last executing test programs: 47.927077286s ago: executing program 4 (id=227): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect(r1, &(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x80) syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x80, 0xc400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) syz_open_dev$sg(&(0x7f0000001bc0), 0x209, 0x3a3e42) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00020001000000000000000a1400000003000000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="05"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(r5, &(0x7f0000001c00)={0xc, {"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", 0x1000}}, 0x1006) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010003e70000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x10001, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x2, 0x8, 0x0, 0xd, 0x19}, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r11 = socket(0x2, 0x2, 0x2) sendmmsg$inet(r11, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000540)}}], 0x1, 0x40840) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 45.708751795s ago: executing program 4 (id=231): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000f80400000c0000000c0000000200000000000000006a0013"], 0x0, 0x26}, 0x28) 45.64202143s ago: executing program 4 (id=233): sched_setaffinity(0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 44.359141268s ago: executing program 4 (id=240): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 43.261211962s ago: executing program 4 (id=243): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053f000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r0, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r0, 0x80000a01, r1, &(0x7f0000000000)={0x6, 0xe7db974, 0x0, 0x4}) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x5}, [], {}, [], {0x10, 0x3}}, 0x24, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) recvmsg$kcm(r2, &(0x7f0000003900)={&(0x7f00000002c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003840)=[{&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f00000024c0)=""/219, 0xdb}, {&(0x7f00000025c0)=""/135, 0x87}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/172, 0xac}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000003740)}, {&(0x7f0000003780)=""/176, 0xb0}], 0x8, &(0x7f00000038c0)=""/3, 0x3}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x57, 0x80, 0x4000, 0x9, 0xfffffffffffffffd, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) socket$kcm(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a050000000000000000000700000a0900010073797a30000000000800024000000002280000001c0a010800000000000000000700000a08000240000000000900010073797a30"], 0x78}, 0x1, 0x0, 0x0, 0x4001}, 0x40c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) 42.332872748s ago: executing program 4 (id=245): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 41.969999655s ago: executing program 32 (id=245): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 13.785247957s ago: executing program 0 (id=325): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)='\n', 0x1}, {0x0}], 0x2) 13.588121719s ago: executing program 0 (id=329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xf5ffffff, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) 13.248991701s ago: executing program 0 (id=332): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x18}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f00002c8000/0x2000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x3dd, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) 10.700583787s ago: executing program 5 (id=339): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xffe4, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x28}}, 0xc880) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x804, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x8, 0x0, 0x32344d59, 0x8, 0x3, [{0x4, 0x7}, {0x5, 0x10}, {0xffff, 0x3}, {0x0, 0xfff}, {0x7, 0xfffff3cd}, {0x4, 0x6}, {0x47e, 0x1}, {0x5, 0x3}], 0x1, 0x2, 0x0, 0x2, 0x6}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 10.213003354s ago: executing program 2 (id=341): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="932ca37d7e8f04d54627aef41d1a997889df7c74a145838ffb0bc77db6f404ad7f14c4dc06a0520672e1d75ca4386db3e639da75d8246db976fca409d380d8", @ANYRES16=r0, @ANYBLOB="08042cbd7000fbdbdf2501000000640002800c00018008000100050000000c0001800800010000000000240001800800010007000000080001000800000008000100000000000800010002000000240001800800010007000000080001000200000008000100020000000800010000"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000100)="5a34a10a1a0092d9221cc435275ce4526b204bcbe6673dff8d7f17ae2b0f7ef4b5bc88a9e935b67c44718620ab7eb58879b2bdfa6aec170031", 0x39, 0x0, &(0x7f0000000240)={0x2, 0xc, @rand_addr=0x64010102}, 0x10) listen(r6, 0xda90) accept(r6, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 9.567364099s ago: executing program 5 (id=343): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 9.395124186s ago: executing program 2 (id=345): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 9.052648009s ago: executing program 2 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0) 8.989085119s ago: executing program 0 (id=348): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={0x100000000000000}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x10000, &(0x7f0000002400)='V0n\xc2\x9bv\'\x00\x19i\x10d\xfd\x96\x14](bSh\x0e+\x88\n\xd5\xe5\x12\xd1C\x99in={\x96\xc2\xa5\x16\xae\xa7\x85E\xfb\xe1\xf7\x9dt\xc1\xbd\x02\xee\x82\xb1\x85\xbe\x1d\x17\xc5\x80\xb6\xc4\xcc\xa1iK\x9c\xe9uzZ^\xf2|~\xbb7<`t\x15\xeeX^\xbf\xf7\xde\xad\xb2\xafG\xc7\x8cy\x0f\xd0\x86Au\xf0Y\xb0A\xaf\x1f<\x85\xa7\xb9\xfd\xf1\xab 9OD9\x17\x82\xfb\x84p\xdc\xf1\x80c\xbd\xf2\xec\x9f\'\x99.\nPCg\x82J!\xd7\x88v') accept4(0xffffffffffffffff, &(0x7f00000024c0)=@in, &(0x7f0000000000)=0x80, 0x0) chdir(&(0x7f0000002380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6.824545794s ago: executing program 1 (id=351): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="e80000000101010300009d3a0000000000000005240002800c00028005000100000000000c00028005000100880000000600034000020000a000068014000400fc000000000000000000000000000000080001000000000014000380060002004e230000060001004e24000014000400fc0100000000000000000000000000012e000380060001004e240000060002004e200000060002004e240000060002004e240000060001004e220000060001004e230000060001004e24000014000500fe8000000000000000000000000000bb08000100ffffffff06001240000400000600124000040000"], 0xe8}, 0x1, 0x0, 0x0, 0x8840}, 0x2000c090) (rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) setresuid(0x0, 0xee00, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x40) setuid(0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) syz_pidfd_open(0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) (async, rerun: 64) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, r5, {0x7}}, 0x18) (async) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x4, 0x2, 0x2, "2029d140"}, 0x14) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) 6.621109889s ago: executing program 1 (id=352): r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket(0xa, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setuid(0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x10, 0x4c0) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 6.567498354s ago: executing program 3 (id=353): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000001c0), 0xffffffffffffff0a) socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x5}, 0x10, &(0x7f0000000040)=[{&(0x7f00000002c0)="ea", 0x1}], 0x1}}], 0x2, 0x48000) 5.840474355s ago: executing program 1 (id=354): sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000881}, 0x48014) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace(0x8, 0x0) r3 = syz_pidfd_open(0x0, 0x0) process_mrelease(r3, 0x700000000000000) socket(0x10, 0x803, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x1, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 5.720575616s ago: executing program 5 (id=355): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x2f) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0xff000000, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0xd) keyctl$read(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.675768288s ago: executing program 0 (id=356): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="932ca37d7e8f04d54627aef41d1a997889df7c74a145838ffb0bc77db6f404ad7f14c4dc06a0520672e1d75ca4386db3e639da75d8246db976fca409d380d8", @ANYRES16=r0, @ANYBLOB="08042cbd7000fbdbdf2501000000640002800c00018008000100050000000c0001800800010000000000240001800800010007000000080001000800000008000100000000000800010002000000240001800800010007000000080001000200000008000100020000000800010000"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000100)="5a34a10a1a0092d9221cc435275ce4526b204bcbe6673dff8d7f17ae2b0f7ef4b5bc88a9e935b67c44718620ab7eb58879b2bdfa6aec170031", 0x39, 0x0, &(0x7f0000000240)={0x2, 0xc, @rand_addr=0x64010102}, 0x10) listen(r6, 0xda90) accept(r6, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.5179909s ago: executing program 0 (id=357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0x0, 0x12, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) getpgrp(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x83) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9902) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x109081) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x5a, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 5.416968553s ago: executing program 2 (id=358): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 4.619391728s ago: executing program 33 (id=357): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0x0, 0x12, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) getpgrp(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x83) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9902) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x109081) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x5a, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 4.613506849s ago: executing program 2 (id=360): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x85, 0x0, 0x8, 0x8001, 0x0, 0x4, 0x8001, 0x806, 0x5, 0xffffffff}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, 0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff05) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80281200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x3, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) dup(r0) 4.607380035s ago: executing program 5 (id=361): r0 = socket$kcm(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000002c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x8, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xa4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}]}, @TCA_BASIC_ACT={0x7c, 0x3, [@m_tunnel_key={0x78, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x48010, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726d6f746d6f64653d3030303030303030193030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x000000000000089d,max_read=0x0000000000000001,default_permissions,blksize=0x0000000000001200,default_permissions,max_read=0x0000000000000008,allow_other,blksize=0x0000000000000000,default_permissions,mand,audit,dont_hash,ro,audit,\x00']) unshare(0x2040400) mount$cgroup2(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='memory_recursiveprot,memory_recursiveprot,nsdelegate']) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.485875265s ago: executing program 3 (id=362): close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffd) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140400001000010000000000000000030700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x3e0000000000}], 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) 2.984097613s ago: executing program 2 (id=363): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) write$dsp(r4, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0x0, "fe00cffa", {0x3, 0x107, 0x0, 0x1, 0xfffa, 0x10, 0x9}}) 2.724413816s ago: executing program 3 (id=364): sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, 0x0, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000800) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) socket$nl_generic(0x10, 0x3, 0x10) 2.717971995s ago: executing program 1 (id=365): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x104, 0x880, 0x0, 0x6a8}, 'syz1\x00', 0x1a}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, 0x0) 2.656125381s ago: executing program 5 (id=366): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000440)={0x100000000000000}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x10000, &(0x7f0000002400)='V0n\xc2\x9bv\'\x00\x19i\x10d\xfd\x96\x14](bSh\x0e+\x88\n\xd5\xe5\x12\xd1C\x99in={\x96\xc2\xa5\x16\xae\xa7\x85E\xfb\xe1\xf7\x9dt\xc1\xbd\x02\xee\x82\xb1\x85\xbe\x1d\x17\xc5\x80\xb6\xc4\xcc\xa1iK\x9c\xe9uzZ^\xf2|~\xbb7<`t\x15\xeeX^\xbf\xf7\xde\xad\xb2\xafG\xc7\x8cy\x0f\xd0\x86Au\xf0Y\xb0A\xaf\x1f<\x85\xa7\xb9\xfd\xf1\xab 9OD9\x17\x82\xfb\x84p\xdc\xf1\x80c\xbd\xf2\xec\x9f\'\x99.\nPCg\x82J!\xd7\x88v') accept4(0xffffffffffffffff, &(0x7f00000024c0)=@in, &(0x7f0000000000)=0x80, 0x0) chdir(&(0x7f0000002380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.574975959s ago: executing program 3 (id=367): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="932ca37d7e8f04d54627aef41d1a997889df7c74a145838ffb0bc77db6f404ad7f14c4dc06a0520672e1d75ca4386db3e639da75d8246db976fca409d380d8", @ANYRES16=r0, @ANYBLOB="08042cbd7000fbdbdf2501000000640002800c00018008000100050000000c0001800800010000000000240001800800010007000000080001000800000008000100000000000800010002000000240001800800010007000000080001000200000008000100020000000800010000"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000100)="5a34a10a1a0092d9221cc435275ce4526b204bcbe6673dff8d7f17ae2b0f7ef4b5bc88a9e935b67c44718620ab7eb58879b2bdfa6aec170031d8f4", 0x3b, 0x0, &(0x7f0000000240)={0x2, 0xc, @rand_addr=0x64010102}, 0x10) listen(r6, 0xda90) accept(r6, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.032088072s ago: executing program 1 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0) 1.070190335s ago: executing program 1 (id=369): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc000000010902"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 933.929525ms ago: executing program 5 (id=370): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 619.261406ms ago: executing program 3 (id=371): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0xb92, 0x0, 0x12, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) getpgrp(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x83) r3 = timerfd_create(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9902) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x109081) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 0s ago: executing program 3 (id=372): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) kernel console output (not intermixed with test programs): oo small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.886820][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.898992][ T5801] team0: Port device team_slave_1 added [ 58.921082][ T5815] team0: Port device team_slave_1 added [ 58.943398][ T5816] team0: Port device team_slave_0 added [ 58.968365][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.975316][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.001686][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.014473][ T5816] team0: Port device team_slave_1 added [ 59.049864][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.056817][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.082795][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.094032][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.101321][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.127383][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.138899][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.145838][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.172213][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.204346][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.211388][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.237581][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.247620][ T5127] Bluetooth: hci2: command tx timeout [ 59.254804][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.261884][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.288280][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.317612][ T5127] Bluetooth: hci0: command tx timeout [ 59.323318][ T5127] Bluetooth: hci1: command tx timeout [ 59.330696][ T5802] hsr_slave_0: entered promiscuous mode [ 59.336720][ T5802] hsr_slave_1: entered promiscuous mode [ 59.342925][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 59.349006][ T5802] Cannot create hsr debugfs directory [ 59.397034][ T5815] hsr_slave_0: entered promiscuous mode [ 59.403617][ T5815] hsr_slave_1: entered promiscuous mode [ 59.409689][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 59.415406][ T5815] Cannot create hsr debugfs directory [ 59.431501][ T5816] hsr_slave_0: entered promiscuous mode [ 59.437844][ T5816] hsr_slave_1: entered promiscuous mode [ 59.443681][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 59.449448][ T5816] Cannot create hsr debugfs directory [ 59.477882][ T5806] Bluetooth: hci3: command tx timeout [ 59.480004][ T5801] hsr_slave_0: entered promiscuous mode [ 59.483576][ T5127] Bluetooth: hci4: command tx timeout [ 59.489911][ T5801] hsr_slave_1: entered promiscuous mode [ 59.500745][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 59.506460][ T5801] Cannot create hsr debugfs directory [ 59.810073][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.828023][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.839027][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.853191][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.907795][ T5802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.917946][ T5802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.942887][ T5802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.961966][ T5802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.991203][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.010369][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.024163][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.044245][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.123463][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.139786][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.150670][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.170150][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.198228][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.209630][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.243597][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.255928][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.263179][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.275510][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.289384][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.296482][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.310292][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.320479][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.331126][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.381636][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.394456][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.401639][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.442416][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.449520][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.509167][ T30] audit: type=1400 audit(1771334957.729:84): avc: denied { sys_module } for pid=5807 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.555138][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.605233][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.634041][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.645113][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.670656][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.677769][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.693155][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.712493][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.726948][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.734137][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.753974][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.771955][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.779094][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.789720][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.796771][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.820425][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.827550][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.860534][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.867676][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.014077][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.051140][ T5807] veth0_vlan: entered promiscuous mode [ 61.094490][ T5807] veth1_vlan: entered promiscuous mode [ 61.205379][ T5802] veth0_vlan: entered promiscuous mode [ 61.215228][ T5807] veth0_macvtap: entered promiscuous mode [ 61.232508][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.246937][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.262346][ T5807] veth1_macvtap: entered promiscuous mode [ 61.285743][ T5802] veth1_vlan: entered promiscuous mode [ 61.321843][ T5127] Bluetooth: hci2: command tx timeout [ 61.341128][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.354402][ T5815] veth0_vlan: entered promiscuous mode [ 61.384229][ T5802] veth0_macvtap: entered promiscuous mode [ 61.400076][ T5127] Bluetooth: hci1: command tx timeout [ 61.400104][ T5806] Bluetooth: hci0: command tx timeout [ 61.407057][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.423243][ T5802] veth1_macvtap: entered promiscuous mode [ 61.430980][ T5815] veth1_vlan: entered promiscuous mode [ 61.440426][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.465358][ T5801] veth0_vlan: entered promiscuous mode [ 61.491879][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.506546][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.516599][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.533750][ T5801] veth1_vlan: entered promiscuous mode [ 61.544706][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.552372][ T532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.561272][ T5806] Bluetooth: hci4: command tx timeout [ 61.561299][ T5806] Bluetooth: hci3: command tx timeout [ 61.575906][ T5815] veth0_macvtap: entered promiscuous mode [ 61.586353][ T5815] veth1_macvtap: entered promiscuous mode [ 61.634312][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.688089][ T88] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.708794][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.734188][ T88] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.743508][ T88] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.753831][ T88] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.771893][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.795747][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.807036][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.831180][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.833428][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.848743][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.858902][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.869475][ T5801] veth0_macvtap: entered promiscuous mode [ 61.896087][ T5801] veth1_macvtap: entered promiscuous mode [ 61.935804][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.941731][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.951315][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.979124][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.000015][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.012204][ T30] audit: type=1400 audit(1771334959.229:85): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.pqceQH/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.027499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.038871][ T30] audit: type=1400 audit(1771334959.229:86): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.070026][ T30] audit: type=1400 audit(1771334959.229:87): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.pqceQH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.102605][ T5816] veth0_vlan: entered promiscuous mode [ 62.114306][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.123008][ T30] audit: type=1400 audit(1771334959.229:88): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.141341][ T532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.159589][ T30] audit: type=1400 audit(1771334959.259:89): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.pqceQH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.205251][ T532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.220447][ T532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.240006][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 62.240024][ T30] audit: type=1400 audit(1771334959.449:97): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.271655][ T30] audit: type=1400 audit(1771334959.449:98): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.273608][ T5816] veth1_vlan: entered promiscuous mode [ 62.303281][ T30] audit: type=1400 audit(1771334959.449:99): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.336203][ T532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.338882][ T30] audit: type=1400 audit(1771334959.519:100): avc: denied { create } for pid=5911 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.388972][ T532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.410965][ T30] audit: type=1400 audit(1771334959.629:101): avc: denied { read } for pid=5911 comm="syz.0.1" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.411368][ T532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.458686][ T30] audit: type=1400 audit(1771334959.629:102): avc: denied { open } for pid=5911 comm="syz.0.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.539783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.592525][ T5917] syzkaller0: entered promiscuous mode [ 62.599304][ T5917] syzkaller0: entered allmulticast mode [ 62.739313][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.745831][ T5816] veth0_macvtap: entered promiscuous mode [ 62.747992][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.817886][ T30] audit: type=1400 audit(1771334960.009:103): avc: denied { setopt } for pid=5911 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.850886][ T30] audit: type=1400 audit(1771334960.019:104): avc: denied { ioctl } for pid=5911 comm="syz.0.1" path="socket:[7729]" dev="sockfs" ino=7729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.877597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.886731][ T30] audit: type=1400 audit(1771334960.059:105): avc: denied { write } for pid=5911 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.923957][ T5816] veth1_macvtap: entered promiscuous mode [ 62.948518][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.016992][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.034687][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.042829][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.075392][ T30] audit: type=1400 audit(1771334960.289:106): avc: denied { mount } for pid=5921 comm="syz.3.4" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.087581][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.222493][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.239388][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.447989][ T5127] Bluetooth: hci2: command tx timeout [ 63.484668][ T5806] Bluetooth: hci0: command tx timeout [ 63.490260][ T5127] Bluetooth: hci1: command tx timeout [ 63.637862][ T5806] Bluetooth: hci4: command tx timeout [ 63.643415][ T5127] Bluetooth: hci3: command tx timeout [ 63.664299][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.680522][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.695622][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.701223][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.735002][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.138210][ T5127] Bluetooth: hci2: Unknown advertising packet type: 0x73 [ 64.138400][ T5127] Bluetooth: hci2: Malformed LE Event: 0x0d [ 64.380713][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.402167][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.460038][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.498152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.498252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.548597][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.574463][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.647620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.488802][ T5127] Bluetooth: hci2: command tx timeout [ 65.558905][ T5127] Bluetooth: hci1: command tx timeout [ 65.564816][ T5127] Bluetooth: hci0: command tx timeout [ 65.687652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.718114][ T5127] Bluetooth: hci3: command tx timeout [ 65.719248][ T5806] Bluetooth: hci4: command tx timeout [ 65.957720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.258217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.269342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.798382][ T5973] kAFS: unable to lookup cell '' [ 66.830870][ T5973] kAFS: unable to lookup cell '(,c' [ 66.870160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.321591][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 67.321616][ T30] audit: type=1400 audit(1771334964.499:163): avc: denied { write } for pid=5976 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.970264][ T30] audit: type=1400 audit(1771334965.069:164): avc: denied { read } for pid=5982 comm="syz.4.14" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.161185][ T30] audit: type=1400 audit(1771334965.079:165): avc: denied { open } for pid=5982 comm="syz.4.14" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.167759][ T5988] ======================================================= [ 68.167759][ T5988] WARNING: The mand mount option has been deprecated and [ 68.167759][ T5988] and is ignored by this kernel. Remove the mand [ 68.167759][ T5988] option from the mount to silence this warning. [ 68.167759][ T5988] ======================================================= [ 68.229370][ T30] audit: type=1400 audit(1771334965.089:166): avc: denied { ioctl } for pid=5982 comm="syz.4.14" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.299747][ T30] audit: type=1400 audit(1771334965.369:167): avc: denied { write } for pid=5984 comm="syz.2.15" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.368018][ T30] audit: type=1400 audit(1771334965.439:168): avc: