T30] audit: type=1400 audit(1767557745.698:594): avc: denied { getopt } for pid=9981 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 419.621181][ T9993] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1002'. [ 420.467842][ T30] audit: type=1400 audit(1767557747.228:595): avc: denied { getopt } for pid=9998 comm="syz.1.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 421.370064][ T30] audit: type=1400 audit(1767557747.678:596): avc: denied { create } for pid=9998 comm="syz.1.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.214533][T10028] netlink: zone id is out of range [ 424.219798][T10028] netlink: zone id is out of range [ 424.225001][T10028] netlink: zone id is out of range [ 424.230171][T10028] netlink: zone id is out of range [ 424.235424][T10028] netlink: zone id is out of range [ 424.240588][T10028] netlink: zone id is out of range [ 424.245804][T10028] netlink: zone id is out of range [ 424.250961][T10028] netlink: zone id is out of range [ 424.256231][T10028] netlink: zone id is out of range [ 424.261458][T10028] netlink: zone id is out of range [ 425.516012][T10042] process 'syz.4.1013' launched './file0' with NULL argv: empty string added [ 425.883705][ T30] audit: type=1400 audit(1767557752.308:597): avc: denied { execute_no_trans } for pid=10037 comm="syz.4.1013" path="/206/file0" dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 426.896816][T10056] syzkaller1: entered promiscuous mode [ 426.902514][T10056] syzkaller1: entered allmulticast mode [ 428.064956][T10066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=10066 comm=syz.2.1020 [ 428.934522][ T30] audit: type=1400 audit(1767557755.628:598): avc: denied { create } for pid=10069 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 430.119064][T10084] ubi31: attaching mtd0 [ 430.145036][T10084] ubi31: scanning is finished [ 430.149811][T10084] ubi31: empty MTD device detected [ 431.266447][T10095] comedi comedi0: comedi_bond: 3:0 attached, 8 channels from 1 devices [ 431.728760][T10084] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 431.829522][T10084] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 431.858209][T10084] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 431.872869][T10084] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 432.835989][ T30] audit: type=1400 audit(1767557759.348:599): avc: denied { connect } for pid=10096 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 432.933817][T10084] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 432.942709][T10084] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 432.963537][T10084] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1962716616 [ 433.040380][T10084] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 433.199261][T10097] ubi31: background thread "ubi_bgt31d" started, PID 10097 [ 433.665893][ T30] audit: type=1400 audit(1767557760.048:600): avc: denied { map } for pid=10103 comm="syz.0.1029" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.174003][ T30] audit: type=1400 audit(1767557760.058:601): avc: denied { execute } for pid=10103 comm="syz.0.1029" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.518472][T10116] net_ratelimit: 12 callbacks suppressed [ 434.518486][T10116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.669660][T10126] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 435.112012][ T30] audit: type=1400 audit(1767557761.398:602): avc: denied { create } for pid=10121 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.146411][ T30] audit: type=1400 audit(1767557761.408:603): avc: denied { connect } for pid=10121 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.976970][ T30] audit: type=1400 audit(1767557762.038:604): avc: denied { name_bind } for pid=10101 comm="syz.1.1028" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 436.272931][ T30] audit: type=1400 audit(1767557762.058:605): avc: denied { getopt } for pid=10128 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 436.952873][T10150] binder_alloc: binder_alloc_mmap_handler: 10142 200000ffc000-200000ffd000 already mapped failed -16 [ 438.870556][T10162] fuse: Unknown parameter 'user_id00000000000000000000' [ 