last executing test programs: 1m25.881817427s ago: executing program 3 (id=138): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) memfd_create(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1m23.491462763s ago: executing program 3 (id=152): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1m22.401486182s ago: executing program 3 (id=156): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 1m21.989423495s ago: executing program 3 (id=158): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2204803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 1m21.707878036s ago: executing program 3 (id=160): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000100)={0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 1m21.011240219s ago: executing program 3 (id=163): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 1m20.697920114s ago: executing program 32 (id=163): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 1m3.771620668s ago: executing program 4 (id=246): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4804}, 0x4810) 1m2.74117062s ago: executing program 4 (id=254): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x4b00, &(0x7f0000000580)="b3"}) 1m2.537527405s ago: executing program 4 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0xc1}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 1m2.002436786s ago: executing program 4 (id=258): r0 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) dup3(r8, r0, 0x0) 1m1.178640115s ago: executing program 4 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1, 0x2, 0x10, "8baa00000500c30000000006000000000000000000000000000400", 0x56595559}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002780)=@vmx={0x8, 0x0, 0x2080, {0x25000, 0xffffffff, {0x3}, 0x0, 0xd4}, {"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", "bb8c2bc50dc2956c397fca0c4bc70e6a39e68689c6264dc329ee0fe0b476e6c026cbf7a81cffef78792228271b872879a7e1c3ee27393e6811d00553edd5cbfc9abbcabe099b66a1bd48546a91cc3c7814974ef8fb7430fa7211fb26e301fcc1645e9bb0e77dbe874fd5736bdab719654d389e30922ca4b45f6d430e8bcb945a803eaa84551d0eeecf551612de2ae8594cd7d11f37fc96ddd96e81e15f78d098bece1efaa3d9e6a86e58edf09d5dea526f93d572cb40bc33656776468cf83394726a699f8b8c6df9c1f8de3d1fc495d1855bb56365694a1e20a0b773eb1b420e01380b391dfd570747b8ceb656b936211239e88467aab573db1abbfa1f9eeff87e5cd7a043e274f2e638c334dadcfd24650b53c4c48b3284366100cae7a797b0342f7ec459ab507dbee443be76b566a4fa4d3a2a6490948ff58715e55511903b7e116941c9c738b7581c02ec2eb2290cd4df2280f88434808c5e87be854ae565893c99d82cabd1689faee1095767a575eb77e169c02309621ca2715612f33547da2be027627f5bdafbe38a6077c5afe5896160f3b0f7c81e0dcb6d8b2388657a82179658a010c4162d7ab8924d2abf3344f3bb411ece19f9a3e4cb6265ccc8d5567e3e19c0c543fa5e278be09ee4e8fe84095d6da487bc175356ab6ae8f086c843198201febc5ed682d2fe9cb42222338e871933ecadf172fcd1e661e58c884b3a243b9d340229cca768b513d634244c50a711754e51223d8f7a6d1e80daab59ab283cda01c2d687b8fc165b94306b65c80bad41af131f3758665b55d93f5d0c341cde9f2118edbbbc0cedc2840369dbbb13999e85aba94cf9433fad526aece59900a430438df06dff566bd38594b41f4b10c65fff7a6ffa56ae8e95803d28cb41e220fe68b09c838445c98ddd3b6ddd289e1a0761a1e76dab0137783543c14aa15420698e169886666136fe585f017911d00f91cdd10b362728a19c9449ec2391dfa3a2bedd5569cf1650a6197f31160ef4afd146657aa268a23616ab323f683d2f8db28bb2768c6c69698a95d14ad3a01539b9fe9599384404b45d1485bbe002ad82bc0cd2565fcbe9c183bfcfdff8de109707ddf0368f331daf420b0ac896b6ba479c01bb4be3356eb88de215ac31b5618ba2444ce1f6286f6f0277d63f6c9ed345ca3e061a66ef271cb20e106070461da0454ad68bc9d677060d6174fbe73892b3dc81fa9d9085bc771989508e51f0ecc469bc751227ceff20527a1d45e94fc9d51f0b50f72ede996d054be6e223187b0c848efd40920a9a2a1f9e6e76ebee91dfe4cf99584089aded652a5f50962ac4d418eec29624e5ed1fbb493ec58bb5aba93c3d9e39aae40932f80439bfd79b734864c6c73f720b406d629a4fc60b41ef1c1250a13f7585f302aedb5b18c8c99d223daa53d08358d9f58c13fa4bccea366dd9cac2abc7b2fd960188d4b8ffd4bdeea08b26ccf944974b274f87a536761d2958cd21eb94b7befe4d26f3094d9f1327eb24bed29e3ae0d9a17d68deef4a37638a5ea22264c8270b2424990acef4b707317830791637d689023e975b9b9481bad54873a232328b8add4185c04b8f4908022ea3372d0bf2dbf8f435aa3a7a2dc7c52c92fdca24e55bb583e6820ef5fc0a84322a8750943aef4744a9f3173ff71b2d9c7cb9fc9ef85caf22084931ff8730658f79e55284c85b40d01645e996cef418a6df30967a50c0a550fe5d109b7c0aa8b6ac999058739eb2362c0400babb71b114624bc4b7d5cd4b9d072ceea95bf67db3380fea76bd6b38f19da6ba1de907b15442da37e48ed84dec14745d9df9c83babd5f8d3ef539a2a4b75f74ade775fac7de18f9b10943d64a6819eb42a26ee6fbd47c35436eed5aa80655c467d2dc6b29e9a4b3e08a36a6e73c73b7e0584f16120f8db67687d8420a9df7a0c7b77741404ce9045fff95948d21e8f3aab2b8898c67e03d550e1cd96e80a1b7706d7e50abd79876c9cc37fbd0ea0665f9b06d00c110d88253993e7d28cc35221e13ac7498b4c917778b0ecfd57a5193934df3d650427458f74a506be241ef081c4b364b15f2d096a0efce2e4915e6836d65a37b08eb806fe959ba33bc396e7adda709b15f8addb782ac679ea99194f1d7cc740ffaf54f5555ee2f46cb914f31b808940c6160c799898642295984133d07ef102f573eb67bf25044a218bb1a02a08463606d9e47fdddc224c9e640b4c93bd26dc2674bd539bdc7df7d7b46d8cdfa347383e11fcbd4947399cb106992e25e49f6b70066f1ea318fd2f7d69be9426b5725dbb23ccbf8e65fe7f0df462de4eca6a17ff3ad1c8d4dc4b21a9d077540657d58355b9b113bb934e2ff48af157bb8b2dc209c99018c14d7564fd26ec90b097ff902eae3471514c44b70c6c979147d9e96c3f790462c84d01b22b95b240adbaefb585d9a65a771bff834743e56a7fcaccb59254975a145de9f4d61a3b98e2639e2064428b832be4f151272146a4dcaae4f5ce4080fe6fb2190dbd948c308f1497f5dc7b6951934ebb9217750245f3a3b0eecf3ffc5efd61f3a5f2acdd2bc99e730aa8d4a381e110e6aa9a1fe9c23ba613efecb37275d8517bd583cb680b064f2ed8f088bf820a70aac994dfe05c363b9ac4eb7720e73406b2718d4eac534b0feb50bfb3e1a70232f04a1b92dd1c31207eae09901ca0afe1ff29ca82ecacbcc6291795e0c96cd8691ab0c82a6e2b7f2c4645409d7d0649aa69f9af5ae637d5e852e061a414cf2164b8e3d8c4626a95358960b1278a9bd9ced16460ebe7a40dbe4dfd700d094962c2a74a854924edecd943887b03dd7caa59e9956b525f5c7056b0d7730cdc04f6d7dda70276809b34e833aa3271cbb1bcbeccc4ddea74678616712e801ad1f876209f176463adc5646e51fdf904c1f9c539547ab636658309a607624efc48676cf943d8365114130224d6249861dba2177db3226d3006979cac4229e89a8eeb9f9eca666e9c1a8587ce8f2e87457d15e1ed651782a8d2fbdcbf7b60dbf8f0b97f9829480acf817dd23d11e1c4ab1aa1cc077c11d6cd32082577568487ee10fa7dd22e9d8dd6cf7f69e3a2508b533464495660f26435b74ecfc66585563d5bc74e83461aff48890c1b7453c2e7d1c2b8e71e94354d9658881f089344847de71801d84ddf59c2ca366e77d64d3741d6de26aee4511afc9e2a45c15d99422d169810f988de1f5ca91ae79e19b9a003259d516b3cdaceee0731333479625967e31cfe0175d830747cbc406f83b0a8847d9a4678d3caac17a45b805424d6d6a05f3814c4bc9cbd9ba0e54ed65b99b6e5565cc456ee1af271eaf777a0453b6724e4068708cedb43b3d5e34181a110696898fd9db8ac88fafbcca9991fc36caaf19611649d7f7d8c85eec59e8dad4ba0d756ee1b733e1cf4e7fb4b1b4648bab6682dfcb1b3b21731c08f6eaf38664237fa63e94bf8a7b268f6e1d6ce98bb93d84bd53ed5f31ff5d14491ed8a698a51fc77248fce00f5d468ac9cd41c07c51375c878c5ebd769b0c82bb38aa99db69cd5a11d97fa00021862456e86fd988e6c2d01aeae47405eac7b89281d578b079e37c033604279f3373806947e03397f7b5eb5d24602094f149e30599c66bc942a8ae302bdebcf66d6c41818897b8d6cf4beb2cee05dedc25814d0049035c4dd9fdab31c0a91fe5a28ee1df7103cfeaecfa593e94d34a1fef091730d1ee0ab4b77ac32d6a1c553ccacc5b81a5bf9b2af222b3b610f1d3cd010eba8c13118eb1cbc716cea5c4bb91735b3f108f86ca6effb47e83fc3e75f4c746d09fbfd70f26ae11b920a447965d51f4837572c1af1614fddc5e50288165f164f837b69a45ec643d85661b62b3a0aa29da4406ead06c96649ed31a428f849ffa4ea296f122de889be906945cd67e9407dfa33d801ff223e8ae69b9a69299e8fee31c4d86a9fe81abf6166f705a832c3e232d8f7e3bc105ddb928781e48993f380c112aff357fc664d206eba65963f9dabf7b979a4f90119a872fc049538afbf998e4f870151dba3369490f58e413edd54b2fb4952925e1fccf14c2c031adc79849838dfaf55b74ed2cb303bb9717bccdf98a440525a0ea5de904fd4a23b2bfd2141745bca7d6257a7a9d5a787f0067c27900442863cc1f35dd0a4fe200855d5d053d657cfc83fa6e19e45031ad6793fe65700739eb52dd2050098914d484019d31d1b98adbc02cbb776c383ba349e59111c2d158967cb71346f68c653aab796278c69dffb5b516a3d9fdb4c1866143de79f3645b55ae89ef1ec8c1bf87f7e1a000d68e31168425938edcfe79310db0785cf0793702633c06695a03beb259d0408732063606e0d0dd500215682d95dfb9f1d962eb7b96a722fc5e55991ce4707c85f8162175a95d6bac609f6049751110408154c1f90be08a4e442d835ededba677dd053d5593095dfff528fa5f751148018173c192ed11603a511334508861afd39340bfce7859989e14d3ba40912ef163acbf0e9367121097589329549481b4d2c20390664dc9ca779db36fc7a3044f2c86412557d97e539cbeb7aa518c60bb2f376e11eea2cda05dba15ee51af506d1ee78154a5dde2d061885e0c08a448a02d34e4600a6243cdd1ecbb37f6ae06b883084d685ea5798537d62c3ab64db8246e39ca638203b0430fc310681cd9fc752573982d472b71f1f1eef58fdf3272b8b0139abf237690b17c74bcc76f5c73ba848e1cd692ad456fb07a54a4ecbd902e6c98ca85c9f432902990bb2c07b0ec401fc378361399820bc5661721fa3273f42c9e17feb07aa7d6a0adc488068b0cfed3f75b40fe6b70c286781361939ead2d592c80b9315941e36715f76ca84a53212b6b2d904fd002d0b85e5e37453c8ab7e65c1cc42c4d9a7b59a6a1873d4269dce497672cb6583a88df4a5df50d9f4b4dc2ba713680ccb69b06a06a4ec21e5a6a35734c93b2d8f0b6a55af449910181647464a4292adb585d6dcc00cd1c7076c1a0615d582c299810d821decbbd540b0be5f87539ec591383699817c9925a4c1d947563b5b66f24104c98e7e4ec2e673e46defe73ed63e6f95e2a2aa8c9c4d3947b816c213bda99e7b7f8d9f772e8cefc71228dd28ba9412f6d653beb06209c0a11c0e4103453e35158fb503323f960fd26adf48eca493d10d8c3df583fbaaac0f4a5c51a51fc811120b46c76d1d6db8430da2d6231df48d0d4abd0310763489ef6cc17fc4fd88c4e41ccbf145118b6e919419ca339ad4bbf3147bea7ac564cdb493b1e15c00cd7e8bf872a006618e8d1b9e9c4bccfcfa63a8e0834bd6a2ed75cdf467c1413a23cf0ec29d4bad723ce2dfd86231b0c0c618edb790544dac002e511236337903cebffa600e55561ae254983b401c395f5e40fae8b91a67ec1932792272dcd035aaca0322132695603056b5502875258840f71da628739843c8b8615d8239441c0444881ac26235d1264f0c96fe176838f986bc47330d0a579914204be8adc77f53e890589aff228be44fa43ec246623f496f31469536d1d206e8660cedb3bba4c3b2f0fde53ae8ab2635ae49f64e890f2be0d85ed8bcbd3458150125db0c01f874ef94b2940bcfe9781b537b141e1f07278b5defcf8b6c54d68d6ac8187b04ccba911155879a8da205a79695139de9077e38886840f309b7317bcd9053ac32830823ca29169c84c074c30796fffad6d65859416e3867cf53a44e9992b1662eb1edd19ed39b04a716577f9313df78f752aa8359657982297db7b09e0eae0c81"}}) 59.56164037s ago: executing program 4 (id=268): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff}, 0x38) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) read$char_usb(r2, &(0x7f00000000c0)=""/192, 0xc0) 58.971199296s ago: executing program 33 (id=268): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = dup2(r1, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff}, 0x38) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) read$char_usb(r2, &(0x7f00000000c0)=""/192, 0xc0) 14.997784672s ago: executing program 5 (id=455): ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 13.746047362s ago: executing program 5 (id=459): socket(0x10, 0x803, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 10.803096253s ago: executing program 5 (id=467): setregid(0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0xc03e) 9.449661293s ago: executing program 2 (id=469): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) 9.091312569s ago: executing program 0 (id=472): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006004400050000000000000000000000ffff0a010101000000003c0000000200000000000000000000000000ffffac1e010106000000040300000100000000000000000000007eaafb138002bb8f527ceabf7c0db30095b61d2f65ecd41e9e423f050a3903c9947738018df3ec54ef5096d1e0e75921a4e30a8dbb6f4688500cbb333ae4"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 7.891765187s ago: executing program 0 (id=474): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x9, 0x8, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x9}, 0xa) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002c5000/0x4000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.608616782s ago: executing program 0 (id=475): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xfffc}) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 6.301181751s ago: executing program 2 (id=480): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x11f7, &(0x7f00000012c0)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, &(0x7f0000001240), &(0x7f0000001180), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 6.206402375s ago: executing program 0 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='fdinfo\x00') getdents64(r3, &(0x7f00000008c0)=""/4096, 0x1000) 5.176876436s ago: executing program 5 (id=483): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) 4.962937559s ago: executing program 0 (id=494): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 4.507576165s ago: executing program 2 (id=485): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002b3, 0x0, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.389839911s ago: executing program 1 (id=486): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0x4, 0x0, 0x0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) 3.861198472s ago: executing program 1 (id=487): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x9, 0x8, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x9}, 0xa) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002c5000/0x4000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.860159795s ago: executing program 6 (id=488): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) 3.547970527s ago: executing program 6 (id=489): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4044044) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x2, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x4, 0x1, 0x3, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0xc59, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.546557449s ago: executing program 1 (id=490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x4b00, &(0x7f0000000580)="b3"}) 3.402075519s ago: executing program 1 (id=491): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.401887258s ago: executing program 2 (id=492): syz_open_dev$ndb(0x0, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) 3.355818459s ago: executing program 5 (id=493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x10001, @private1, 0x10}, {0xa, 0x4e23, 0x800000d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, r2, 0x5}}, 0x48) 2.995698217s ago: executing program 0 (id=495): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.070249051s ago: executing program 5 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r2, 0x2000) 2.069893087s ago: executing program 2 (id=497): openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x9987, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 2.067337944s ago: executing program 6 (id=498): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x7}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.772139812s