last executing test programs: 32.946515544s ago: executing program 3 (id=26): socket(0x10, 0x803, 0x0) inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.634889351s ago: executing program 3 (id=34): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 31.311667374s ago: executing program 3 (id=42): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff5", 0xca}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}, {&(0x7f0000000700)="2cfa8128bc93ed3033d225b142310b30076cd8db5d838efad45edc677950e6115aa554aa41346db9e57590af640c1294ae408eb294d22438e62ac7c28514a26e5aa8c72c191a2a4c1f5e863fba3c93d666dec7fbf2a111de7b9ce0d3ae5749c944cfbf03be0807eea75a1c483bc9bb93503bfedb124771d123516a8c73a68fdde0adf3a259f4841675343d5ef34b5bfdf6198355352212c476d6b3891831f78e30603188a8", 0xa5}], 0x5}}], 0x2, 0x0) 31.190838377s ago: executing program 3 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x1]}}) 31.139049228s ago: executing program 2 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) 31.041566341s ago: executing program 2 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)}}], 0x800004a, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 30.231956721s ago: executing program 3 (id=50): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 30.119672093s ago: executing program 3 (id=51): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000dd2c00000000000100000a54000000060a010400000000000000000a0004050900010073797a3100000000200004801c0001800a00010071756575"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) syz_usb_disconnect(0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20000014) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) 30.119459643s ago: executing program 32 (id=51): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000dd2c00000000000100000a54000000060a010400000000000000000a0004050900010073797a3100000000200004801c0001800a00010071756575"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) syz_usb_disconnect(0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20000014) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) 29.637383595s ago: executing program 2 (id=57): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000780001040200000003000000070000006400000014000180080001006400000008000200c858df506a7404af691aabf4a0a9c2ad946be515c1380477d4a5120a9bbcd4"], 0x2c}}, 0x0) 29.481433208s ago: executing program 2 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)="703a732f70202e2f66696c65303a301125", 0x11) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0xfffffffa, @loopback, 0x788b}, 0x1c) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x103482) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x82400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x1]}}) 28.473100904s ago: executing program 2 (id=77): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808000000a3f30a010203010902240001020010110904630702584200080905fe0f100008000909050203"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x60202) close(0x4) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) syz_usb_ep_read(r1, 0x2, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) 28.20373835s ago: executing program 2 (id=81): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 28.1757701s ago: executing program 33 (id=81): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 11.395809191s ago: executing program 6 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) 11.204522656s ago: executing program 6 (id=385): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r1, &(0x7f00000007c0)="5bea", 0x2, 0x8001, 0x0, 0x0) 11.058743679s ago: executing program 6 (id=389): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1b27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740), 0x0, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x4000804, 0x0, 0xad) 9.521811947s ago: executing program 6 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2b05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 9.459091889s ago: executing program 6 (id=407): tee(0xffffffffffffffff, 0xffffffffffffffff, 0xcfce, 0x3) 9.362197631s ago: executing program 6 (id=413): mkdirat(0xffffffffffffff9c, 0x0, 0x140) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xba1ea9980fa9b053, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 9.319674102s ago: executing program 34 (id=413): mkdirat(0xffffffffffffff9c, 0x0, 0x140) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xba1ea9980fa9b053, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 3.760358388s ago: executing program 7 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000ac0)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 3.715760759s ago: executing program 1 (id=472): mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffe00, &(0x7f0000000300)={&(0x7f0000000200)={0x28, r2, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfff, 0x55}}}}}, 0x28}}, 0x4c044) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x20048811) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x4188010, 0xffffffffffffffff, 0xf0103000) 3.458985725s ago: executing program 1 (id=475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xfffffffe}) 3.360810008s ago: executing program 1 (id=477): syz_usb_connect(0x5, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c6112f082104c904418e010203010902008000000510010b04fd06000202ff"], 0x0) openat(0xffffffffffffff9c, 0x0, 0xed41, 0xc5) 3.289625569s ago: executing program 7 (id=480): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f14"], 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x801, 0x0, 0x21000000, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.596204016s ago: executing program 0 (id=491): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) 2.573739577s ago: executing program 0 (id=492): symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x0) 2.503740389s ago: executing program 0 (id=493): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) 1.493578663s ago: executing program 5 (id=495): sched_setscheduler(0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x8690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex(0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x1) 1.463820664s ago: executing program 0 (id=497): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580d"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.294885278s ago: executing program 5 (id=504): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x100) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60500, 0x0) flock(r2, 0x2) flock(r1, 0x1) 1.202765931s ago: executing program 1 (id=506): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="3b667bd2fff43321e79cbb29e411", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.202311571s ago: executing program 1 (id=507): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) 1.190419241s ago: executing program 1 (id=508): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000004000)=""/4099, 0x1003) 805.66784ms ago: executing program 4 (id=512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 611.804415ms ago: executing program 4 (id=513): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) io_setup(0x81, &(0x7f0000001100)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7f, r0, &(0x7f0000000040)='g\f', 0x2, 0x5}]) 511.895517ms ago: executing program 0 (id=514): syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e"], 0x0) 358.405741ms ago: executing program 5 (id=515): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x10000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'vcan0\x00', {0x2}, 0x2}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40880) 203.828685ms ago: executing program 0 (id=516): syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x60, 0x3d, 0xdb, 0x8, 0x7b8, 0x401a, 0x30d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf8, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x6b, 0x2, 0x0, 0x88, 0xe1, 0x76, 0x7}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) 203.681845ms ago: executing program 7 (id=517): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 203.579665ms ago: executing program 4 (id=518): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) 169.121586ms ago: executing program 5 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000400000005000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xfff3, 0x5}, {0xffe0, 0xe}}}, 0x24}}, 0x800) 129.222587ms ago: executing program 4 (id=520): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1b27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd", 0x8d, 0x4000804, 0x0, 0x0) 86.196908ms ago: executing program 7 (id=521): socket(0x10, 0x803, 0x0) inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 85.626248ms ago: executing program 4 (id=522): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') fgetxattr(r1, &(0x7f0000000240)=@known='user.incfs.size\x00', &(0x7f0000000340)=""/91, 0x5b) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$unix(0x1, 0x5, 0x0) r6 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) creat(0x0, 0x2) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000780)=""/4096) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0xfffffffa, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r6, r2, 0x35, 0x2030, 0x0, @void, @void, @value=r8, @void, r5}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 57.682999ms ago: executing program 5 (id=523): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x4002, @private0, 0x6}, 0x1c) 57.483779ms ago: executing program 4 (id=524): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580d"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 57.400439ms ago: executing program 7 (id=525): unshare(0x20040400) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) vmsplice(r0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d0", 0x1}], 0x1, 0x7) 7.77485ms ago: executing program 5 (id=526): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/firmware_class/parameters/path\x00', 0x101002, 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x204e) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) 0s ago: executing program 7 (id=527): r0 = socket(0x2, 0x80802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1414bbac1414aa0000000014000000000000000000000007"], 0x38}, 0x1c880) kernel console output (not intermixed with test programs): rocess permissive=1 [ 14.604227][ T30] audit: type=1400 audit(1786448216.737:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 21.674317][ T30] audit: type=1400 audit(1786448223.857:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.675329][ T277] cgroup: Unknown subsys name 'net' [ 21.696994][ T30] audit: type=1400 audit(1786448223.857:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.724322][ T30] audit: type=1400 audit(1786448223.887:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.724486][ T277] cgroup: Unknown subsys name 'devices' [ 21.869854][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.875577][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.011731][ T30] audit: type=1400 audit(1786448224.197:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.034937][ T30] audit: type=1400 audit(1786448224.197:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.039873][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.059706][ T30] audit: type=1400 audit(1786448224.197:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.091345][ T30] audit: type=1400 audit(1786448224.257:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.096017][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.116839][ T30] audit: type=1400 audit(1786448224.257:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.151071][ T30] audit: type=1400 audit(1786448224.277:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.176597][ T30] audit: type=1400 audit(1786448224.277:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.949683][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.956738][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.964210][ T286] device bridge_slave_0 entered promiscuous mode [ 22.973714][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.980839][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.988197][ T286] device bridge_slave_1 entered promiscuous mode [ 23.008414][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.015466][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.022880][ T285] device bridge_slave_0 entered promiscuous mode [ 23.029775][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.036810][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.044264][ T285] device bridge_slave_1 entered promiscuous mode [ 23.100927][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.108085][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.115481][ T289] device bridge_slave_0 entered promiscuous mode [ 23.123611][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.130698][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.138076][ T287] device bridge_slave_0 entered promiscuous mode [ 23.147446][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.154540][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.161838][ T287] device bridge_slave_1 entered promiscuous mode [ 23.172256][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.179346][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.186654][ T289] device bridge_slave_1 entered promiscuous mode [ 23.223922][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.231110][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.238564][ T288] device bridge_slave_0 entered promiscuous mode [ 23.245328][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.252379][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.259831][ T288] device bridge_slave_1 entered promiscuous mode [ 23.357876][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.364954][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.372245][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.379279][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.417901][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.424981][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.432273][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.439315][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.456657][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.463725][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.471030][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.478078][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.506171][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.513242][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.520534][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.527560][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.551029][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.558956][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.566154][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.573677][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.580879][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.588318][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.595516][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.602866][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.611415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.618892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.641751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.649420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.657500][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.664539][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.672168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.680484][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.687509][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.694915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.703058][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.710091][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.744948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.752908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.761023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.769437][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.776568][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.799628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.807011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.814472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.822954][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.829993][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.837387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.845657][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.852704][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.860009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.868172][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.875180][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.882555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.890688][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.897711][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.905069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.913008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.920974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.928928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.950273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.957757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.966081][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.973143][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.981785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.989987][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.996998][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.004992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.017515][ T287] device veth0_vlan entered promiscuous mode [ 24.031118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.038797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.047023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.055668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.063746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.071919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.080078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.088156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.095550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.109057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.117148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.125285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.133710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.142265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.150467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.164662][ T287] device veth1_macvtap entered promiscuous mode [ 24.173984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.182785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.191370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.199647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.207714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.216265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.224239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.240345][ T286] device veth0_vlan entered promiscuous mode [ 24.247339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.254860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.262437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.270947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.279482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.287280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.295449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.302905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.311545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.320062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.331354][ T288] device veth0_vlan entered promiscuous mode [ 24.338709][ T289] device veth0_vlan entered promiscuous mode [ 24.348373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.356281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.364428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.372895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.381388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.389715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.397948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.405389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.420871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.428997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.440550][ T286] device veth1_macvtap entered promiscuous mode [ 24.451931][ T285] device veth0_vlan entered promiscuous mode [ 24.458534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.459232][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 24.466032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.480710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.488902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.497054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.519608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.534209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.542880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.551228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.559703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.568324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.576489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.585940][ T289] device veth1_macvtap entered promiscuous mode [ 24.593591][ T288] device veth1_macvtap entered promiscuous mode [ 24.625322][ T285] device veth1_macvtap entered promiscuous mode [ 24.633929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.644262][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.654629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.664023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.672984][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.681615][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.689942][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.698285][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.728453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.750428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.760027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.760087][ T321] overlayfs: failed to clone upperpath [ 24.768465][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.788584][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.797011][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.816138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.830929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.859328][ T324] device syzkaller0 entered promiscuous mode [ 25.211085][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.417167][ T338] Config c/1 of g1 needs at least one function. [ 25.423575][ T338] udc dummy_udc.0: failed to start g1: -22 [ 25.507898][ T341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.618104][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.628407][ T26] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 25.637396][ T26] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.646937][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.656222][ T26] usb 3-1: config 0 descriptor?? [ 25.918110][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.968144][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.218089][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 26.279283][ T26] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 26.298136][ T312] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 26.309042][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.320048][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.329914][ T312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 26.418168][ T312] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 26.427314][ T312] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 26.435449][ T312] usb 4-1: Manufacturer: syz [ 26.440731][ T312] usb 4-1: config 0 descriptor?? [ 26.458167][ T6] usb 5-1: language id specifier not provided by device, defaulting to English [ 26.638097][ T26] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.646433][ T26] usb 2-1: config 179 has no interface number 0 [ 26.652774][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF is Bulk; changing to Interrupt [ 26.662907][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 26.672880][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 26.684372][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 26.695578][ T26] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.708839][ T26] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 26.717872][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.738107][ T360] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 26.768998][ T26] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 26.778119][ T6] usb 5-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 26.788306][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.796323][ T6] usb 5-1: Product: ꖚ龪砄ᰉꊸ [ 26.798138][ T26] xpad: probe of 2-1:179.65 failed with error -5 [ 26.801621][ T6] usb 5-1: SerialNumber: syz [ 26.898748][ T312] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 26.905994][ T312] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 26.915110][ T312] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 26.981929][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 26.981945][ T30] audit: type=1400 audit(1786448229.167:150): avc: denied { create } for pid=359 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.990848][ T360] UDC core: couldn't find an available UDC or it's busy: -16 [ 27.016052][ T360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.034572][ T63] usb 2-1: USB disconnect, device number 2 [ 27.178130][ T6] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 27.186453][ T6] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 27.200335][ T6] usb 5-1: USB disconnect, device number 2 [ 27.566698][ T30] audit: type=1400 audit(1786448229.747:151): avc: denied { name_bind } for pid=367 comm="syz.1.20" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.603348][ T30] audit: type=1400 audit(1786448229.747:152): avc: denied { create } for pid=369 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 27.624625][ T30] audit: type=1400 audit(1786448229.747:153): avc: denied { write } for pid=369 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 27.759817][ T305] usb 4-1: USB disconnect, device number 2 [ 27.825945][ T30] audit: type=1400 audit(1786448230.007:154): avc: denied { create } for pid=375 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.848989][ T378] ======================================================= [ 27.848989][ T378] WARNING: The mand mount option has been deprecated and [ 27.848989][ T378] and is ignored by this kernel. Remove the mand [ 27.848989][ T378] option from the mount to silence this warning. [ 27.848989][ T378] ======================================================= [ 27.896957][ T378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 27.932557][ T378] overlayfs: failed to look up (tracing) for ino (-66) [ 27.984877][ T30] audit: type=1400 audit(1786448230.067:155): avc: denied { mount } for pid=367 comm="syz.1.20" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 28.008369][ T30] audit: type=1400 audit(1786448230.087:156): avc: denied { mount } for pid=367 comm="syz.1.20" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.104025][ T30] audit: type=1400 audit(1786448230.157:157): avc: denied { create } for pid=367 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.177853][ T379] usb 3-1: USB disconnect, device number 2 [ 28.747386][ T382] device syzkaller0 entered promiscuous mode [ 28.780045][ T30] audit: type=1400 audit(1786448230.237:159): avc: denied { ioctl } for pid=375 comm="syz.4.23" path="socket:[15827]" dev="sockfs" ino=15827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.831895][ T386] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 28.854787][ T30] audit: type=1400 audit(1786448230.217:158): avc: denied { write } for pid=375 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.858103][ T386] kvm: pic: non byte read [ 28.880022][ T386] kvm: pic: level sensitive irq not supported [ 28.880086][ T386] kvm: pic: non byte read [ 28.891248][ T386] kvm: pic: level sensitive irq not supported [ 28.891312][ T386] kvm: pic: non byte read [ 28.902294][ T386] kvm: pic: level sensitive irq not supported [ 28.902394][ T386] kvm: pic: non byte read [ 29.059395][ T404] Zero length message leads to an empty skb [ 29.083840][ T406] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 29.145393][ T411] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 29.177889][ T411] overlayfs: failed to look up (tracing) for ino (-66) [ 30.147433][ T420] using random self ethernet address [ 30.156803][ T420] using random host ethernet address [ 30.187107][ T420] usb0: HOST MAC b2:4a:d9:de:0e:7e [ 30.203367][ T420] usb0: MAC 1a:15:60:c0:d6:53 [ 30.267997][ T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.498035][ T305] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.525901][ T379] android_work: sent uevent USB_STATE=CONNECTED [ 30.579154][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 30.698160][ T42] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 30.722845][ T42] usb 5-1: config 179 has no interface number 0 [ 30.778240][ T305] usb 1-1: Dual-Role OTG device on HNP port [ 30.818139][ T305] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 30.867182][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 30.966776][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.989563][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 31.040378][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 31.068340][ T305] usb 1-1: bad CDC descriptors [ 31.100502][ T42] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 31.129880][ T42] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 31.157384][ T42] usb 5-1: config 179 interface 65 has no altsetting 0 [ 31.172620][ T42] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 31.191517][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.213454][ T305] android_work: sent uevent USB_STATE=CONFIGURED [ 31.228132][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 31.249756][ T42] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input4 [ 31.406903][ T462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.47'. [ 31.469127][ T305] usb 5-1: USB disconnect, device number 3 [ 31.480559][ T466] UDC core: couldn't find an available UDC or it's busy: -16 [ 31.488480][ T305] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 31.498021][ T466] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.528367][ T286] syz-executor (286) used greatest stack depth: 22024 bytes left [ 31.696810][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.719314][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.730363][ T468] device bridge_slave_0 entered promiscuous mode [ 31.753141][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.760726][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.768624][ T468] device bridge_slave_1 entered promiscuous mode [ 31.848013][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.855119][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.862460][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.869512][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.899392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.907352][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.915818][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.931504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.940364][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.947419][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.955752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.964532][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.971637][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.996227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.004750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.026652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.035543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.043899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.052465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.060886][ T468] device veth0_vlan entered promiscuous mode [ 32.103006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.113210][ T484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=484 comm=syz.2.57 [ 32.133787][ T468] device veth1_macvtap entered promiscuous mode [ 32.147406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.163600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.189893][ T45] device bridge_slave_1 left promiscuous mode [ 32.196085][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.210778][ T45] device bridge_slave_0 left promiscuous mode [ 32.218980][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.239184][ T45] device veth1_macvtap left promiscuous mode [ 32.245258][ T45] device veth0_vlan left promiscuous mode [ 32.669837][ T504] UDC core: couldn't find an available UDC or it's busy: -16 [ 32.677254][ T504] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.707188][ T511] capability: warning: `syz.1.67' uses 32-bit capabilities (legacy support in use) [ 32.727666][ T513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.68'. [ 33.118151][ T526] pimreg: tun_chr_ioctl cmd 1074025677 [ 33.123861][ T526] pimreg: linktype set to 256 [ 33.280323][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 33.280351][ T30] audit: type=1400 audit(1786448235.467:213): avc: denied { create } for pid=532 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.344645][ T30] audit: type=1400 audit(1786448235.497:214): avc: denied { create } for pid=532 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.376071][ T30] audit: type=1400 audit(1786448235.497:215): avc: denied { bind } for pid=532 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.488108][ T30] audit: type=1400 audit(1786448235.497:216): avc: denied { connect } for pid=532 comm="syz.0.76" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.533343][ T30] audit: type=1400 audit(1786448235.497:217): avc: denied { setopt } for pid=532 comm="syz.0.76" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.598049][ T30] audit: type=1400 audit(1786448235.507:218): avc: denied { write } for pid=532 comm="syz.0.76" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.693558][ T30] audit: type=1400 audit(1786448235.647:219): avc: denied { write } for pid=538 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.719182][ T30] audit: type=1400 audit(1786448235.747:220): avc: denied { read } for pid=541 comm="syz.4.85" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.743695][ T30] audit: type=1400 audit(1786448235.747:221): avc: denied { open } for pid=541 comm="syz.4.85" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.800138][ T30] audit: type=1400 audit(1786448235.747:222): avc: denied { ioctl } for pid=541 comm="syz.4.85" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.858357][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.877274][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.893631][ T557] device bridge_slave_0 entered promiscuous mode [ 33.910074][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.917144][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.925074][ T557] device bridge_slave_1 entered promiscuous mode [ 33.980563][ T588] UDC core: couldn't find an available UDC or it's busy: -16 [ 33.989032][ T588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.063678][ T590] process 'syz.5.96' launched './file2' with NULL argv: empty string added [ 34.094812][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.101923][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.109219][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.116254][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.286200][ T557] device veth0_vlan entered promiscuous mode [ 34.293311][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.301509][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.312986][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.332217][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.342569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.351035][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.359934][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.367948][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.375472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.387211][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.396371][ T8] device bridge_slave_1 left promiscuous mode [ 34.402748][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.410425][ T8] device bridge_slave_0 left promiscuous mode [ 34.416756][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.425109][ T8] device veth1_macvtap left promiscuous mode [ 34.431185][ T8] device veth0_vlan left promiscuous mode [ 34.501824][ T557] device veth1_macvtap entered promiscuous mode [ 34.519730][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.539447][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.418075][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 35.688012][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 35.798405][ T20] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 35.828165][ T42] usb 6-1: config 6 has an invalid interface number: 221 but max is 0 [ 35.836559][ T42] usb 6-1: config 6 has no interface number 0 [ 35.842894][ T42] usb 6-1: config 6 interface 221 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 35.853673][ T42] usb 6-1: config 6 interface 221 has no altsetting 0 [ 36.048125][ T42] usb 6-1: New USB device found, idVendor=0403, idProduct=e88b, bcdDevice=5e.3f [ 36.057640][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.065881][ T42] usb 6-1: Product: syz [ 36.070384][ T42] usb 6-1: Manufacturer: syz [ 36.075157][ T42] usb 6-1: SerialNumber: syz [ 36.218762][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.238741][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.264434][ T665] UDC core: couldn't find an available UDC or it's busy: -16 [ 36.273647][ T665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.408480][ T20] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.409005][ T658] syz.6.127 (658) used greatest stack depth: 21224 bytes left [ 36.420099][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.433592][ T20] usb 2-1: Product: syz [ 36.437780][ T20] usb 2-1: Manufacturer: syz [ 36.438401][ T42] ftdi_sio 6-1:6.221: FTDI USB Serial Device converter detected [ 36.448102][ T20] usb 2-1: SerialNumber: syz [ 36.461235][ T42] usb 6-1: Detected FT-X [ 36.488151][ T42] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 36.495828][ T675] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 36.508045][ T42] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 36.528220][ T42] ftdi_sio 6-1:6.221: GPIO initialisation failed: -71 [ 36.536063][ T42] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.545896][ T42] usb 6-1: USB disconnect, device number 2 [ 36.556698][ T42] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.580372][ T42] ftdi_sio 6-1:6.221: device disconnected [ 36.621575][ T688] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.662872][ T688] overlayfs: failed to look up (tracing) for ino (-66) [ 36.778084][ T20] usb 2-1: 0:2 : does not exist [ 36.787547][ T20] usb 2-1: USB disconnect, device number 3 [ 36.978332][ T708] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 37.039331][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.395717][ T747] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 38.433326][ T747] kvm: pic: level sensitive irq not supported [ 38.433409][ T747] kvm: pic: non byte read [ 38.450241][ T747] kvm: pic: level sensitive irq not supported [ 38.450357][ T747] kvm: pic: non byte read [ 38.471168][ T747] kvm: pic: level sensitive irq not supported [ 38.471237][ T747] kvm: pic: non byte read [ 38.488004][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 38.488020][ T30] audit: type=1400 audit(1786448240.667:249): avc: denied { name_bind } for pid=755 comm="syz.1.165" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 38.491427][ T747] kvm: pic: level sensitive irq not supported [ 38.516875][ T747] kvm: pic: non byte read [ 38.532271][ T30] audit: type=1400 audit(1786448240.717:250): avc: denied { bind } for pid=759 comm="syz.5.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.553579][ T747] kvm: pic: level sensitive irq not supported [ 38.554403][ T747] kvm: pic: non byte read [ 38.555706][ T760] tipc: Can't bind to reserved service type 1 [ 38.560863][ T30] audit: type=1400 audit(1786448240.737:251): avc: denied { create } for pid=759 comm="syz.5.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.594651][ T747] kvm: pic: level sensitive irq not supported [ 38.594944][ T747] kvm: pic: non byte read [ 38.610230][ T747] kvm: pic: level sensitive irq not supported [ 38.610329][ T747] kvm: pic: non byte read [ 38.621195][ T30] audit: type=1400 audit(1786448240.737:252): avc: denied { write } for pid=759 comm="syz.5.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.665343][ T747] kvm: pic: level sensitive irq not supported [ 38.665412][ T747] kvm: pic: non byte read [ 38.683838][ T747] kvm: pic: level sensitive irq not supported [ 38.683917][ T747] kvm: pic: non byte read [ 38.695459][ T30] audit: type=1400 audit(1786448240.777:253): avc: denied { create } for pid=759 comm="syz.5.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.151137][ T30] audit: type=1400 audit(1786448241.117:254): avc: denied { read write } for pid=775 comm="syz.5.174" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 39.267382][ T782] device syzkaller0 entered promiscuous mode [ 39.318886][ T30] audit: type=1400 audit(1786448241.117:255): avc: denied { ioctl open } for pid=775 comm="syz.5.174" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 39.401642][ T30] audit: type=1400 audit(1786448241.397:256): avc: denied { connect } for pid=777 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.438017][ T30] audit: type=1400 audit(1786448241.397:257): avc: denied { write } for pid=777 comm="syz.1.175" laddr=::1 lport=1 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.470938][ T30] audit: type=1400 audit(1786448241.587:258): avc: denied { search } for pid=785 comm="syz.5.179" name="/" dev="configfs" ino=14610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.198596][ T830] mmap: syz.1.199 (830) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 40.262147][ T834] syz.4.202 (834) used greatest stack depth: 20736 bytes left [ 40.299057][ T843] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 40.318382][ T843] kvm: pic: level sensitive irq not supported [ 40.318449][ T843] kvm: pic: non byte read [ 40.398036][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.478604][ T868] capability: warning: `syz.4.214' uses deprecated v2 capabilities in a way that may be insecure [ 40.559089][ T882] 9pnet: Insufficient options for proto=fd [ 40.638067][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 40.674713][ T902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 40.758073][ T42] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 40.911517][ T929] kvm: MONITOR instruction emulated as NOP! [ 40.928163][ T42] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 40.937203][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.952825][ T42] usb 7-1: Product: syz [ 40.957012][ T42] usb 7-1: Manufacturer: syz [ 40.961925][ T42] usb 7-1: SerialNumber: syz [ 40.967274][ T42] usb 7-1: config 0 descriptor?? [ 41.215224][ T42] usb 7-1: USB disconnect, device number 2 [ 41.294501][ T305] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 41.868059][ T305] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 41.881283][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.897547][ T305] usb 5-1: Product: syz [ 41.905892][ T305] usb 5-1: Manufacturer: syz [ 41.915702][ T305] usb 5-1: SerialNumber: syz [ 42.030442][ T969] UDC core: couldn't find an available UDC or it's busy: -16 [ 42.038537][ T969] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.219247][ T305] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 42.231518][ T305] usb 5-1: USB disconnect, device number 4 [ 42.238848][ T305] usblp0: removed [ 42.328025][ T655] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 42.558027][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 42.595222][ T983] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 42.698096][ T655] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 42.713638][ T655] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 42.725819][ T655] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 42.736452][ T655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.817272][ T20] usb 6-1: Using ep0 maxpacket: 32 [ 42.988078][ T20] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 42.996270][ T20] usb 6-1: config 0 has no interface number 0 [ 43.013654][ T26] usb 2-1: USB disconnect, device number 4 [ 43.037171][ T1030] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 43.105873][ T1041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 43.158269][ T20] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 43.168544][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.172618][ T1049] size and base must be multiples of 4 kiB [ 43.176636][ T20] usb 6-1: Product: syz [ 43.182616][ T1049] CPU: 1 PID: 1049 Comm: syz.4.289 Not tainted syzkaller #0 [ 43.187118][ T20] usb 6-1: Manufacturer: syz [ 43.193947][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.193960][ T1049] Call Trace: [ 43.193966][ T1049] [ 43.193972][ T1049] __dump_stack+0x21/0x30 [ 43.193997][ T1049] dump_stack_lvl+0x110/0x170 [ 43.198910][ T20] usb 6-1: SerialNumber: syz [ 43.208621][ T1049] ? show_regs_print_info+0x20/0x20 [ 43.208648][ T1049] ? has_cap_mac_admin+0x370/0x370 [ 43.208669][ T1049] dump_stack+0x15/0x20 [ 43.212830][ T20] usb 6-1: config 0 descriptor?? [ 43.214874][ T1049] mtrr_del+0x84/0x90 [ 43.214899][ T1049] mtrr_ioctl+0x8c1/0xf90 [ 43.256028][ T1049] ? mtrr_close+0x1f0/0x1f0 [ 43.260535][ T1049] ? selinux_file_ioctl+0x3ad/0x4c0 [ 43.265780][ T1049] ? __fget_files+0x2e1/0x340 [ 43.270499][ T1049] ? mtrr_close+0x1f0/0x1f0 [ 43.275010][ T1049] proc_reg_unlocked_ioctl+0x1c6/0x2b0 [ 43.280459][ T1049] ? proc_reg_poll+0x290/0x290 [ 43.285212][ T1049] __se_sys_ioctl+0x121/0x1a0 [ 43.289876][ T1049] __x64_sys_ioctl+0x7b/0x90 [ 43.294455][ T1049] x64_sys_call+0x2f/0x9a0 [ 43.298876][ T1049] do_syscall_64+0x4c/0xa0 [ 43.303279][ T1049] ? clear_bhb_loop+0x50/0xa0 [ 43.307944][ T1049] ? clear_bhb_loop+0x50/0xa0 [ 43.312626][ T1049] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.318506][ T1049] RIP: 0033:0x7fa2ed7570d9 [ 43.322908][ T1049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.342507][ T1049] RSP: 002b:00007fa2ec1b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.350921][ T1049] RAX: ffffffffffffffda RBX: 00007fa2ed9defa0 RCX: 00007fa2ed7570d9 [ 43.358896][ T1049] RDX: 0000200000000a00 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 43.366859][ T1049] RBP: 00007fa2ed7ee024 R08: 0000000000000000 R09: 0000000000000000 [ 43.374820][ T1049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.382792][ T1049] R13: 00007fa2ed9df038 R14: 00007fa2ed9defa0 R15: 00007ffc2e32a448 [ 43.390856][ T1049] [ 43.431801][ T1055] 9pnet: Insufficient options for proto=fd [ 43.475717][ T1057] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 43.546062][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 43.546082][ T30] audit: type=1400 audit(1786448245.707:321): avc: denied { bind } for pid=1066 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.583826][ T30] audit: type=1400 audit(1786448245.707:322): avc: denied { setopt } for pid=1066 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.596238][ T1069] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.721891][ T1085] UDC core: couldn't find an available UDC or it's busy: -16 [ 43.731210][ T1085] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.799735][ T1095] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 44.286769][ T1124] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 44.533366][ T1152] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.561204][ T1152] overlayfs: failed to look up (tracing) for ino (-66) [ 45.307850][ T305] usb 6-1: USB disconnect, device number 3 [ 45.420403][ T1171] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 45.504465][ T1179] binder: BINDER_SET_CONTEXT_MGR already set [ 45.540900][ T1179] binder: 1177:1179 ioctl 4018620d 2000000002c0 returned -16 [ 45.549286][ T1185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.346'. [ 46.012821][ T30] audit: type=1400 audit(1786448248.197:323): avc: denied { read } for pid=1198 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.108017][ T365] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 47.268267][ T1215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 47.296416][ T1215] overlayfs: failed to look up (tracing) for ino (-66) [ 48.035614][ T30] audit: type=1400 audit(1786448250.217:324): avc: denied { write } for pid=1240 comm="syz.5.368" name="hwrng" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 48.218062][ T365] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.232668][ T365] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 48.237992][ T42] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 48.255499][ T365] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 48.448067][ T365] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 48.461582][ T365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 48.477606][ T365] usb 7-1: Product: syz [ 48.486239][ T365] usb 7-1: Manufacturer: syz [ 48.496366][ T365] usb 7-1: SerialNumber: syz [ 48.497982][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 48.506763][ T365] usb 7-1: config 0 descriptor?? [ 48.548549][ T365] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 48.628072][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 48.648023][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 48.672528][ T365] usb 7-1: USB disconnect, device number 3 [ 48.808102][ T42] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 48.828010][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.836982][ T42] usb 2-1: Product: syz [ 48.872114][ T42] usb 2-1: Manufacturer: syz [ 48.876882][ T42] usb 2-1: SerialNumber: syz [ 48.908127][ T42] usb 2-1: config 0 descriptor?? [ 49.448249][ T1269] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.496693][ T20] usb 2-1: USB disconnect, device number 5 [ 50.513165][ T30] audit: type=1400 audit(1786448252.697:325): avc: denied { write } for pid=1278 comm="syz.0.383" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 50.537310][ T1279] binder: 1278:1279 ioctl c0306201 200000000080 returned -14 [ 50.565821][ T1279] binder: 1278:1279 ioctl c0306201 2000000003c0 returned -14 [ 50.685795][ T1296] binder: 1288:1296 ioctl c0306201 200000000080 returned -14 [ 50.733401][ T1296] binder: 1288:1296 ioctl c0306201 2000000003c0 returned -14 [ 50.747573][ T1296] binder: 1288:1296 ioctl c0306201 0 returned -14 [ 50.817845][ T30] audit: type=1400 audit(1786448252.997:326): avc: denied { setopt } for pid=1301 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.890847][ T30] audit: type=1400 audit(1786448253.077:327): avc: denied { create } for pid=1306 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.967533][ T30] audit: type=1400 audit(1786448253.097:328): avc: denied { connect } for pid=1306 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.081625][ T1319] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 52.238919][ T30] audit: type=1400 audit(1786448254.427:329): avc: denied { unmount } for pid=557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.548179][ T1357] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 52.567810][ T30] audit: type=1400 audit(1786448254.747:330): avc: denied { create } for pid=1355 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.598044][ T305] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.704118][ T30] audit: type=1400 audit(1786448254.777:331): avc: denied { connect } for pid=1355 