440.012673][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.012741][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.050349][ T30] audit: type=1400 audit(1767557766.578:606): avc: denied { name_connect } for pid=10161 comm="syz.2.1042" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 441.662673][ T11] block nbd0: Possible stuck request ffff888026318000: control (read@0,1024B). Runtime 210 seconds [ 441.673631][ T11] block nbd0: Possible stuck request ffff888026318200: control (read@1024,1024B). Runtime 210 seconds [ 441.684668][ T11] block nbd0: Possible stuck request ffff888026318400: control (read@2048,1024B). Runtime 210 seconds [ 441.695906][ T11] block nbd0: Possible stuck request ffff888026318600: control (read@3072,1024B). Runtime 210 seconds [ 546.731033][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 546.737988][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5822/1:b..l [ 546.746251][ C0] rcu: (detected by 0, t=10502 jiffies, g=30061, q=1070 ncpus=2) [ 546.754027][ C0] task:syz-executor state:R running task stack:23272 pid:5822 tgid:5822 ppid:5811 task_flags:0x400140 flags:0x00080000 [ 546.768045][ C0] Call Trace: [ 546.771309][ C0] [ 546.774231][ C0] ? __schedule+0x10b9/0x6150 [ 546.778885][ C0] __schedule+0x1139/0x6150 [ 546.783363][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 546.788367][ C0] ? __pfx___schedule+0x10/0x10 [ 546.793192][ C0] ? mark_held_locks+0x49/0x80 [ 546.797927][ C0] preempt_schedule_irq+0x51/0x90 [ 546.802935][ C0] irqentry_exit+0x1d8/0x8c0 [ 546.807502][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.813453][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 546.818794][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 4b 6d b0 f5 cc [ 546.838377][ C0] RSP: 0018:ffffc90002f37638 EFLAGS: 00000282 [ 546.844426][ C0] RAX: ffffea0002016400 RBX: ffffc90002f37710 RCX: ffffffff8b75fbf4 [ 546.852369][ C0] RDX: ffff88801cba8000 RSI: ffffffff8b75f9f9 RDI: 0000000000000001 [ 546.860320][ C0] RBP: 00000000000002aa R08: 0000000000000001 R09: 0000000000000000 [ 546.868262][ C0] R10: 0000000000000000 R11: ffff88801cba8b30 R12: 0000000000000003 [ 546.876208][ C0] R13: fffffffffffffffe R14: fffffffffffffffe R15: ffffc90002f37858 [ 546.884155][ C0] ? xas_load+0x244/0x5b0 [ 546.888460][ C0] ? xas_load+0x49/0x5b0 [ 546.892679][ C0] xas_find+0x573/0x890 [ 546.896820][ C0] find_lock_entries+0x16e/0xbf0 [ 546.901729][ C0] ? folios_put_refs+0x51d/0x750 [ 546.906638][ C0] ? __pfx_find_lock_entries+0x10/0x10 [ 546.912069][ C0] ? __pfx___might_resched+0x10/0x10 [ 546.917335][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 546.923636][ C0] shmem_undo_range+0x216/0x1140 [ 546.928548][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 546.933897][ C0] ? arch_stack_walk+0xa6/0x100 [ 546.938729][ C0] ? kasan_save_stack+0x33/0x60 [ 546.943566][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 546.948911][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 546.954951][ C0] ? dentry_free+0xc2/0x160 [ 546.959440][ C0] ? __dentry_kill+0x498/0x600 [ 546.964171][ C0] ? finish_dput+0x76/0x480 [ 546.968644][ C0] ? dput+0x1f/0x30 [ 546.972426][ C0] shmem_evict_inode+0x39e/0xbe0 [ 546.977333][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 546.983038][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 546.988468][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 546.994508][ C0] ? find_held_lock+0x2b/0x80 [ 546.999161][ C0] ? evict+0x37e/0xad0 [ 547.003213][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 547.008650][ C0] evict+0x3c2/0xad0 [ 547.012517][ C0] ? __pfx_evict+0x10/0x10 [ 547.016915][ C0] ? iput.part.0+0x619/0x1190 [ 547.021563][ C0] iput.part.0+0x621/0x1190 [ 547.026038][ C0] iput+0x35/0x40 [ 547.029653][ C0] do_unlinkat+0x3d2/0x660 [ 547.034044][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 547.038962][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 547.044304][ C0] __x64_sys_unlink+0xc5/0x110 [ 547.049045][ C0] do_syscall_64+0xcd/0xf80 [ 547.053521][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.059383][ C0] RIP: 0033:0x7faea638ecf7 [ 547.063766][ C0] RSP: 002b:00007ffd02f9a358 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 