ago: executing program 6 (id=499): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0x1, 0x1, 0x3, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x20c, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x8000, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2000000, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe95, 0x40000, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 1.771373588s ago: executing program 1 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014400000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 298.875245ms ago: executing program 1 (id=501): ioperm(0x5, 0x6, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 209.510285ms ago: executing program 6 (id=502): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket(0x1e, 0x3, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newsa={0x148, 0x10, 0x1, 0x70bd25, 0x100, {{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in=@private=0xa010100, 0x5, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x4, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x55, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0xe}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) 93.458278ms ago: executing program 2 (id=503): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x9, 0x8, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x9}, 0xa) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002c5000/0x4000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 6 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x2, 0x4000010, 0xffffffffffffffff, 0x82000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r0, r1, 0x0) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c032090400000102020100052400100105240600010705810340000a09040100020a000000070502024000000705820240"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x7fffffff, 0x8, 0x28e8, 0x7, 0x5, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x100003, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0xfffffffd, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x8007fff, 0x8, 0x3, 0x7d8b, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x5, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x7fffffff, 0x80000000, 0x7, 0x0, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x0, 0x3, 0x7]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x20, 0x98, 0x2, 0xfffbf024}, {0xf2, 0x9, 0x6f, 0x5}, {0x6095, 0x8, 0x6, 0x40}]}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) kernel console output (not intermixed with test programs): 7155][ T5849] RBP: 00007f062a235024 R08: 0000000000000000 R09: 0000000000000000 [ 71.277161][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.277167][ T5849] R13: 00007f062a426038 R14: 00007f062a425fa0 R15: 00007fff212d1e38 [ 71.277180][ T5849] [ 71.978478][ T5592] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.020271][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 72.020286][ T29] audit: type=1400 audit(1787583719.574:215): avc: denied { read write } for pid=5876 comm="syz.3.27" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.056329][ T29] audit: type=1400 audit(1787583719.574:216): avc: denied { open } for pid=5876 comm="syz.3.27" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.084891][ T29] audit: type=1400 audit(1787583719.604:217): avc: denied { map } for pid=5876 comm="syz.3.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.120643][ T29] audit: type=1400 audit(1787583719.604:218): avc: denied { read write } for pid=5876 comm="syz.3.27" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.158131][ T5866] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 72.171542][ T5866] device-mapper: ioctl: error adding target to table [ 72.179919][ T5592] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.201851][ T29] audit: type=1400 audit(1787583719.634:219): avc: denied { write } for pid=5863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.239303][ T5592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.281364][ T29] audit: type=1400 audit(1787583719.804:220): avc: denied { write } for pid=5882 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.293291][ T5592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.381569][ T5592] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.399794][ T29] audit: type=1400 audit(1787583719.834:221): avc: denied { create } for pid=5883 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.425819][ T5592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.465094][ T29] audit: type=1400 audit(1787583719.834:222): avc: denied { write } for pid=5883 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.474718][ T5592] usb 5-1: config 0 descriptor?? [ 72.540869][ T29] audit: type=1400 audit(1787583719.834:223): avc: denied { connect } for pid=5883 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.627938][ T29] audit: type=1400 audit(1787583719.834:224): avc: denied { name_connect } for pid=5883 comm="syz.2.28" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.011489][ T5592] usbhid 5-1:0.0: can't add hid device: -71 [ 73.044207][ T5592] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 73.101151][ T5592] usb 5-1: USB disconnect, device number 2 [ 73.179816][ T5920] netlink: 'syz.1.34': attribute type 9 has an invalid length. [ 73.554346][ T5910] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 73.961528][ T5936] ovs-system: entered promiscuous mode [ 73.982710][ T5936] netlink: 14 bytes leftover after parsing attributes in process `syz.1.39'. [ 74.698795][ T5592] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 74.800593][ T5971] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.888373][ T5592] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 74.912576][ T5592] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 74.940807][ T5592] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 74.986029][ T5592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.004234][ T5592] usb 4-1: Product: syz [ 75.014979][ T5592] usb 4-1: Manufacturer: syz [ 75.024413][ T5592] usb 4-1: SerialNumber: syz [ 75.384676][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.465095][ T5592] usb 4-1: Unsupported UAC3 BADD profile [ 75.588237][ T5592] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 75.631824][ T5592] usb 4-1: USB disconnect, device number 2 [ 75.677650][ T5583] udevd[5583]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.976499][ T6003] fuse: Bad value for 'fd' [ 77.073003][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 77.073020][ T29] audit: type=1400 audit(1787583724.624:360): avc: denied { unlink } for pid=6030 comm="syz.1.60" name="#1" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.142056][ T29] audit: type=1400 audit(1787583724.654:361): avc: denied { mount } for pid=6030 comm="syz.1.60" name="/" dev="overlay" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.416521][ T29] audit: type=1400 audit(1787583724.964:362): avc: denied { bind } for pid=6043 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.480427][ T47] IPVS: starting estimator thread 0... [ 77.510830][ T29] audit: type=1400 audit(1787583724.994:363): avc: denied { create } for pid=6044 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.516054][ T6046] syzkaller1: entered promiscuous mode [ 77.561222][ T6046] syzkaller1: entered allmulticast mode [ 77.562653][ T29] audit: type=1400 audit(1787583724.994:364): avc: denied { write } for pid=6044 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.617028][ T29] audit: type=1400 audit(1787583725.004:365): avc: denied { read } for pid=6044 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.637913][ T6047] IPVS: using max 43 ests per chain, 103200 per kthread [ 77.665726][ T29] audit: type=1400 audit(1787583725.014:366): avc: denied { setopt } for pid=6043 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.686687][ T29] audit: type=1400 audit(1787583725.064:367): avc: denied { ioctl } for pid=6044 comm="syz.3.67" path="socket:[9142]" dev="sockfs" ino=9142 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.769257][ T195] IPVS: starting estimator thread 0... [ 77.868377][ T6056] IPVS: using max 44 ests per chain, 105600 per kthread [ 78.058804][ T29] audit: type=1400 audit(1787583725.584:368): avc: denied { create } for pid=6060 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.166162][ T29] audit: type=1400 audit(1787583725.594:369): avc: denied { write } for pid=6060 comm="syz.3.71" path="socket:[9178]" dev="sockfs" ino=9178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.174987][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 79.184427][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 80.769423][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 80.887867][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 80.937923][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'. [ 81.201569][ T941] cfg80211: failed to load regulatory.db [ 81.579609][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 82.295557][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 82.295572][ T29] audit: type=1326 audit(1787583729.844:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6122 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff08479e0d9 code=0x0 [ 82.474812][ T29] audit: type=1400 audit(1787583730.014:388): avc: denied { read } for pid=6135 comm="syz.1.90" name="usbmon3" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.531812][ T29] audit: type=1400 audit(1787583730.014:389): avc: denied { open } for pid=6135 comm="syz.1.90" path="/dev/usbmon3" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 82.580115][ T29] audit: type=1400 audit(1787583730.114:390): avc: denied { map } for pid=6135 comm="syz.1.90" path="socket:[10354]" dev="sockfs" ino=10354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 82.622644][ T5599] Bluetooth: hci4: hcon ffff88807509c000 sent 1 < count 2 [ 82.854209][ T29] audit: type=1400 audit(1787583730.404:391): avc: denied { create } for pid=6142 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.939315][ T29] audit: type=1400 audit(1787583730.494:392): avc: denied { prog_load } for pid=6153 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.992921][ T29] audit: type=1400 audit(1787583730.494:393): avc: denied { prog_run } for pid=6153 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.045066][ T29] audit: type=1400 audit(1787583730.534:394): avc: denied { map_create } for pid=6153 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.118471][ T29] audit: type=1400 audit(1787583730.534:395): avc: denied { map_read map_write } for pid=6153 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.209140][ T29] audit: type=1400 audit(1787583730.764:396): avc: denied { read } for pid=6161 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.485633][ T6167] capability: warning: `syz.3.100' uses deprecated v2 capabilities in a way that may be insecure [ 83.724309][ T6173] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 85.834231][ T6206] kvm: pic: non byte write [ 85.933160][ T195] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.376956][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 87.376971][ T29] audit: type=1400 audit(1787583734.924:455): avc: denied { read } for pid=6234 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.646680][ T29] audit: type=1400 audit(1787583734.954:456): avc: denied { open } for pid=6234 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.773934][ T29] audit: type=1400 audit(1787583735.104:457): avc: denied { create } for pid=6248 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.873986][ T29] audit: type=1400 audit(1787583735.124:458): avc: denied { map_create } for pid=6248 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.927256][ T29] audit: type=1400 audit(1787583735.124:459): avc: denied { map_read map_write } for pid=6248 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.960019][ T29] audit: type=1400 audit(1787583735.194:460): avc: denied { create } for pid=6258 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.980305][ T5599] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 87.990645][ T5593] Bluetooth: hci5: command 0x1003 tx timeout [ 88.032568][ T29] audit: type=1400 audit(1787583735.214:461): avc: denied { bind } for pid=6258 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.102831][ T29] audit: type=1400 audit(1787583735.214:462): avc: denied { setopt } for pid=6258 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.192279][ T29] audit: type=1400 audit(1787583735.224:463): avc: denied { create } for pid=6258 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.227685][ T5687] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.236812][ T6280] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 88.268779][ T29] audit: type=1400 audit(1787583735.224:464): avc: denied { create } for pid=6258 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.419503][ T5687] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.450959][ T5687] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 88.496226][ T5687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.573699][ T5687] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 7 [ 88.623338][ T6280] bond1: entered allmulticast mode [ 88.641868][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.666360][ T5687] usb 1-1: Product: syz [ 88.674758][ T6283] bond1 (unregistering): Released all slaves [ 88.698875][ T5687] usb 1-1: Manufacturer: syz [ 88.712776][ T5687] usb 1-1: SerialNumber: syz [ 89.191759][ T5687] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 89.224677][ T5687] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 89.244386][ T5687] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 89.276057][ T5687] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 89.318165][ T5687] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 89.569944][ T5687] usb 1-1: USB disconnect, device number 2 [ 90.458580][ T5584] udevd[5584]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.507324][ T6324] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5598] was attempted by " [ 91.068108][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 91.204166][ T6334] ======================================================= [ 91.204166][ T6334] WARNING: The mand mount option has been deprecated and [ 91.204166][ T6334] and is ignored by this kernel. Remove the mand [ 91.204166][ T6334] option from the mount to silence this warning. [ 91.204166][ T6334] ======================================================= [ 91.298255][ T6334] bpf: Bad value for 'context' [ 91.901990][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 91.960980][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 92.283388][ T5707] Process accounting resumed [ 93.637293][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 93.637308][ T29] audit: type=1400 audit(1787583741.184:529): avc: denied { ioctl } for pid=6394 comm="syz.2.150" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10178 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.973756][ T29] audit: type=1400 audit(1787583742.524:530): avc: denied { accept } for pid=6413 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.024904][ T29] audit: type=1400 audit(1787583742.574:531): avc: denied { write } for pid=6413 comm="syz.2.155" path="socket:[10213]" dev="sockfs" ino=10213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.310245][ T29] audit: type=1400 audit(1787583742.864:532): avc: denied { mount } for pid=6422 comm="syz.3.158" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.396416][ T29] audit: type=1400 audit(1787583742.884:533): avc: denied { search } for pid=6422 comm="syz.3.158" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.481476][ T29] audit: type=1400 audit(1787583742.894:534): avc: denied { read } for pid=6422 comm="syz.3.158" name="trace_pipe" dev="tracefs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 95.561924][ T29] audit: type=1400 audit(1787583742.894:535): avc: denied { open } for pid=6422 comm="syz.3.158" path="/30/mnt_trace/trace_pipe" dev="tracefs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 95.602186][ T5598] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.641127][ T5598] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 95.656761][ T29] audit: type=1400 audit(1787583743.034:536): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 95.787806][ T5707] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.008184][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 96.322413][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.483643][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.590605][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.740810][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.778064][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 96.838561][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.851368][ T5593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.864284][ T5593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.872506][ T5593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.875477][ T5707] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.881531][ T5593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.892251][ T5707] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 96.909279][ T5707] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 96.935177][ T5707] usb 2-1: can't read configurations, error -71 [ 97.018030][ T6452] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 97.108235][ T6457] Illegal XDP return value 4294967274 on prog (id 20) dev N/A, expect packet loss! [ 97.173752][ T1152] bridge_slave_1: left allmulticast mode [ 97.202880][ T1152] bridge_slave_1: left promiscuous mode [ 97.218388][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.246077][ T1152] bridge_slave_0: left allmulticast mode [ 97.252366][ T1152] bridge_slave_0: left promiscuous mode [ 97.269379][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.373411][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 97.402805][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 97.424674][ T6472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6472 comm=syz.2.169 [ 97.426954][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 97.740196][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.768595][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.785686][ T1152] bond0 (unregistering): Released all slaves [ 97.805550][ T6452] bond1: (slave bridge1): making interface the new active one [ 97.806331][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 97.822090][ T6452] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 97.951903][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.393417][ T1152] hsr_slave_0: left promiscuous mode [ 98.413105][ T1152] hsr_slave_1: left promiscuous mode [ 98.435928][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.478650][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.508718][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.520642][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.550254][ T1152] veth1_macvtap: left promiscuous mode [ 98.559927][ T1152] veth0_macvtap: left promiscuous mode [ 98.566012][ T1152] veth1_vlan: left promiscuous mode [ 98.575303][ T1152] veth0_vlan: left promiscuous mode [ 98.769033][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 98.769059][ T29] audit: type=1400 audit(1787583746.324:714): avc: denied { watch watch_reads } for pid=6516 comm="syz.2.179" path="/" dev="ramfs" ino=11422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 98.873452][ T29] audit: type=1400 audit(1787583746.364:715): avc: denied { write } for pid=6500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.942801][ T5593] Bluetooth: hci3: command tx timeout [ 99.094030][ T29] audit: type=1400 audit(1787583746.644:716): avc: denied { write } for pid=6525 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.284096][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 99.316653][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 99.590786][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 99.838588][ T29] audit: type=1400 audit(1787583747.384:717): avc: denied { listen } for pid=6536 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.888542][ T29] audit: type=1400 audit(1787583747.384:718): avc: denied { read } for pid=6536 comm="syz.1.182" path="socket:[11056]" dev="sockfs" ino=11056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.931303][ T29] audit: type=1400 audit(1787583747.484:719): avc: denied { setopt } for pid=6539 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.937052][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 100.060829][ T6542] hsr_slave_0 (unregistering): left promiscuous mode [ 100.191772][ T1152] IPVS: stop unused estimator thread 0... [ 100.437472][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.474769][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.522019][ T6446] bridge_slave_0: entered allmulticast mode [ 100.546290][ T6446] bridge_slave_0: entered promiscuous mode [ 100.563840][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.580788][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.599410][ T6446] bridge_slave_1: entered allmulticast mode [ 100.623612][ T6446] bridge_slave_1: entered promiscuous mode [ 100.718270][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.723609][ T29] audit: type=1400 audit(1787583748.274:720): avc: denied { write } for pid=6541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.743145][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.887115][ T6446] team0: Port device team_slave_0 added [ 100.909123][ T6446] team0: Port device team_slave_1 added [ 100.937366][ T29] audit: type=1400 audit(1787583748.484:721): avc: denied { write } for pid=6568 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.017762][ T5593] Bluetooth: hci3: command tx timeout [ 101.070165][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.118774][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.237634][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.263763][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.277725][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.324829][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.339289][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 101.556465][ T6446] hsr_slave_0: entered promiscuous mode [ 101.564985][ T6446] hsr_slave_1: entered promiscuous mode [ 101.571439][ T6446] debugfs: 'hsr0' already exists in 'hsr' [ 101.577218][ T6446] Cannot create hsr debugfs directory [ 101.671711][ T29] audit: type=1400 audit(1787583749.224:722): avc: denied { write } for pid=6584 comm="syz.1.190" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 101.758315][ T941] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.919596][ T941] usb 1-1: Using ep0 maxpacket: 8 [ 101.929063][ T941] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.957168][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.965363][ T941] usb 1-1: Product: syz [ 101.976777][ T941] usb 1-1: Manufacturer: syz [ 101.982150][ T29] audit: type=1400 audit(1787583749.524:723): avc: denied { write } for pid=6589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.005637][ T941] usb 1-1: SerialNumber: syz [ 102.012941][ T941] usb 1-1: config 0 descriptor?? [ 102.287855][ T941] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.381436][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.193'. [ 103.107899][ T5593] Bluetooth: hci3: command tx timeout [ 103.976987][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 104.283970][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 104.283986][ T29] audit: type=1400 audit(1787583751.834:727): avc: denied { read } for pid=6618 comm="syz.1.196" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.328185][ T941] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 104.391496][ T29] audit: type=1400 audit(1787583751.834:728): avc: denied { open } for pid=6618 comm="syz.1.196" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 104.421450][ T941] usb 1-1: USB disconnect, device number 3 [ 104.652981][ T6446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.679133][ T6446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.694546][ T6446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.719277][ T6446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.736735][ T6446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.766587][ T6446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.782940][ T6446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.809389][ T6446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.053453][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.118656][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.138264][ T29] audit: type=1400 audit(1787583752.694:729): avc: denied { create } for pid=6639 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.178774][ T5593] Bluetooth: hci3: command tx timeout [ 105.187905][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.195045][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.216068][ T29] audit: type=1400 audit(1787583752.734:730): avc: denied { setopt } for pid=6639 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.239755][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.246884][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.414267][ T29] audit: type=1400 audit(1787583752.964:731): avc: denied { create } for pid=6642 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.506603][ T29] audit: type=1400 audit(1787583752.994:732): avc: denied { connect } for pid=6642 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.592119][ T29] audit: type=1400 audit(1787583753.074:733): avc: denied { mount } for pid=6645 comm="syz.2.201" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.694374][ T29] audit: type=1400 audit(1787583753.094:734): avc: denied { append } for pid=6645 comm="syz.2.201" name="sda" dev="devtmpfs" ino=781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.742520][ T6636] xt_hashlimit: size too large, truncated to 1048576 [ 105.804055][ T29] audit: type=1400 audit(1787583753.184:735): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.940833][ T29] audit: type=1400 audit(1787583753.214:736): avc: denied { connect } for pid=6635 comm="syz.4.198" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.549090][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 106.604599][ T6673] netlink: 'syz.0.208': attribute type 11 has an invalid length. [ 106.621564][ T6671] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6671 comm=syz.2.207 [ 106.694991][ T6677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.740313][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.410970][ T6446] veth0_vlan: entered promiscuous mode [ 107.411843][ T6703] syz.2.217 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 107.448240][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.2.217 Not tainted syzkaller #0 PREEMPT(full) [ 107.448268][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 107.448280][ T6703] Call Trace: [ 107.448286][ T6703] [ 107.448294][ T6703] dump_stack_lvl+0x100/0x190 [ 107.448327][ T6703] dump_header+0xfb/0x606 [ 107.448349][ T6703] oom_kill_process.cold+0xd/0x380 [ 107.448373][ T6703] out_of_memory+0x340/0x14f0 [ 107.448399][ T6703] ? __pfx_out_of_memory+0x10/0x10 [ 107.448431][ T6703] mem_cgroup_out_of_memory+0xc6/0x130 [ 107.448458][ T6703] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 107.448485][ T6703] ? find_held_lock+0x2b/0x80 [ 107.448511][ T6703] ? do_raw_spin_unlock+0x145/0x1e0 [ 107.448533][ T6703] ? _raw_spin_unlock+0x28/0x50 [ 107.448553][ T6703] try_charge_memcg+0x6e1/0xdf0 [ 107.448581][ T6703] ? __pfx_try_charge_memcg+0x10/0x10 [ 107.448602][ T6703] ? find_held_lock+0x2b/0x80 [ 107.448624][ T6703] ? rcu_read_unlock+0x17/0x60 [ 107.448653][ T6703] ? rcu_read_unlock+0x17/0x60 [ 107.448684][ T6703] __memcg_slab_post_alloc_hook+0x470/0x1150 [ 107.448715][ T6703] ? kasan_unpoison+0x27/0x60 [ 107.448742][ T6703] __kvmalloc_node_noprof+0x73b/0x970 [ 107.448772][ T6703] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 107.448807][ T6703] __nf_hook_entries_try_shrink+0x164/0x400 [ 107.448842][ T6703] __nf_unregister_net_hook+0x1d2/0x6a0 [ 107.448875][ T6703] nf_unregister_net_hook+0xda/0x120 [ 107.448903][ T6703] __nf_tables_unregister_hook.part.0+0x3d6/0x4f0 [ 107.448940][ T6703] nf_tables_abort+0x24ff/0x4590 [ 107.448980][ T6703] ? __pfx_nf_tables_abort+0x10/0x10 [ 107.449010][ T6703] ? kasan_save_track+0x14/0x30 [ 107.449042][ T6703] ? nfnetlink_rcv_batch+0x780/0x2880 [ 107.449070][ T6703] nfnetlink_rcv_batch+0xd4f/0x2880 [ 107.449107][ T6703] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 107.449129][ T6703] ? find_held_lock+0x2b/0x80 [ 107.449166][ T6703] ? avc_has_perm_noaudit+0x145/0x3b0 [ 107.449221][ T6703] ? __nla_parse+0x40/0x60 [ 107.449252][ T6703] nfnetlink_rcv+0x3bd/0x440 [ 107.449274][ T6703] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 