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.858084][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 52.978238][ T305] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 53.027047][ T305] usb 5-1: config 0 has no interface number 0 [ 53.057635][ T305] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 53.068004][ T305] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 53.157170][ T10] device bridge_slave_1 left promiscuous mode [ 53.280648][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.308864][ T10] device bridge_slave_0 left promiscuous mode [ 53.321030][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.333562][ T10] device veth1_macvtap left promiscuous mode [ 53.339861][ T10] device veth0_vlan left promiscuous mode [ 53.388132][ T305] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 53.407504][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.423458][ T305] usb 5-1: Product: syz [ 53.427759][ T305] usb 5-1: Manufacturer: syz [ 53.433335][ T305] usb 5-1: SerialNumber: syz [ 53.441581][ T305] usb 5-1: config 0 descriptor?? [ 53.468111][ T1343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.485015][ T1361] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.492430][ T1343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.499672][ T1361] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.507322][ T1361] device bridge_slave_0 entered promiscuous mode [ 53.519019][ T1361] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.526124][ T1361] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.533879][ T1361] device bridge_slave_1 entered promiscuous mode [ 53.608049][ T656] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 53.622868][ T1361] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.629985][ T1361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.660857][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.669604][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.683437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.707214][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.717300][ T1343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.717649][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.733649][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.738205][ T1343] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.740728][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.755623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.763893][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.770964][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.778448][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.786462][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.807765][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.819814][ T1361] device veth0_vlan entered promiscuous mode [ 53.826274][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.835493][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.843210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.857907][ T1361] device veth1_macvtap entered promiscuous mode [ 53.858063][ T656] usb 2-1: Using ep0 maxpacket: 8 [ 53.865282][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.885969][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.894905][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.908913][ T30] audit: type=1400 audit(1786448256.097:332): avc: denied { mount } for pid=1361 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.025180][ T305] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 54.068065][ T656] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.168241][ T656] usb 2-1: config 248 has an invalid interface number: 107 but max is 0 [ 54.177034][ T656] usb 2-1: config 248 has no interface number 0 [ 54.184717][ T656] usb 2-1: config 248 interface 107 has no altsetting 0 [ 54.348318][ T656] usb 2-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=30.d7 [ 54.357777][ T656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.367661][ T656] usb 2-1: Product: syz [ 54.372960][ T656] usb 2-1: Manufacturer: syz [ 54.377783][ T656] usb 2-1: SerialNumber: syz [ 54.668174][ T305] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 54.680419][ T656] rtl8150 2-1:248.107: couldn't find required endpoints [ 54.687624][ T656] rtl8150: probe of 2-1:248.107 failed with error -5 [ 54.739255][ T656] usb 2-1: USB disconnect, device number 6 [ 54.871086][ T305] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 54.918083][ T305] asix: probe of 5-1:0.34 failed with error -71 [ 54.932319][ T305] usb 5-1: USB disconnect, device number 5 [ 55.558182][ T305] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.818102][ T305] usb 8-1: Using ep0 maxpacket: 8 [ 55.938318][ T305] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.015214][ T305] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 56.131325][ T305] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 56.172910][ T305] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 56.214122][ T305] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 56.247461][ T305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.433212][ T305] hub 8-1:1.0: bad descriptor, ignoring hub [ 56.530862][ T305] hub: probe of 8-1:1.0 failed with error -5 [ 56.537449][ T305] cdc_wdm 8-1:1.0: skipping garbage [ 56.543166][ T30] audit: type=1400 audit(1786448258.727:333): avc: denied { setattr } for pid=1460 comm="syz.1.458" name="file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.565814][ T305] cdc_wdm 8-1:1.0: skipping garbage [ 56.572969][ T305] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 56.607291][ T30] audit: type=1400 audit(1786448258.747:334): avc: denied { write } for pid=1460 comm="syz.1.458" name="file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.756579][ T30] audit: type=1400 audit(1786448258.747:335): avc: denied { open } for pid=1460 comm="syz.1.458" path="/68/file0" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.868414][ T365] usb 8-1: USB disconnect, device number 2 [ 56.894865][ T30] audit: type=1400 audit(1786448259.077:336): avc: denied { bind } for pid=1475 comm="syz.1.465" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.954131][ T30] audit: type=1400 audit(1786448259.107:337): avc: denied { name_bind } for pid=1475 comm="syz.1.465" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 56.982354][ T30] audit: type=1400 audit(1786448259.107:338): avc: denied { node_bind } for pid=1475 comm="syz.1.465" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.966954][ T1488] 9pnet: Insufficient options for proto=fd [ 58.326429][ T30] audit: type=1400 audit(1786448260.507:339): avc: denied { getopt } for pid=1503 comm="syz.0.476" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.498789][ T1514] UDC core: couldn't find an available UDC or it's busy: -16 [ 58.523242][ T1516] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 58.530475][ T1514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 58.675413][ T1521] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 58.683035][ T500] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 58.703137][ T1523] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 58.718222][ T305] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.047996][ T500] usb 2-1: Using ep0 maxpacket: 8 [ 59.117998][ T305] usb 8-1: Using ep0 maxpacket: 16 [ 59.178135][ T500] usb 2-1: config index 0 descriptor too short (expected 32768, got 75) [ 59.234801][ T1535] 9pnet: Insufficient options for proto=fd [ 59.245956][ T500] usb 2-1: config 0 has an invalid interface number: 253 but max is -1 [ 59.255171][ T500] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.265587][ T500] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 59.275106][ T500] usb 2-1: config 0 has no interface number 0 [ 59.281698][ T500] usb 2-1: config 0 interface 253 has no altsetting 0 [ 59.288694][ T305] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.299022][ T305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.310627][ T305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.321437][ T305] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 59.332204][ T305] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.363399][ T1545] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 59.371718][ T1545] overlayfs: overlapping lowerdir path [ 59.428419][ T305] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 59.437854][ T305] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 59.446781][ T305] usb 8-1: Manufacturer: syz [ 59.465874][ T305] usb 8-1: config 0 descriptor?? [ 59.471169][ T500] usb 2-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 59.482971][ T500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.492590][ T500] usb 2-1: Product: syz [ 59.504792][ T500] usb 