denied { mount } for pid=5982 comm="syz.4.14" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.509769][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.749378][ T30] audit: type=1400 audit(1771334965.519:169): avc: denied { mounton } for pid=5982 comm="syz.4.14" path="/2/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 68.802635][ T30] audit: type=1400 audit(1771334965.549:170): avc: denied { mount } for pid=5982 comm="syz.4.14" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.906353][ T30] audit: type=1400 audit(1771334965.559:171): avc: denied { create } for pid=5984 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.035975][ T30] audit: type=1400 audit(1771334965.939:172): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.262107][ T977] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.287695][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.478516][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.032621][ T6000] ucma_write: process 15 (syz.4.21) changed security contexts after opening file descriptor, this is not allowed. [ 70.049086][ T29] usb 3-1: config 0 has no interface number 0 [ 70.066774][ T29] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.095684][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 70.097701][ T29] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.104718][ T6005] Zero length message leads to an empty skb [ 70.135534][ T29] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 70.161321][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.197495][ T977] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.07 [ 70.247151][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.274662][ T29] usb 3-1: config 0 descriptor?? [ 70.275366][ T977] usb 4-1: Product: syz [ 70.305013][ T977] usb 4-1: Manufacturer: syz [ 70.322977][ T977] usb 4-1: SerialNumber: syz [ 70.346497][ T977] usb 4-1: config 0 descriptor?? [ 70.433586][ T977] usb 4-1: invalid MIDI EP [ 70.453799][ T977] usb 4-1: snd-bcd2000: error during probing [ 70.475245][ T977] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 70.671810][ T977] usb 4-1: USB disconnect, device number 2 [ 70.775600][ T6011] capability: warning: `syz.2.19' uses deprecated v2 capabilities in a way that may be insecure [ 71.082069][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.089779][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.587522][ T5930] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 71.974423][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.997631][ T5930] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 72.008953][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.149543][ T5930] usb 2-1: Product: syz [ 72.192617][ T5930] usb 2-1: Manufacturer: syz [ 72.197833][ T5930] usb 2-1: SerialNumber: syz [ 72.237917][ T5930] usb 2-1: config 0 descriptor?? [ 72.334561][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 72.334577][ T30] audit: type=1400 audit(1771334969.549:201): avc: denied { mounton } for pid=6028 comm="syz.3.30" path="/6" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.339498][ T29] usbhid 3-1:0.1: can't add hid device: -71 [ 72.344910][ T5930] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 72.411661][ T29] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 72.443998][ T29] usb 3-1: USB disconnect, device number 2 [ 72.961054][ T30] audit: type=1400 audit(1771334970.179:202): avc: denied { prog_run } for pid=6041 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.020427][ T5915] usb 2-1: USB disconnect, device number 2 [ 73.413237][ T29] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 73.697546][ T30] audit: type=1400 audit(1771334970.569:203): avc: denied { shutdown } for pid=6041 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.874212][ T30] audit: type=1400 audit(1771334971.089:204): avc: denied { setopt } for pid=6049 comm="syz.1.37" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.876074][ T6050] xt_hashlimit: size too large, truncated to 1048576 [ 73.916591][ T29] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 73.935875][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 73.957194][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 73.969893][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 73.988658][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.007821][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 74.016090][ T29] usb 3-1: Product: syz [ 74.024038][ T29] usb 3-1: Manufacturer: syz [ 74.032369][ T29] usb 3-1: SerialNumber: syz [ 74.173013][ T6034] Process accounting resumed [ 74.262353][ T29] usb 3-1: config 0 descriptor?? [ 74.339414][ T6040] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 74.368068][ T29] usb 3-1: selecting invalid altsetting 0 [ 74.488341][ T30] audit: type=1400 audit(1771334971.709:205): avc: denied { ioctl } for pid=6055 comm="syz.3.39" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.621256][ T29] usb 3-1: USB disconnect, device number 3 [ 74.655994][ T30] audit: type=1400 audit(1771334971.719:206): avc: denied { set_context_mgr } for pid=6055 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 74.710796][ T6068] netlink: 'syz.3.41': attribute type 10 has an invalid length. [ 74.723380][ T30] audit: type=1400 audit(1771334971.839:207): avc: denied { create } for pid=6039 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.742862][ T6068] netlink: 224 bytes leftover after parsing attributes in process `syz.3.41'. [ 74.772643][ T30] audit: type=1400 audit(1771334971.839:208): avc: denied { setopt } for pid=6039 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.808758][ T30] audit: type=1400 audit(1771334971.839:209): avc: denied { listen } for pid=6039 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.828045][ T6071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.42'. [ 74.837975][ T30] audit: type=1400 audit(1771334971.849:210): avc: denied { read write } for pid=6039 comm="syz.2.35" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.997504][ T5877] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 75.150073][ T5877] usb 4-1: config 123 has an invalid interface number: 211 but max is 0 [ 75.158582][ T5877] usb 4-1: config 123 has no interface number 0 [ 75.164936][ T5877] usb 4-1: config 123 interface 211 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 75.176221][ T5877] usb 4-1: config 123 interface 211 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 8 [ 75.187373][ T5877] usb 4-1: config 123 interface 211 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 8 [ 75.199760][ T5877] usb 4-1: config 123 interface 211 altsetting 9 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 75.210720][ T5877] usb 4-1: config 123 interface 211 altsetting 9 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 75.221649][ T5877] usb 4-1: config 123 interface 211 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 75.232729][ T5877] usb 4-1: config 123 interface 211 altsetting 9 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 75.255752][ T5877] usb 4-1: config 123 interface 211 has no altsetting 0 [ 75.265541][ T5877] usb 4-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=db.56 [ 75.282146][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.290383][ T5877] usb 4-1: Product: 뭩䛃┐䧷⚆⁒俚힂ꗰ᪟夗팠ࢍ깭땛纆긋㒿嘮惀縡䟞ͱ欜ᣧ⍸얈扥奴씀ꎎ筌̶ⲝꖰ鹡☈ﶝ嚦꛸献甥⩓舫뵻붠㰀亂뜉 [ 75.311461][ T5877] usb 4-1: Manufacturer: 仂滣䫠Ꮢ꫸频ﷳ⒝짥꼒歆禃ꥣ쮱紐⿝挖鍶娸䝔겺끜哔ꖑ￴䤈䧆⫍ʌ [ 75.327266][ T5877] usb 4-1: SerialNumber: ї [ 75.375550][ T5806] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 75.375580][ T5806] Bluetooth: unknown link type 48 [ 75.389561][ T5806] Bluetooth: hci3: connection err: -111 [ 75.411204][ T6077] netlink: 'syz.4.44': attribute type 3 has an invalid length. [ 75.537675][ T6079] evm: overlay not supported [ 75.601016][ T6080] cgroup: Name too long [ 75.850742][ T5877] usb 4-1: selecting invalid altsetting 1 [ 75.870819][ T5877] catc 4-1:123.211: Can't set altsetting 1. [ 75.882607][ T5877] catc 4-1:123.211: probe with driver catc failed with error -5 [ 75.923615][ T5877] usb 4-1: USB disconnect, device number 3 [ 76.340664][ T24] cfg80211: failed to load regulatory.db [ 77.547805][ T6092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.578502][ T6096] overlayfs: missing 'lowerdir' [ 77.757553][ T977] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.825380][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 77.825413][ T30] audit: type=1400 audit(1771334975.029:232): avc: denied { ioctl } for pid=6098 comm="syz.3.53" path="socket:[9014]" dev="sockfs" ino=9014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.880724][ T6102] xt_l2tp: v2 doesn't support IP mode [ 78.008991][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 78.083826][ T977] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 78.115918][ T977] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 78.149419][ T977] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 78.159902][ T977] usb 3-1: Product: syz [ 78.164078][ T977] usb 3-1: Manufacturer: syz [ 78.168800][ T977] usb 3-1: SerialNumber: syz [ 78.201889][ T977] usb 3-1: config 0 descriptor?? [ 78.220619][ T6094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.229521][ T977] hub 3-1:0.0: bad descriptor, ignoring hub [ 78.236618][ T977] hub 3-1:0.0: probe with driver hub failed with error -5 [ 78.454037][ T30] audit: type=1400 audit(1771334975.669:233): avc: denied { create } for pid=6108 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.508703][ T30] audit: type=1400 audit(1771334975.669:234): avc: denied { ioctl } for pid=6108 comm="syz.4.50" path="socket:[9591]" dev="sockfs" ino=9591 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.572591][ T6112] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 78.580253][ T6112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.717461][ T30] audit: type=1400 audit(1771334975.789:235): avc: denied { create } for pid=6106 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.764698][ T30] audit: type=1400 audit(1771334975.829:236): avc: denied { execute } for pid=6106 comm="syz.1.52" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 79.030239][ T30] audit: type=1400 audit(1771334976.019:237): avc: denied { ioctl } for pid=6104 comm="syz.3.55" path="socket:[9042]" dev="sockfs" ino=9042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.060804][ T6094] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 79.105414][ T30] audit: type=1400 audit(1771334976.229:238): avc: denied { write } for pid=6115 comm="syz.0.56" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.106389][ T6094] usb 3-1: device reset changed ep0 maxpacket size! [ 79.177787][ T5915] usb 3-1: USB disconnect, device number 4 [ 79.280960][ T30] audit: type=1400 audit(1771334976.499:239): avc: denied { getopt } for pid=6108 comm="syz.4.50" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.349039][ T5915] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.520594][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 79.613624][ T6122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.849059][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.878257][ T5915] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 79.907967][ T5915] usb 3-1: can't read configurations, error -71 [ 80.417542][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 80.674336][ T24] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 80.752818][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 80.982687][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 80.993991][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.035652][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.094051][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.138537][ T24] usb 2-1: Product: syz [ 81.151206][ T30] audit: type=1400 audit(1771334978.359:240): avc: denied { bind } for pid=6139 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.174777][ T24] usb 2-1: Manufacturer: syz [ 81.198214][ T6141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.212419][ T24] usb 2-1: SerialNumber: syz [ 81.245344][ T24] usb 2-1: config 0 descriptor?? [ 81.271650][ T6128] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.300163][ T30] audit: type=1400 audit(1771334978.519:241): avc: denied { mount } for pid=6142 comm="syz.4.64" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.326692][ T24] usb 2-1: selecting invalid altsetting 0 [ 81.576807][ T24] usb 2-1: USB disconnect, device number 3 [ 82.855144][ T6141] infiniband syz1: set active [ 82.860560][ T6141] infiniband syz1: added syz_tun [ 82.890836][ T6141] RDS/IB: syz1: added [ 82.897057][ T6141] smc: adding ib device syz1 with port count 1 [ 82.903679][ T6141] smc: ib device syz1 port 1 has no pnetid [ 83.489260][ T6165] kvm: pic: non byte write [ 83.530521][ T6152] syz.1.60 (6152) used greatest stack depth: 18456 bytes left [ 83.759948][ T6171] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 83.768997][ T6171] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 83.811957][ T6172] netlink: 'syz.1.70': attribute type 10 has an invalid length. [ 83.939849][ T6171] netlink: 'syz.1.70': attribute type 10 has an invalid length. [ 84.027556][ T6172] team0: Port device netdevsim0 added [ 84.146548][ T6171] team0: Port device netdevsim0 removed [ 84.187183][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 84.187202][ T30] audit: type=1400 audit(1771334981.399:248): avc: denied { read write } for pid=6175 comm="syz.2.72" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.223172][ T6171] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 84.245871][ T6147] Process accounting resumed [ 84.348767][ T30] audit: type=1400 audit(1771334981.399:249): avc: denied { open } for pid=6175 comm="syz.2.72" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.352978][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 84.388438][ T6179] raw_sendmsg: syz.1.73 forgot to set AF_INET. Fix it! [ 84.541645][ T30] audit: type=1400 audit(1771334981.439:250): avc: denied { ioctl } for pid=6175 comm="syz.2.72" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 84.607463][ T30] audit: type=1400 audit(1771334981.449:251): avc: denied { create } for pid=6175 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.656003][ T30] audit: type=1400 audit(1771334981.449:252): avc: denied { setopt } for pid=6175 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.000294][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 85.068119][ T30] audit: type=1400 audit(1771334981.599:253): avc: denied { connect } for pid=6177 comm="syz.1.73" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.122610][ T30] audit: type=1400 audit(1771334981.599:254): avc: denied { write } for pid=6177 comm="syz.1.73" laddr=172.20.20.40 lport=255 faddr=172.20.20.40 fport=20064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.201154][ T30] audit: type=1400 audit(1771334981.869:255): avc: denied { mount } for pid=6182 comm="syz.3.74" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 85.266544][ T6186] Bluetooth: MGMT ver 1.23 [ 85.281594][ T30] audit: type=1400 audit(1771334982.369:256): avc: denied { create } for pid=6180 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.861622][ T30] audit: type=1400 audit(1771334982.369:257): avc: denied { setopt } for pid=6180 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.534333][ T6201] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.560219][ T6201] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.580043][ T6201] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 87.102894][ T5877] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 87.216583][ T6205] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.340928][ T5877] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 87.427739][ T5877] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 87.500281][ T5877] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 87.569763][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.688968][ T5877] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.790045][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.892018][ T5877] usb 3-1: Product: syz [ 87.907496][ T5877] usb 3-1: Manufacturer: syz [ 87.925035][ T5877] usb 3-1: SerialNumber: syz [ 87.961930][ T5877] usb 3-1: config 0 descriptor?? [ 87.967327][ T6203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.004885][ T5877] usb 3-1: selecting invalid altsetting 0 [ 88.238570][ T5930] usb 3-1: USB disconnect, device number 7 [ 88.337658][ T6214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.264341][ T6234] hub 9-0:1.0: USB hub found [ 89.270714][ T6234] hub 9-0:1.0: 1 port detected [ 89.299321][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 89.299350][ T30] audit: type=1400 audit(1771334986.509:270): avc: denied { bind } for pid=6229 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.435371][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057851000: rx timeout, send abort [ 89.445834][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057851000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.589888][ T30] audit: type=1400 audit(1771334986.579:271): avc: denied { listen } for pid=6229 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.719577][ T30] audit: type=1400 audit(1771334986.729:272): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 89.811776][ T30] audit: type=1400 audit(1771334986.729:273): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.967674][ T30] audit: type=1400 audit(1771334986.729:274): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.697517][ T30] audit: type=1400 audit(1771334986.729:275): avc: denied { add_name } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.825257][ T30] audit: type=1400 audit(1771334986.729:276): avc: denied { create } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 90.848182][ T30] audit: type=1400 audit(1771334986.729:277): avc: denied { append open } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.326946][ T30] audit: type=1400 audit(1771334986.729:278): avc: denied { getattr } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.563969][ T6253] netlink: 48 bytes leftover after parsing attributes in process `syz.1.89'. [ 91.579592][ T6253] NILFS (nullb0): couldn't find nilfs on the device [ 91.616741][ T30] audit: type=1400 audit(1771334988.789:279): avc: denied { mounton } for pid=6238 comm="syz.1.89" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 91.741505][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 91.844291][ T6259] overlayfs: failed to resolve './file0': -2 [ 92.412741][ T6260] mmap: syz.3.94 (6260) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.889568][ T6269] ubi31: attaching mtd0 [ 92.902915][ T6269] ubi31: scanning is finished [ 92.909218][ T6269] ubi31: empty MTD device detected [ 93.348700][ T6269] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 93.356308][ T6269] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 93.363668][ T6269] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 93.370683][ T6269] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 93.378152][ T6269] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 93.384974][ T6269] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 93.393057][ T6269] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1247529887 [ 93.403243][ T6269] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 93.417545][ T6271] ubi31: background thread "ubi_bgt31d" started, PID 6271 [ 93.711781][ T6265] warning: `syz.0.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.766978][ T6281] hub 9-0:1.0: USB hub found [ 93.771944][ T6281] hub 9-0:1.0: 1 port detected [ 94.314368][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 94.314381][ T30] audit: type=1400 audit(1771334991.529:289): avc: denied { create } for pid=6287 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.344666][ T30] audit: type=1400 audit(1771334991.559:290): avc: denied { bind } for pid=6287 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.375622][ T30] audit: type=1400 audit(1771334991.559:291): avc: denied { name_bind } for pid=6287 comm="syz.3.104" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 95.403462][ T30] audit: type=1400 audit(1771334991.559:292): avc: denied { node_bind } for pid=6287 comm="syz.3.104" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 95.426861][ T30] audit: type=1400 audit(1771334991.559:293): avc: denied { setopt } for pid=6287 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.047664][ T30] audit: type=1400 audit(1771334994.139:294): avc: denied { read write } for pid=6308 comm="syz.2.110" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.121988][ T30] audit: type=1400 audit(1771334994.139:295): avc: denied { open } for pid=6308 comm="syz.2.110" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.211301][ T30] audit: type=1400 audit(1771334994.139:296): avc: denied { ioctl } for pid=6308 comm="syz.2.110" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.346032][ T30] audit: type=1400 audit(1771334995.563:297): avc: denied { ioctl } for pid=6312 comm="syz.2.111" path="socket:[9996]" dev="sockfs" ino=9996 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.632220][ T30] audit: type=1400 audit(1771334995.803:298): avc: denied { ioctl } for pid=6315 comm="syz.3.105" path="socket:[10443]" dev="sockfs" ino=10443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.674879][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 97.779945][ T6324] hub 9-0:1.0: USB hub found [ 97.785568][ T6324] hub 9-0:1.0: 1 port detected [ 98.114387][ T6321] syz.3.105 (6321): /proc/6315/oom_adj is deprecated, please use /proc/6315/oom_score_adj instead. [ 98.878010][ T5863] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.082619][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 99.108764][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.125366][ T5863] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 99.151300][ T5863] usb 4-1: config 0 has no interface number 0 [ 99.167699][ T5863] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 105, changing to 10 [ 99.187499][ T5863] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 25186, setting to 1024 [ 99.257487][ T5863] usb 4-1: config 0 interface 88 has no altsetting 0 [ 99.295475][ T5863] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 99.314703][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 99.344988][ T5863] usb 4-1: Product: syz [ 99.352820][ T5863] usb 4-1: Manufacturer: В [ 99.387451][ T5863] usb 4-1: SerialNumber: syz [ 99.396740][ T5863] usb 4-1: config 0 descriptor?? [ 99.437485][ T5915] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 99.621343][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.662332][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.681594][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 99.690934][ T6323] Process accounting resumed [ 99.877486][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 99.877511][ T30] audit: type=1400 audit(1771334997.983:301): avc: denied { bind } for pid=6344 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.201399][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.240048][ T5915] usb 2-1: SerialNumber: syz [ 100.246270][ T30] audit: type=1400 audit(1771334997.993:302): avc: denied { create } for pid=6344 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.416085][ T5915] usb 2-1: 0:2 : does not exist [ 100.667490][ T6339] XFS (nullb0): Invalid superblock magic number [ 100.693711][ T5863] input: В syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 100.755342][ T5863] usb 4-1: USB disconnect, device number 4 [ 100.755987][ T6363] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 100.800271][ T5915] usb 2-1: USB disconnect, device number 4 [ 101.336971][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.577658][ T977] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 101.640045][ T30] audit: type=1400 audit(1771334999.853:303): avc: denied { getopt } for pid=6375 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.841486][ T977] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 101.945891][ T977] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 101.965357][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.981641][ T977] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.998538][ T977] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 102.029927][ T977] usb 3-1: Product: syz [ 102.084849][ T977] usb 3-1: Manufacturer: syz [ 102.090038][ T977] usb 3-1: SerialNumber: syz [ 102.138473][ T977] usb 3-1: config 0 descriptor?? [ 102.201251][ T977] hub 3-1:0.0: bad descriptor, ignoring hub [ 102.207341][ T977] hub 3-1:0.0: probe with driver hub failed with error -5 [ 102.219932][ T977] usb 3-1: selecting invalid altsetting 0 [ 102.523057][ T6367] Process accounting resumed [ 102.688216][ T6391] binder: 6389:6391 ioctl c018620c 2000000002c0 returned -22 [ 102.918869][ T6391] wireguard0: entered promiscuous mode [ 102.924584][ T6391] wireguard0: entered allmulticast mode [ 103.149142][ T6363] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 105.478095][ T30] audit: type=1400 audit(1771335003.693:304): avc: denied { write } for pid=6405 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.838108][ T5930] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.033178][ T6413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.135'. [ 106.044709][ T6413] NILFS (nullb0): couldn't find nilfs on the device [ 106.138879][ T5930] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 106.156275][ T5930] usb 4-1: config 1 has no interface number 0 [ 106.167613][ T5930] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 106.232244][ T6417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.134'. [ 106.245873][ T6417] NILFS (nullb0): couldn't find nilfs on the device [ 106.340437][ T5930] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 106.350371][ T5930] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.366251][ T5930] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 106.375459][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.391123][ T5930] usb 4-1: Product: syz [ 106.395381][ T5930] usb 4-1: Manufacturer: syz [ 106.400076][ T5930] usb 4-1: SerialNumber: syz [ 106.416281][ T6404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 106.520147][ T6419] netlink: 260 bytes leftover after parsing attributes in process `syz.4.136'. [ 106.606350][ T30] audit: type=1400 audit(1771335004.823:305): avc: denied { create } for pid=6420 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.160708][ T30] audit: type=1400 audit(1771335004.963:306): avc: denied { setopt } for pid=6403 comm="syz.3.132" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.333855][ T30] audit: type=1400 audit(1771335004.963:307): avc: denied { connect } for pid=6403 comm="syz.3.132" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.388371][ T30] audit: type=1400 audit(1771335004.963:308): avc: denied { write } for pid=6403 comm="syz.3.132" laddr=172.20.20.10 lport=255 faddr=172.20.20.40 fport=20064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.635878][ T30] audit: type=1400 audit(1771335005.853:309): avc: denied { write } for pid=6422 comm="syz.0.138" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.671056][ T6429] geneve2: entered promiscuous mode [ 107.676380][ T6429] geneve2: entered allmulticast mode [ 107.727518][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.877447][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 107.892375][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 107.913246][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.926871][ T24] usb 5-1: config 0 descriptor?? [ 108.135416][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 108.155169][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.166665][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 108.175285][ T24] usb 5-1: media controller created [ 108.323676][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.354200][ T24] az6027: usb out operation failed. (-71) [ 108.367471][ T24] az6027: usb out operation failed. (-71) [ 108.424699][ T24] stb0899_attach: Driver disabled by Kconfig [ 108.431899][ T24] az6027: no front-end attached [ 108.431899][ T24] [ 108.440044][ T24] az6027: usb out operation failed. (-71) [ 108.445943][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 108.465960][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 108.494260][ T6438] FAULT_INJECTION: forcing a failure. [ 108.494260][ T6438] name failslab, interval 1, probability 0, space 0, times 1 [ 108.507022][ T6438] CPU: 1 UID: 0 PID: 6438 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 108.507046][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.507056][ T6438] Call Trace: [ 108.507064][ T6438] [ 108.507071][ T6438] dump_stack_lvl+0x100/0x190 [ 108.507105][ T6438] should_fail_ex.cold+0x5/0xa [ 108.507129][ T6438] should_failslab+0xc2/0x120 [ 108.507153][ T6438] __kmalloc_cache_noprof+0x7a/0x6f0 [ 108.507172][ T6438] ? sel_netport_sid+0x589/0xba0 [ 108.507197][ T6438] ? sel_netport_sid+0x389/0xba0 [ 108.507226][ T6438] sel_netport_sid+0x589/0xba0 [ 108.507258][ T6438] selinux_socket_connect_helper.isra.0+0x354/0x520 [ 108.507289][ T6438] ? __pfx_selinux_socket_connect_helper.isra.0+0x10/0x10 [ 108.507317][ T6438] ? __lock_acquire+0x4a5/0x2630 [ 108.507361][ T6438] ? do_raw_spin_lock+0x128/0x260 [ 108.507385][ T6438] selinux_sctp_bind_connect+0x1ef/0x2a0 [ 108.507414][ T6438] security_sctp_bind_connect+0xa5/0x260 [ 108.507437][ T6438] sctp_sendmsg+0x16ea/0x22b0 [ 108.507462][ T6438] ? __pfx___schedule+0x10/0x10 [ 108.507485][ T6438] ? __pfx_sctp_sendmsg+0x10/0x10 [ 108.507503][ T6438] ? preempt_schedule_irq+0x7b/0x90 [ 108.507529][ T6438] ? lockdep_hardirqs_on+0x78/0x100 [ 108.507553][ T6438] ? irqentry_exit+0x180/0x670 [ 108.507586][ T6438] ? inet_sendmsg+0x18/0x140 [ 108.507605][ T6438] ? __pfx_sctp_sendmsg+0x10/0x10 [ 108.507625][ T6438] inet_sendmsg+0x11c/0x140 [ 108.507644][ T6438] __sys_sendto+0x467/0x520 [ 108.507667][ T6438] ? __pfx___sys_sendto+0x10/0x10 [ 108.507687][ T6438] ? __schedule+0x1000/0x60e0 [ 108.507729][ T6438] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 108.507761][ T6438] __x64_sys_sendto+0xe0/0x1c0 [ 108.507781][ T6438] ? do_syscall_64+0x95/0xf80 [ 108.507805][ T6438] ? lockdep_hardirqs_on+0x78/0x100 [ 108.507829][ T6438] do_syscall_64+0x106/0xf80 [ 108.507850][ T6438] ? clear_bhb_loop+0x40/0x90 [ 108.507871][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.507889][ T6438] RIP: 0033:0x7f16b3b9bf79 [ 108.507904][ T6438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.507920][ T6438] RSP: 002b:00007f16b1db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 108.507938][ T6438] RAX: ffffffffffffffda RBX: 00007f16b3e16180 RCX: 00007f16b3b9bf79 [ 108.507948][ T6438] RDX: 0000000000000014 RSI: 0000200000000100 RDI: 0000000000000007 [ 108.507958][ T6438] RBP: 00007f16b1db4090 R08: 0000200000000240 R09: 0000000000000010 [ 108.507968][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.507978][ T6438] R13: 00007f16b3e16218 R14: 00007f16b3e16180 