107.449303][ T6703] netlink_unicast+0x585/0x850 [ 107.449336][ T6703] ? __pfx_netlink_unicast+0x10/0x10 [ 107.449371][ T6703] netlink_sendmsg+0x8b0/0xda0 [ 107.449404][ T6703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.449433][ T6703] ? selinux_socket_sendmsg+0x198/0x2f0 [ 107.449459][ T6703] ____sys_sendmsg+0xa4d/0xbe0 [ 107.449482][ T6703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.449512][ T6703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.449548][ T6703] ___sys_sendmsg+0x190/0x1e0 [ 107.449575][ T6703] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.449600][ T6703] ? futex_wait+0x11e/0x370 [ 107.449644][ T6703] ? find_held_lock+0x2b/0x80 [ 107.449685][ T6703] __sys_sendmsg+0x160/0x210 [ 107.449707][ T6703] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.449741][ T6703] do_syscall_64+0x123/0x790 [ 107.449766][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.449785][ T6703] RIP: 0033:0x7ff53bf9e0d9 [ 107.449802][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.449818][ T6703] RSP: 002b:00007ff53cf2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.449838][ T6703] RAX: ffffffffffffffda RBX: 00007ff53c225fa0 RCX: 00007ff53bf9e0d9 [ 107.449849][ T6703] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 107.449859][ T6703] RBP: 00007ff53c035024 R08: 0000000000000000 R09: 0000000000000000 [ 107.449871][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.449882][ T6703] R13: 00007ff53c226038 R14: 00007ff53c225fa0 R15: 00007ffc0780dc38 [ 107.449909][ T6703] [ 107.452250][ T6446] veth1_vlan: entered promiscuous mode [ 107.452395][ T6703] memory: usage 8kB, limit 8kB, failcnt 21 [ 107.630976][ T6446] veth0_macvtap: entered promiscuous mode [ 107.633537][ T6703] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 107.842726][ T6703] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 107.850647][ T6703] Memory cgroup stats for /syz2/test: [ 107.851407][ T6703] cache 0 [ 107.860327][ T6703] rss 0 [ 107.863106][ T6703] rss_huge 0 [ 107.866788][ T6703] shmem 0 [ 107.870055][ T6703] mapped_file 0 [ 107.873530][ T6703] dirty 0 [ 107.876457][ T6703] writeback 0 [ 107.879778][ T6703] workingset_refault_anon 0 [ 107.884282][ T6703] workingset_refault_file 0 [ 107.888814][ T6703] swap 0 [ 107.891657][ T6703] swapcached 0 [ 107.895022][ T6703] pgpgin 0 [ 107.898144][ T6703] pgpgout 0 [ 107.901247][ T6703] pgfault 0 [ 107.904351][ T6703] pgmajfault 0 [ 107.907784][ T6703] inactive_anon 0 [ 107.911411][ T6703] active_anon 0 [ 107.914895][ T6703] inactive_file 0 [ 107.920513][ T6446] veth1_macvtap: entered promiscuous mode [ 107.922214][ T6703] active_file 0 [ 107.929734][ T6703] unevictable 0 [ 107.933185][ T6703] hierarchical_memory_limit 8192 [ 107.938161][ T6703] hierarchical_memsw_limit 9223372036854771712 [ 107.944307][ T6703] total_cache 0 [ 107.947950][ T6703] total_rss 0 [ 107.951247][ T6703] total_rss_huge 0 [ 107.954960][ T6703] total_shmem 0 [ 107.958457][ T6703] total_mapped_file 0 [ 107.962434][ T6703] total_dirty 0 [ 107.965884][ T6703] total_writeback 0 [ 107.971582][ T6703] total_workingset_refault_anon 0 [ 107.976611][ T6703] total_workingset_refault_file 0 [ 107.981680][ T6703] total_swap 0 [ 107.985045][ T6703] total_swapcached 0 [ 107.987235][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.988951][ T6703] total_pgpgin 0 [ 107.999725][ T6703] total_pgpgout 0 [ 108.019701][ T6703] total_pgfault 0 [ 108.023374][ T6703] total_pgmajfault 0 [ 108.044447][ T6703] total_inactive_anon 0 [ 108.052672][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.062968][ T6703] total_active_anon 0 [ 108.083185][ T6703] total_inactive_file 0 [ 108.094879][ T6703] total_active_file 0 [ 108.103058][ T6703] total_unevictable 0 [ 108.112653][ T6703] anon_cost 0 [ 108.122736][ T6703] file_cost 0 [ 108.128439][ T6703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.217,pid=6702,uid=0 [ 108.158110][ T6251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.158724][ T6703] Memory cgroup out of memory: Killed process 6702 (syz.2.217) total-vm:104300kB, anon-rss:1428kB, file-rss:23228kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 108.197989][ T6251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.230220][ T65] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.267862][ T135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.363168][ T6251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.390310][ T6251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.475788][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.496413][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.810777][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 108.823134][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 108.839424][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x4a89 instead [ 108.894022][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x0a09 instead [ 108.956192][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 109.024702][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 109.080387][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 109.206331][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 109.257920][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 109.326655][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 109.406238][ T6722] jffs2: Further such events for this erase block will not be printed [ 109.422761][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 109.422774][ T29] audit: type=1400 audit(1787583756.974:757): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.433413][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 109.515815][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 109.537465][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x4a89 instead [ 109.548856][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x0a09 instead [ 109.550295][ T6728] process 'syz.0.224' launched '/dev/fd/5' with NULL argv: empty string added [ 109.604646][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 109.622208][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 109.636943][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 109.666765][ T29] audit: type=1400 audit(1787583757.214:758): avc: denied { nlmsg_read } for pid=6731 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 109.668611][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 109.714242][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 109.753578][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 109.765783][ T29] audit: type=1400 audit(1787583757.254:759): avc: denied { execute_no_trans } for pid=6727 comm="syz.0.224" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.766949][ T6722] jffs2: Further such events for this erase block will not be printed [ 109.808212][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 109.823981][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 109.835258][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x4a89 instead [ 109.846149][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0a09 instead [ 109.910894][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 109.942421][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 110.016861][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4a89 instead [ 110.017857][ T29] audit: type=1400 audit(1787583757.564:760): avc: denied { create } for pid=6736 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.034223][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0a09 instead [ 110.071847][ T6741] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 110.072407][ T29] audit: type=1400 audit(1787583757.564:761): avc: denied { bind } for pid=6736 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.167323][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 110.179952][ T29] audit: type=1400 audit(1787583757.584:762): avc: denied { listen } for pid=6736 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.196560][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 110.216628][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.236160][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x4a89 instead [ 110.246555][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0a09 instead [ 110.259273][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 110.293484][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 110.324900][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x4a89 instead [ 110.339001][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0a09 instead [ 110.350202][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 110.367736][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 110.389741][ T6744] bond2: entered promiscuous mode [ 110.400643][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4a89 instead [ 110.416206][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0a09 instead [ 110.427323][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 110.440077][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 110.460599][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x4a89 instead [ 110.462262][ T6744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.493716][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0a09 instead [ 110.519192][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 110.549180][ T6744] bond1: (slave bond2): Enslaving as an active interface with a down link [ 110.578808][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 110.612836][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4a89 instead [ 110.647019][ T6746] bond1: (slave ip6erspan0): making interface the new active one [ 110.665708][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0a09 instead [ 110.696391][ T29] audit: type=1400 audit(1787583758.244:763): avc: denied { write } for pid=6743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.720111][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 110.733703][ T6746] ip6erspan0: entered promiscuous mode [ 110.740737][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 110.756096][ T6746] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 110.768916][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x4a89 instead [ 110.782050][ T6753] ªªªªªª: renamed from lo (while UP) [ 110.789891][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0a09 instead [ 110.815385][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 110.827460][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 110.856251][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4a89 instead [ 110.882792][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0a09 instead [ 110.898257][ T6753] lo: name change rollback failed: -105 [ 110.923500][ T29] audit: type=1400 audit(1787583758.474:764): avc: denied { write } for pid=6764 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.971280][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 111.033925][ T29] audit: type=1400 audit(1787583758.584:765): avc: denied { bind } for pid=6762 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.044740][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 111.098724][ T29] audit: type=1326 audit(1787583758.614:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6762 comm="syz.4.232" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f062a19e0d9 code=0x0 [ 111.130844][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x4a89 instead [ 111.153861][ T6774] binder: 6773:6774 ioctl c0306201 0 returned -14 [ 111.182805][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0a09 instead [ 111.201009][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 111.225322][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 111.245691][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x4a89 instead [ 111.272843][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0a09 instead [ 111.291430][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 111.319143][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 111.333103][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4a89 instead [ 111.357203][ T6782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.360381][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0a09 instead [ 111.365027][ T6782] IPv6: NLM_F_CREATE should be set when creating new route [ 111.375688][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 111.398856][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 111.421069][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4a89 instead [ 111.448583][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0a09 instead [ 111.481029][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 111.504919][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 111.537919][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.545704][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.545838][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x4a89 instead [ 111.599121][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0a09 instead [ 111.651745][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 111.696951][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 111.763958][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 111.787230][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x4a89 instead [ 111.815772][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0a09 instead [ 111.825206][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.865832][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 111.923013][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 111.924395][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.975632][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x4a89 instead [ 112.001249][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0a09 instead [ 112.033651][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 112.054927][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 112.077522][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x4a89 instead [ 112.103614][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0a09 instead [ 112.124992][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 112.153797][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 112.186867][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x4a89 instead [ 112.223722][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0a09 instead [ 112.253047][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 112.282659][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 112.316140][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x4a89 instead [ 