547.072163][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faea638ecf7 [ 547.080104][ C0] RDX: 00007ffd02f9a380 RSI: 00007ffd02f9a410 RDI: 00007ffd02f9a410 [ 547.088049][ C0] RBP: 00007ffd02f9a410 R08: 0000000000000000 R09: 0000000000000000 [ 547.095995][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd02f9b4a0 [ 547.103938][ C0] R13: 00007faea6413d7d R14: 000000000006b7f8 R15: 00007ffd02f9b4e0 [ 547.111900][ C0] [ 547.114891][ C0] rcu: rcu_preempt kthread starved for 10537 jiffies! g30061 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 547.126059][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 547.135997][ C0] rcu: RCU grace-period kthread stack dump: [ 547.141872][ C0] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 547.155310][ C0] Call Trace: [ 547.158570][ C0] [ 547.161485][ C0] ? __schedule+0x10b9/0x6150 [ 547.166135][ C0] __schedule+0x1139/0x6150 [ 547.170618][ C0] ? __pfx___schedule+0x10/0x10 [ 547.175442][ C0] ? find_held_lock+0x2b/0x80 [ 547.180102][ C0] ? schedule+0x2d7/0x3a0 [ 547.184405][ C0] schedule+0xe7/0x3a0 [ 547.188446][ C0] schedule_timeout+0x123/0x290 [ 547.193269][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 547.198610][ C0] ? __pfx_process_timeout+0x10/0x10 [ 547.203866][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 547.209651][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 547.215083][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 547.219822][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 547.225081][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 547.230252][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 547.235173][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 547.240019][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 547.245797][ C0] rcu_gp_kthread+0x26d/0x380 [ 547.250450][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 547.255621][ C0] ? rcu_is_watching+0x12/0xc0 [ 547.260356][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 547.265535][ C0] ? __kthread_parkme+0x19e/0x250 [ 547.270538][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 547.275714][ C0] kthread+0x3c5/0x780 [ 547.279755][ C0] ? __pfx_kthread+0x10/0x10 [ 547.284318][ C0] ? rcu_is_watching+0x12/0xc0 [ 547.289061][ C0] ? __pfx_kthread+0x10/0x10 [ 547.293632][ C0] ret_from_fork+0x983/0xb10 [ 547.298196][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 547.303279][ C0] ? __switch_to+0x7af/0x10d0 [ 547.307939][ C0] ? __pfx_kthread+0x10/0x10 [ 547.312500][ C0] ret_from_fork_asm+0x1a/0x30 [ 547.317255][ C0] [ 547.320263][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 547.326563][ C0] Sending NMI from CPU 0 to CPUs 1: [ 547.331745][ C1] NMI backtrace for cpu 1 [ 547.331759][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.331778][ C1] Tainted: [L]=SOFTLOCKUP [ 547.331783][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.331790][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 547.331808][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 547.331821][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 547.331832][ C1] RAX: 0000000001cda20b RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 547.331841][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 547.331850][ C1] RBP: ffffed1003b55498 R08: 0000000000000001 R09: ffffed10170a673d [ 547.331859][ C1] R10: ffff8880b85339eb R11: ffff88801daaaff0 R12: 0000000000000001 [ 547.331868][ C1] R13: ffff88801daaa4c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 547.331877][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 547.331890][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.331899][ C1] CR2: 00002000000015c0 CR3: 0000000082198000 CR4: 00000000003526f0 [ 547.331909][ C1] Call Trace: [ 547.331914][ C1] [ 547.331918][ C1] default_idle+0x13/0x20 [ 547.331936][ C1] default_idle_call+0x6c/0xb0 [ 547.331954][ C1] do_idle+0x38d/0x510 [ 547.331974][ C1] ? __pfx_do_idle+0x10/0x10 [ 547.331994][ C1] ? do_idle+0x8/0x510 [ 547.332013][ C1] cpu_startup_entry+0x4f/0x60 [ 547.332032][ C1] start_secondary+0x21d/0x2d0 [ 547.332046][ C1] ? __pfx_start_secondary+0x10/0x10 [ 547.332061][ C1] common_startup_64+0x13e/0x148 [ 547.332082][ C1]