R15: 00007fffb81d4548 [ 108.508002][ T6438] [ 108.622780][ T5930] usb 4-1: Error in usbnet_get_endpoints (-71) [ 108.688529][ T6363] usb 3-1: failed to restore interface 0 altsetting 251 (error=-110) [ 108.692825][ T30] audit: type=1400 audit(1771335006.843:310): avc: denied { name_connect } for pid=6435 comm="syz.0.141" dest=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 108.699537][ T5863] usb 3-1: USB disconnect, device number 8 [ 108.738063][ T5930] usb 4-1: USB disconnect, device number 5 [ 108.743769][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 108.856114][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 108.911453][ T24] usb 5-1: USB disconnect, device number 2 [ 109.702441][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 109.851003][ T6451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.967602][ T5863] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.114397][ T30] audit: type=1400 audit(1771335008.333:311): avc: denied { ioctl } for pid=6452 comm="syz.4.147" path="socket:[10733]" dev="sockfs" ino=10733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.217484][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 110.246097][ T5863] usb 3-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=84.3d [ 110.295049][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.320811][ T5863] usb 3-1: Product: syz [ 110.325054][ T5863] usb 3-1: Manufacturer: syz [ 110.330313][ T30] audit: type=1400 audit(1771335008.553:312): avc: denied { create } for pid=6456 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 110.356424][ T5863] usb 3-1: SerialNumber: syz [ 110.373063][ T30] audit: type=1400 audit(1771335008.583:313): avc: denied { write } for pid=6456 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 110.400712][ T5863] usb 3-1: config 0 descriptor?? [ 110.427115][ T5863] usb 3-1: selecting invalid altsetting 1 [ 110.436231][ T5863] snd-usb-caiaq 3-1:0.0: can't set alt interface. [ 110.450532][ T5863] usb 3-1: unable to init card! (ret=-5) [ 110.548291][ T6459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.149'. [ 110.559526][ T6459] NILFS (nullb0): couldn't find nilfs on the device [ 110.578869][ T5863] snd-usb-caiaq 3-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 110.843188][ T30] audit: type=1400 audit(1771335009.063:314): avc: denied { create } for pid=6463 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.884341][ T30] audit: type=1400 audit(1771335009.083:315): avc: denied { write } for pid=6463 comm="syz.3.150" path="socket:[11327]" dev="sockfs" ino=11327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.925408][ T6457] loop7: detected capacity change from 0 to 7 [ 110.955980][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.965709][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 110.985177][ T30] audit: type=1400 audit(1771335009.193:316): avc: denied { setopt } for pid=6463 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.986338][ T6470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.351080][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.360695][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.376275][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.385874][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.394123][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.403708][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.412044][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.421595][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.429663][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.439206][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.448643][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.458201][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.466229][ T6457] ldm_validate_partition_table(): Disk read failed. [ 111.485458][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.495047][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.506076][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.515675][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.523811][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 111.533393][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 111.543324][ T6457] Dev loop7: unable to read RDB block 0 [ 111.609375][ T6457] loop7: unable to read partition table [ 111.628732][ T6457] loop7: partition table beyond EOD, truncated [ 111.657911][ T6457] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 111.709977][ T30] audit: type=1400 audit(1771335009.923:317): avc: denied { getopt } for pid=6474 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.168266][ T5884] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.951764][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 113.028089][ T24] usb 3-1: USB disconnect, device number 9 [ 113.056447][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 113.101399][ T6488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.153'. [ 113.209838][ T5884] usb 2-1: can't read configurations, error -61 [ 113.301661][ T6490] NILFS (nullb0): couldn't find nilfs on the device [ 113.408430][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.500171][ T30] audit: type=1400 audit(1771335011.723:318): avc: denied { create } for pid=6486 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 113.577602][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 113.853019][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 113.861006][ T5884] usb 2-1: can't read configurations, error -61 [ 113.874637][ T5884] usb usb2-port1: attempt power cycle [ 114.242298][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.278894][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 114.286096][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 114.294164][ T5884] usb 2-1: can't read configurations, error -61 [ 114.428815][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.460184][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 114.474290][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 114.502539][ T5884] usb 2-1: can't read configurations, error -61 [ 114.522790][ T5884] usb usb2-port1: unable to enumerate USB device [ 115.472049][ T30] audit: type=1400 audit(1771335013.693:319): avc: denied { bind } for pid=6506 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.888270][ T6511] comedi comedi0: rti802: I/O port conflict (0x6,4) [ 115.942812][ T6511] binder: 6510:6511 ioctl c0306201 200000000040 returned -14 [ 116.399661][ T30] audit: type=1400 audit(1771335014.623:320): avc: denied { sqpoll } for pid=6522 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 116.577466][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.729421][ T5877] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 116.737600][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 116.740392][ T30] audit: type=1400 audit(1771335014.963:321): avc: denied { create } for pid=6531 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 117.698755][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 117.707999][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.722927][ T24] usb 1-1: config 0 descriptor?? [ 117.814339][ T6539] netlink: 72 bytes leftover after parsing attributes in process `syz.2.171'. [ 117.827809][ T5877] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 117.864946][ T30] audit: type=1400 audit(1771335016.073:322): avc: denied { create } for pid=6537 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.923519][ T5877] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 117.932378][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 118.118161][ T30] audit: type=1400 audit(1771335016.073:323): avc: denied { ioctl } for pid=6537 comm="syz.2.171" path="socket:[10884]" dev="sockfs" ino=10884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.127474][ T5877] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 118.147207][ T24] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 118.169578][ T24] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 118.181575][ T30] audit: type=1400 audit(1771335016.393:324): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 118.237458][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.255954][ T5877] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.275758][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.389529][ T5877] usb 4-1: Product: syz [ 118.396087][ T5877] usb 4-1: Manufacturer: syz [ 118.412418][ T5877] usb 4-1: SerialNumber: syz [ 118.430224][ T5877] usb 4-1: config 0 descriptor?? [ 118.446421][ T6526] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 118.456402][ T5877] usb 4-1: selecting invalid altsetting 0 [ 118.597228][ T30] audit: type=1400 audit(1771335016.733:325): avc: denied { bind } for pid=6540 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.543017][ T5877] usb 4-1: USB disconnect, device number 6 [ 120.586427][ T30] audit: type=1400 audit(1771335018.803:326): avc: denied { create } for pid=6555 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.915504][ T30] audit: type=1400 audit(1771335019.133:327): avc: denied { bind } for pid=6561 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.049354][ T6566] binder: 6564:6566 ioctl c018620c 2000000002c0 returned -22 [ 121.067593][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 122.010872][ T30] audit: type=1400 audit(1771335019.823:328): avc: denied { write } for pid=6568 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.181290][ T6566] wireguard0: entered promiscuous mode [ 122.236218][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 122.257148][ T6566] wireguard0: entered allmulticast mode [ 122.267236][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.291811][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.310323][ T5884] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 122.319624][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.337702][ T5884] usb 3-1: Product: syz [ 122.387645][ T6578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.639663][ T5884] usb 3-1: Manufacturer: syz [ 122.647577][ T5884] usb 3-1: SerialNumber: syz [ 122.661700][ T5884] usb 3-1: config 0 descriptor?? [ 122.714640][ T6556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.983163][ T5884] usb 3-1: USB disconnect, device number 10 [ 123.156498][ T30] audit: type=1400 audit(1771335021.373:329): avc: denied { ioctl } for pid=6587 comm="syz.1.184" path="socket:[11589]" dev="sockfs" ino=11589 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.335347][ T30] audit: type=1400 audit(1771335021.423:330): avc: denied { create } for pid=6587 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.355233][ T30] audit: type=1400 audit(1771335022.303:331): avc: denied { mounton } for pid=6600 comm="syz.0.187" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 125.382062][ T30] audit: type=1400 audit(1771335022.523:332): avc: denied { mount } for pid=6600 comm="syz.0.187" name="/" dev="ramfs" ino=11688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 125.407522][ T30] audit: type=1400 audit(1771335023.143:333): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 125.504483][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 125.556062][ T6612] netlink: 'syz.4.180': attribute type 5 has an invalid length. [ 125.686551][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 125.777562][ T29] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 126.333119][ T29] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 126.382309][ T29] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 126.424318][ T29] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 126.518690][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.537569][ T5877] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.566781][ T29] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.583120][ T29] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.617762][ T29] usb 2-1: Product: syz [ 126.622526][ T29] usb 2-1: Manufacturer: syz [ 126.627354][ T29] usb 2-1: SerialNumber: syz [ 126.655839][ T6626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.736637][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 126.836464][ T29] usb 2-1: config 0 descriptor?? [ 126.892134][ T6610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.940169][ T5877] usb 5-1: config 255 has an invalid interface number: 62 but max is 0 [ 126.951763][ T29] usb 2-1: selecting invalid altsetting 0 [ 126.966946][ T5877] usb 5-1: config 255 has no interface number 0 [ 126.978640][ T5877] usb 5-1: config 255 interface 62 has no altsetting 0 [ 126.996638][ T5877] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=55.37 [ 127.029444][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.045563][ T5877] usb 5-1: Product: syz [ 127.100347][ T5877] usb 5-1: Manufacturer: syz [ 127.450827][ T5877] usb 5-1: SerialNumber: syz [ 127.468006][ T5884] usb 2-1: USB disconnect, device number 9 [ 127.486111][ T5877] sr9700 5-1:255.62: probe with driver sr9700 failed with error -22 [ 127.659030][ T30] audit: type=1400 audit(1771335025.873:334): avc: denied { bind } for pid=6613 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.682342][ T30] audit: type=1326 audit(1771335025.903:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="syz.2.