112.371713][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0a09 instead [ 112.395599][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 112.415941][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 112.435902][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x4a89 instead [ 112.458281][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0a09 instead [ 112.470434][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 112.512559][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.527693][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 112.540910][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.551328][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x4a89 instead [ 112.563560][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.574074][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0a09 instead [ 112.585381][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.594447][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 112.606561][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 112.642911][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4a89 instead [ 112.654387][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0a09 instead [ 112.677681][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 112.689691][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 112.702561][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x4a89 instead [ 112.714327][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0a09 instead [ 112.724930][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 112.735514][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 112.762480][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x4a89 instead [ 112.773263][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0a09 instead [ 112.785393][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 112.804767][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 112.821610][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x4a89 instead [ 112.836554][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0a09 instead [ 112.861737][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 112.890351][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 112.916562][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x4a89 instead [ 112.937214][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0a09 instead [ 112.948852][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 112.998167][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 113.022911][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x4a89 instead [ 113.033655][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0a09 instead [ 113.044399][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 113.055205][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 113.065790][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x4a89 instead [ 113.076418][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0a09 instead [ 113.087469][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 113.119603][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 113.144117][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x4a89 instead [ 113.189109][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0a09 instead [ 113.213977][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 113.229689][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 113.240970][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x4a89 instead [ 113.252959][ T6722] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0a09 instead [ 113.268367][ T6722] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 113.281449][ T6722] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 113.718534][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 113.734225][ T6825] Cannot find add_set index 0 as target [ 113.934447][ T6828] syzkaller0: entered promiscuous mode [ 113.953427][ T6828] syzkaller0: entered allmulticast mode [ 114.314460][ T6833] netlink: 140 bytes leftover after parsing attributes in process `syz.0.250'. [ 114.588327][ T188] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.727527][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 114.727541][ T29] audit: type=1400 audit(1787583762.274:780): avc: denied { setopt } for pid=6860 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.780060][ T188] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.812893][ T188] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.845213][ T29] audit: type=1400 audit(1787583762.284:781): avc: denied { bind } for pid=6860 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.887971][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.909630][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 114.910989][ T188] usb 6-1: config 0 descriptor?? [ 114.970378][ T188] pwc: Askey VC010 type 2 USB webcam detected. [ 115.132437][ T6880] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 115.222928][ T6880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.293613][ T29] audit: type=1400 audit(1787583762.844:782): avc: denied { write } for pid=6841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.380531][ T188] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.398377][ T6880] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 115.408335][ T188] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.428146][ T6880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.257'. [ 115.450077][ T6883] bond3: (slave veth3): Enslaving as an active interface with a down link [ 115.459415][ T188] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.475008][ T188] pwc: recv_control_msg error -32 req 04 val 1000 [ 115.489448][ T188] pwc: recv_control_msg error -32 req 04 val 1300 [ 115.508696][ T188] pwc: recv_control_msg error -32 req 04 val 1400 [ 115.517404][ T29] audit: type=1400 audit(1787583763.064:783): avc: denied { write } for pid=6893 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.526829][ T188] pwc: recv_control_msg error -32 req 02 val 2000 [ 115.617365][ T188] pwc: recv_control_msg error -32 req 02 val 2100 [ 115.664922][ T6884] bond3: (slave dummy0): making interface the new active one [ 115.729580][ T6884] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 115.789026][ T6880] dummy0: entered promiscuous mode [ 115.835434][ T6880] bond3: (slave dummy0): Releasing active interface [ 115.856787][ T188] pwc: recv_control_msg error -71 req 02 val 2500 [ 115.871789][ T188] pwc: recv_control_msg error -71 req 02 val 2400 [ 115.895032][ T188] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.914271][ T188] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.939621][ T188] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.970422][ T188] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.994232][ T188] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.028062][ T29] audit: type=1400 audit(1787583763.574:784): avc: denied { write } for pid=5601 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.081512][ T188] pwc: Registered as video103. [ 116.105519][ T29] audit: type=1400 audit(1787583763.604:785): avc: denied { write } for pid=5601 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.120436][ T188] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 116.171559][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.221831][ T5601] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.231202][ T188] usb 6-1: USB disconnect, device number 2 [ 116.294644][ T5601] audit: audit_lost=49 audit_rate_limit=0 audit_backlog_limit=64 [ 116.311560][ T29] audit: type=1400 audit(1787583763.604:786): avc: denied { write } for pid=5601 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 116.350354][ T5601] audit: backlog limit exceeded [ 116.360977][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.440442][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 116.514963][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.597180][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.785908][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.817707][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.846482][ T10] usb 3-1: config 0 descriptor?? [ 117.552912][ T10] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 117.606536][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.907959][ T5697] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 117.967672][ T5592] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.970889][ T10] usb 3-1: USB disconnect, device number 2 [ 118.111658][ T5697] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 118.152269][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.168298][ T5592] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.199483][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.214854][ T5592] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.233111][ T5697] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.246475][ T5592] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.278614][ T5697] usb 6-1: Manufacturer: syz [ 118.284738][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.306187][ T5592] usb 2-1: Product: syz [ 118.319182][ T5697] usb 6-1: config 0 descriptor?? [ 118.321582][ T5592] usb 2-1: Manufacturer: syz [ 118.357267][ T5592] usb 2-1: SerialNumber: syz [ 118.394503][ T5592] cdc_mbim 2-1:1.0: skipping garbage [ 118.601896][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.613776][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.624232][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.634732][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.642652][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.688238][ T6947] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 118.855810][ T6951] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 118.971681][ T6951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.980458][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.998958][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.016469][ T6951] bond1: (slave bond2): making interface the new active one [ 119.080142][ T6926] ipt_ECN: cannot use operation on non-tcp rule [ 119.194882][ T6951] bond1: (slave bond2): Enslaving as an active interface with an up link [ 119.615721][ T6959] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 119.647513][ T5697] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 119.680434][ T5697] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 119.709984][ T5697] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 119.754092][ T5697] usb 6-1: USB disconnect, device number 3 [ 119.953249][ T6979] netlink: 'syz.2.274': attribute type 2 has an invalid length. [ 120.049844][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 120.089233][ T6929] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 120.174880][ T5592] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 120.282919][ T5592] wwan wwan0: port wwan0mbim0 attached [ 120.699255][ T5593] Bluetooth: hci4: command tx timeout [ 121.093489][ T5707] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.196862][ T5592] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, c6:4f:d5:67:95:d5 [ 121.314936][ T5592] usb 2-1: USB disconnect, device number 4 [ 121.401567][ T5592] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 121.737359][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 121.737380][ T29] audit: type=1400 audit(1787583769.284:861): avc: denied { write } for pid=6968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.792089][ T5707] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.824778][ T5707] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 121.865738][ T5707] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.881384][ T5592] wwan wwan0: port wwan0mbim0 disconnected [ 121.912666][ T5707] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.942445][ T29] audit: type=1400 audit(1787583769.494:862): avc: denied { create } for pid=7002 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 121.964440][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.052660][ T29] audit: type=1400 audit(1787583769.564:863): avc: denied { write } for pid=7007 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.152985][ T5707] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.179779][ T5707] usb 3-1: invalid MIDI out EP 0 [ 122.391330][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.399351][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.406632][ T6943] bridge_slave_0: entered allmulticast mode [ 122.413920][ T6943] bridge_slave_0: entered promiscuous mode [ 122.426629][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.434580][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.442121][ T6943] bridge_slave_1: entered allmulticast mode [ 122.523514][ T6943] bridge_slave_1: entered promiscuous mode [ 122.702550][ T5707] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 122.712576][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.733896][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.745547][ T5707] usb 3-1: USB disconnect, device number 3 [ 122.778140][ T5593] Bluetooth: hci4: command tx timeout [ 122.833464][ T6943] team0: Port device team_slave_0 added [ 122.851639][ T6943] team0: Port device team_slave_1 added [ 122.913039][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.929600][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.977602][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.996229][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.003266][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.059650][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.074523][ T29] audit: type=1400 audit(1787583770.624:864): avc: denied { create } for pid=7018 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.127750][ T29] audit: type=1400 audit(1787583770.674:865): avc: denied { write } for pid=7019 comm="syz.5.283" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.162323][ T6943] hsr_slave_0: entered promiscuous mode [ 123.169520][ T6943] hsr_slave_1: entered promiscuous mode [ 123.175837][ T6943] debugfs: 'hsr0' already exists in 'hsr' [ 123.185840][ T6943] Cannot create hsr debugfs directory [ 123.475870][ T29] audit: type=1400 audit(1787583771.024:866): avc: denied { getopt } for pid=7029 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.648487][ T6853] ip6erspan0: left promiscuous mode [ 123.702938][ T6943] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 123.712690][ T6943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.726970][ T6943] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 123.741742][ T6943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.749568][ T6943] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.759184][ T6943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.778154][ T6943] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.800356][ T6943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.906745][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.939272][ T6943] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.964195][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.971325][ T6254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.018374][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.025521][ T6254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.189582][ T7050] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 124.288076][ T7057] blktrace: Concurrent blktraces are not allowed on sda1 [ 124.332411][ T29] audit: type=1400 audit(1787583771.884:867): avc: denied { getopt } for pid=7036 comm="syz.1.288" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.887883][ T5593] Bluetooth: hci4: command tx timeout [ 125.032791][ T29] audit: type=1400 audit(1787583772.584:868): avc: denied { read } for pid=7068 comm="syz.2.293" name="zoned" dev="configfs" ino=12978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 125.070743][ T29] audit: type=1800 audit(1787583772.604:869): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.293" name="zoned" dev="configfs" ino=12978 res=0 errno=0 [ 125.097143][ T7069] null_blk: nullb1: using native zone append [ 125.140154][ T29] audit: type=1800 audit(1787583772.614:870): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.293" name="zone_nr_conv" dev="configfs" ino=12979 res=0 errno=0 [ 125.383462][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.401363][ T7069] null_blk: disk nullb1 created [ 125.989628][ T6943] veth0_vlan: entered promiscuous mode [ 126.034826][ T6943] veth1_vlan: entered promiscuous mode [ 126.125788][ T6943] veth0_macvtap: entered promiscuous mode [ 126.150338][ T6943] veth1_macvtap: entered promiscuous mode [ 126.208595][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.246100][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.307725][ T6871] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.334856][ T6871] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.390726][ T6850] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.437675][ T6850] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.542751][ T6871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.577657][ T6871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.650237][ T6254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.659108][ T6254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.913231][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 126.913246][ T29] audit: type=1400 audit(1787583774.464:875): avc: denied { setopt } for pid=7114 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.939687][ T5593] Bluetooth: hci4: command tx timeout [ 127.103521][ T29] audit: type=1400 audit(1787583774.654:876): avc: denied { write } for pid=7124 comm="syz.0.306" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.165038][ T6867] IPVS: starting estimator thread 0... [ 127.267777][ T7131] IPVS: using max 45 ests per chain, 108000 per kthread [ 127.275158][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.283208][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.621236][ T29] audit: type=1400 audit(1787583775.174:877): avc: denied { unlink } for pid=7140 comm="syz.2.310" name="#3" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.653743][ T29] audit: type=1400 audit(1787583775.194:878): avc: denied { mount } for pid=7140 comm="syz.2.310" name="/" dev="overlay" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.804756][ T7141] evm: overlay not supported [ 127.832331][ T29] audit: type=1400 audit(1787583775.384:879): avc: denied { create } for pid=7145 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.882499][ T29] audit: type=1400 audit(1787583775.404:880): avc: denied { create } for pid=7140 comm="syz.2.310" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.929835][ T29] audit: type=1400 audit(1787583775.404:881): avc: denied { link } for pid=7140 comm="syz.2.310" name="#5" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.983963][ T29] audit: type=1400 audit(1787583775.404:882): avc: denied { rename } for pid=7140 comm="syz.2.310" name="#6" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.044962][ T29] audit: type=1400 audit(1787583775.424:883): avc: denied { bind } for pid=7145 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.073223][ T29] audit: type=1400 audit(1787583775.424:884): avc: denied { write } for pid=7145 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.168557][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880233a7400: rx timeout, send abort [ 128.215164][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'. [ 128.238373][ T7154] openvswitch: netlink: Flow key attr not present in new flow. [ 128.282347][ T7150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.307459][ T7150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.398101][ T7150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.430737][ T7150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.454944][ T7150] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.494457][ T7150] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.546487][ T7150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.668881][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880233a5c00: rx timeout, send abort [ 128.677760][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880233a7400: abort rx timeout. Force session deactivation [ 128.709215][ T7150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.130871][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056f91400: rx timeout, send abort [ 129.139366][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056f91400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.177120][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880233a5c00: abort rx timeout. Force session deactivation [ 129.199728][ T7150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.273924][ T7150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.304024][ T7150] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.339520][ T7150] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.382557][ T7150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.482515][ T7150] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.547050][ T7150] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.051441][ T5592] kernel write not supported for file /snd/midiC2D0 (pid: 5592 comm: kworker/1:3) [ 130.319321][ T5593] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.472658][ T5593] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.617633][ T5593] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.337821][ T5593] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.421546][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.606619][ T7198] netlink: 'syz.6.325': attribute type 4 has an invalid length. [ 132.001975][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.328'. [ 132.115799][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.123099][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.176333][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc1e400: rx timeout, send abort [ 132.382027][ T5593] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.492751][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.530319][ T7205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.539383][ T5593] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.676460][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ce3cc00: rx timeout, send abort [ 132.684796][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc1e400: abort rx timeout. Force session deactivation [ 132.697626][ T5593] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.184749][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ce3cc00: abort rx timeout. Force session deactivation [ 133.418666][ T5593] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.498604][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.905923][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 133.905939][ T29] audit: type=1400 audit(1787583781.454:897): avc: denied { mount } for pid=7248 comm="syz.6.335" name="/" dev="autofs" ino=14647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 133.957974][ T6871] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.971380][ T6871] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.018236][ T6871] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.032656][ T6871] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.457793][ T5593] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.627647][ T5593] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.777990][ T5593] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.497846][ T5593] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.579698][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.691979][ T29] audit: type=1400 audit(1787583783.244:898): avc: denied { append } for pid=7280 comm="syz.6.342" name="cec0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.713272][ T7279] loop5: detected capacity change from 0 to 7 [ 135.762426][ T7279] Dev loop5: unable to read RDB block 7 [ 135.781522][ T7279] loop5: unable to read partition table [ 135.806179][ T7279] loop5: partition table beyond EOD, truncated [ 135.816130][ T7279] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.869016][ T29] audit: type=1400 audit(1787583783.424:899): avc: denied { ioctl } for pid=7276 comm="syz.2.341" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.916990][ T29] audit: type=1400 audit(1787583783.464:900): avc: denied { execute } for pid=7284 comm="syz.6.344" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 136.874288][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.347'. [ 136.902224][ T29] audit: type=1400 audit(1787583784.454:901): avc: denied { watch_reads } for pid=7294 comm="syz.5.347" path="/20" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.970873][ T29] audit: type=1400 audit(1787583784.524:902): avc: denied { accept } for pid=7302 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.991148][ T29] audit: type=1400 audit(1787583784.544:903): avc: denied { write } for pid=7302 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.027134][ T7299] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.148303][ T5707] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 137.158963][ T5593] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 137.171590][ T5593] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 137.214302][ T29] audit: type=1400 audit(1787583784.764:904): avc: denied { mount } for pid=7308 comm="syz.2.352" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.243470][ T7310] Bluetooth: MGMT ver 1.23 [ 137.249230][ T29] audit: type=1400 audit(1787583784.794:905): avc: denied { read write } for pid=7308 comm="syz.2.352" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.280636][ T29] audit: type=1400 audit(1787583784.794:906): avc: denied { open } for pid=7308 comm="syz.2.352" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 137.318655][ T5707] usb 7-1: Using ep0 maxpacket: 32 [ 137.325318][ T5707] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 137.345694][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.375707][ T5707] usb 7-1: config 0 descriptor?? [ 137.408225][ T5707] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 137.613352][ T5707] gspca_vc032x: reg_r err -71 [ 137.620849][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.633836][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.641495][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.662931][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.683049][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.700455][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.705864][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.711482][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.716954][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.723434][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.729432][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.735188][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.741242][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.746814][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.753586][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.759293][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.764697][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.773828][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 137.779368][ T5707] gspca_vc032x: Unknown sensor... [ 137.784545][ T5707] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 137.820392][ T5707] usb 7-1: USB disconnect, device number 2 [ 138.860018][ T7339] FAULT_INJECTION: forcing a failure. [ 138.860018][ T7339] name failslab, interval 1, probability 0, space 0, times 1 [ 138.900958][ T7340] ip_tables: iptables: counters copy to user failed while replacing table [ 138.919252][ T7339] CPU: 1 UID: 0 PID: 7339 Comm: syz.0.363 Not tainted syzkaller #0 PREEMPT(full) [ 138.919284][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 138.919294][ T7339] Call Trace: [ 138.919300][ T7339] [ 138.919306][ T7339] dump_stack_lvl+0x100/0x190 [ 138.919339][ T7339] should_fail_ex.cold+0x5/0xa [ 138.919363][ T7339] should_failslab+0xc2/0x120 [ 138.919381][ T7339] __kmalloc_cache_noprof+0x91/0x6b0 [ 138.919407][ T7339] ? resv_map_alloc+0x46/0x400 [ 138.919438][ T7339] resv_map_alloc+0x46/0x400 [ 138.919468][ T7339] hugetlbfs_get_inode+0x385/0x700 [ 138.919499][ T7339] hugetlb_file_setup+0x15b/0x5b0 [ 138.919530][ T7339] ksys_mmap_pgoff+0x242/0x610 [ 138.919564][ T7339] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 138.919592][ T7339] ? xfd_validate_state+0x129/0x190 [ 138.919627][ T7339] __x64_sys_mmap+0x125/0x190 [ 138.919651][ T7339] do_syscall_64+0x123/0x790 [ 138.919677][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.919697][ T7339] RIP: 0033:0x7ff08479e0d9 [ 138.919714][ T7339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.919733][ T7339] RSP: 002b:00007ff0855ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 138.919753][ T7339] RAX: ffffffffffffffda RBX: 00007ff084a25fa0 RCX: 00007ff08479e0d9 [ 138.919765][ T7339] RDX: 000000000000000c RSI: 