2-1: Manufacturer: syz [ 59.510038][ T500] usb 2-1: SerialNumber: syz [ 59.657566][ T500] usb 2-1: config 0 descriptor?? [ 59.963086][ T500] usb 2-1: bad CDC descriptors [ 59.972155][ T500] cdc_acm 2-1:0.253: Zero length descriptor references [ 60.008284][ T500] cdc_acm: probe of 2-1:0.253 failed with error -22 [ 60.092475][ T500] usb 2-1: USB disconnect, device number 7 [ 60.256069][ T1556] binder: BINDER_SET_CONTEXT_MGR already set [ 60.263408][ T1556] binder: 1555:1556 ioctl 4018620d 2000000002c0 returned -16 [ 60.282647][ T1560] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 60.361690][ T30] audit: type=1400 audit(1786448262.547:340): avc: denied { wake_alarm } for pid=1571 comm="syz.4.503" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.432821][ T30] audit: type=1400 audit(1786448262.617:341): avc: denied { write } for pid=1575 comm="syz.4.505" name="anycast6" dev="proc" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.433844][ T1576] using random self ethernet address [ 60.455790][ T30] audit: type=1400 audit(1786448262.617:342): avc: denied { write } for pid=1575 comm="syz.4.505" name="functions" dev="configfs" ino=16433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.461116][ T1576] using random host ethernet address [ 60.596769][ T1587] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 60.678130][ T1591] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 60.686424][ T1591] overlayfs: overlapping lowerdir path [ 61.449603][ T379] usb 8-1: USB disconnect, device number 3 [ 61.507912][ T1604] netlink: 28 bytes leftover after parsing attributes in process `syz.7.517'. [ 61.518977][ T1607] UDC core: couldn't find an available UDC or it's busy: -16 [ 61.526382][ T1607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.569466][ T1610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.519'. [ 61.617952][ C0] sched: RT throttling activated [ 61.660371][ T1621] ================================================================== [ 61.667876][ T1623] binder: BINDER_SET_CONTEXT_MGR already set [ 61.668471][ T1621] BUG: KASAN: slab-out-of-bounds in firmware_param_path_get+0x348/0x350 [ 61.668503][ T1621] Write of size 1 at addr ffff888113dcffff by task syz.5.526/1621 [ 61.668519][ T1621] [ 61.668524][ T1621] CPU: 0 PID: 1621 Comm: syz.5.526 Not tainted syzkaller #0 [ 61.674634][ T1623] binder: 1619:1623 ioctl 4018620d 2000000002c0 returned -16 [ 61.682814][ T1621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.682828][ T1621] Call Trace: [ 61.682835][ T1621] [ 61.682842][ T1621] __dump_stack+0x21/0x30 [ 61.682864][ T1621] dump_stack_lvl+0x110/0x170 [ 61.732880][ T1621] ? show_regs_print_info+0x20/0x20 [ 61.738108][ T1621] ? load_image+0x3f0/0x3f0 [ 61.742632][ T1621] print_address_description+0x7f/0x2c0 [ 61.748298][ T1621] ? firmware_param_path_get+0x348/0x350 [ 61.753932][ T1621] kasan_report+0x10f/0x150 [ 61.758439][ T1621] ? firmware_param_path_get+0x348/0x350 [ 61.764066][ T1621] __asan_report_store1_noabort+0x17/0x20 [ 61.769778][ T1621] firmware_param_path_get+0x348/0x350 [ 61.775335][ T1621] param_attr_show+0x150/0x1b0 [ 61.780087][ T1621] ? module_destroy_params+0x100/0x100 [ 61.785534][ T1621] ? param_attr_store+0x320/0x320 [ 61.790548][ T1621] module_attr_show+0x56/0x70 [ 61.795223][ T1621] sysfs_kf_seq_show+0x266/0x3d0 [ 61.800152][ T1621] kernfs_seq_show+0x119/0x160 [ 61.804913][ T1621] seq_read_iter+0x472/0xce0 [ 61.809513][ T1621] kernfs_fop_read_iter+0x146/0x460 [ 61.814711][ T1621] vfs_read+0x6c0/0xc20 [ 61.818880][ T1621] ? kernel_read+0x1f0/0x1f0 [ 61.823466][ T1621] ? wait_for_completion_killable_timeout+0x10/0x10 [ 61.830056][ T1621] ? __fget_files+0x2e1/0x340 [ 61.834731][ T1621] ? __fdget_pos+0x2d2/0x380 [ 61.839311][ T1621] ? ksys_read+0x70/0x260 [ 61.843645][ T1621] ksys_read+0x14a/0x260 [ 61.847999][ T1621] ? vfs_write+0xfd0/0xfd0 [ 61.852434][ T1621] ? __kasan_check_write+0x14/0x20 [ 61.857545][ T1621] ? switch_fpu_return+0x15d/0x2c0 [ 61.862653][ T1621] __x64_sys_read+0x7b/0x90 [ 61.867159][ T1621] x64_sys_call+0x96d/0x9a0 [ 61.871666][ T1621] do_syscall_64+0x4c/0xa0 [ 61.876169][ T1621] ? clear_bhb_loop+0x50/0xa0 [ 61.880837][ T1621] ? clear_bhb_loop+0x50/0xa0 [ 61.885507][ T1621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.891409][ T1621] RIP: 0033:0x7fec94bc10d9 [ 61.895814][ T1621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.915406][ T1621] RSP: 002b:00007fec9361a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.923809][ T1621] RAX: ffffffffffffffda RBX: 00007fec94e48fa0 RCX: 00007fec94bc10d9 [ 61.931777][ T1621] RDX: 000000000000204e RSI: 0000200000002440 RDI: 0000000000000003 [ 61.939740][ T1621] RBP: 00007fec94c58024 R08: 0000000000000000 R09: 0000000000000000 [ 61.947807][ T1621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.955776][ T1621] R13: 00007fec94e49038 R14: 00007fec94e48fa0 R15: 00007fffbcc95f28 [ 61.963836][ T1621] [ 61.966859][ T1621] [ 61.969178][ T1621] The buggy address belongs to the page: [ 61.974800][ T1621] page:ffffea00044f7200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113dc8 [ 61.985033][ T1621] head:ffffea00044f7200 order:3 compound_mapcount:0 compound_pincount:0 [ 61.993358][ T1621] flags: 0x4000000000010000(head|zone=1) [ 61.998994][ T1621] raw: 4000000000010000 0000000000000000 dead000000000122 0000000000000000 [ 62.007580][ T1621] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 62.016154][ T1621] page dumped because: kasan: bad access detected [ 62.022556][ T1621] page_owner tracks the page as allocated [ 62.028264][ T1621] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 468, ts 31648546318, free_ts 31504259386 [ 62.043713][ T1621] post_alloc_hook+0x192/0x1b0 [ 62.048495][ T1621] prep_new_page+0x1c/0x110 [ 62.053004][ T1621] get_page_from_freelist+0x2c3a/0x2cd0 [ 62.058545][ T1621] __alloc_pages+0x1a2/0x460 [ 62.063133][ T1621] kmalloc_order+0x4c/0x160 [ 62.067637][ T1621] kmalloc_order_trace+0x18/0xb0 [ 62.072574][ T1621] can_pernet_init+0x5c/0x2f0 [ 62.077248][ T1621] ops_init+0x2c0/0x470 [ 62.081401][ T1621] setup_net+0x331/0xa30 [ 62.085645][ T1621] copy_net_ns+0x355/0x5c0 [ 62.090055][ T1621] create_new_namespaces+0x3a8/0x660 [ 62.095336][ T1621] unshare_nsproxy_namespaces+0x120/0x170 [ 62.101055][ T1621] ksys_unshare+0x4d7/0x810 [ 62.105560][ T1621] __x64_sys_unshare+0x38/0x40 [ 62.110319][ T1621] x64_sys_call+0x442/0x9a0 [ 62.114819][ T1621] do_syscall_64+0x4c/0xa0 [ 62.119233][ T1621] page last free stack trace: [ 62.123897][ T1621] free_unref_page_prepare+0x5fa/0x600 [ 62.129351][ T1621] free_unref_page+0xae/0x540 [ 62.134027][ T1621] __free_pages+0x6c/0x100 [ 62.138435][ T1621] __free_slab+0xe5/0x1e0 [ 62.142768][ T1621] __unfreeze_partials+0x15a/0x190 [ 62.147874][ T1621] put_cpu_partial+0xc6/0x120 [ 62.152548][ T1621] __slab_free+0x1d4/0x290 [ 62.156961][ T1621] ___cache_free+0x104/0x120 [ 62.161546][ T1621] qlink_free+0x4d/0x90 [ 62.165699][ T1621] qlist_free_all+0x5f/0xb0 [ 62.170205][ T1621] kasan_quarantine_reduce+0x14a/0x170 [ 62.175658][ T1621] __kasan_slab_alloc+0x2f/0xe0 [ 62.180516][ T1621] slab_post_alloc_hook+0x4f/0x2b0 [ 62.185626][ T1621] kmem_cache_alloc_trace+0xfb/0x270 [ 62.190909][ T1621] kobject_uevent_env+0x271/0x700 [ 62.195933][ T1621] kobject_uevent+0x1d/0x30 [ 62.200432][ T1621] [ 62.202751][ T1621] Memory state around the buggy address: [ 62.208370][ T1621] ffff888113dcfe80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 62.216423][ T1621] ffff888113dcff00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 62.224476][ T1621] >ffff888113dcff80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 62.232635][ T1621] ^ [ 62.240610][ T1621] ffff888113dd0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.248664][ T1621] ffff888113dd0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.256714][ T1621] ================================================================== [ 62.264763][ T1621] Disabling lock debugging due to kernel taint [ 62.293096][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 62.293115][ T30] audit: type=1400 audit(1786448264.457:344): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.324212][ T30] audit: type=1400 audit(1786448264.457:345): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.345731][ T30] audit: type=1400 audit(1786448264.457:346): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.367233][ T30] audit: type=1400 audit(1786448264.457:347): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.387931][ T30] audit: type=1400 audit(1786448264.457:348): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.408693][ T30] audit: type=1400 audit(1786448264.457:349): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.431594][ T30] audit: type=1400 audit(1786448264.457:350): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1