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f6fd9bf79 code=0x0 [ 127.710170][ T5915] usb 5-1: USB disconnect, device number 3 [ 127.993444][ T5806] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 128.201026][ T6629] Process accounting resumed [ 129.425511][ T30] audit: type=1400 audit(1771335027.643:336): avc: denied { read append } for pid=6649 comm="syz.1.201" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.461122][ T6654] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.619965][ T30] audit: type=1400 audit(1771335027.643:337): avc: denied { ioctl open } for pid=6649 comm="syz.1.201" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.780186][ T6655] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 129.829476][ T6654] sctp: [Deprecated]: syz.2.203 (pid 6654) Use of int in max_burst socket option. [ 129.829476][ T6654] Use struct sctp_assoc_value instead [ 129.884935][ T30] audit: type=1400 audit(1771335028.003:338): avc: denied { read } for pid=6653 comm="syz.2.203" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.119455][ T30] audit: type=1400 audit(1771335028.003:339): avc: denied { open } for pid=6653 comm="syz.2.203" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.344342][ T30] audit: type=1400 audit(1771335028.023:340): avc: denied { ioctl } for pid=6653 comm="syz.2.203" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 131.196864][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 131.741741][ T462] smc: removing ib device syz1 [ 131.757308][ T6677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.001742][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.016430][ T5884] syz1: Port: 1 Link DOWN [ 132.203283][ T5915] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 132.217514][ T5915] usb 3-1: config 1 has no interface number 0 [ 132.241651][ T30] audit: type=1400 audit(1771335030.453:341): avc: denied { getopt } for pid=6680 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.265836][ T6681] dns_resolver: Unsupported server list version (0) [ 132.276033][ T5915] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 132.288918][ T6681] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 132.296574][ T6681] netlink: 'syz.4.210': attribute type 2 has an invalid length. [ 132.313192][ T6681] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 132.321642][ T6685] netlink: 15678 bytes leftover after parsing attributes in process `syz.3.198'. [ 132.334752][ T6681] netlink: 'syz.4.210': attribute type 2 has an invalid length. [ 132.398357][ T30] audit: type=1400 audit(1771335030.483:342): avc: denied { create } for pid=6680 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.418385][ T5915] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 132.430679][ T5915] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.442130][ T30] audit: type=1400 audit(1771335030.483:343): avc: denied { write } for pid=6680 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.471692][ T5915] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 132.480981][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.489558][ T5915] usb 3-1: Product: syz [ 132.493733][ T5915] usb 3-1: Manufacturer: syz [ 132.500661][ T5915] usb 3-1: SerialNumber: syz [ 132.522387][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.530394][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.536974][ T6673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.687565][ T5930] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.259204][ T5930] usb 4-1: device descriptor read/64, error -71 [ 133.567853][ T5930] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.653914][ T30] audit: type=1400 audit(1771335031.863:344): avc: denied { create } for pid=6699 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.737656][ T5930] usb 4-1: device descriptor read/64, error -71 [ 133.837304][ T30] audit: type=1400 audit(1771335031.893:345): avc: denied { connect } for pid=6699 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.888184][ T5930] usb usb4-port1: attempt power cycle [ 133.891431][ T793] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.010221][ T6702] lo speed is unknown, defaulting to 1000 [ 134.017254][ T6702] lo speed is unknown, defaulting to 1000 [ 134.079258][ T6703] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 134.130558][ T6702] lo speed is unknown, defaulting to 1000 [ 134.153823][ T6702] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.211628][ T6702] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 134.348586][ T6702] lo speed is unknown, defaulting to 1000 [ 134.357237][ T6702] lo speed is unknown, defaulting to 1000 [ 134.387225][ T6702] lo speed is unknown, defaulting to 1000 [ 134.401063][ T6702] lo speed is unknown, defaulting to 1000 [ 134.407495][ T5930] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 134.418211][ T6702] lo speed is unknown, defaulting to 1000 [ 134.458314][ T5930] usb 4-1: device descriptor read/8, error -71 [ 134.493505][ T793] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 134.505243][ T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.617162][ T793] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.635677][ T793] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 134.653415][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.662792][ T793] usb 5-1: Product: syz [ 134.667001][ T793] usb 5-1: Manufacturer: syz [ 134.673604][ T793] usb 5-1: SerialNumber: syz [ 134.690269][ T793] usb 5-1: config 0 descriptor?? [ 134.695931][ T6698] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 134.712693][ T5930] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.768690][ T5930] usb 4-1: device descriptor read/8, error -71 [ 134.822522][ T6707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.217'. [ 134.839287][ T5915] usb 3-1: Error in usbnet_get_endpoints (-71) [ 134.898051][ T5930] usb usb4-port1: unable to enumerate USB device [ 134.943141][ T5915] usb 3-1: USB disconnect, device number 11 [ 135.180702][ T5930] usb 5-1: USB disconnect, device number 4 [ 135.236094][ T30] audit: type=1400 audit(1771335033.453:346): avc: denied { write } for pid=6711 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.679447][ T6719] Illegal XDP return value 4294965632 on prog (id 11) dev syz_tun, expect packet loss! [ 136.714669][ T6730] infiniband syz2: set down [ 136.719253][ T6730] infiniband syz2: added ipvlan0 [ 137.321131][ T6730] RDS/IB: syz2: added [ 137.325235][ T6730] smc: adding ib device syz2 with port count 1 [ 137.331387][ T6730] smc: ib device syz2 port 1 has no pnetid [ 137.925589][ T30] audit: type=1400 audit(1771335804.218:347): avc: denied { connect } for pid=6740 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.293232][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 139.304786][ T6760] netlink: 144 bytes leftover after parsing attributes in process `syz.0.234'. [ 139.339217][ T6760] netlink: 56 bytes leftover after parsing attributes in process `syz.0.234'. [ 139.409477][ T793] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.825906][ T30] audit: type=1400 audit(1771335806.244:348): avc: denied { load_policy } for pid=6768 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.877375][ T793] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 139.902801][ T793] usb 2-1: config 1 has no interface number 0 [ 140.085842][ T30] audit: type=1400 audit(1771335806.412:349): avc: denied { append } for pid=6768 comm="syz.0.237" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.142681][ T793] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 140.231648][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 140.286430][ T793] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 140.441453][ T793] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.693077][ T30] audit: type=1400 audit(1771335807.052:350): avc: denied { connect } for pid=6774 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 140.935611][ T30] audit: type=1400 audit(1771335807.126:351): avc: denied { bind } for pid=6774 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 141.283785][ T30] audit: type=1400 audit(1771335807.126:352): avc: denied { listen } for pid=6774 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 141.305104][ T6769] SELinux: failed to load policy [ 141.327346][ T793] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 141.354211][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.363375][ T793] usb 2-1: Product: syz [ 141.372133][ T793] usb 2-1: Manufacturer: syz [ 141.376921][ T793] usb 2-1: SerialNumber: syz [ 141.407356][ T6756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.601866][ T6790] netlink: 48 bytes leftover after parsing attributes in process `syz.3.241'. [ 141.615105][ T6790] NILFS (nullb0): couldn't find nilfs on the device [ 141.624105][ T30] audit: type=1400 audit(1771335808.123:353): avc: denied { mounton } for pid=6784 comm="syz.3.241" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 142.555927][ T6508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.685774][ T5805] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 142.742352][ T6508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.868115][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 142.884569][ T6508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.888527][ T5805] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 142.930007][ T5805] usb 3-1: can't read configurations, error -61 [ 143.011104][ T6508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.025399][ T6802] xt_hashlimit: max too large, truncated to 1048576 [ 143.114643][ T5805] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 143.178514][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.190327][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.200343][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.212337][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.223509][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.257569][ T793] usb 2-1: Error in usbnet_get_endpoints (-71) [ 143.271072][ T793] usb 2-1: USB disconnect, device number 10 [ 143.295668][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 143.307041][ T5805] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 143.315608][ T5805] usb 3-1: can't read configurations, error -61 [ 143.323715][ T5805] usb usb3-port1: attempt power cycle [ 143.415904][ T6804] lo speed is unknown, defaulting to 1000 [ 143.436152][ T30] audit: type=1400 audit(1771335810.034:354): avc: denied { search } for pid=5471 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.507255][ T30] audit: type=1400 audit(1771335810.034:355): avc: denied { search } for pid=5471 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.534669][ T6508] bridge_slave_1: left allmulticast mode [ 143.548100][ T6508] bridge_slave_1: left promiscuous mode [ 143.567392][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.595553][ T30] audit: type=1400 audit(1771335810.034:356): avc: denied { search } for pid=5471 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.718565][ T6508] bridge_slave_0: left allmulticast mode [ 143.733853][ T6508] bridge_slave_0: left promiscuous mode [ 143.786470][ T5805] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.796466][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.814098][ T30] audit: type=1400 audit(1771335810.034:357): avc: denied { read } for pid=5471 comm="dhcpcd" name="n100" dev="tmpfs" ino=2914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.886784][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 143.929127][ T5805] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 143.957605][ T5805] usb 3-1: can't read configurations, error -61 [ 144.117303][ T5805] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 144.324880][ T5805] usb 3-1: Using ep0 maxpacket: 32 [ 144.368236][ T5805] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 144.380263][ T5805] usb 3-1: can't read configurations, error -61 [ 144.407407][ T5805] usb usb3-port1: unable to enumerate USB device [ 144.702268][ T6508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.714823][ T5931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.756696][ T6508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.777144][ T6508] bond0 (unregistering): Released all slaves [ 144.783935][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 144.783950][ T30] audit: type=1400 audit(1771335811.441:362): avc: denied { add_name } for pid=6811 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.857646][ T30] audit: type=1400 audit(1771335811.441:363): avc: denied { create } for pid=6811 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.882727][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 144.897224][ T5931] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.909518][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.932473][ T5931] usb 2-1: config 0 has no interface number 0 [ 144.933692][ T30] audit: type=1400 audit(1771335811.441:364): avc: denied { write } for pid=6811 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2927 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 144.964679][ T5931] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.989512][ T5805] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.010057][ T5931] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 145.029030][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.051315][ T30] audit: type=1400 audit(1771335811.441:365): avc: denied { append } for pid=6811 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2927 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.056429][ T5931] usb 2-1: config 0 descriptor?? [ 145.089478][ T5931] ldusb 2-1:0.55: Interrupt in endpoint not found [ 145.174922][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 145.180151][ T30] audit: type=1400 audit(1771335811.704:366): avc: denied { remove_name } for pid=6826 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2927 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.217163][ T5127] Bluetooth: hci3: command tx timeout [ 145.228976][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 145.241230][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.265827][ T30] audit: type=1400 audit(1771335811.704:367): avc: denied { unlink } for pid=6826 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2927 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.291029][ T5805] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.300170][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.308345][ T5805] usb 4-1: Product: syz [ 145.312576][ T5805] usb 4-1: Manufacturer: syz [ 145.317308][ T5805] usb 4-1: SerialNumber: syz [ 145.324641][ T5805] usb 4-1: config 0 descriptor?? [ 145.341460][ T5805] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 145.354141][ T5805] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 145.975100][ T5805] em28xx 4-1:0.0: unknown em28xx chip ID (242) [ 145.977509][ T6804] chnl_net:caif_netlink_parms(): no params data found [ 146.211372][ T6816] kvm: pic: non byte write [ 146.365196][ T5805] em28xx 4-1:0.0: Config register raw data: 0xf2 [ 146.399394][ T5805] em28xx 4-1:0.0: I2S Audio (5 sample rate(s)) [ 146.405883][ T5805] em28xx 4-1:0.0: No AC97 audio processor [ 146.597009][ T5805] usb 4-1: USB disconnect, device number 11 [ 146.642050][ T29] usb 2-1: USB disconnect, device number 11 [ 147.118897][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.154251][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.163657][ T5127] Bluetooth: hci3: command tx timeout [ 147.241055][ T6804] bridge_slave_0: entered allmulticast mode [ 147.289281][ T6804] bridge_slave_0: entered promiscuous mode [ 147.440441][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.466512][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.729379][ T6804] bridge_slave_1: entered allmulticast mode [ 147.767849][ T6804] bridge_slave_1: entered promiscuous mode [ 147.778461][ T6508] hsr_slave_0: left promiscuous mode [ 147.784177][ T6508] hsr_slave_1: left promiscuous mode [ 147.789906][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.805354][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.815992][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.843141][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.877396][ T6508] veth1_macvtap: left promiscuous mode [ 147.883035][ T6508] veth0_macvtap: left promiscuous mode [ 147.914020][ T6508] veth1_vlan: left promiscuous mode [ 147.936310][ T6508] veth0_vlan: left promiscuous mode [ 148.319141][ T6883] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 148.743651][ T5931] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 148.921448][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 148.931591][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.010361][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 149.051526][ T5931] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 149.067688][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.091901][ T5931] usb 2-1: Product: syz [ 149.110269][ T5931] usb 2-1: Manufacturer: syz [ 149.114885][ T5931] usb 2-1: SerialNumber: syz [ 149.134790][ T5127] Bluetooth: hci3: command tx timeout [ 149.191497][ T5931] usb 2-1: config 0 descriptor?? [ 149.201614][ T6884] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.271371][ T6508] team0 (unregistering): Port device team_slave_1 removed [ 149.324343][ T6888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.598939][ T6508] team0 (unregistering): Port device team_slave_0 removed [ 149.792787][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.810016][ T5915] usb 2-1: USB disconnect, device number 12 [ 149.812801][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.920092][ T6804] team0: Port device team_slave_0 added [ 149.929206][ T6804] team0: Port device team_slave_1 added [ 