0000000000010001 RDI: 0000000000000000 [ 138.919776][ T7339] RBP: 00007ff084835024 R08: ffffffffffffffff R09: 0000000000000000 [ 138.919788][ T7339] R10: 000000000004c032 R11: 0000000000000246 R12: 0000000000000000 [ 138.919799][ T7339] R13: 00007ff084a26038 R14: 00007ff084a25fa0 R15: 00007ffd77585f58 [ 138.919824][ T7339] [ 139.437677][ T51] Bluetooth: hci0: command 0x0c7a tx timeout [ 139.437703][ T5599] Bluetooth: hci0: Opcode 0x0c7a failed: -110 [ 139.547627][ T5687] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 139.714354][ T5687] usb 7-1: unable to get BOS descriptor or descriptor too short [ 139.742808][ T5687] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 139.846494][ T5687] usb 7-1: config 12 has an invalid interface number: 99 but max is 0 [ 139.885328][ T5687] usb 7-1: config 12 has no interface number 0 [ 139.907330][ T5687] usb 7-1: config 12 interface 99 has no altsetting 0 [ 139.934006][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 139.934016][ T29] audit: type=1400 audit(1787583787.484:925): avc: denied { setopt } for pid=7345 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 139.995664][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.015856][ T5687] usb 7-1: Product: syz [ 140.029439][ T5687] usb 7-1: Manufacturer: syz [ 140.034054][ T5687] usb 7-1: SerialNumber: syz [ 140.386093][ T29] audit: type=1400 audit(1787583787.934:926): avc: denied { mount } for pid=7353 comm="syz.5.367" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.455921][ T29] audit: type=1400 audit(1787583787.984:927): avc: denied { view } for pid=7333 comm="syz.6.361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 140.498769][ T7344] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.365'. [ 140.529018][ T5687] usb 7-1: no audio or video endpoints found [ 140.544211][ T7347] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.365'. [ 140.566871][ T5687] usb 7-1: USB disconnect, device number 3 [ 140.595185][ T7352] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.365'. [ 140.741797][ T29] audit: type=1400 audit(1787583788.294:928): avc: denied { unmount } for pid=6446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 141.167663][ T5687] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 141.358344][ T5687] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 141.376850][ T5687] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.397255][ T5687] usb 6-1: config 0 has no interfaces? [ 141.407654][ T5687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.431213][ T5687] usb 6-1: config 0 descriptor?? [ 141.774359][ T29] audit: type=1400 audit(1787583789.324:929): avc: denied { create } for pid=7378 comm="syz.2.376" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.844960][ T29] audit: type=1400 audit(1787583789.324:930): avc: denied { write } for pid=7378 comm="syz.2.376" name="file0" dev="tmpfs" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.903241][ T29] audit: type=1400 audit(1787583789.324:931): avc: denied { open } for pid=7378 comm="syz.2.376" path="/84/file0" dev="tmpfs" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.926046][ T7377] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.993683][ T29] audit: type=1400 audit(1787583789.324:932): avc: denied { ioctl } for pid=7378 comm="syz.2.376" path="/84/file0" dev="tmpfs" ino=474 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.082516][ T29] audit: type=1400 audit(1787583789.454:933): avc: denied { unlink } for pid=5591 comm="syz-executor" name="file0" dev="tmpfs" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.117956][ T188] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.193175][ T7388] No such timeout policy "n" [ 142.194537][ T29] audit: type=1400 audit(1787583789.744:934): avc: denied { read } for pid=7385 comm="syz.0.379" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.252674][ T7388] netlink: Failed to associated timeout policy 'n' [ 142.300420][ T188] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 142.332074][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.343091][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.392069][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.446077][ T188] usb 2-1: config 0 descriptor?? [ 142.817739][ T5697] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 142.980422][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.002086][ T5697] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 143.023846][ T5697] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 143.039600][ T5697] usb 3-1: config 100 has no interface number 0 [ 143.046357][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 143.046534][ T5697] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 143.060154][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 143.068248][ T5697] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 1160, setting to 8 [ 143.089479][ T5697] usb 3-1: config 100 interface 173 has no altsetting 0 [ 143.101032][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x4a89 instead [ 143.105152][ T5697] usb 3-1: string descriptor 0 read error: -22 [ 143.117781][ T188] usbhid 2-1:0.0: can't add hid device: -71 [ 143.118953][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x0a09 instead [ 143.123777][ T188] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 143.134504][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 143.144493][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.155760][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 143.171190][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 143.173011][ T188] usb 2-1: USB disconnect, device number 5 [ 143.184157][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 143.201770][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 143.212532][ T7395] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.222554][ T7395] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.230048][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 143.240778][ T7403] jffs2: Further such events for this erase block will not be printed [ 143.241941][ T5697] metro_usb 3-1:100.173: Metrologic USB to Serial converter detected [ 143.250220][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 143.270550][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 143.281300][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x4a89 instead [ 143.327915][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x0a09 instead [ 143.335232][ T5697] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 143.338978][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 143.358243][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 143.376462][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 143.394450][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 143.409185][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 143.424870][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 143.480560][ T7403] jffs2: Further such events for this erase block will not be printed [ 143.513719][ T7395] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 143.528718][ C1] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 143.573712][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 143.595463][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 143.612690][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x4a89 instead [ 143.624362][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0a09 instead [ 143.638133][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 143.649928][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 143.661610][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4a89 instead [ 143.673636][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x0a09 instead [ 143.684453][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 143.695097][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 143.706580][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x4a89 instead [ 143.717337][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x0a09 instead [ 143.729117][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 143.741429][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 143.751950][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x4a89 instead [ 143.772490][ T5592] usb 3-1: USB disconnect, device number 4 [ 143.798332][ T5592] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 143.833545][ T5592] metro_usb 3-1:100.173: device disconnected [ 143.857516][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x0a09 instead [ 143.897381][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 143.943002][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 143.963150][ T188] usb 6-1: USB disconnect, device number 4 [ 143.978971][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4a89 instead [ 144.001445][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x0a09 instead [ 144.013436][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 144.026376][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 144.037310][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x4a89 instead [ 144.049113][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x0a09 instead [ 144.087709][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 144.100353][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 144.105255][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.171228][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4a89 instead [ 144.183800][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x0a09 instead [ 144.194585][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 144.205213][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 144.215840][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x4a89 instead [ 144.227626][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x0a09 instead [ 144.248847][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.267804][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 144.292451][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 144.296295][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.305501][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4a89 instead [ 144.324799][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.340735][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x0a09 instead [ 144.341087][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.368318][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 144.380294][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 144.388997][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.406535][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.425527][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.441390][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.460180][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x4a89 instead [ 144.460708][ T7415] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.485480][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x0a09 instead [ 144.503797][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 144.517032][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 144.528727][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x4a89 instead [ 144.542149][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x0a09 instead [ 144.552794][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 144.565064][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 144.604462][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4a89 instead [ 144.624211][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x0a09 instead [ 144.635721][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 144.648454][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 144.667720][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4a89 instead [ 144.689127][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x0a09 instead [ 144.707634][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 144.727662][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 144.756880][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x4a89 instead [ 144.784427][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x0a09 instead [ 144.811946][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 144.865026][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 144.946598][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x4a89 instead [ 145.021759][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x0a09 instead [ 145.067598][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 145.107916][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 145.205023][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x4a89 instead [ 145.260779][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x0a09 instead [ 145.334862][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 145.349981][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 145.374817][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x4a89 instead [ 145.393847][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 145.393861][ T29] audit: type=1400 audit(1787583792.944:945): avc: denied { unmount } for pid=7433 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.430404][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x0a09 instead [ 145.464260][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 145.509027][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 145.580787][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x4a89 instead [ 145.908198][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x0a09 instead [ 145.943508][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 145.987405][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 146.074423][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x4a89 instead [ 146.185381][ T941] Process accounting resumed [ 146.317819][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x0a09 instead [ 146.355423][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 146.425251][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 146.494587][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x4a89 instead [ 146.555818][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x0a09 instead [ 146.623974][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 146.669025][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 146.717788][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x4a89 instead [ 146.789247][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x0a09 instead [ 146.867069][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 146.972975][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 