149.988886][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.996043][ T5930] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 150.013544][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.054526][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.074108][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.091210][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.540016][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.553058][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 150.563218][ T5930] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 150.586284][ T5930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.596479][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.615037][ T5930] usb 4-1: SerialNumber: syz [ 150.641128][ T5930] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 150.660837][ T5930] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 150.677845][ T5930] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 150.724715][ T6804] hsr_slave_0: entered promiscuous mode [ 150.744715][ T6804] hsr_slave_1: entered promiscuous mode [ 150.761828][ T6804] debugfs: 'hsr0' already exists in 'hsr' [ 150.770658][ T6804] Cannot create hsr debugfs directory [ 150.906633][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.044047][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.426250][ T5127] Bluetooth: hci3: command tx timeout [ 151.493237][ T6923] trusted_key: encrypted_key: master key parameter 'ḣ,\mX1Պh' is invalid [ 151.539978][ T5877] usb 4-1: USB disconnect, device number 12 [ 151.801168][ T5931] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 152.092295][ T30] audit: type=1400 audit(1771335819.063:368): avc: denied { accept } for pid=6927 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 152.307465][ T6804] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.318961][ T6804] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.332225][ T6804] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.340249][ T30] audit: type=1400 audit(1771335819.116:369): avc: denied { connect } for pid=6927 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.364274][ T6804] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.376351][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.412673][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.453387][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.483569][ T5931] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.514184][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.525186][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.618565][ T30] audit: type=1400 audit(1771335819.641:370): avc: denied { bind } for pid=6940 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.642643][ T5931] usb 2-1: config 0 descriptor?? [ 152.656972][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.671748][ T30] audit: type=1400 audit(1771335819.641:371): avc: denied { setopt } for pid=6940 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.731936][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.739093][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.786445][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.793551][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.071901][ T5931] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 153.457433][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.231863][ T6968] process 'syz.3.270' launched './file0' with NULL argv: empty string added [ 154.260847][ T30] audit: type=1400 audit(1771335821.373:372): avc: denied { execute } for pid=6963 comm="syz.3.270" name="file0" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.408693][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 154.507186][ T6975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.652435][ T30] audit: type=1400 audit(1771335821.384:373): avc: denied { execute_no_trans } for pid=6963 comm="syz.3.270" path="/49/file0" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.680981][ T5930] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 154.817304][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.032478][ T30] audit: type=1400 audit(1771335821.384:374): avc: denied { remount } for pid=6963 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 156.621373][ T6804] veth0_vlan: entered promiscuous mode [ 156.691065][ T5930] usb 2-1: device descriptor read/64, error -71 [ 156.721508][ T6804] veth1_vlan: entered promiscuous mode [ 156.762696][ T6804] veth0_macvtap: entered promiscuous mode [ 156.789660][ T6804] veth1_macvtap: entered promiscuous mode [ 156.939811][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.965936][ T5930] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 156.990099][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.028453][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.048481][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.085078][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.134074][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.144572][ T5930] usb 2-1: device firmware changed [ 157.155752][ T5938] usb 2-1: USB disconnect, device number 13 [ 157.333862][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.334687][ T5938] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 157.376831][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.411978][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.419984][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.437643][ T30] audit: type=1400 audit(1771335824.733:375): avc: denied { mounton } for pid=6804 comm="syz-executor" path="/root/syzkaller.nrXi07/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 157.492500][ T30] audit: type=1400 audit(1771335824.733:376): avc: denied { mounton } for pid=6804 comm="syz-executor" path="/root/syzkaller.nrXi07/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 157.535986][ T5938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 157.562076][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.588215][ T5938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 157.610303][ T30] audit: type=1400 audit(1771335824.733:377): avc: denied { mounton } for pid=6804 comm="syz-executor" path="/root/syzkaller.nrXi07/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 157.669152][ T5938] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 157.688802][ T30] audit: type=1400 audit(1771335824.765:378): avc: denied { mounton } for pid=6804 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 157.720087][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.744349][ T5938] usb 2-1: Product: syz [ 157.756782][ T5938] usb 2-1: Manufacturer: syz [ 157.884462][ T5938] usb 2-1: SerialNumber: syz [ 157.889568][ T7018] wireguard0: entered promiscuous mode [ 157.895037][ T7018] wireguard0: entered allmulticast mode [ 157.900743][ T30] audit: type=1400 audit(1771335824.786:379): avc: denied { name_connect } for pid=7010 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 157.923125][ T5938] usb 2-1: config 0 descriptor?? [ 157.928601][ T30] audit: type=1400 audit(1771335824.880:380): avc: denied { write } for pid=7010 comm="syz.2.277" lport=37698 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 157.929942][ T6989] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.160410][ T5805] usb 2-1: USB disconnect, device number 14 [ 158.353177][ T5127] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 158.546629][ T30] audit: type=1400 audit(1771335825.898:381): avc: denied { connect } for pid=7026 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.990923][ T30] audit: type=1400 audit(1771335826.360:382): avc: denied { write } for pid=7026 comm="syz.1.281" path="socket:[14418]" dev="sockfs" ino=14418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.017550][ T3560] tipc: Subscription rejected, illegal request [ 159.406993][ T7042] NILFS (nullb0): couldn't find nilfs on the device [ 159.679829][ T7041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.284'. [ 159.708226][ T5938] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 159.821767][ T7046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.930818][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 160.100557][ T5938] usb 2-1: config 162 has an invalid interface number: 166 but max is 0 [ 160.109674][ T5938] usb 2-1: config 162 has no interface number 0 [ 160.130946][ T5938] usb 2-1: config 162 interface 166 has no altsetting 0 [ 160.150941][ T5938] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 160.579217][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.592455][ T5938] usb 2-1: Product: syz [ 160.600800][ T5938] usb 2-1: Manufacturer: syz [ 160.606623][ T5938] usb 2-1: SerialNumber: syz [ 160.817362][ T5938] appledisplay 2-1:162.166: Could not find int-in endpoint [ 160.841326][ T5938] usbhid 2-1:162.166: couldn't find an input interrupt endpoint [ 160.900671][ T5938] usb 2-1: USB disconnect, device number 15 [ 160.940208][ T7059] FAULT_INJECTION: forcing a failure. [ 160.940208][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 160.953264][ T7059] CPU: 0 UID: 0 PID: 7059 Comm: syz.5.289 Not tainted syzkaller #0 PREEMPT(full) [ 160.953289][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.953299][ T7059] Call Trace: [ 160.953305][ T7059] [ 160.953311][ T7059] dump_stack_lvl+0x100/0x190 [ 160.953343][ T7059] should_fail_ex.cold+0x5/0xa [ 160.953366][ T7059] should_failslab+0xc2/0x120 [ 160.953393][ T7059] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 160.953419][ T7059] ? alloc_empty_file+0x55/0x1c0 [ 160.953438][ T7059] ? __pfx_stack_trace_save+0x10/0x10 [ 160.953464][ T7059] alloc_empty_file+0x55/0x1c0 [ 160.953483][ T7059] path_openat+0xe8/0x31a0 [ 160.953507][ T7059] ? kasan_save_stack+0x3f/0x50 [ 160.953528][ T7059] ? kasan_save_stack+0x30/0x50 [ 160.953548][ T7059] ? kasan_save_track+0x14/0x30 [ 160.953568][ T7059] ? __kasan_slab_alloc+0x89/0x90 [ 160.953589][ T7059] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 160.953609][ T7059] ? do_getname+0x35/0x390 [ 160.953625][ T7059] ? do_sys_openat2+0xc5/0x1e0 [ 160.953643][ T7059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.953664][ T7059] ? __pfx_path_openat+0x10/0x10 [ 160.953703][ T7059] do_file_open+0x20e/0x430 [ 160.953731][ T7059] ? __pfx_do_file_open+0x10/0x10 [ 160.953771][ T7059] ? alloc_fd+0x476/0x790 [ 160.953797][ T7059] ? do_getname+0x191/0x390 [ 160.953817][ T7059] do_sys_openat2+0x10d/0x1e0 [ 160.953835][ T7059] ? __pfx_do_sys_openat2+0x10/0x10 [ 160.953850][ T7059] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.953878][ T7059] ? __fget_files+0x21f/0x3d0 [ 160.953907][ T7059] __x64_sys_openat+0x12d/0x210 [ 160.953923][ T7059] ? __pfx___x64_sys_openat+0x10/0x10 [ 160.953938][ T7059] ? ksys_write+0x1ac/0x250 [ 160.953967][ T7059] do_syscall_64+0x106/0xf80 [ 160.953988][ T7059] ? clear_bhb_loop+0x40/0x90 [ 160.954007][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.954025][ T7059] RIP: 0033:0x7f2c70d5c84e [ 160.954040][ T7059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.954057][ T7059] RSP: 002b:00007f2c71c4cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 160.954075][ T7059] RAX: ffffffffffffffda RBX: 00007f2c71c4d6c0 RCX: 00007f2c70d5c84e [ 160.954086][ T7059] RDX: 0000000000002082 RSI: 00007f2c71c4cc00 RDI: ffffffffffffff9c [ 160.954097][ T7059] RBP: 00007f2c71c4cc00 R08: 0000000000000000 R09: 0000000000000000 [ 160.954107][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 160.954117][ T7059] R13: 00007f2c71016038 R14: 00007f2c71015fa0 R15: 00007ffc4bd96508 [ 160.954141][ T7059] [ 161.270720][ T7058] ALSA: mixer_oss: invalid OSS volume '' [ 162.068383][ T5805] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 162.308369][ T5805] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 162.318484][ T5805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.428281][ T5805] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 162.462977][ T5805] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 162.472580][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.477843][ T5931] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 162.501999][ T5805] usb 6-1: Product: syz [ 162.506172][ T5805] usb 6-1: Manufacturer: syz [ 162.530504][ T5805] usb 6-1: SerialNumber: syz [ 162.557807][ T5805] usb 6-1: config 0 descriptor?? [ 162.563502][ T7066] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 162.793632][ T5931] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 162.805521][ T5931] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 162.816641][ T5931] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 162.835274][ T5931] usb 4-1: config 0 interface 0 has no altsetting 0 [ 162.861935][ T5931] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.873436][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.899772][ T5931] usb 4-1: Product: syz [ 162.901067][ T5805] usb 6-1: USB disconnect, device number 2 [ 162.914032][ T5931] usb 4-1: Manufacturer: syz [ 162.933947][ T5931] usb 4-1: SerialNumber: syz [ 162.979916][ T5931] usb 4-1: config 0 descriptor?? [ 162.999121][ T7080] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 163.010117][ T5931] usb 4-1: selecting invalid altsetting 0 [ 163.292548][ T5805] usb 4-1: USB disconnect, device number 13 [ 163.499242][ T7098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.716394][ T30] audit: type=1400 audit(1771335831.064:383): avc: denied { mounton } for pid=7096 comm="syz.1.299" path="/proc/197/task" dev="proc" ino=13977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 164.810301][ T7109] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 165.828242][ T30] audit: type=1400 audit(1771335833.437:384): avc: denied { module_request } for pid=7123 comm="syz.3.309" kmod="crypto-ccm(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 166.978283][ T5127] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 167.011544][ T5938] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 167.255936][ T7161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.515979][ T5938] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 167.527080][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.549728][ T5938] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 167.736450][ T5938] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 167.774444][ T7149] ALSA: mixer_oss: invalid OSS volume '' [ 167.794507][ T7166] netlink: 48 bytes leftover after parsing attributes in process `syz.2.304'. [ 167.842953][ T7166] NILFS (nullb0): couldn't find nilfs on the device [ 168.127302][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.135334][ T5938] usb 6-1: Product: syz [ 168.139664][ T5938] usb 6-1: Manufacturer: syz [ 168.144441][ T5938] usb 6-1: SerialNumber: syz [ 168.158563][ T5938] usb 6-1: config 0 descriptor?? [ 168.165729][ T7146] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 168.455375][ T5805] usb 6-1: USB disconnect, device number 3 [ 168.504088][ T7182] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 168.568565][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 170.964348][ T7189] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 171.100200][ T30] audit: type=1400 audit(1771335839.075:385): avc: denied { ioctl } for pid=7214 comm="syz.2.326" path="socket:[14159]" dev="sockfs" ino=14159 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.312947][ T7226] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 171.378271][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 173.677098][ T7252] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 173.837105][ T7263] Invalid logical block size (4) [ 173.845388][ T30] audit: type=1400 audit(1771335841.952:386): avc: denied { create } for pid=7261 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.007607][ T30] audit: type=1400 audit(1771335841.952:387): avc: denied { connect } for pid=7261 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.027108][ T30] audit: type=1400 audit(1771335841.952:388): avc: denied { write } for pid=7261 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.091994][ T30] audit: type=1400 audit(1771335841.962:389): avc: denied { audit_write } for pid=7259 comm="syz.1.335" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 174.623610][ T12] wlan1: Trigger new scan to find an IBSS to join [ 175.386880][ T7282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.595844][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 176.666317][ T5805] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 176.869821][ T24] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 176.894932][ T24] usb 1-1: USB disconnect, device number 2 [ 177.008357][ T5805] usb 6-1: device descriptor read/64, error -71 [ 177.532416][ T7318] hub 9-0:1.0: USB hub found [ 177.539100][ T7318] hub 9-0:1.0: 1 port detected [ 178.000970][ T5805] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.155273][ T5805] usb 6-1: device descriptor read/64, error -71 [ 178.622435][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 178.630350][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 178.631301][ T7336] Bluetooth: hci4: command 0x0406 tx timeout [ 178.644354][ T7306] Bluetooth: hci2: command 0x0406 tx timeout [ 178.670692][ T5805] usb usb6-port1: attempt power cycle [ 179.359554][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.385923][ T462] wlan1: Trigger new scan to find an IBSS to join [ 180.047760][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.240667][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.581039][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.686540][ T462] wlan1: Creating new IBSS network, BSSID 2a:f2:1c:65:5d:27 [ 180.719561][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.729673][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.741505][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.759120][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.779010][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.905638][ T12] bridge_slave_1: left allmulticast mode [ 181.015223][ T12] bridge_slave_1: left promiscuous mode [ 181.117077][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.146561][ T12] bridge_slave_0: left allmulticast mode [ 181.152275][ T12] bridge_slave_0: left promiscuous mode [ 181.157946][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.503283][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.521502][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.556760][ T12] bond0 (unregistering): Released all slaves [ 181.610925][ T7375] lo speed is unknown, defaulting to 1000 [ 182.019586][ T7371] Process accounting resumed [ 182.065624][ T30] audit: type=1400 audit(1771335850.593:390): avc: denied { write } for pid=7387 comm="syz.2.363" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.136710][ T30] audit: type=1400 audit(1771335850.624:391): avc: denied { open } for pid=7387 comm="syz.2.363" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 182.327077][ T5805] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 182.781492][ T5805] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 182.812793][ T5811] Bluetooth: hci2: command tx timeout [ 182.871885][ T7401] tmpfs: Unknown parameter 'V0n›v'' [ 182.901431][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.911790][ T5805] usb 3-1: Product: syz [ 182.915999][ T5805] usb 3-1: Manufacturer: syz [ 182.929270][ T5805] usb 3-1: SerialNumber: syz [ 183.078292][ T5805] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 183.549788][ T12] hsr_slave_0: left promiscuous mode [ 183.563100][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 183.584784][ T12] hsr_slave_1: left promiscuous mode [ 183.590671][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.622724][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.651863][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.659273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.765911][ T12] veth1_macvtap: left promiscuous mode [ 183.781492][ T12] veth0_macvtap: left promiscuous mode [ 183.798793][ T12] veth1_vlan: left promiscuous mode [ 183.817571][ T12] veth0_vlan: left promiscuous mode [ 183.984585][ T5877] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 184.014072][ T3560] smc: removing ib device syz2 [ 184.106969][ T12] team0 (unregistering): Port device team_slave_1 removed [ 184.129733][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.137027][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 184.143486][ T5877] usb 2-1: config 0 has no interfaces? [ 184.151865][ T5877] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 184.171020][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.200660][ T5877] usb 2-1: config 0 descriptor?? [ 184.530689][ T5877] usb 2-1: USB disconnect, device number 16 [ 184.565592][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 184.624004][ T29] ath9k_htc: Failed to initialize the device [ 184.685464][ T29] usb 3-1: ath9k_htc: USB layer deinitialized [ 184.803167][ T5811] Bluetooth: hci2: command tx timeout [ 184.823809][ T5805] ================================================================== [ 184.831915][ T5805] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x190/0x1c0 [ 184.840764][ T5805] Read of size 8 at addr ffff8880754a42f0 by task kworker/1:3/5805 [ 184.848803][ T5805] [ 184.851112][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 184.851126][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.851134][ T5805] Workqueue: events smc_ib_port_event_work [ 184.851154][ T5805] Call Trace: [ 184.851158][ T5805] [ 184.851162][ T5805] dump_stack_lvl+0x100/0x190 [ 184.851180][ T5805] print_report+0x156/0x4c9 [ 184.851194][ T5805] ? __virt_addr_valid+0x81/0x620 [ 184.851209][ T5805] ? __phys_addr+0xe8/0x180 [ 184.851224][ T5805] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 184.851236][ T5805] kasan_report+0xdf/0x1e0 [ 184.851251][ T5805] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 184.851263][ T5805] __ethtool_get_link_ksettings+0x190/0x1c0 [ 184.851275][ T5805] __ethtool_get_link_ksettings+0x144/0x1c0 [ 184.851287][ T5805] ib_get_eth_speed+0x13a/0xb40 [ 184.851300][ T5805] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 184.851320][ T5805] ? do_raw_spin_unlock+0x145/0x1e0 [ 184.851333][ T5805] rxe_query_port+0x12a/0x330 [ 184.851348][ T5805] ib_query_port+0x441/0x8a0 [ 184.851362][ T5805] smc_ib_port_event_work+0x14c/0xbd0 [ 184.851378][ T5805] ? smc_ib_port_event_work+0x54/0xbd0 [ 184.851394][ T5805] ? rcu_is_watching+0x12/0xc0 [ 184.851406][ T5805] process_one_work+0x9d7/0x1920 [ 184.851419][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 184.851431][ T5805] ? __pfx_smc_ib_port_event_work+0x10/0x10 [ 184.851449][ T5805] worker_thread+0x5da/0xe40 [ 184.851467][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 184.851483][ T5805] ? kthread+0x13a/0x450 [ 184.851496][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 184.851506][ T5805] kthread+0x370/0x450 [ 184.851515][ T5805] ? __pfx_kthread+0x10/0x10 [ 184.851524][ T5805] ret_from_fork+0x754/0xd80 [ 184.851534][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 184.851543][ T5805] ? rcu_is_watching+0x12/0xc0 [ 184.851554][ T5805] ? __switch_to+0x7b4/0x1120 [ 184.851566][ T5805] ? __pfx_kthread+0x10/0x10 [ 184.851575][ T5805] ret_from_fork_asm+0x1a/0x30 [ 184.851590][ T5805] [ 184.851594][ T5805] [ 185.046988][ T5805] Allocated by task 5807: [ 185.051292][ T5805] kasan_save_stack+0x30/0x50 [ 185.055966][ T5805] kasan_save_track+0x14/0x30 [ 185.060621][ T5805] __kasan_kmalloc+0xaa/0xb0 [ 185.065190][ T5805] __kvmalloc_node_noprof+0x360/0xa00 [ 185.070543][ T5805] alloc_netdev_mqs+0xd7/0x14f0 [ 185.075375][ T5805] rtnl_create_link+0xc13/0xf80 [ 185.080207][ T5805] rtnl_newlink+0x13b8/0x2380 [ 185.084862][ T5805] rtnetlink_rcv_msg+0x95e/0xe90 [ 185.089788][ T5805] netlink_rcv_skb+0x159/0x420 [ 185.094536][ T5805] netlink_unicast+0x5aa/0x870 [ 185.099281][ T5805] netlink_sendmsg+0x8b0/0xda0 [ 185.104030][ T5805] __sys_sendto+0x4aa/0x520 [ 185.108511][ T5805] __x64_sys_sendto+0xe0/0x1c0 [ 185.113270][ T5805] do_syscall_64+0x106/0xf80 [ 185.117844][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.123713][ T5805] [ 185.126017][ T5805] Freed by task 12: [ 185.129800][ T5805] kasan_save_stack+0x30/0x50 [ 185.134458][ T5805] kasan_save_track+0x14/0x30 [ 185.139117][ T5805] kasan_save_free_info+0x3b/0x70 [ 185.144134][ T5805] __kasan_slab_free+0x5f/0x80 [ 185.148876][ T5805] kfree+0x1f6/0x6b0 [ 185.152746][ T5805] device_release+0xa4/0x240 [ 185.157318][ T5805] kobject_put+0x1f7/0x640 [ 185.161722][ T5805] netdev_run_todo+0x817/0x12c0 [ 185.166554][ T5805] default_device_exit_batch+0x94b/0xc60 [ 185.172168][ T5805] ops_undo_list+0x363/0xab0 [ 185.176738][ T5805] cleanup_net+0x499/0x920 [ 185.181143][ T5805] process_one_work+0x9d7/0x1920 [ 185.186066][ T5805] worker_thread+0x5da/0xe40 [ 185.190635][ T5805] kthread+0x370/0x450 [ 185.194679][ T5805] ret_from_fork+0x754/0xd80 [ 185.199245][ T5805] ret_from_fork_asm+0x1a/0x30 [ 185.203984][ T5805] [ 185.206290][ T5805] The buggy address belongs to the object at ffff8880754a4000 [ 185.206290][ T5805] which belongs to the cache kmalloc-cg-4k of size 4096 [ 185.220586][ T5805] The buggy address is located 752 bytes inside of [ 185.220586][ T5805] freed 4096-byte region [ffff8880754a4000, ffff8880754a5000) [ 185.234444][ T5805] [ 185.236755][ T5805] The buggy address belongs to the physical page: [ 185.243138][ T5805] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x754a0 [ 185.251882][ T5805] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.260362][ T5805] memcg:ffff88803764e841 [ 185.264581][ T5805] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 185.272100][ T5805] page_type: f5(slab) [ 185.276070][ T5805] raw: 00fff00000000040 ffff88813fe56500 dead000000000100 dead000000000122 [ 185.284633][ T5805] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff88803764e841 [ 185.293194][ T5805] head: 00fff00000000040 ffff88813fe56500 dead000000000100 dead000000000122 [ 185.301840][ T5805] head: 0000000000000000 0000000800040004 00000000f5000000 ffff88803764e841 [ 185.310571][ T5805] head: 00fff00000000003 ffffea0001d52801 00000000ffffffff 00000000ffffffff [ 185.319402][ T5805] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 185.328043][ T5805] page dumped because: kasan: bad access detected [ 185.334426][ T5805] page_owner tracks the page as allocated [ 185.340118][ T5805] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5182, tgid 5182 (udevd), ts 30221762805, free_ts 30209929835 [ 185.360844][ T5805] post_alloc_hook+0x153/0x170 [ 185.365591][ T5805] get_page_from_freelist+0x111d/0x3140 [ 185.371125][ T5805] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 185.376999][ T5805] new_slab+0xa6/0x6d0 [ 185.381046][ T5805] refill_objects+0x26b/0x400 [ 185.385697][ T5805] __pcs_replace_empty_main+0x19f/0x600 [ 185.391221][ T5805] __kvmalloc_node_noprof+0x7da/0xa00 [ 185.396571][ T5805] seq_read_iter+0x819/0x1270 [ 185.401245][ T5805] kernfs_fop_read_iter+0x46c/0x610 [ 185.406423][ T5805] vfs_read+0x825/0xb30 [ 185.410558][ T5805] ksys_read+0x12a/0x250 [ 185.414781][ T5805] do_syscall_64+0x106/0xf80 [ 185.419351][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.425222][ T5805] page last free pid 5187 tgid 5187 stack trace: [ 185.431518][ T5805] __free_frozen_pages+0x7ca/0x10a0 [ 185.436691][ T5805] qlist_free_all+0x47/0xe0 [ 185.441174][ T5805] kasan_quarantine_reduce+0x1a0/0x1f0 [ 185.446701][ T5805] __kasan_slab_alloc+0x69/0x90 [ 185.451534][ T5805] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 185.457404][ T5805] __alloc_skb+0x140/0x710 [ 185.461819][ T5805] alloc_skb_with_frags+0xe0/0x810 [ 185.466923][ T5805] sock_alloc_send_pskb+0x801/0x980 [ 185.472127][ T5805] unix_dgram_sendmsg+0x3c7/0x1820 [ 185.477218][ T5805] sock_write_iter+0x566/0x610 [ 185.481959][ T5805] vfs_write+0x6ac/0x1070 [ 185.486271][ T5805] ksys_write+0x1f8/0x250 [ 185.490604][ T5805] do_syscall_64+0x106/0xf80 [ 185.495183][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.501145][ T5805] [ 185.503448][ T5805] Memory state around the buggy address: [ 185.509053][ T5805] ffff8880754a4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.517095][ T5805] ffff8880754a4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.525145][ T5805] >ffff8880754a4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.533181][ T5805] ^ [ 185.540870][ T5805] ffff8880754a4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 185.548909][ T5805] ffff8880754a4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.556948][ T5805] ================================================================== [ 185.794182][ T5930] usb 3-1: USB disconnect, device number 16 [ 186.051335][ T5805] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.058639][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 186.067989][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.078021][ T5805] Workqueue: events smc_ib_port_event_work [ 186.083814][ T5805] Call Trace: [ 186.087075][ T5805] [ 186.089978][ T5805] dump_stack_lvl+0x100/0x190 [ 186.094634][ T5805] vpanic+0x552/0x970 [ 186.098584][ T5805] ? __pfx_vpanic+0x10/0x10 [ 186.103059][ T5805] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 186.109112][ T5805] panic+0xd1/0xe0 [ 186.112805][ T5805] ? __pfx_panic+0x10/0x10 [ 186.117203][ T5805] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 186.123260][ T5805] ? preempt_schedule_common+0x42/0xc0 [ 186.128708][ T5805] ? check_panic_on_warn+0x1f/0x90 [ 186.133803][ T5805] check_panic_on_warn.cold+0x19/0x34 [ 186.139153][ T5805] end_report.part.0+0x3a/0x90 [ 186.143894][ T5805] kasan_report.cold+0xe/0x18 [ 186.148544][ T5805] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 186.154586][ T5805] __ethtool_get_link_ksettings+0x190/0x1c0 [ 186.160465][ T5805] __ethtool_get_link_ksettings+0x144/0x1c0 [ 186.166364][ T5805] ib_get_eth_speed+0x13a/0xb40 [ 186.171194][ T5805] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 186.176547][ T5805] ? do_raw_spin_unlock+0x145/0x1e0 [ 186.181723][ T5805] rxe_query_port+0x12a/0x330 [ 186.186392][ T5805] ib_query_port+0x441/0x8a0 [ 186.190956][ T5805] smc_ib_port_event_work+0x14c/0xbd0 [ 186.196305][ T5805] ? smc_ib_port_event_work+0x54/0xbd0 [ 186.201738][ T5805] ? rcu_is_watching+0x12/0xc0 [ 186.206472][ T5805] process_one_work+0x9d7/0x1920 [ 186.211382][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 186.216734][ T5805] ? __pfx_smc_ib_port_event_work+0x10/0x10 [ 186.222603][ T5805] worker_thread+0x5da/0xe40 [ 186.227164][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 186.232258][ T5805] ? kthread+0x13a/0x450 [ 186.236468][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 186.241550][ T5805] kthread+0x370/0x450 [ 186.245588][ T5805] ? __pfx_kthread+0x10/0x10 [ 186.250158][ T5805] ret_from_fork+0x754/0xd80 [ 186.254718][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 186.259797][ T5805] ? rcu_is_watching+0x12/0xc0 [ 186.264552][ T5805] ? __switch_to+0x7b4/0x1120 [ 186.269210][ T5805] ? __pfx_kthread+0x10/0x10 [ 186.273769][ T5805] ret_from_fork_asm+0x1a/0x30 [ 186.278507][ T5805] [ 186.281801][ T5805] Kernel Offset: disabled [ 186.286100][ T5805] Rebooting in 86400 seconds..