147.055155][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4a89 instead [ 147.149362][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x0a09 instead [ 147.189457][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 147.219998][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 147.244763][ T7447] 9p: Bad value for 'wfdno' [ 147.253730][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x4a89 instead [ 147.281441][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x0a09 instead [ 147.303848][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 147.314405][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 147.324922][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x4a89 instead [ 147.335430][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x0a09 instead [ 147.346600][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 147.357953][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 147.368648][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x4a89 instead [ 147.379788][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x0a09 instead [ 147.390824][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 147.402481][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 147.413031][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x4a89 instead [ 147.424420][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x0a09 instead [ 147.436454][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 147.447218][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 147.460265][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x4a89 instead [ 147.476908][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x0a09 instead [ 147.489688][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 147.501358][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 147.512499][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x4a89 instead [ 147.540016][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x0a09 instead [ 147.552535][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 147.566429][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 147.579210][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x4a89 instead [ 147.591273][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x0a09 instead [ 147.603462][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 147.614279][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 147.627510][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x4a89 instead [ 147.638321][ T7403] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x0a09 instead [ 147.673490][ T7403] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 147.692067][ T7403] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 148.061815][ T7464] netlink: 'syz.6.401': attribute type 9 has an invalid length. [ 150.136791][ T29] audit: type=1400 audit(1787583797.684:946): avc: denied { write } for pid=7497 comm="syz.0.419" name="tcp" dev="proc" ino=4026533114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 150.788335][ T5687] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.058753][ T5687] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 151.107520][ T5687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.153916][ T5687] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 151.207493][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.864707][ T7524] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 151.871406][ T7524] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 151.881457][ T7524] vhci_hcd vhci_hcd.0: Device attached [ 151.918674][ T5687] snd-usb-caiaq 1-1:1.0: bogus number of streams: 0 [ 151.925414][ T7525] vhci_hcd: connection closed [ 151.929613][ T5687] snd-usb-caiaq 1-1:1.0: Unable to set up audio system (ret=-22) [ 151.934584][ T6870] vhci_hcd vhci_hcd.6: stop threads [ 151.943001][ C1] usb 1-1: received EP1 urb->status = -2 [ 151.948076][ T6870] vhci_hcd vhci_hcd.6: release socket [ 151.953503][ T5687] usb 1-1: unable to init card! (ret=-22) [ 151.962178][ T6870] vhci_hcd vhci_hcd.6: disconnect device [ 151.964306][ T5687] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 152.201038][ T7534] capability: warning: `syz.1.420' uses 32-bit capabilities (legacy support in use) [ 152.336625][ T7535] fuse: Bad value for 'fd' [ 152.359795][ T29] audit: type=1400 audit(1787583799.914:947): avc: denied { create } for pid=7532 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 152.386364][ T7534] netlink: 72 bytes leftover after parsing attributes in process `syz.1.420'. [ 152.397880][ T29] audit: type=1400 audit(1787583799.934:948): avc: denied { write } for pid=7532 comm="syz.1.420" path="socket:[15274]" dev="sockfs" ino=15274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 152.691353][ T5697] usb 1-1: USB disconnect, device number 4 [ 153.681144][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 153.767296][ T7561] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 153.845432][ T29] audit: type=1400 audit(1787583801.394:949): avc: denied { name_connect } for pid=7558 comm="syz.6.428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 157.597631][ T188] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 158.063769][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.441'. [ 159.547971][ T29] audit: type=1400 audit(1787583807.094:950): avc: denied { mount } for pid=7644 comm="syz.0.447" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 159.840967][ T188] usb 6-1: unable to get BOS descriptor or descriptor too short [ 159.864144][ T188] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 159.894238][ T188] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 159.920115][ T188] usb 6-1: can't read configurations, error -71 [ 160.027620][ T5697] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 160.208199][ T5697] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 160.241218][ T5697] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 160.276533][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 160.314866][ T5697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 160.364735][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.447051][ T5697] usb 1-1: config 0 descriptor?? [ 160.473589][ T7661] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 162.658334][ T5697] usbhid 1-1:0.0: can't add hid device: -71 [ 162.682884][ T5697] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.731562][ T5697] usb 1-1: USB disconnect, device number 5 [ 163.985203][ T7703] futex_wake_op: syz.2.461 tries to shift op by 144; fix this program [ 168.091433][ T29] audit: type=1400 audit(1787583815.644:951): avc: denied { setopt } for pid=7737 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.165169][ T29] audit: type=1400 audit(1787583815.664:952): avc: denied { connect } for pid=7737 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.226634][ T29] audit: type=1400 audit(1787583815.664:953): avc: denied { write } for pid=7737 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.270468][ T7741] netlink: 68 bytes leftover after parsing attributes in process `syz.0.472'. [ 169.523514][ T29] audit: type=1400 audit(1787583817.074:954): avc: denied { read } for pid=7746 comm="syz.0.474" path="socket:[16561]" dev="sockfs" ino=16561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.397694][ T29] audit: type=1400 audit(1787583817.944:955): avc: denied { read } for pid=7730 comm="syz.6.468" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 172.972634][ T29] audit: type=1326 audit(1787583820.524:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.032792][ T29] audit: type=1326 audit(1787583820.524:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.105982][ T29] audit: type=1326 audit(1787583820.564:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.281420][ T29] audit: type=1326 audit(1787583820.564:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.361937][ T29] audit: type=1326 audit(1787583820.574:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.410821][ T29] audit: type=1326 audit(1787583820.574:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.441287][ T29] audit: type=1326 audit(1787583820.574:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.470944][ T29] audit: type=1326 audit(1787583820.574:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.497616][ T29] audit: type=1326 audit(1787583820.574:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.526238][ T29] audit: type=1326 audit(1787583820.574:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.554366][ T29] audit: type=1326 audit(1787583820.624:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.611452][ T29] audit: type=1326 audit(1787583820.624:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7786 comm="syz.2.485" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53bf9e0d9 code=0x7ffc0000 [ 173.800352][ T7804] dummy_hcd dummy_hcd.0: remove, state 1 [ 173.868621][ T7804] usb usb1: USB disconnect, device number 1 [ 174.203258][ T7804] dummy_hcd dummy_hcd.0: stopped [ 174.214221][ T7810] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 174.268435][ T7804] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 175.046135][ T7815] bond4 (unregistering): Released all slaves [ 175.213873][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.6.498'. [ 175.240971][ T7818] bond4: (slave gretap1): making interface the new active one [ 175.249723][ T7818] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 175.338835][ T7825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7825 comm=syz.6.498 [ 177.299540][ T7817] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 177.311625][ T7817] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 177.320014][ T7817] CPU: 0 UID: 0 PID: 7817 Comm: syz.0.495 Not tainted syzkaller #0 PREEMPT(full) [ 177.329180][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 177.339207][ T7817] RIP: 0010:set_link_state+0x27/0xc70 [ 177.344559][ T7817] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 9a 94 2f fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 177.364150][ T7817] RSP: 0018:ffffc90007cf7858 EFLAGS: 00010046 [ 177.370190][ T7817] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 177.378133][ T7817] RDX: 0000000000000000 RSI: ffffffff87db9156 RDI: 0000000000000000 [ 177.386082][ T7817] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 177.394025][ T7817] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 177.401972][ T7817] R13: ffff88802a4e0000 R14: 0000000000000000 R15: ffff88802a4e0c00 [ 177.409932][ T7817] FS: 0000000000000000(0000) GS:ffff888123b7b000(0000) knlGS:0000000000000000 [ 177.418832][ T7817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.425386][ T7817] CR2: 0000001b3251aff8 CR3: 000000007bd1b000 CR4: 00000000003526f0 [ 177.433327][ T7817] Call Trace: [ 177.436577][ T7817] [ 177.439479][ T7817] ? __pfx_dummy_pullup+0x10/0x10 [ 177.444479][ T7817] dummy_pullup+0xf3/0x170 [ 177.448877][ T7817] ? __pfx_dummy_pullup+0x10/0x10 [ 177.453879][ T7817] usb_gadget_disconnect_locked+0x142/0x4e0 [ 177.459747][ T7817] gadget_unbind_driver+0xd8/0x4f0 [ 177.464827][ T7817] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 177.470519][ T7817] device_remove+0xcb/0x180 [ 177.474995][ T7817] device_release_driver_internal+0x44e/0x620 [ 177.481043][ T7817] driver_detach+0xd8/0x1b0 [ 177.485526][ T7817] bus_remove_driver+0x13b/0x2e0 [ 177.490436][ T7817] driver_unregister+0x76/0xb0 [ 177.495170][ T7817] usb_gadget_unregister_driver+0x49/0x70 [ 177.500866][ T7817] raw_release+0x19b/0x260 [ 177.505258][ T7817] ? __pfx_raw_release+0x10/0x10 [ 177.510170][ T7817] __fput+0x3ff/0xb50 [ 177.514122][ T7817] task_work_run+0x150/0x240 [ 177.518693][ T7817] ? __pfx_task_work_run+0x10/0x10 [ 177.523776][ T7817] ? do_raw_spin_unlock+0x145/0x1e0 [ 177.528944][ T7817] do_exit+0x951/0x2ae0 [ 177.533070][ T7817] ? __pfx_do_exit+0x10/0x10 [ 177.537630][ T7817] ? do_raw_spin_lock+0x128/0x260 [ 177.542623][ T7817] ? find_held_lock+0x2b/0x80 [ 177.547269][ T7817] ? get_signal+0x7e0/0x21e0 [ 177.551827][ T7817] do_group_exit+0xd5/0x2a0 [ 177.556303][ T7817] get_signal+0x1ec7/0x21e0 [ 177.560777][ T7817] ? __pfx_get_signal+0x10/0x10 [ 177.565598][ T7817] ? __pfx___schedule+0x10/0x10 [ 177.570418][ T7817] ? preempt_schedule_irq+0x79/0x90 [ 177.575586][ T7817] arch_do_signal_or_restart+0x91/0x7e0 [ 177.581102][ T7817] ? lockdep_hardirqs_on+0x7d/0x110 [ 177.586278][ T7817] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 177.592405][ T7817] ? __pfx_raw_ioctl+0x10/0x10 [ 177.597143][ T7817] exit_to_user_mode_loop+0x139/0x700 [ 177.602482][ T7817] ? rcu_is_watching+0x13/0xc0 [ 177.607219][ T7817] do_syscall_64+0x661/0x790 [ 177.611785][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.617648][ T7817] RIP: 0033:0x7ff08479dd6b [ 177.622036][ T7817] Code: Unable to access opcode bytes at 0x7ff08479dd41. [ 177.629030][ T7817] RSP: 002b:00007ff0855ecf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.637418][ T7817] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007ff08479dd6b [ 177.645359][ T7817] RDX: 00007ff0855edfd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 177.653298][ T7817] RBP: 00007ff0855edfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 177.661238][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 177.669178][ T7817] R13: 0000000800000000 R14: 0000000000000000 R15: 00007ff0848538e2 [ 177.677122][ T7817] [ 177.680110][ T7817] Modules linked in: [ 177.683974][ T7817] ---[ end trace 0000000000000000 ]--- [ 177.689395][ T7817] RIP: 0010:set_link_state+0x27/0xc70 [ 177.694743][ T7817] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 9a 94 2f fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 177.714320][ T7817] RSP: 0018:ffffc90007cf7858 EFLAGS: 00010046 [ 177.720356][ T7817] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 177.728306][ T7817] RDX: 0000000000000000 RSI: ffffffff87db9156 RDI: 0000000000000000 [ 177.736254][ T7817] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 177.744193][ T7817] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 177.752134][ T7817] R13: ffff88802a4e0000 R14: 0000000000000000 R15: ffff88802a4e0c00 [ 177.760086][ T7817] FS: 0000000000000000(0000) GS:ffff888123b7b000(0000) knlGS:0000000000000000 [ 177.768983][ T7817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.775546][ T7817] CR2: 0000001b3251aff8 CR3: 000000007bd1b000 CR4: 00000000003526f0 [ 177.783492][ T7817] Kernel panic - not syncing: Fatal exception [ 177.789722][ T7817] Kernel Offset: disabled [ 177.794019][ T7817] Rebooting in 86400 seconds..